Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
File: 557xnCc97e0ZzvazaDmzzrAe3v0.mft (raw, json)
Hash identifier: IfiEr8SJA+f7BRDMPuVcj+Ny+F9LdIy85UvfZK+lVYE=
Subject key identifier: 41:80:4D:7C:4B:3F:BF:2A:16:43:D2:4B:11:CD:FF:6E:67:D3:14:6E
Authority key identifier: E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
Certificate issuer: /CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Certificate serial: 0196A653D1B1E9126BEF2C2BC69B26358A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
Manifest number: 09F9
Signing time: Tue 06 May 2025 16:00:33 +0000
Manifest this update: Tue 06 May 2025 16:00:33 +0000
Manifest next update: Wed 07 May 2025 16:00:33 +0000
Files and hashes: 1: 4T7ohvim9PbetIc4Qlo9d9QA59Y.roa (hash: mTKqtI5PGB6Qq88qvBp2p7P3TnbGVtFteHmcAmCxgPg=)
2: 557xnCc97e0ZzvazaDmzzrAe3v0.crl (hash: 4L6HpJyHjQx1M79QCpv6ZDb78yJa5gmvKHPf2eRXVfg=)
3: hoeiky0Yvquu-vh4T1lTnZlhbwc.roa (hash: TG3DycSrjgCYww4lJAKepUSf5xECf8vQNK+sCZjEIS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:53:d1:b1:e9:12:6b:ef:2c:2b:c6:9b:26:35:8a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Validity
Not Before: May 6 16:00:33 2025 GMT
Not After : May 7 16:00:33 2025 GMT
Subject: CN=41804d7c4b3fbf2a1643d24b11cdff6e67d3146e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:30:b0:64:2d:80:a9:49:66:bb:94:e3:22:8e:
8e:83:6f:df:c1:e8:44:25:a0:f4:af:84:1c:e2:d5:
5f:82:bb:47:21:55:75:d2:30:8c:27:f7:97:1d:53:
79:a6:53:7c:0a:2c:81:c8:5e:bc:19:19:e3:4b:ad:
94:0d:06:59:22:06:5a:79:2d:63:b0:e0:cb:cc:42:
4d:0e:b9:fa:ff:05:d1:a7:c9:2c:18:f1:e7:d3:0d:
11:73:01:52:9e:ee:32:3f:22:92:15:10:01:13:7c:
25:2e:73:cc:bb:39:ef:4d:12:54:eb:e1:f8:95:04:
b5:07:bc:72:bf:3d:8f:39:b3:ec:43:60:b6:75:42:
43:13:6e:fd:aa:35:70:e3:2c:ea:1d:74:76:06:23:
6d:28:21:d6:83:a0:c9:ab:1d:87:53:06:f5:47:7f:
22:e6:93:2c:cb:84:6f:ec:73:45:db:de:04:54:28:
0b:9e:02:c7:2d:cd:36:c0:c8:c8:16:57:8f:35:3b:
48:41:43:c8:0d:76:30:dd:86:9a:4d:dc:49:48:6b:
48:5a:51:6a:18:f8:01:36:ed:48:90:76:4f:9c:12:
fc:6c:56:74:c1:37:19:f2:73:0e:49:65:20:0f:29:
00:23:30:6c:ea:84:9c:24:54:ca:ff:b7:28:18:e9:
b1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:80:4D:7C:4B:3F:BF:2A:16:43:D2:4B:11:CD:FF:6E:67:D3:14:6E
X509v3 Authority Key Identifier:
keyid:E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:19:b3:97:0c:b8:fa:5b:73:11:a6:1e:fb:f6:aa:ba:1e:15:
93:b0:5f:97:71:07:1a:ff:5a:5e:14:1e:b5:14:61:01:e7:b9:
e4:01:f1:10:8b:ba:98:d7:07:b6:f8:e2:69:b3:3f:87:3e:63:
77:34:2f:64:94:11:7b:29:de:a2:da:33:c8:2a:b5:e9:bf:6d:
c8:4a:96:5d:8d:a1:11:fb:67:d6:99:59:e3:86:ed:f7:2a:97:
62:24:04:a2:a1:de:0f:28:44:5c:55:4c:61:77:e8:34:48:6f:
40:f5:63:37:21:0a:7f:d1:b5:5a:1f:d8:6b:2a:5a:51:17:65:
92:22:a1:0a:8a:b5:27:ee:a4:2b:64:b7:3b:6e:65:75:55:99:
c2:01:e9:db:42:e4:00:6b:d2:b8:03:56:2f:1b:ad:57:1b:c3:
b3:55:cd:01:64:00:d7:86:27:c6:a2:b3:68:dc:fc:49:8a:a1:
07:ed:3c:db:a8:40:b0:54:aa:52:95:e9:b7:ea:b9:ce:18:95:
13:10:1c:af:eb:91:3c:3e:ab:84:8f:e7:17:6f:92:48:c6:a0:
60:28:47:b4:30:b8:e3:92:6b:fd:4b:42:22:4b:94:48:0c:55:
10:75:47:4c:01:bd:46:0a:f1:af:ac:6f:5c:8f:3c:e0:e6:c3:
4f:3d:d6:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZamU9Gx6RJr7ywrxpsmNYpWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OWVmMTljMjczZGVkZWQxOWNlZjZiMzY4MzliM2NlYjAx
ZWRlZmQwHhcNMjUwNTA2MTYwMDMzWhcNMjUwNTA3MTYwMDMzWjAzMTEwLwYDVQQD
Eyg0MTgwNGQ3YzRiM2ZiZjJhMTY0M2QyNGIxMWNkZmY2ZTY3ZDMxNDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DCwZC2AqUlmu5TjIo6Og2/fwehE
JaD0r4Qc4tVfgrtHIVV10jCMJ/eXHVN5plN8CiyByF68GRnjS62UDQZZIgZaeS1j
sODLzEJNDrn6/wXRp8ksGPHn0w0RcwFSnu4yPyKSFRABE3wlLnPMuznvTRJU6+H4
lQS1B7xyvz2PObPsQ2C2dUJDE279qjVw4yzqHXR2BiNtKCHWg6DJqx2HUwb1R38i
5pMsy4Rv7HNF294EVCgLngLHLc02wMjIFlePNTtIQUPIDXYw3YaaTdxJSGtIWlFq
GPgBNu1IkHZPnBL8bFZ0wTcZ8nMOSWUgDykAIzBs6oScJFTK/7coGOmxXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGATXxLP78qFkPSSxHN/25n0xRuMB8GA1UdIwQY
MBaAFOee8ZwnPe3tGc72s2g5s86wHt79MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTU3eG5DYzk3ZTBaenZhemFEbXp6ckFlM3YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZGRlOGQtYmMwOS00N2ViLThiNWUt
ZDliNzJlZDdjYjRkLzEvNTU3eG5DYzk3ZTBaenZhemFEbXp6ckFlM3YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zZGRlOGQtYmMwOS00N2ViLThiNWUtZDliNzJlZDdjYjRk
LzEvNTU3eG5DYzk3ZTBaenZhemFEbXp6ckFlM3YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRmzlwy4
+ltzEaYe+/aquh4Vk7Bfl3EHGv9aXhQetRRhAee55AHxEIu6mNcHtvjiabM/hz5j
dzQvZJQReyneotozyCq16b9tyEqWXY2hEftn1plZ44bt9yqXYiQEoqHeDyhEXFVM
YXfoNEhvQPVjNyEKf9G1Wh/YaypaURdlkiKhCoq1J+6kK2S3O25ldVWZwgHp20Lk
AGvSuANWLxutVxvDs1XNAWQA14YnxqKzaNz8SYqhB+0826hAsFSqUpXpt+q5zhiV
ExAcr+uRPD6rhI/nF2+SSMagYChHtDC445Jr/UtCIkuUSAxVEHVHTAG9Rgrxr6xv
XI884ObDTz3WUQ==
-----END CERTIFICATE-----
Generated at Wed May 7 00:13:01 2025 by rpki-client