Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft
File: RwFMkm6nbVZunoqW1YYdR1fIsOo.mft (raw, json)
Hash identifier: rb+QBvSNWCGVfli7srwnFfH+NS80/Yn94TMEmz11g6U=
Subject key identifier: 41:6B:07:2E:32:93:20:E6:53:58:3E:1D:F3:B2:D0:48:52:4A:8F:83
Authority key identifier: 47:01:4C:92:6E:A7:6D:56:6E:9E:8A:96:D5:86:1D:47:57:C8:B0:EA
Certificate issuer: /CN=47014c926ea76d566e9e8a96d5861d4757c8b0ea
Certificate serial: 0196A7D48E3F86FFCF9D25A99C3562635E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft
Manifest number: 1527
Signing time: Tue 06 May 2025 23:00:47 +0000
Manifest this update: Tue 06 May 2025 23:00:47 +0000
Manifest next update: Wed 07 May 2025 23:00:47 +0000
Files and hashes: 1: RwFMkm6nbVZunoqW1YYdR1fIsOo.crl (hash: mYmYgtNhXAOjcfTcoLghSxxEKC/QNeqC0Jg/2ezudlw=)
2: pFLpzrM-iV1fQ_hTxX2xOEHMjt0.roa (hash: aLstNITfJuEBD1I0LdnhTrgtI2g65BeTn/qvRZrCSW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:d4:8e:3f:86:ff:cf:9d:25:a9:9c:35:62:63:5e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47014c926ea76d566e9e8a96d5861d4757c8b0ea
Validity
Not Before: May 6 23:00:47 2025 GMT
Not After : May 7 23:00:47 2025 GMT
Subject: CN=416b072e329320e653583e1df3b2d048524a8f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:50:47:5f:a6:e8:c9:e6:26:cd:2d:c2:36:81:
c7:7c:8d:1e:21:28:74:34:7c:c5:e2:cc:26:48:fe:
55:6e:0d:07:81:70:9b:e9:65:94:01:e7:23:e7:43:
b6:a5:fb:d7:9f:7c:75:b6:cf:99:da:37:ca:f5:75:
90:34:cd:99:f0:b0:b4:61:c2:4e:fb:2e:2d:e7:26:
92:36:3e:5b:05:50:3e:cf:ec:47:69:e5:19:c8:94:
2d:29:e0:9f:ff:0a:2e:d1:af:e2:ad:69:6f:c5:94:
fd:32:67:3a:94:8a:a5:b2:41:a7:f3:06:e1:60:2f:
f3:a7:f8:be:ac:63:5d:b1:18:ec:21:52:76:8b:67:
6e:0b:6b:44:d0:21:49:f1:a3:a5:6a:73:f5:d7:23:
4e:aa:db:28:1a:65:2e:64:09:25:3b:28:75:5c:54:
aa:fe:2c:66:37:47:13:9a:af:23:33:84:32:00:68:
e5:ed:e3:16:27:d8:0e:29:0e:a6:a8:ee:24:4d:84:
61:43:e9:59:8e:04:80:d1:bb:9e:00:9f:32:5d:a0:
a3:88:51:ed:a7:c4:06:57:fb:3a:1f:31:e9:f6:82:
4e:27:7b:e1:31:99:ba:43:12:ab:4d:ec:dc:e0:d4:
a2:d7:1c:12:f6:33:a0:c7:ef:d9:db:b4:8d:44:c4:
a5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6B:07:2E:32:93:20:E6:53:58:3E:1D:F3:B2:D0:48:52:4A:8F:83
X509v3 Authority Key Identifier:
keyid:47:01:4C:92:6E:A7:6D:56:6E:9E:8A:96:D5:86:1D:47:57:C8:B0:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:54:db:e0:e4:43:d8:ad:2c:91:cd:a9:7a:64:c4:2a:c5:92:
c1:28:08:2b:c1:8b:83:11:84:be:0f:04:9d:9b:2b:cb:61:91:
38:ae:1c:48:3a:f9:ad:24:5e:27:7d:86:2d:44:20:97:b3:96:
d4:25:b0:e0:a5:70:26:b9:63:1b:d3:ac:4c:85:4a:73:11:dc:
05:b9:6c:38:ec:c7:01:88:dd:46:aa:3a:a6:98:9c:eb:f8:1c:
1f:91:dd:96:4d:79:37:74:2b:98:0b:92:eb:68:75:4f:e0:17:
25:8a:65:40:a4:9f:46:c1:3b:c6:64:62:00:af:b5:f8:e6:22:
cf:b7:50:94:5a:57:88:6a:3a:7c:e8:a1:02:a7:86:af:94:81:
bd:81:ff:4e:47:a3:3f:e3:8a:3f:29:08:c0:b4:db:64:07:6d:
5d:82:37:f9:bf:f8:99:6c:9c:bb:6c:e2:66:22:e9:36:c5:00:
96:e0:b9:d2:6f:0f:01:d8:12:ef:c3:b0:81:5d:d9:1e:46:3c:
c2:a4:e5:e5:16:43:90:ea:58:04:4f:4d:06:76:36:70:ef:7b:
5e:6c:60:cb:bb:25:20:f8:55:92:50:4f:06:bb:c4:20:dc:02:
28:a9:66:a6:7f:99:c5:58:f3:bc:bc:a2:0a:de:a0:1b:8c:53:
40:01:ff:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZan1I4/hv/PnSWpnDViY15xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MDE0YzkyNmVhNzZkNTY2ZTllOGE5NmQ1ODYxZDQ3NTdj
OGIwZWEwHhcNMjUwNTA2MjMwMDQ3WhcNMjUwNTA3MjMwMDQ3WjAzMTEwLwYDVQQD
Eyg0MTZiMDcyZTMyOTMyMGU2NTM1ODNlMWRmM2IyZDA0ODUyNGE4ZjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31BHX6boyeYmzS3CNoHHfI0eISh0
NHzF4swmSP5Vbg0HgXCb6WWUAecj50O2pfvXn3x1ts+Z2jfK9XWQNM2Z8LC0YcJO
+y4t5yaSNj5bBVA+z+xHaeUZyJQtKeCf/wou0a/irWlvxZT9Mmc6lIqlskGn8wbh
YC/zp/i+rGNdsRjsIVJ2i2duC2tE0CFJ8aOlanP11yNOqtsoGmUuZAklOyh1XFSq
/ixmN0cTmq8jM4QyAGjl7eMWJ9gOKQ6mqO4kTYRhQ+lZjgSA0bueAJ8yXaCjiFHt
p8QGV/s6HzHp9oJOJ3vhMZm6QxKrTezc4NSi1xwS9jOgx+/Z27SNRMSlpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFrBy4ykyDmU1g+HfOy0EhSSo+DMB8GA1UdIwQY
MBaAFEcBTJJup21Wbp6KltWGHUdXyLDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUndGTWttNm5iVlp1bm9xVzFZWWRSMWZJc09vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8zMTIzZDAtN2NhYS00ZGYzLWFkMjMt
YWJhNGU2NDMwNThlLzEvUndGTWttNm5iVlp1bm9xVzFZWWRSMWZJc09vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8zMTIzZDAtN2NhYS00ZGYzLWFkMjMtYWJhNGU2NDMwNThl
LzEvUndGTWttNm5iVlp1bm9xVzFZWWRSMWZJc09vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1Tb4ORD
2K0skc2pemTEKsWSwSgIK8GLgxGEvg8EnZsry2GROK4cSDr5rSReJ32GLUQgl7OW
1CWw4KVwJrljG9OsTIVKcxHcBblsOOzHAYjdRqo6ppic6/gcH5Hdlk15N3QrmAuS
62h1T+AXJYplQKSfRsE7xmRiAK+1+OYiz7dQlFpXiGo6fOihAqeGr5SBvYH/Tkej
P+OKPykIwLTbZAdtXYI3+b/4mWycu2ziZiLpNsUAluC50m8PAdgS78OwgV3ZHkY8
wqTl5RZDkOpYBE9NBnY2cO97Xmxgy7slIPhVklBPBrvEINwCKKlmpn+ZxVjzvLyi
Ct6gG4xTQAH/PA==
-----END CERTIFICATE-----
Generated at Wed May 7 05:10:00 2025 by rpki-client