Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft
File: v62CMaRsZBx6swHXv77w3Ams1M4.mft (raw, json)
Hash identifier: HKqCFTW/BPxj4hkbrO1y/HYSXWnYw5SelT/dUZGSJpU=
Subject key identifier: 68:34:FF:6B:67:83:7C:50:5A:AF:A1:4F:9C:68:45:29:F0:D0:0E:7F
Authority key identifier: BF:AD:82:31:A4:6C:64:1C:7A:B3:01:D7:BF:BE:F0:DC:09:AC:D4:CE
Certificate issuer: /CN=bfad8231a46c641c7ab301d7bfbef0dc09acd4ce
Certificate serial: 0196AD9F4606ECC0307CEDF9E580A526C7E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft
Manifest number: 11FF
Signing time: Thu 08 May 2025 02:00:18 +0000
Manifest this update: Thu 08 May 2025 02:00:18 +0000
Manifest next update: Fri 09 May 2025 02:00:18 +0000
Files and hashes: 1: PVx9315HXPnPOTLeQcr5qcZngYo.roa (hash: kEXPY9i0jPlv+x61rf6B3m34sobHRCkgbuQLWEQLQ8s=)
2: v62CMaRsZBx6swHXv77w3Ams1M4.crl (hash: TX/EMzZrjwq9OlleImROyoKkwrGlrXaO036kH06J5i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:9f:46:06:ec:c0:30:7c:ed:f9:e5:80:a5:26:c7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfad8231a46c641c7ab301d7bfbef0dc09acd4ce
Validity
Not Before: May 8 02:00:18 2025 GMT
Not After : May 9 02:00:18 2025 GMT
Subject: CN=6834ff6b67837c505aafa14f9c684529f0d00e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8f:44:19:3d:0b:54:a9:64:e5:d5:8b:77:36:
c5:d6:3f:1d:ce:f4:56:be:e0:36:04:a9:75:e8:71:
9d:44:74:23:74:ac:88:cd:76:39:0f:27:16:11:c0:
49:ab:d4:49:a8:1b:3f:75:f9:05:df:36:60:55:f6:
88:7b:5c:c8:ab:b7:3b:e0:4e:d0:05:21:b0:48:5f:
f5:9e:a3:f3:ea:47:b3:27:75:ad:8e:ea:d3:bb:4c:
4a:4d:26:54:2f:73:8e:33:5b:8a:82:7c:8b:c0:fc:
8e:6d:65:56:85:45:66:0c:69:ae:c3:59:a1:4f:8c:
6c:75:b4:77:50:a0:56:7d:db:ef:b6:9f:e7:88:76:
86:23:30:6e:5f:80:4a:53:9a:b8:65:57:94:37:54:
ba:1f:52:b6:e3:51:57:60:ea:90:ac:7a:0f:b5:52:
a8:fc:3b:94:f3:f5:2c:b2:b1:78:1f:62:22:df:21:
cf:c3:5e:a2:88:3f:e7:ed:e5:52:8a:a6:b6:ce:65:
96:c7:94:9f:d5:c6:ed:f5:ce:bd:5a:82:36:6e:73:
60:2d:fa:f7:18:1d:40:b2:ba:d5:81:2c:89:03:cf:
db:10:4c:fb:b6:a7:86:bb:f5:62:5b:23:e5:cd:a6:
a0:19:78:60:63:dc:f7:85:9e:f0:54:ff:66:a6:de:
4b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:34:FF:6B:67:83:7C:50:5A:AF:A1:4F:9C:68:45:29:F0:D0:0E:7F
X509v3 Authority Key Identifier:
keyid:BF:AD:82:31:A4:6C:64:1C:7A:B3:01:D7:BF:BE:F0:DC:09:AC:D4:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:32:05:6c:d1:80:28:a3:0a:73:12:7a:c1:8a:c6:e3:a1:8c:
40:7b:e5:2a:65:a7:47:3b:78:df:b7:88:07:4b:93:04:11:3e:
d0:8c:45:71:06:cc:cb:3b:25:8a:58:47:81:7c:27:dd:24:98:
c6:3e:4a:51:b5:05:15:b0:aa:1e:1b:83:7a:d4:62:cb:83:3b:
6d:51:0b:8d:a9:73:77:c0:4c:5c:fc:0d:ec:31:2c:5a:f5:4d:
64:6d:de:24:ab:37:cc:65:40:65:5d:6a:ee:f6:af:b4:04:62:
a9:93:8b:c4:79:0e:f6:c7:4a:c5:4c:e1:4a:fb:61:6c:6b:9d:
c4:0a:f6:30:e5:a9:62:92:ad:15:4d:a3:a1:0a:94:db:7a:33:
1b:4b:24:d0:42:01:62:09:cf:ac:06:3a:f0:4e:28:53:a4:1e:
f1:47:ce:54:1d:1a:cd:6e:36:b2:d9:81:bc:98:92:5e:e3:42:
8d:a4:98:97:73:bb:0e:ef:08:cf:2b:28:1b:3f:35:4d:83:e3:
b2:f1:8c:92:2e:f8:68:2b:70:cc:18:ca:85:5c:fe:9f:80:10:
18:20:78:3c:46:4e:b7:d4:b7:15:5e:1e:84:5b:ec:4b:e8:66:
ed:c7:94:16:ee:fd:f0:82:0c:19:ea:26:b3:54:14:de:ac:0a:
40:f8:ff:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZatn0YG7MAwfO355YClJsfiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYWQ4MjMxYTQ2YzY0MWM3YWIzMDFkN2JmYmVmMGRjMDlh
Y2Q0Y2UwHhcNMjUwNTA4MDIwMDE4WhcNMjUwNTA5MDIwMDE4WjAzMTEwLwYDVQQD
Eyg2ODM0ZmY2YjY3ODM3YzUwNWFhZmExNGY5YzY4NDUyOWYwZDAwZTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI9EGT0LVKlk5dWLdzbF1j8dzvRW
vuA2BKl16HGdRHQjdKyIzXY5DycWEcBJq9RJqBs/dfkF3zZgVfaIe1zIq7c74E7Q
BSGwSF/1nqPz6kezJ3WtjurTu0xKTSZUL3OOM1uKgnyLwPyObWVWhUVmDGmuw1mh
T4xsdbR3UKBWfdvvtp/niHaGIzBuX4BKU5q4ZVeUN1S6H1K241FXYOqQrHoPtVKo
/DuU8/UssrF4H2Ii3yHPw16iiD/n7eVSiqa2zmWWx5Sf1cbt9c69WoI2bnNgLfr3
GB1AsrrVgSyJA8/bEEz7tqeGu/ViWyPlzaagGXhgY9z3hZ7wVP9mpt5LhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGg0/2tng3xQWq+hT5xoRSnw0A5/MB8GA1UdIwQY
MBaAFL+tgjGkbGQcerMB17++8NwJrNTOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjYyQ01hUnNaQng2c3dIWHY3N3czQW1zMU00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zMzc5MDAtMzgwZS00OWQ4LWFmNGUt
OWRkNDJjMTcxMTEyLzEvdjYyQ01hUnNaQng2c3dIWHY3N3czQW1zMU00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zMzc5MDAtMzgwZS00OWQ4LWFmNGUtOWRkNDJjMTcxMTEy
LzEvdjYyQ01hUnNaQng2c3dIWHY3N3czQW1zMU00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDIFbNGA
KKMKcxJ6wYrG46GMQHvlKmWnRzt437eIB0uTBBE+0IxFcQbMyzslilhHgXwn3SSY
xj5KUbUFFbCqHhuDetRiy4M7bVELjalzd8BMXPwN7DEsWvVNZG3eJKs3zGVAZV1q
7vavtARiqZOLxHkO9sdKxUzhSvthbGudxAr2MOWpYpKtFU2joQqU23ozG0sk0EIB
YgnPrAY68E4oU6Qe8UfOVB0azW42stmBvJiSXuNCjaSYl3O7Du8IzysoGz81TYPj
svGMki74aCtwzBjKhVz+n4AQGCB4PEZOt9S3FV4ehFvsS+hm7ceUFu798IIMGeom
s1QU3qwKQPj/sg==
-----END CERTIFICATE-----
Generated at Thu May 8 11:37:05 2025 by rpki-client