Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier: woVHVA/7FoYRBRzE+xHw5lKKkRJxaAIVGnTm5toc9ns=
Subject key identifier: B7:29:85:CD:78:96:56:F8:83:5E:0D:9F:A3:12:99:09:04:7E:E1:F7
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 0196AE7B50C77BA39DBCE3A7F8CD2D083294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number: 152B
Signing time: Thu 08 May 2025 06:00:39 +0000
Manifest this update: Thu 08 May 2025 06:00:39 +0000
Manifest next update: Fri 09 May 2025 06:00:39 +0000
Files and hashes: 1: Ebbi4EbWyyrPidgJRRp68vOL4Bs.roa (hash: 9WQWjNic/0FRDbfcOWjEWw5V6hoDVQ6qvX3p7F6e6MI=)
2: VPM_H7o9qmHlZtW2Loh4LTUo-hc.roa (hash: vD0q++SStKTA4LMIpc6XJyVKbTisVo5txPsQMD5ggGA=)
3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: /LJz59FpUWkjCmr1RWcp/0SSQRgSbJ9CZHBY+skRO5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:7b:50:c7:7b:a3:9d:bc:e3:a7:f8:cd:2d:08:32:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: May 8 06:00:39 2025 GMT
Not After : May 9 06:00:39 2025 GMT
Subject: CN=b72985cd789656f8835e0d9fa3129909047ee1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:e6:04:be:1c:1e:fc:7b:f2:11:97:53:e7:
eb:f3:39:8a:62:6e:39:ff:ae:e2:84:b3:eb:64:34:
73:a8:2b:9d:ff:9c:22:97:45:d7:5d:9a:93:6b:59:
a8:d3:ae:0b:75:3b:66:26:75:b5:7e:8f:61:7a:25:
e9:b3:a8:5b:da:ba:aa:43:76:4b:86:4b:c2:ee:62:
23:87:cf:74:10:00:fa:01:04:3d:6a:d3:17:0b:a4:
38:65:32:ad:7e:af:98:d4:69:63:16:c5:63:c9:76:
10:71:f8:1d:b9:d8:aa:27:a1:4f:b5:25:73:23:0e:
62:3e:f9:d4:3a:a9:94:f9:af:f1:1e:db:20:9a:c4:
16:ca:a3:40:f3:21:77:61:5a:1c:92:95:ec:a4:76:
02:15:97:e8:66:22:50:81:bd:f7:b3:23:4c:5f:85:
ff:54:93:84:40:81:09:8b:15:4b:99:2e:0a:1f:8a:
65:e6:2d:ef:7a:5a:3e:ec:a9:76:7b:93:95:33:b0:
6e:39:a3:19:2b:8e:d3:84:1b:06:69:c2:9a:a3:41:
44:7d:64:2a:d9:b4:1a:a1:8a:2d:95:fa:9b:fc:2d:
fe:75:c3:4c:bd:c9:b3:cd:84:ae:bc:95:5f:8b:86:
3a:f9:c8:2a:04:ba:1d:1e:d7:f3:b0:6f:f3:91:37:
4e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:29:85:CD:78:96:56:F8:83:5E:0D:9F:A3:12:99:09:04:7E:E1:F7
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e8:dd:64:78:67:30:81:b3:33:ba:33:fc:44:40:34:a6:1f:
bc:d2:24:25:dd:fc:03:91:a1:fd:14:40:50:57:80:80:9a:7f:
a1:7e:f0:ff:18:79:e6:4a:ad:cb:c0:27:86:d8:06:b6:78:d1:
a3:b4:a3:a6:34:4f:25:c7:8f:84:26:fd:63:f7:8c:85:c8:d5:
c2:cf:e7:dc:99:4f:bc:6b:16:78:59:b9:54:19:17:d7:7b:c9:
25:cc:87:d1:6c:9a:f4:50:bd:b4:47:c4:e0:4b:b3:0e:14:1f:
7b:3d:42:b3:12:2e:8c:20:ef:fc:81:c4:15:43:54:75:7c:9c:
cd:39:7a:f9:80:c0:56:cf:7a:11:a0:70:e8:bc:c9:50:1f:d4:
63:0b:13:fc:eb:c4:b7:dc:54:aa:d1:d8:76:c0:8f:4e:6e:96:
e0:a0:77:37:da:d6:57:a1:3f:07:57:e9:db:dd:16:05:22:4b:
bd:46:48:b2:22:ae:7c:bb:2c:96:a2:0f:b0:d0:70:04:b5:86:
ce:26:90:a4:74:e8:be:c4:bd:7e:d1:91:cc:85:d2:9d:6b:d9:
78:68:0a:26:ef:30:25:6c:a8:04:df:2e:d9:ca:c8:08:89:77:
66:b5:b8:7e:ab:3e:3a:f9:77:1f:8c:1d:8c:5f:1c:71:81:24:
f4:1c:ea:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaue1DHe6OdvOOn+M0tCDKUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OWIxZjc2YmI1YmFjNmQwYzc5NmJhNDcxMzBjNzY4YjFj
NzNiMWMwHhcNMjUwNTA4MDYwMDM5WhcNMjUwNTA5MDYwMDM5WjAzMTEwLwYDVQQD
EyhiNzI5ODVjZDc4OTY1NmY4ODM1ZTBkOWZhMzEyOTkwOTA0N2VlMWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj3mBL4cHvx78hGXU+fr8zmKYm45
/67ihLPrZDRzqCud/5wil0XXXZqTa1mo064LdTtmJnW1fo9heiXps6hb2rqqQ3ZL
hkvC7mIjh890EAD6AQQ9atMXC6Q4ZTKtfq+Y1GljFsVjyXYQcfgdudiqJ6FPtSVz
Iw5iPvnUOqmU+a/xHtsgmsQWyqNA8yF3YVockpXspHYCFZfoZiJQgb33syNMX4X/
VJOEQIEJixVLmS4KH4pl5i3velo+7Kl2e5OVM7BuOaMZK47ThBsGacKao0FEfWQq
2bQaoYotlfqb/C3+dcNMvcmzzYSuvJVfi4Y6+cgqBLodHtfzsG/zkTdOOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcphc14llb4g14Nn6MSmQkEfuH3MB8GA1UdIwQY
MBaAFMSbH3a7W6xtDHlrpHEwx2ixxzscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQt
NGFkNDAzNWZhZTdiLzEveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQtNGFkNDAzNWZhZTdi
LzEveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOjdZHhn
MIGzM7oz/ERANKYfvNIkJd38A5Gh/RRAUFeAgJp/oX7w/xh55kqty8AnhtgGtnjR
o7SjpjRPJcePhCb9Y/eMhcjVws/n3JlPvGsWeFm5VBkX13vJJcyH0Wya9FC9tEfE
4EuzDhQfez1CsxIujCDv/IHEFUNUdXyczTl6+YDAVs96EaBw6LzJUB/UYwsT/OvE
t9xUqtHYdsCPTm6W4KB3N9rWV6E/B1fp290WBSJLvUZIsiKufLsslqIPsNBwBLWG
ziaQpHTovsS9ftGRzIXSnWvZeGgKJu8wJWyoBN8u2crICIl3ZrW4fqs+Ovl3H4wd
jF8ccYEk9BzqIA==
-----END CERTIFICATE-----
Generated at Thu May 8 10:19:20 2025 by rpki-client