Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
File: i7dzgYUSSQpQCthD6irnF-8hsUw.mft (raw, json)
Hash identifier: bAloM7VgCRpEWucIC3JpQ9Gr1P4AbE9TAaj/eVbOeEs=
Subject key identifier: 14:C8:B2:6D:4A:6B:F0:27:17:66:F0:71:BC:E6:CA:BF:02:0A:58:57
Authority key identifier: 8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C
Certificate issuer: /CN=8bb773818512490a500ad843ea2ae717ef21b14c
Certificate serial: 0196BB5B1C7111A91F512B1D54231E5EC11D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 18:00:32 +0000
Manifest this update: Sat 10 May 2025 18:00:32 +0000
Manifest next update: Sun 11 May 2025 18:00:32 +0000
Files and hashes: 1: L6BmwALeicC8VgFsadJhZLZOhdw.roa (hash: jlbIuI51ox4C1wny8/EXm0XGuTxyG7RmZ5JEvI5tNCo=)
2: i7dzgYUSSQpQCthD6irnF-8hsUw.crl (hash: oo0Wg9hZnSbROrhvEGM4l3PfVtlTadcNVGSwhW3vvJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:1c:71:11:a9:1f:51:2b:1d:54:23:1e:5e:c1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb773818512490a500ad843ea2ae717ef21b14c
Validity
Not Before: May 10 18:00:32 2025 GMT
Not After : May 11 18:00:32 2025 GMT
Subject: CN=14c8b26d4a6bf0271766f071bce6cabf020a5857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:8f:3a:94:6d:8a:b3:8b:f8:7e:be:95:4b:
af:0d:90:11:0c:b4:01:b2:07:75:94:34:cc:1f:fe:
16:14:c0:45:e2:e5:d8:90:e6:f1:ba:56:71:53:d0:
ee:a8:cf:3a:2e:61:c7:ab:0f:81:df:c9:f7:b2:56:
3b:d9:39:3f:5c:02:48:05:cd:1f:39:f0:40:ef:12:
31:0a:61:c7:11:de:be:80:6c:b8:19:29:ee:3a:4c:
44:a8:45:ae:fa:6e:1c:98:f9:58:75:ba:ee:b4:5a:
a3:26:dd:59:61:3e:78:8f:fb:7a:d9:f8:42:0f:b7:
22:ad:35:05:a7:6f:14:e8:63:0e:9e:b8:3a:2e:33:
7b:32:46:2b:56:0d:55:1c:f8:58:26:f8:41:3d:e7:
25:56:1c:e9:86:79:a5:d0:6a:ea:bd:43:0a:1a:b3:
84:a0:b4:4f:83:13:61:b5:04:4a:47:c9:9b:93:d0:
4c:dd:e5:f5:1c:a3:9e:c5:84:05:eb:70:b5:77:8e:
4b:97:cd:d1:18:5a:c6:e3:fa:11:0a:cf:e3:be:72:
fc:05:fc:54:41:02:a5:b6:73:84:9a:4d:71:2a:b6:
64:c6:59:07:02:d7:35:9f:fe:c0:f1:9d:f4:37:61:
a3:fe:65:f2:68:a1:66:ab:cc:46:4b:73:94:58:30:
c4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C8:B2:6D:4A:6B:F0:27:17:66:F0:71:BC:E6:CA:BF:02:0A:58:57
X509v3 Authority Key Identifier:
keyid:8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:0e:4b:90:99:8a:35:0a:98:31:25:22:6e:1f:71:64:87:f8:
8e:c6:91:d2:e7:1f:f8:01:b7:41:bc:8b:42:ba:8b:2e:9a:24:
24:95:53:5a:e8:30:ba:0b:10:19:01:22:79:a1:ba:02:c9:ee:
01:1d:4a:0c:7e:bc:9a:72:61:f9:71:d9:fd:6a:81:bc:16:f0:
0b:db:21:7b:7d:07:e4:89:fc:22:1e:d7:4d:da:d3:08:d2:69:
5e:32:97:da:57:9b:c7:0a:d8:fe:d6:b3:88:18:f8:47:d3:db:
75:db:80:f8:36:07:17:be:81:c7:75:fb:a3:a5:83:dd:3f:64:
0f:92:f0:7b:53:04:50:a4:fe:e6:c3:3a:2e:28:c4:e5:50:15:
a7:5d:94:c4:84:6e:39:2a:38:d8:b1:af:f7:5a:ef:21:9c:3c:
35:cf:cc:9d:ea:69:8b:cb:ee:3a:7c:83:57:7c:68:ac:b0:8b:
ae:de:4c:25:4a:6d:b0:af:2e:57:55:dc:cd:b5:49:f3:2f:51:
62:58:ea:94:37:0d:39:19:cc:5c:60:b8:32:b0:82:32:e0:3e:
83:1c:c5:4a:d5:77:69:68:3d:a4:e7:fd:5f:ba:fe:9e:50:91:
ca:c5:3a:8d:b7:6c:ed:02:78:9a:25:79:14:00:3b:b1:83:4f:
18:f7:9e:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7WxxxEakfUSsdVCMeXsEdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjc3MzgxODUxMjQ5MGE1MDBhZDg0M2VhMmFlNzE3ZWYy
MWIxNGMwHhcNMjUwNTEwMTgwMDMyWhcNMjUwNTExMTgwMDMyWjAzMTEwLwYDVQQD
EygxNGM4YjI2ZDRhNmJmMDI3MTc2NmYwNzFiY2U2Y2FiZjAyMGE1ODU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc2POpRtirOL+H6+lUuvDZARDLQB
sgd1lDTMH/4WFMBF4uXYkObxulZxU9DuqM86LmHHqw+B38n3slY72Tk/XAJIBc0f
OfBA7xIxCmHHEd6+gGy4GSnuOkxEqEWu+m4cmPlYdbrutFqjJt1ZYT54j/t62fhC
D7cirTUFp28U6GMOnrg6LjN7MkYrVg1VHPhYJvhBPeclVhzphnml0GrqvUMKGrOE
oLRPgxNhtQRKR8mbk9BM3eX1HKOexYQF63C1d45Ll83RGFrG4/oRCs/jvnL8BfxU
QQKltnOEmk1xKrZkxlkHAtc1n/7A8Z30N2Gj/mXyaKFmq8xGS3OUWDDEFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTIsm1Ka/AnF2bwcbzmyr8CClhXMB8GA1UdIwQY
MBaAFIu3c4GFEkkKUArYQ+oq5xfvIbFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTdkemdZVVNTUXBRQ3RoRDZpcm5GLThoc1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS81ZGVkNmMtYjQ2OS00MjBjLWIxNWUt
NTJiM2Y2OGRjMGMyLzEvaTdkemdZVVNTUXBRQ3RoRDZpcm5GLThoc1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS81ZGVkNmMtYjQ2OS00MjBjLWIxNWUtNTJiM2Y2OGRjMGMy
LzEvaTdkemdZVVNTUXBRQ3RoRDZpcm5GLThoc1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQ5LkJmK
NQqYMSUibh9xZIf4jsaR0ucf+AG3QbyLQrqLLpokJJVTWugwugsQGQEieaG6Asnu
AR1KDH68mnJh+XHZ/WqBvBbwC9she30H5In8Ih7XTdrTCNJpXjKX2lebxwrY/taz
iBj4R9PbdduA+DYHF76Bx3X7o6WD3T9kD5Lwe1MEUKT+5sM6LijE5VAVp12UxIRu
OSo42LGv91rvIZw8Nc/Mneppi8vuOnyDV3xorLCLrt5MJUptsK8uV1XczbVJ8y9R
YljqlDcNORnMXGC4MrCCMuA+gxzFStV3aWg9pOf9X7r+nlCRysU6jbds7QJ4miV5
FAA7sYNPGPeeyA==
-----END CERTIFICATE-----
Generated at Sun May 11 02:28:39 2025 by rpki-client