Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
File: frsTAxu1qUujKTO0JdyRUBYclSg.mft (raw, json)
Hash identifier: /2G/ul5YwSF5FaOlx1Mc6Ob3MaE+1IB6/2Ua795xyPg=
Subject key identifier: A2:E0:24:18:CF:C1:1D:25:30:9A:C5:D6:72:B4:89:EC:5B:68:75:6B
Authority key identifier: 7E:BB:13:03:1B:B5:A9:4B:A3:29:33:B4:25:DC:91:50:16:1C:95:28
Certificate issuer: /CN=7ebb13031bb5a94ba32933b425dc9150161c9528
Certificate serial: 0196AC1F27CFD02C4B600737B33A3050E75A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frsTAxu1qUujKTO0JdyRUBYclSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
Manifest number: 018F
Signing time: Wed 07 May 2025 19:00:45 +0000
Manifest this update: Wed 07 May 2025 19:00:45 +0000
Manifest next update: Thu 08 May 2025 19:00:45 +0000
Files and hashes: 1: 1GrjD_MVlSSqPSOTstmSZn6OW-8.roa (hash: 0bCgzOJOxNfXuOJ/KwofBbHHt3oNngCqpnJt0zyGNL8=)
2: frsTAxu1qUujKTO0JdyRUBYclSg.crl (hash: 5AtIaWVkDj1anknJKH+IP0nu8yQJe+E/EVykxhMtfQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/frsTAxu1qUujKTO0JdyRUBYclSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:1f:27:cf:d0:2c:4b:60:07:37:b3:3a:30:50:e7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebb13031bb5a94ba32933b425dc9150161c9528
Validity
Not Before: May 7 19:00:45 2025 GMT
Not After : May 8 19:00:45 2025 GMT
Subject: CN=a2e02418cfc11d25309ac5d672b489ec5b68756b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:41:36:1e:50:de:e0:f0:9e:f7:2d:2d:92:55:
da:14:05:bb:03:a9:16:af:91:0b:2b:ab:52:3a:26:
cb:f0:e4:c2:88:48:08:c3:12:8f:b3:08:77:95:ad:
13:2e:2c:4d:9a:15:92:0b:0d:bb:95:d9:2d:b5:75:
0e:96:e3:6f:e6:44:5e:38:2d:74:42:15:1f:d1:c9:
a6:78:8e:14:2a:bf:9e:0c:98:4f:10:56:e5:a8:67:
c2:d2:39:1a:d4:e4:76:e8:af:76:d3:55:25:bc:49:
b5:5b:d2:55:f5:89:d2:87:e8:57:99:9f:45:40:0e:
f6:ef:4b:b5:f1:f0:8b:99:19:29:45:03:c2:06:b1:
88:f2:f2:1c:74:ea:da:cb:97:aa:14:7e:30:17:15:
0b:9c:b5:0f:c0:2c:c9:32:75:e0:15:51:77:ca:12:
48:10:48:f9:2f:5c:08:d1:07:00:43:a8:38:22:d0:
51:e0:0e:ea:c5:5f:9e:f0:e5:04:45:36:65:73:b0:
a0:9e:3c:02:9e:36:44:7e:31:6c:53:f4:9e:bd:fe:
10:a9:ea:a6:88:38:90:74:cd:7c:85:25:70:af:c4:
d9:2d:f9:0b:f7:4d:20:14:4e:79:c0:79:ac:53:c0:
6b:73:d8:a8:99:5e:5e:0b:3e:01:76:ed:9e:a2:1c:
8c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E0:24:18:CF:C1:1D:25:30:9A:C5:D6:72:B4:89:EC:5B:68:75:6B
X509v3 Authority Key Identifier:
keyid:7E:BB:13:03:1B:B5:A9:4B:A3:29:33:B4:25:DC:91:50:16:1C:95:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frsTAxu1qUujKTO0JdyRUBYclSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5d:bf:d8:05:1f:d6:69:d1:a7:6b:4f:5a:42:5f:3a:ce:83:
5d:1f:a3:c1:1b:c8:1d:c3:63:73:4e:ed:1c:c1:7a:d4:d6:e0:
50:7f:17:bd:7c:cc:61:74:a1:37:aa:f5:8f:f8:2f:00:b3:38:
96:e4:81:b8:85:1b:2b:2e:c3:f8:3c:ea:a5:3a:0b:2e:06:86:
a7:07:3b:65:84:a3:2e:7c:47:15:73:bd:1e:d1:85:ae:5b:7e:
59:29:6d:77:a2:2a:ef:c4:01:d9:8d:36:3c:05:96:08:70:96:
ff:78:39:8a:a4:d4:a6:cd:5c:62:00:7f:f5:4b:dc:1e:a8:fb:
42:d8:42:27:54:e3:10:1f:7f:d6:41:14:7f:37:f2:c9:09:6a:
ed:67:41:b8:3a:f7:c6:8c:7c:38:83:67:45:f6:2c:90:5c:88:
ff:20:73:c3:e5:9c:4a:04:42:d3:27:62:01:be:9f:ae:12:2d:
98:88:2a:d5:ee:0f:5c:2e:fe:9a:b6:86:b2:23:76:3f:fa:66:
f6:8c:36:a0:aa:73:00:93:f9:32:65:64:2f:8a:49:6b:b7:f4:
a9:4d:b5:6c:6f:90:b7:e4:6d:31:a8:81:30:85:13:3d:31:8e:
f1:e3:2d:41:ad:78:a2:3e:34:e9:08:ec:3d:f6:e2:d8:74:25:
44:5f:67:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZasHyfP0CxLYAc3szowUOdaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYmIxMzAzMWJiNWE5NGJhMzI5MzNiNDI1ZGM5MTUwMTYx
Yzk1MjgwHhcNMjUwNTA3MTkwMDQ1WhcNMjUwNTA4MTkwMDQ1WjAzMTEwLwYDVQQD
EyhhMmUwMjQxOGNmYzExZDI1MzA5YWM1ZDY3MmI0ODllYzViNjg3NTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0E2HlDe4PCe9y0tklXaFAW7A6kW
r5ELK6tSOibL8OTCiEgIwxKPswh3la0TLixNmhWSCw27ldkttXUOluNv5kReOC10
QhUf0cmmeI4UKr+eDJhPEFblqGfC0jka1OR26K9201UlvEm1W9JV9YnSh+hXmZ9F
QA7270u18fCLmRkpRQPCBrGI8vIcdOray5eqFH4wFxULnLUPwCzJMnXgFVF3yhJI
EEj5L1wI0QcAQ6g4ItBR4A7qxV+e8OUERTZlc7CgnjwCnjZEfjFsU/Sevf4Qqeqm
iDiQdM18hSVwr8TZLfkL900gFE55wHmsU8Brc9iomV5eCz4Bdu2eohyMMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLgJBjPwR0lMJrF1nK0iexbaHVrMB8GA1UdIwQY
MBaAFH67EwMbtalLoykztCXckVAWHJUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnJzVEF4dTFxVXVqS1RPMEpkeVJVQlljbFNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8yZWZiNjgtZmYwZS00NGMxLWFhYTEt
ZWNiMWYyOWNjZmYyLzEvZnJzVEF4dTFxVXVqS1RPMEpkeVJVQlljbFNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8yZWZiNjgtZmYwZS00NGMxLWFhYTEtZWNiMWYyOWNjZmYy
LzEvZnJzVEF4dTFxVXVqS1RPMEpkeVJVQlljbFNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb12/2AUf
1mnRp2tPWkJfOs6DXR+jwRvIHcNjc07tHMF61NbgUH8XvXzMYXShN6r1j/gvALM4
luSBuIUbKy7D+DzqpToLLgaGpwc7ZYSjLnxHFXO9HtGFrlt+WSltd6Iq78QB2Y02
PAWWCHCW/3g5iqTUps1cYgB/9UvcHqj7QthCJ1TjEB9/1kEUfzfyyQlq7WdBuDr3
xox8OINnRfYskFyI/yBzw+WcSgRC0ydiAb6frhItmIgq1e4PXC7+mraGsiN2P/pm
9ow2oKpzAJP5MmVkL4pJa7f0qU21bG+Qt+RtMaiBMIUTPTGO8eMtQa14oj406Qjs
Pfbi2HQlRF9nyw==
-----END CERTIFICATE-----
Generated at Thu May 8 03:52:35 2025 by rpki-client