Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
File: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft (raw, json)
Hash identifier: zSsXRACM1KbMT8kybQryadv8XIhPl0hCF45jQmyvA/E=
Subject key identifier: DA:15:E5:40:C5:39:AA:31:3C:18:B0:A2:E6:9A:0A:BD:B2:8D:74:9E
Authority key identifier: D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67
Certificate issuer: /CN=d98c4e8a0ea297d67b431aac438a1c20675ef867
Certificate serial: 0196C0EF6E8576BD85E91C7E1516282BB84D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
Manifest number: B5
Signing time: Sun 11 May 2025 20:00:38 +0000
Manifest this update: Sun 11 May 2025 20:00:38 +0000
Manifest next update: Mon 12 May 2025 20:00:38 +0000
Files and hashes: 1: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl (hash: +anb0kP39Yhdyzx9aG+VizeZQa3PaBQcKT/fJfnfX2A=)
2: KMiAWUFXj2wWr5kXXxFA1hwCzJs.roa (hash: zRXksS88o1vhBVFHCpjB+UTg+AP7it+76VFloakWdKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:6e:85:76:bd:85:e9:1c:7e:15:16:28:2b:b8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98c4e8a0ea297d67b431aac438a1c20675ef867
Validity
Not Before: May 11 20:00:38 2025 GMT
Not After : May 12 20:00:38 2025 GMT
Subject: CN=da15e540c539aa313c18b0a2e69a0abdb28d749e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:33:f1:c1:43:b2:eb:fb:0f:09:3d:58:bc:
b4:b6:c6:69:d0:d7:d3:90:72:70:12:17:b0:71:d8:
db:5e:f1:9b:fc:eb:8b:14:41:ad:6e:5d:7a:e3:c9:
d5:12:a9:ac:72:a2:29:3b:dd:80:07:c3:5d:13:38:
fa:5e:e2:8c:f9:5b:b3:33:03:d4:be:f2:6c:41:8e:
6e:81:2d:ba:ec:c2:52:33:3e:43:9c:d8:0c:dd:b6:
dd:d2:92:94:9f:a5:7b:3e:a9:26:76:e9:5a:c7:c4:
27:26:53:ce:00:a8:42:bd:48:af:5b:89:a5:0d:cb:
b4:88:de:ff:4b:f7:6f:99:d2:cb:66:87:1e:72:55:
4b:b9:27:57:7c:f1:36:e4:a3:97:84:5f:e2:d1:d8:
fa:94:f3:00:76:fe:ad:85:bd:9b:89:40:65:15:0b:
a0:f6:65:c6:0a:80:30:04:e2:37:49:48:ec:05:3e:
0a:4d:f8:b5:ec:5b:2d:0f:47:8f:2d:7e:2b:02:14:
f3:db:c1:7f:b8:ef:3b:7e:8f:1b:a3:4d:62:62:1b:
d8:07:fe:94:1e:a7:42:46:c8:c3:a7:85:86:03:9f:
46:f2:84:b1:be:35:cf:86:b7:f7:71:9f:55:99:9b:
4f:d5:47:ae:5e:4a:04:b5:2d:80:93:f3:5a:89:4d:
c5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:15:E5:40:C5:39:AA:31:3C:18:B0:A2:E6:9A:0A:BD:B2:8D:74:9E
X509v3 Authority Key Identifier:
keyid:D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ca:f0:1c:80:0f:7f:8d:3b:1d:3b:89:6c:d5:ea:50:a6:4c:
29:e0:62:f6:82:88:d1:e5:6b:2b:8e:08:6e:1f:95:a4:8b:49:
d7:36:9f:1b:d6:b8:70:07:ec:4a:6a:ea:23:75:c0:41:b6:a8:
5b:87:9b:11:0e:bf:81:1a:94:58:12:11:c9:a3:d5:e7:4e:09:
db:18:a3:ae:87:55:41:be:6e:10:3d:82:eb:9d:b8:bf:46:a9:
44:5c:98:2b:3c:12:24:ff:a9:51:5e:bb:c5:63:a2:af:01:10:
60:85:69:e1:b3:a0:01:2c:44:5c:ee:6c:04:ba:5f:da:21:c2:
0f:f8:d6:7f:ec:6e:6b:63:9b:d5:76:51:aa:8d:58:4e:78:f8:
52:23:6a:6a:35:26:69:39:ba:33:0b:7f:ab:61:94:0c:cd:f6:
fc:69:f1:75:6e:27:db:8a:51:36:ab:47:f7:4e:9f:4d:46:7f:
82:69:f2:1c:a2:07:19:28:f7:d0:c9:f5:63:79:a5:45:0b:03:
46:8c:f0:cc:88:d7:71:10:b2:b4:08:9a:53:39:9e:39:10:9a:
cf:32:ad:4e:b9:67:49:60:c6:86:9c:1c:4a:d5:f8:6d:41:df:
ea:cc:82:84:0b:12:b4:0f:35:05:f4:05:12:b6:33:06:a6:fc:
34:64:7d:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbA726Fdr2F6Rx+FRYoK7hNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OGM0ZThhMGVhMjk3ZDY3YjQzMWFhYzQzOGExYzIwNjc1
ZWY4NjcwHhcNMjUwNTExMjAwMDM4WhcNMjUwNTEyMjAwMDM4WjAzMTEwLwYDVQQD
EyhkYTE1ZTU0MGM1MzlhYTMxM2MxOGIwYTJlNjlhMGFiZGIyOGQ3NDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVAz8cFDsuv7Dwk9WLy0tsZp0NfT
kHJwEhewcdjbXvGb/OuLFEGtbl1648nVEqmscqIpO92AB8NdEzj6XuKM+VuzMwPU
vvJsQY5ugS267MJSMz5DnNgM3bbd0pKUn6V7Pqkmdulax8QnJlPOAKhCvUivW4ml
Dcu0iN7/S/dvmdLLZoceclVLuSdXfPE25KOXhF/i0dj6lPMAdv6thb2biUBlFQug
9mXGCoAwBOI3SUjsBT4KTfi17FstD0ePLX4rAhTz28F/uO87fo8bo01iYhvYB/6U
HqdCRsjDp4WGA59G8oSxvjXPhrf3cZ9VmZtP1UeuXkoEtS2Ak/NaiU3FFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoV5UDFOaoxPBiwouaaCr2yjXSeMB8GA1UdIwQY
MBaAFNmMTooOopfWe0MarEOKHCBnXvhnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMll4T2lnNmlsOVo3UXhxc1E0b2NJR2RlLUdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81YTM1MmUtNWJjYS00NDY4LWI4ZDYt
YmEwNmU3NGRiOTFjLzEvMll4T2lnNmlsOVo3UXhxc1E0b2NJR2RlLUdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS81YTM1MmUtNWJjYS00NDY4LWI4ZDYtYmEwNmU3NGRiOTFj
LzEvMll4T2lnNmlsOVo3UXhxc1E0b2NJR2RlLUdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8rwHIAP
f407HTuJbNXqUKZMKeBi9oKI0eVrK44Ibh+VpItJ1zafG9a4cAfsSmrqI3XAQbao
W4ebEQ6/gRqUWBIRyaPV504J2xijrodVQb5uED2C6524v0apRFyYKzwSJP+pUV67
xWOirwEQYIVp4bOgASxEXO5sBLpf2iHCD/jWf+xua2Ob1XZRqo1YTnj4UiNqajUm
aTm6Mwt/q2GUDM32/GnxdW4n24pRNqtH906fTUZ/gmnyHKIHGSj30Mn1Y3mlRQsD
RozwzIjXcRCytAiaUzmeORCazzKtTrlnSWDGhpwcStX4bUHf6syChAsStA81BfQF
ErYzBqb8NGR9dw==
-----END CERTIFICATE-----
Generated at Mon May 12 04:48:15 2025 by rpki-client