Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
File: jIVlV8QUaotQ3E2UQksGaAzvdVs.mft (raw, json)
Hash identifier: iRlDul62XAtGGSC10BPnZUKJiBRn1exPXleIMokMLmI=
Subject key identifier: 8A:61:91:B3:1C:18:FC:86:35:03:D0:7E:2F:E0:89:A7:C0:B9:A2:60
Authority key identifier: 8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
Certificate issuer: /CN=8c856557c4146a8b50dc4d94424b06680cef755b
Certificate serial: 0196ADD643685F15F377089EF648DB7ACA5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
Manifest number: 152E
Signing time: Thu 08 May 2025 03:00:22 +0000
Manifest this update: Thu 08 May 2025 03:00:22 +0000
Manifest next update: Fri 09 May 2025 03:00:22 +0000
Files and hashes: 1: LMeAQnqXAno2ePthwCoJjGfcb2A.roa (hash: No1WA2LE8faZkFieSxcHhVUWaXGzU/xeEQ1/oG4+fLo=)
2: VTn6EUtQCO3oepKWF0k0ld0XSjA.roa (hash: Tq2gVAAnQassaUGQuCNSlznhLVZoKruMbeiYe+SNasU=)
3: duhqaZfDGitvRaokNyqOu5bk0v8.roa (hash: BL1fv/RwGJqefrtoFnvmlovZ7pP8X3nS9B+9usaWWNI=)
4: jIVlV8QUaotQ3E2UQksGaAzvdVs.crl (hash: lFzLSMSjsfDeA9uQg35MKSDFSM9oK4hOXOL35pKc4Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:d6:43:68:5f:15:f3:77:08:9e:f6:48:db:7a:ca:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c856557c4146a8b50dc4d94424b06680cef755b
Validity
Not Before: May 8 03:00:22 2025 GMT
Not After : May 9 03:00:22 2025 GMT
Subject: CN=8a6191b31c18fc863503d07e2fe089a7c0b9a260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:42:27:44:8e:a0:27:96:19:5a:14:dc:2c:b8:
29:8d:a7:bd:08:47:7d:ab:9f:33:97:03:9c:b7:85:
40:e1:ff:d5:8f:c0:eb:17:39:dc:e2:c5:37:6a:ab:
da:ec:99:6b:45:90:21:ad:9a:a5:6a:92:e4:ee:6c:
1a:e0:9a:c0:fc:ad:1c:40:d9:12:1d:3b:42:27:92:
d0:11:95:71:30:bd:45:24:da:06:be:a6:fa:48:87:
bb:88:74:90:9a:dc:8e:62:a2:61:0e:3a:13:9e:3d:
01:03:4a:15:cb:5c:5a:cd:d2:9d:df:59:09:9e:a2:
ca:39:72:ab:2e:d8:58:73:d6:c8:16:b9:aa:35:e7:
db:84:ef:f8:b5:e4:22:37:7a:32:4f:d8:9e:5b:fc:
9f:f5:82:8d:7d:99:93:42:fe:fe:a7:3b:bb:32:1c:
7e:aa:f2:12:b7:dc:42:6c:e9:ce:30:a7:ee:c6:a8:
3f:52:ab:53:c0:03:a1:b1:82:68:03:3e:c8:9b:14:
8c:25:85:19:1c:61:50:76:93:fb:39:5b:01:8f:08:
26:bc:e8:cd:6a:b5:bf:0c:df:f4:d0:f9:71:2e:47:
4b:2c:aa:12:56:3f:c5:95:3a:3c:03:7a:24:c3:03:
ab:98:94:93:b1:a8:17:80:83:ea:95:69:55:28:5c:
fe:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:61:91:B3:1C:18:FC:86:35:03:D0:7E:2F:E0:89:A7:C0:B9:A2:60
X509v3 Authority Key Identifier:
keyid:8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:37:85:c5:d5:2b:dc:c8:7e:1e:16:7b:ca:33:99:1b:6f:1e:
15:42:d7:8e:a2:4a:5d:ce:43:23:d8:97:02:a2:f6:47:d2:ea:
f2:ec:bb:09:f3:a6:4b:92:d0:43:15:ca:2c:dc:60:8b:f5:4b:
3b:53:bd:0e:4d:45:11:66:a7:de:fd:4e:5f:d1:df:c6:78:dd:
a3:bc:20:ad:f1:8f:18:77:15:bd:2c:3b:85:77:a0:5f:81:b4:
0b:e7:68:e2:fd:3d:74:26:53:ab:79:fc:0a:15:64:58:74:cb:
98:62:95:86:2b:36:cb:4e:9f:6b:bd:66:aa:2b:9c:f1:3b:bf:
7a:e5:81:d1:2e:8f:44:25:8d:bc:fe:dc:1a:69:35:ea:5e:35:
71:53:d3:d8:69:97:c3:89:9c:fe:b0:8e:9a:59:2a:7a:f0:d2:
34:3b:10:2f:b7:fc:94:fb:34:f4:55:6c:33:68:5f:99:c6:9e:
d3:ae:d1:f7:45:96:90:8e:1a:a2:42:27:d2:65:c7:f6:d6:f3:
0b:74:79:3e:3e:b1:87:f7:26:71:71:2c:81:e3:bf:ed:f4:1b:
8e:57:57:09:ec:a5:89:47:19:fb:ac:d9:60:b7:f9:fd:b9:d5:
c1:e3:fa:1f:71:a1:7d:25:4f:d8:ec:c2:70:5a:1c:b4:a4:4f:
df:ac:e1:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZat1kNoXxXzdwie9kjbespeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjODU2NTU3YzQxNDZhOGI1MGRjNGQ5NDQyNGIwNjY4MGNl
Zjc1NWIwHhcNMjUwNTA4MDMwMDIyWhcNMjUwNTA5MDMwMDIyWjAzMTEwLwYDVQQD
Eyg4YTYxOTFiMzFjMThmYzg2MzUwM2QwN2UyZmUwODlhN2MwYjlhMjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkInRI6gJ5YZWhTcLLgpjae9CEd9
q58zlwOct4VA4f/Vj8DrFznc4sU3aqva7JlrRZAhrZqlapLk7mwa4JrA/K0cQNkS
HTtCJ5LQEZVxML1FJNoGvqb6SIe7iHSQmtyOYqJhDjoTnj0BA0oVy1xazdKd31kJ
nqLKOXKrLthYc9bIFrmqNefbhO/4teQiN3oyT9ieW/yf9YKNfZmTQv7+pzu7Mhx+
qvISt9xCbOnOMKfuxqg/UqtTwAOhsYJoAz7ImxSMJYUZHGFQdpP7OVsBjwgmvOjN
arW/DN/00PlxLkdLLKoSVj/FlTo8A3okwwOrmJSTsagXgIPqlWlVKFz+VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIphkbMcGPyGNQPQfi/giafAuaJgMB8GA1UdIwQY
MBaAFIyFZVfEFGqLUNxNlEJLBmgM73VbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8zMDZhZGItN2FhNy00YjgyLWIwNWEt
MmE2YjlhMGNjYWJkLzEvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8zMDZhZGItN2FhNy00YjgyLWIwNWEtMmE2YjlhMGNjYWJk
LzEvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbjeFxdUr
3Mh+HhZ7yjOZG28eFULXjqJKXc5DI9iXAqL2R9Lq8uy7CfOmS5LQQxXKLNxgi/VL
O1O9Dk1FEWan3v1OX9Hfxnjdo7wgrfGPGHcVvSw7hXegX4G0C+do4v09dCZTq3n8
ChVkWHTLmGKVhis2y06fa71mqiuc8Tu/euWB0S6PRCWNvP7cGmk16l41cVPT2GmX
w4mc/rCOmlkqevDSNDsQL7f8lPs09FVsM2hfmcae067R90WWkI4aokIn0mXH9tbz
C3R5Pj6xh/cmcXEsgeO/7fQbjldXCeyliUcZ+6zZYLf5/bnVweP6H3GhfSVP2OzC
cFoctKRP36zhWg==
-----END CERTIFICATE-----
Generated at Thu May 8 10:30:53 2025 by rpki-client