Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
File: RjXaOiCHnlX-loU-DXru_1M4bos.mft (raw, json)
Hash identifier: UXBrGP1GnRSb7QkeGzMRUA7xMNj6lUye1NuRo9PI1f8=
Subject key identifier: B3:6C:A3:19:75:80:AC:3A:E1:26:5C:95:5C:71:22:3B:0E:64:90:B6
Authority key identifier: 46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
Certificate issuer: /CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Certificate serial: 0196AC8D23CF997DDA84901786479035F2D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
Manifest number: 0930
Signing time: Wed 07 May 2025 21:00:52 +0000
Manifest this update: Wed 07 May 2025 21:00:52 +0000
Manifest next update: Thu 08 May 2025 21:00:52 +0000
Files and hashes: 1: RjXaOiCHnlX-loU-DXru_1M4bos.crl (hash: 3fPhx9actsWTfoqH14vVvzCll378NzJBWVfAIirhuQo=)
2: Z2Ec6FKFCMROAvsvU_-EjGHw4ww.roa (hash: 422PPfALRjVpASZNjTqWvSXQqN/bAdN9tO/keC7QHEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:8d:23:cf:99:7d:da:84:90:17:86:47:90:35:f2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Validity
Not Before: May 7 21:00:52 2025 GMT
Not After : May 8 21:00:52 2025 GMT
Subject: CN=b36ca3197580ac3ae1265c955c71223b0e6490b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:d8:c3:c3:ad:74:59:9e:d1:be:59:c9:f4:
88:be:20:ac:17:4e:34:13:a0:4f:fa:f3:b3:b8:ea:
cf:f2:72:9e:29:c2:c3:f7:54:9e:3a:b3:de:4f:73:
21:32:88:d9:31:b9:71:40:68:df:3f:42:49:5d:19:
31:96:d3:a3:51:5a:52:04:8a:4f:49:16:b3:a5:15:
4d:2c:07:fd:de:98:25:da:eb:83:21:4d:a4:3b:dd:
7c:14:92:76:91:b5:73:15:da:a1:e0:29:cc:96:2e:
ef:2a:05:3c:4f:5b:49:6c:f6:64:67:58:35:92:94:
c4:97:c3:5e:b1:ec:fd:f5:d7:d3:2d:5e:36:84:a0:
56:cf:ac:f3:1e:8f:d2:47:0e:5b:5e:29:db:18:b7:
84:05:1b:d2:39:5f:bf:10:54:f1:5f:42:c9:84:6c:
02:14:a5:28:96:7a:de:1e:0e:f0:b6:a9:f5:e6:ff:
b8:50:a2:c5:9e:eb:4d:d2:4e:e9:5a:ce:72:69:72:
2c:d4:52:b1:d7:b0:39:27:4d:c9:d5:e7:09:2e:25:
cd:8a:26:08:7e:c5:56:d3:9b:a6:ee:d6:50:e7:6b:
6c:d5:f0:12:e7:a4:1c:b6:b4:75:8a:7f:fc:26:8a:
c2:c3:5c:48:d4:16:38:48:f2:53:27:9b:3a:1b:0d:
57:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6C:A3:19:75:80:AC:3A:E1:26:5C:95:5C:71:22:3B:0E:64:90:B6
X509v3 Authority Key Identifier:
keyid:46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:48:ee:c5:21:40:a3:33:c8:03:1b:de:db:06:1e:ac:73:c6:
f1:2f:f1:9b:f1:33:ad:24:ed:e0:ef:26:9f:f1:08:d2:8f:ef:
47:7d:8b:5f:2d:ec:31:4c:02:f8:d4:dd:ac:e0:14:27:be:42:
8a:8b:c9:e7:70:b3:90:29:6e:7d:38:3b:14:e6:43:21:ab:26:
f5:24:18:14:1c:c0:08:03:6f:8e:e2:41:8e:33:9a:b7:88:f0:
c4:f8:6f:96:9b:d0:d4:bf:d1:59:62:12:99:ee:63:29:66:2a:
37:48:cd:ba:27:4c:3f:13:44:52:55:d3:fc:13:31:ed:57:99:
85:a3:98:c2:9b:c6:7b:4f:9c:18:50:55:56:d8:9b:3a:1b:75:
84:f2:78:84:f3:cf:e0:43:f3:b8:1a:23:13:89:6f:4b:f2:f5:
bc:72:ab:e2:e0:de:21:7d:e6:49:ee:e9:0c:00:df:67:22:61:
d8:7b:f7:87:bd:ea:88:04:b3:3f:ba:5e:da:28:32:9c:a8:35:
2c:91:a0:84:66:c4:09:e7:10:c8:ed:a5:2e:8f:d2:19:eb:a7:
6c:2c:2f:0b:7a:6f:36:3c:2c:ea:b7:a5:16:1c:6d:94:15:24:
b3:fc:77:6b:1f:35:cf:ea:73:da:a6:73:81:c1:02:0e:e0:1d:
dc:be:2c:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZasjSPPmX3ahJAXhkeQNfLZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MzVkYTNhMjA4NzllNTVmZTk2ODUzZTBkN2FlZWZmNTMz
ODZlOGIwHhcNMjUwNTA3MjEwMDUyWhcNMjUwNTA4MjEwMDUyWjAzMTEwLwYDVQQD
EyhiMzZjYTMxOTc1ODBhYzNhZTEyNjVjOTU1YzcxMjIzYjBlNjQ5MGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV3Yw8OtdFme0b5ZyfSIviCsF040
E6BP+vOzuOrP8nKeKcLD91SeOrPeT3MhMojZMblxQGjfP0JJXRkxltOjUVpSBIpP
SRazpRVNLAf93pgl2uuDIU2kO918FJJ2kbVzFdqh4CnMli7vKgU8T1tJbPZkZ1g1
kpTEl8Nesez99dfTLV42hKBWz6zzHo/SRw5bXinbGLeEBRvSOV+/EFTxX0LJhGwC
FKUolnreHg7wtqn15v+4UKLFnutN0k7pWs5yaXIs1FKx17A5J03J1ecJLiXNiiYI
fsVW05um7tZQ52ts1fAS56QctrR1in/8JorCw1xI1BY4SPJTJ5s6Gw1XXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNsoxl1gKw64SZclVxxIjsOZJC2MB8GA1UdIwQY
MBaAFEY12jogh55V/paFPg167v9TOG6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmpYYU9pQ0hubFgtbG9VLURYcnVfMU00Ym9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iZmI0YzgtNTY1NS00NDBmLTg1Yjgt
YzQwY2UzMmI2Zjc2LzEvUmpYYU9pQ0hubFgtbG9VLURYcnVfMU00Ym9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iZmI0YzgtNTY1NS00NDBmLTg1YjgtYzQwY2UzMmI2Zjc2
LzEvUmpYYU9pQ0hubFgtbG9VLURYcnVfMU00Ym9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmUjuxSFA
ozPIAxve2wYerHPG8S/xm/EzrSTt4O8mn/EI0o/vR32LXy3sMUwC+NTdrOAUJ75C
iovJ53CzkClufTg7FOZDIasm9SQYFBzACANvjuJBjjOat4jwxPhvlpvQ1L/RWWIS
me5jKWYqN0jNuidMPxNEUlXT/BMx7VeZhaOYwpvGe0+cGFBVVtibOht1hPJ4hPPP
4EPzuBojE4lvS/L1vHKr4uDeIX3mSe7pDADfZyJh2Hv3h73qiASzP7pe2igynKg1
LJGghGbECecQyO2lLo/SGeunbCwvC3pvNjws6relFhxtlBUks/x3ax81z+pz2qZz
gcECDuAd3L4sbw==
-----END CERTIFICATE-----
Generated at Wed May 7 23:07:58 2025 by rpki-client