Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
File: J7jb2X3kzUBZtS5RPc81zTgaMrM.mft (raw, json)
Hash identifier: 559FKzgdCjijocG0eWSD2LR3ICtdVnI9d0Ke4L+oTsQ=
Subject key identifier: FC:05:6C:4B:E7:B5:3D:E9:50:E6:05:C1:CC:CE:AC:D1:AE:10:17:12
Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
Certificate issuer: /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Certificate serial: 0196C1CB2BB745E5B2C0E400DF4D14AC8982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
Manifest number: 0E10
Signing time: Mon 12 May 2025 00:00:39 +0000
Manifest this update: Mon 12 May 2025 00:00:39 +0000
Manifest next update: Tue 13 May 2025 00:00:39 +0000
Files and hashes: 1: 7z6VwEslCL2FPJkLcnWBqsZx-Yc.roa (hash: 4HX05uMrwNGyncqNvEyr0SjiIMdyEc2AyvawA9NsEGo=)
2: H1ODV9W4buqhl3EqdtbJBcTx8bE.roa (hash: ACjxboSyCSfEn+fJ3xsL41v0ySwcobd1/VO5RHv6Sbs=)
3: J7jb2X3kzUBZtS5RPc81zTgaMrM.crl (hash: E8gVYKmiQFVNyqvhzWhRvchYq5CPpUchMnCE8M3xG7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:2b:b7:45:e5:b2:c0:e4:00:df:4d:14:ac:89:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Validity
Not Before: May 12 00:00:39 2025 GMT
Not After : May 13 00:00:39 2025 GMT
Subject: CN=fc056c4be7b53de950e605c1ccceacd1ae101712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fd:14:0a:4b:e1:11:ad:e4:96:94:05:7c:33:
19:5f:88:46:ed:e9:f2:b1:25:50:37:66:1e:61:1e:
91:33:cd:d5:5d:a3:79:0b:80:72:52:bb:29:b9:23:
10:ac:ed:77:95:36:f8:e8:79:c3:e3:d0:d7:ad:d8:
fd:0e:88:01:7e:27:8d:a6:78:c1:fa:eb:43:d0:55:
41:e3:1a:09:50:3f:b5:1a:7d:f0:50:fe:c6:4f:cd:
09:e0:09:5e:0b:aa:dd:e6:9b:7b:df:1f:21:9c:1f:
b1:1a:60:9f:57:82:99:69:29:20:31:76:b6:99:16:
70:8c:3c:0c:9e:6b:cf:b9:01:11:d3:ea:e4:c8:40:
23:24:76:05:4a:4b:bb:e3:be:25:bf:53:5a:83:a9:
fc:bd:b5:55:36:70:d1:84:22:26:94:c9:81:cb:b7:
15:44:d9:c9:92:99:ab:77:5c:2c:51:32:c2:83:55:
2b:75:82:8d:18:9f:49:54:79:a6:79:36:c2:11:cb:
fc:88:31:fa:55:aa:b9:53:73:bf:5e:54:c5:37:14:
cf:83:0e:0e:76:b0:35:7e:30:08:0e:8a:8a:9d:ca:
cb:ef:60:a9:e7:d7:5d:b2:7b:81:e3:6b:97:0b:94:
1a:59:5b:6d:5b:aa:79:68:1e:d7:c7:63:09:7e:18:
13:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:05:6C:4B:E7:B5:3D:E9:50:E6:05:C1:CC:CE:AC:D1:AE:10:17:12
X509v3 Authority Key Identifier:
keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a9:b4:cb:d3:60:58:89:c6:84:0e:8f:82:3e:7a:fc:e9:af:
db:1e:b0:da:24:8b:6f:2c:ee:64:ee:d6:28:aa:ac:4a:66:5d:
de:4a:23:7f:e5:96:f9:81:e9:6f:65:c9:8d:f7:82:45:1f:05:
9e:22:26:da:3d:2c:85:5b:0e:d8:49:53:0e:43:0d:82:12:3d:
bf:e9:23:5f:4e:80:7b:22:4a:2c:a9:71:6a:ab:bd:1f:81:34:
c4:49:2e:d9:ec:aa:c2:c2:86:74:3a:ad:be:24:1a:fa:25:ac:
f0:44:57:17:ec:2e:27:bb:01:47:0c:38:cc:24:84:0e:b5:13:
9a:6e:51:01:ba:9a:3b:be:1b:13:63:9d:e7:c3:35:52:59:33:
67:23:78:dd:55:3b:27:39:3e:f8:02:52:8e:54:50:d1:85:b2:
10:c3:0d:b2:6b:e8:30:12:4f:01:9b:17:e7:fb:6d:2d:1a:f9:
f7:c0:2c:90:1e:58:f0:3d:72:52:2f:3c:51:d0:69:32:e1:3e:
52:41:f4:86:3a:c5:c4:22:19:e8:17:01:07:28:a3:26:a8:24:
aa:a7:c2:47:23:fe:c0:3c:72:e0:d7:f8:a5:d5:05:44:d1:65:
23:9e:02:24:25:c0:6d:b5:16:c3:b6:fd:e0:4b:e9:87:f3:d0:
45:e8:ef:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbByyu3ReWywOQA300UrImCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YjhkYmQ5N2RlNGNkNDA1OWI1MmU1MTNkY2YzNWNkMzgx
YTMyYjMwHhcNMjUwNTEyMDAwMDM5WhcNMjUwNTEzMDAwMDM5WjAzMTEwLwYDVQQD
EyhmYzA1NmM0YmU3YjUzZGU5NTBlNjA1YzFjY2NlYWNkMWFlMTAxNzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv0UCkvhEa3klpQFfDMZX4hG7eny
sSVQN2YeYR6RM83VXaN5C4ByUrspuSMQrO13lTb46HnD49DXrdj9DogBfieNpnjB
+utD0FVB4xoJUD+1Gn3wUP7GT80J4AleC6rd5pt73x8hnB+xGmCfV4KZaSkgMXa2
mRZwjDwMnmvPuQER0+rkyEAjJHYFSku7474lv1Nag6n8vbVVNnDRhCImlMmBy7cV
RNnJkpmrd1wsUTLCg1UrdYKNGJ9JVHmmeTbCEcv8iDH6Vaq5U3O/XlTFNxTPgw4O
drA1fjAIDoqKncrL72Cp59ddsnuB42uXC5QaWVttW6p5aB7Xx2MJfhgTowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwFbEvntT3pUOYFwczOrNGuEBcSMB8GA1UdIwQY
MBaAFCe429l95M1AWbUuUT3PNc04GjKzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84NTkyOGYtNWYxOS00MWQ5LTgyMzgt
NWM1NGNkYWQxOWYxLzEvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy84NTkyOGYtNWYxOS00MWQ5LTgyMzgtNWM1NGNkYWQxOWYx
LzEvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6m0y9Ng
WInGhA6Pgj56/Omv2x6w2iSLbyzuZO7WKKqsSmZd3kojf+WW+YHpb2XJjfeCRR8F
niIm2j0shVsO2ElTDkMNghI9v+kjX06AeyJKLKlxaqu9H4E0xEku2eyqwsKGdDqt
viQa+iWs8ERXF+wuJ7sBRww4zCSEDrUTmm5RAbqaO74bE2Od58M1UlkzZyN43VU7
Jzk++AJSjlRQ0YWyEMMNsmvoMBJPAZsX5/ttLRr598AskB5Y8D1yUi88UdBpMuE+
UkH0hjrFxCIZ6BcBByijJqgkqqfCRyP+wDxy4Nf4pdUFRNFlI54CJCXAbbUWw7b9
4Evph/PQRejv1w==
-----END CERTIFICATE-----
Generated at Mon May 12 09:31:18 2025 by rpki-client