Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
File: mnj9TUGkk4S99ufcPrvFAL9m2dU.mft (raw, json)
Hash identifier: 8Pm16t6wM/qRPKpPD34RlXUdLRrfRems2Auf/jYa0dM=
Subject key identifier: BC:F6:9E:48:00:B1:03:B2:A5:62:73:CC:83:BE:3F:0E:6D:6B:88:6B
Authority key identifier: 9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
Certificate issuer: /CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Certificate serial: 0196A91DB178CA06F52EA2AA20B8D2182750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
Manifest number: 1529
Signing time: Wed 07 May 2025 05:00:17 +0000
Manifest this update: Wed 07 May 2025 05:00:17 +0000
Manifest next update: Thu 08 May 2025 05:00:17 +0000
Files and hashes: 1: UxU055m6SYgLYJdY0EIHyH-buK4.roa (hash: L8Prey4FtmmkUZS9Fb3qw934vxOuIVmwZLaUrRs5uYI=)
2: g-ueJOZ8CrwpGCeGD3tl16S98d0.roa (hash: bDoSFJsdsspb9o+5HCKGnMJFTdCyV6X4FzTImtyv2cE=)
3: mnj9TUGkk4S99ufcPrvFAL9m2dU.crl (hash: weDeC78EIbHAZh2W8bICZGbSssLuzSdG+KS8KhQ4c1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:1d:b1:78:ca:06:f5:2e:a2:aa:20:b8:d2:18:27:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Validity
Not Before: May 7 05:00:17 2025 GMT
Not After : May 8 05:00:17 2025 GMT
Subject: CN=bcf69e4800b103b2a56273cc83be3f0e6d6b886b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5e:69:50:45:50:86:61:01:c3:84:bd:f6:e6:
17:c5:17:25:5d:c6:a5:8e:51:b4:7c:46:2c:40:d5:
8e:f1:6d:3f:60:e4:05:22:4c:08:a8:7b:8a:c6:7c:
8a:b4:b7:07:20:e0:16:4c:d7:33:73:65:84:f3:7b:
7a:b3:82:70:1f:d1:8a:92:43:0f:0e:a3:f4:c1:58:
fe:59:5f:2c:ce:75:df:4c:39:a0:1a:b2:70:55:f9:
e6:65:b3:ca:82:35:44:99:9f:3c:96:8e:23:40:ed:
6f:8e:3b:0c:ad:0f:9b:19:de:61:2c:15:c6:4e:1e:
30:b8:1b:de:3f:07:2b:48:77:fb:8e:85:a3:c0:59:
57:77:52:da:43:e0:b7:5b:be:29:15:ec:5f:fd:8a:
f9:e1:d5:90:cc:95:17:f7:76:99:be:fd:49:17:e9:
6a:a3:8a:80:f8:2a:b8:d0:0e:38:ed:47:79:aa:25:
7e:c6:4a:dd:b1:0f:9a:b1:15:78:bf:75:6d:bd:21:
b8:e1:f7:de:31:df:9d:a0:ff:f9:f8:57:3e:bc:ae:
c7:4c:00:c3:16:e9:36:cf:28:a2:92:c5:19:46:b2:
11:e3:17:f7:60:62:8c:d4:a1:14:aa:29:98:6c:65:
39:9c:ef:38:17:99:f4:3d:fe:2a:7d:24:03:c6:a5:
51:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F6:9E:48:00:B1:03:B2:A5:62:73:CC:83:BE:3F:0E:6D:6B:88:6B
X509v3 Authority Key Identifier:
keyid:9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:13:20:e0:fd:73:b2:7c:fb:5c:65:10:83:dc:6a:5f:65:fd:
63:7f:d8:72:80:bb:d1:8e:4a:d0:02:c1:00:60:70:ef:34:51:
7f:03:41:4f:b7:d1:0f:9b:87:d8:0a:6d:a0:aa:14:0c:f2:f3:
ec:8d:00:8e:61:a7:cc:f4:7f:86:b3:16:38:03:33:ea:7c:42:
bf:45:52:f0:08:87:97:38:67:63:d5:53:ac:87:18:f8:53:53:
66:93:84:ae:ee:90:dd:a4:ff:46:52:0c:66:2e:e5:3f:93:fb:
90:8d:8a:ca:47:ec:a2:c8:d7:5e:b7:5e:1a:0c:e9:52:93:c7:
d1:98:52:90:4f:e8:d9:05:76:9e:6f:29:88:d2:60:02:bb:53:
6e:9e:90:17:09:62:82:85:94:9a:e2:a0:0f:e0:df:42:bc:4d:
ab:97:31:2a:f9:2d:c6:9f:e9:d6:5e:62:47:05:93:78:92:90:
62:c3:54:93:e1:d5:b7:78:73:fe:1b:1c:4e:3f:d6:af:6a:50:
e6:91:65:58:56:a2:bf:21:f7:a6:78:d8:33:ae:05:c1:f5:05:
93:b8:72:93:a3:f0:aa:e3:b2:0d:3d:ab:27:a6:2f:6a:7d:af:
ae:54:4b:aa:87:c9:55:79:c5:83:a2:3e:d2:a4:0e:01:b8:df:
7d:0b:2a:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZapHbF4ygb1LqKqILjSGCdQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNzhmZDRkNDFhNDkzODRiZGY2ZTdkYzNlYmJjNTAwYmY2
NmQ5ZDUwHhcNMjUwNTA3MDUwMDE3WhcNMjUwNTA4MDUwMDE3WjAzMTEwLwYDVQQD
EyhiY2Y2OWU0ODAwYjEwM2IyYTU2MjczY2M4M2JlM2YwZTZkNmI4ODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm15pUEVQhmEBw4S99uYXxRclXcal
jlG0fEYsQNWO8W0/YOQFIkwIqHuKxnyKtLcHIOAWTNczc2WE83t6s4JwH9GKkkMP
DqP0wVj+WV8sznXfTDmgGrJwVfnmZbPKgjVEmZ88lo4jQO1vjjsMrQ+bGd5hLBXG
Th4wuBvePwcrSHf7joWjwFlXd1LaQ+C3W74pFexf/Yr54dWQzJUX93aZvv1JF+lq
o4qA+Cq40A447Ud5qiV+xkrdsQ+asRV4v3VtvSG44ffeMd+doP/5+Fc+vK7HTADD
Fuk2zyiiksUZRrIR4xf3YGKM1KEUqimYbGU5nO84F5n0Pf4qfSQDxqVRiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLz2nkgAsQOypWJzzIO+Pw5ta4hrMB8GA1UdIwQY
MBaAFJp4/U1BpJOEvfbn3D67xQC/ZtnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW5qOVRVR2trNFM5OXVmY1BydkZBTDltMmRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS81Y2I5OGMtZWUwOC00Yjk5LThiNGQt
YzZmNDEwNjBjNWQ3LzEvbW5qOVRVR2trNFM5OXVmY1BydkZBTDltMmRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS81Y2I5OGMtZWUwOC00Yjk5LThiNGQtYzZmNDEwNjBjNWQ3
LzEvbW5qOVRVR2trNFM5OXVmY1BydkZBTDltMmRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxMg4P1z
snz7XGUQg9xqX2X9Y3/YcoC70Y5K0ALBAGBw7zRRfwNBT7fRD5uH2AptoKoUDPLz
7I0AjmGnzPR/hrMWOAMz6nxCv0VS8AiHlzhnY9VTrIcY+FNTZpOEru6Q3aT/RlIM
Zi7lP5P7kI2KykfsosjXXrdeGgzpUpPH0ZhSkE/o2QV2nm8piNJgArtTbp6QFwli
goWUmuKgD+DfQrxNq5cxKvktxp/p1l5iRwWTeJKQYsNUk+HVt3hz/hscTj/Wr2pQ
5pFlWFaivyH3pnjYM64FwfUFk7hyk6PwquOyDT2rJ6Yvan2vrlRLqofJVXnFg6I+
0qQOAbjffQsqAQ==
-----END CERTIFICATE-----
Generated at Wed May 7 12:25:01 2025 by rpki-client