Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
File: E34RA3dXhdAS_I3atMAqwDeRudQ.mft (raw, json)
Hash identifier: LDgvJWPd9mmxlpleRaMPHxpCC9kiEf81o6vez4ibD0A=
Subject key identifier: C0:2A:D1:FD:43:D7:11:68:5E:12:F1:E5:2B:20:EC:06:BC:10:E5:9F
Authority key identifier: 13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
Certificate issuer: /CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Certificate serial: 0196AF20019F7B3BA4F60E570C3CEA889742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
Manifest number: 152C
Signing time: Thu 08 May 2025 09:00:32 +0000
Manifest this update: Thu 08 May 2025 09:00:32 +0000
Manifest next update: Fri 09 May 2025 09:00:32 +0000
Files and hashes: 1: E34RA3dXhdAS_I3atMAqwDeRudQ.crl (hash: bfcqvPyNLE/hvfma9K//ijrAJBNJ5XJJ9g75hGcNEto=)
2: H9WDvc0OfXB44k8OyrV2kgiLuzs.roa (hash: ECy836T53R0CEG1VyCTCAvl+zi+aWOuz45OEcMa+89w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:20:01:9f:7b:3b:a4:f6:0e:57:0c:3c:ea:88:97:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Validity
Not Before: May 8 09:00:32 2025 GMT
Not After : May 9 09:00:32 2025 GMT
Subject: CN=c02ad1fd43d711685e12f1e52b20ec06bc10e59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:f4:3b:78:b7:19:03:5a:82:ab:b2:96:61:
46:e3:0e:1c:bc:1f:4d:b1:44:62:1a:24:7c:4a:c0:
9c:41:18:00:b6:54:28:c3:4f:2d:52:77:d8:6a:9a:
ef:2d:d8:d8:46:03:2c:27:7b:f7:fd:b7:20:dd:ae:
83:d3:d9:a4:df:a4:84:6b:eb:9f:fd:02:f8:8b:ec:
ab:69:0c:0c:d2:e9:19:a9:8a:9c:5d:74:4a:8b:8d:
fe:f4:f0:59:d1:cd:ca:2b:64:73:94:41:f1:5e:46:
3d:43:d3:df:c8:1d:66:48:dd:2f:91:a7:37:4c:b0:
19:33:17:54:38:f4:bc:da:47:40:26:5d:ac:48:dc:
20:f6:bf:ba:66:c8:e1:4b:4a:27:9e:b5:c7:40:6f:
d8:c4:43:d4:6b:e5:30:3a:8c:39:13:b0:99:ed:fe:
0e:b2:ab:4a:66:a1:2b:45:ed:7f:ab:26:0a:dc:c6:
d9:1a:3e:20:c6:7b:91:18:03:3e:7a:f0:93:64:e0:
ef:43:d3:05:b0:f0:ce:74:f3:a0:98:c8:20:91:b8:
75:25:91:d5:7e:65:50:41:3a:c8:9b:e3:c9:fc:72:
17:86:26:27:c7:9d:2e:f7:eb:a5:47:4a:3c:95:45:
38:a9:76:5e:db:0e:13:8d:e2:62:a5:6b:f0:9a:4b:
66:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2A:D1:FD:43:D7:11:68:5E:12:F1:E5:2B:20:EC:06:BC:10:E5:9F
X509v3 Authority Key Identifier:
keyid:13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7e:85:c9:ca:c6:0d:53:fa:f6:48:28:0c:4b:3d:4e:fc:c8:
8f:d1:8d:f5:1b:6f:ee:1c:10:39:e3:a9:3b:09:28:2d:0a:6a:
b8:68:67:37:46:82:41:47:5f:b2:80:19:3d:0b:1a:66:69:e0:
33:aa:cb:75:d9:e2:8c:24:25:ae:c6:f6:b9:f3:8d:8f:85:2b:
21:6f:b6:84:cc:3d:97:97:99:4b:8b:9b:40:b8:4a:a1:2a:9e:
f7:ee:dc:3f:2e:c4:c5:32:e5:1c:14:0d:e8:e8:7c:77:59:20:
df:f9:54:f6:78:2c:9e:e9:83:68:d4:e4:9a:84:2c:cb:b7:d9:
46:e7:fe:72:95:da:07:bc:5b:a6:19:2e:91:b0:f9:e4:0c:76:
8c:b9:36:9e:b2:39:e0:3b:c4:0e:3f:7e:cf:d9:04:e9:1f:ed:
b1:c2:f6:ef:8e:7a:8b:e1:96:5b:68:03:43:8a:2d:b9:bb:12:
2c:83:d3:34:85:40:02:2c:7f:66:42:32:82:1c:d3:b0:0a:7e:
19:3b:a7:fe:bb:6c:79:89:72:5f:4a:c6:26:61:f6:3e:fe:0c:
59:67:99:93:ac:31:d8:a7:83:d4:1f:61:d4:a5:c4:4a:55:d3:
4e:be:97:87:cf:54:f5:01:4b:c1:5e:3f:45:ed:34:51:11:be:
d0:99:eb:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZavIAGfezuk9g5XDDzqiJdCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzN2UxMTAzNzc1Nzg1ZDAxMmZjOGRkYWI0YzAyYWMwMzc5
MWI5ZDQwHhcNMjUwNTA4MDkwMDMyWhcNMjUwNTA5MDkwMDMyWjAzMTEwLwYDVQQD
EyhjMDJhZDFmZDQzZDcxMTY4NWUxMmYxZTUyYjIwZWMwNmJjMTBlNTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPj0O3i3GQNagquylmFG4w4cvB9N
sURiGiR8SsCcQRgAtlQow08tUnfYaprvLdjYRgMsJ3v3/bcg3a6D09mk36SEa+uf
/QL4i+yraQwM0ukZqYqcXXRKi43+9PBZ0c3KK2RzlEHxXkY9Q9PfyB1mSN0vkac3
TLAZMxdUOPS82kdAJl2sSNwg9r+6ZsjhS0onnrXHQG/YxEPUa+UwOow5E7CZ7f4O
sqtKZqErRe1/qyYK3MbZGj4gxnuRGAM+evCTZODvQ9MFsPDOdPOgmMggkbh1JZHV
fmVQQTrIm+PJ/HIXhiYnx50u9+ulR0o8lUU4qXZe2w4TjeJipWvwmktmlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAq0f1D1xFoXhLx5Ssg7Aa8EOWfMB8GA1UdIwQY
MBaAFBN+EQN3V4XQEvyN2rTAKsA3kbnUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lMTZlZTctZWZlZi00ODA5LTg5ZmYt
OGJkY2NjZTVkZmU4LzEvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9lMTZlZTctZWZlZi00ODA5LTg5ZmYtOGJkY2NjZTVkZmU4
LzEvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYX6FycrG
DVP69kgoDEs9TvzIj9GN9Rtv7hwQOeOpOwkoLQpquGhnN0aCQUdfsoAZPQsaZmng
M6rLddnijCQlrsb2ufONj4UrIW+2hMw9l5eZS4ubQLhKoSqe9+7cPy7ExTLlHBQN
6Oh8d1kg3/lU9ngsnumDaNTkmoQsy7fZRuf+cpXaB7xbphkukbD55Ax2jLk2nrI5
4DvEDj9+z9kE6R/tscL27456i+GWW2gDQ4otubsSLIPTNIVAAix/ZkIyghzTsAp+
GTun/rtseYlyX0rGJmH2Pv4MWWeZk6wx2KeD1B9h1KXESlXTTr6Xh89U9QFLwV4/
Re00URG+0JnrQg==
-----END CERTIFICATE-----
Generated at Thu May 8 12:29:09 2025 by rpki-client