Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
File: rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft (raw, json)
Hash identifier: B2M9tXRTHP+VZSE9sYWYKtaGheR94Tw2ZROnV03LBcY=
Subject key identifier: 26:13:1A:6F:07:73:10:F2:49:65:32:25:E0:80:D3:B0:9E:B5:A9:0C
Authority key identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
Certificate issuer: /CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Certificate serial: 0196B3341198DC38DE3067B287D348BF7F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
Manifest number: 0F2C
Signing time: Fri 09 May 2025 04:00:55 +0000
Manifest this update: Fri 09 May 2025 04:00:55 +0000
Manifest next update: Sat 10 May 2025 04:00:55 +0000
Files and hashes: 1: 8Wti1PH3KuI5W3Ps9JfxSql0m7Q.roa (hash: CpKe22p+vfF1GPX/Ydl6oGQUK80PsEj4zMJRNQ1KdVw=)
2: ON3iIV_oOMJOwBGtDykVdsbeibU.roa (hash: 9WvGCqlVAIcwLRzryj0uvMHkAzQLE90GQaNR429D0NE=)
3: rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl (hash: Eo8lfXaeVsxZWUYE/Cwm+DXY8/FMuz28n8cErXx0Yq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:34:11:98:dc:38:de:30:67:b2:87:d3:48:bf:7f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Validity
Not Before: May 9 04:00:55 2025 GMT
Not After : May 10 04:00:55 2025 GMT
Subject: CN=26131a6f077310f249653225e080d3b09eb5a90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:71:46:2a:44:02:d1:d1:fe:f1:fa:68:fa:0e:
b7:53:cd:03:7b:6a:ae:df:77:1e:44:85:50:0b:43:
fd:85:24:26:46:86:01:e3:ce:f8:46:c6:16:28:e1:
4e:de:e5:42:99:b2:db:63:a7:73:e0:19:e7:0d:88:
4b:ba:c4:09:7d:5c:d7:23:df:8d:76:f8:28:1a:fc:
03:f0:96:26:f0:d4:76:31:d8:f1:23:ad:c9:77:ca:
98:0b:43:1c:ed:25:02:dd:f5:4d:ba:35:14:32:20:
3d:6a:a5:24:1a:f3:c5:77:2e:12:08:db:7a:01:4e:
5b:f9:1f:b1:52:a8:95:a7:1e:76:29:a1:ef:62:02:
4f:fe:bb:30:b4:3b:af:cc:22:fc:f3:59:ff:2c:b3:
96:99:2e:35:98:0e:17:a3:55:27:2b:21:09:bb:bb:
68:2a:f6:e2:bd:ab:d3:aa:c2:bd:c4:0e:10:c5:0e:
dc:5c:3e:36:3b:a4:34:9b:c7:2e:6a:d6:bc:6c:65:
c9:32:5a:e9:8b:df:f3:16:ed:03:24:3c:f4:c8:18:
8c:51:68:9c:5a:d1:2d:4a:0d:42:cc:2f:91:72:62:
7b:db:71:75:ae:f0:e0:15:00:b1:60:a0:67:a6:35:
6f:11:80:f7:a3:b5:8d:9f:05:bc:66:45:9b:73:56:
fd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:13:1A:6F:07:73:10:F2:49:65:32:25:E0:80:D3:B0:9E:B5:A9:0C
X509v3 Authority Key Identifier:
keyid:AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:80:b5:d5:2e:5f:65:c9:6e:9b:85:78:b2:76:02:cd:23:49:
00:d9:55:9f:98:d0:ba:0e:0b:44:27:0a:70:6b:15:7a:06:ab:
90:aa:a2:29:5a:5b:93:6d:f5:c0:70:41:ee:e1:f8:a6:75:7a:
8b:05:26:ad:2e:4c:5b:22:92:c1:3c:4d:74:cc:c0:96:d7:6c:
2d:8f:c2:9d:97:c8:24:fc:7c:58:aa:68:51:3c:39:c6:b2:c0:
44:d6:cc:67:d8:db:2f:28:a9:f3:b9:55:a4:c8:ee:e6:c9:31:
f0:12:8b:8d:47:34:f7:e3:53:a6:91:b9:2b:0a:63:78:e3:54:
18:7a:fd:fa:51:c3:23:40:a5:91:3b:ff:14:db:82:be:49:d2:
57:55:c5:bd:ba:d5:9b:28:7c:9f:30:79:41:2c:d6:be:9a:4a:
38:c9:db:fb:92:0f:99:fa:a9:0f:29:ce:4b:83:4d:11:b8:84:
e8:a2:e5:81:2f:5c:c8:00:8e:96:83:74:6f:99:bd:eb:d7:6b:
65:3d:d3:3f:a1:58:81:58:f9:73:9b:81:6d:e0:70:af:e5:83:
f0:f5:f3:58:79:3b:0f:6a:47:fe:9e:2c:2e:e1:c0:96:a0:08:
a5:c9:f1:21:21:bc:04:a1:89:7f:ff:19:d9:de:40:11:fb:07:
91:83:d7:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZazNBGY3DjeMGeyh9NIv398MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkY2UzYzJhYWZjNzc4M2NjZTgyMzQ1NTFmM2U5NjYxZDI3
ZWVmYmMwHhcNMjUwNTA5MDQwMDU1WhcNMjUwNTEwMDQwMDU1WjAzMTEwLwYDVQQD
EygyNjEzMWE2ZjA3NzMxMGYyNDk2NTMyMjVlMDgwZDNiMDllYjVhOTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HFGKkQC0dH+8fpo+g63U80De2qu
33ceRIVQC0P9hSQmRoYB4874RsYWKOFO3uVCmbLbY6dz4BnnDYhLusQJfVzXI9+N
dvgoGvwD8JYm8NR2MdjxI63Jd8qYC0Mc7SUC3fVNujUUMiA9aqUkGvPFdy4SCNt6
AU5b+R+xUqiVpx52KaHvYgJP/rswtDuvzCL881n/LLOWmS41mA4Xo1UnKyEJu7to
KvbivavTqsK9xA4QxQ7cXD42O6Q0m8cuata8bGXJMlrpi9/zFu0DJDz0yBiMUWic
WtEtSg1CzC+RcmJ723F1rvDgFQCxYKBnpjVvEYD3o7WNnwW8ZkWbc1b9lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYTGm8HcxDySWUyJeCA07CetakMMB8GA1UdIwQY
MBaAFK3OPCqvx3g8zoI0VR8+lmHSfu+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmM0OEtxX0hlRHpPZ2pSVkh6NldZZEotNzd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84MjRjY2QtYmM5Yi00YTgyLWJlOTEt
NjMxMDRkYjZhN2E1LzEvcmM0OEtxX0hlRHpPZ2pSVkh6NldZZEotNzd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS84MjRjY2QtYmM5Yi00YTgyLWJlOTEtNjMxMDRkYjZhN2E1
LzEvcmM0OEtxX0hlRHpPZ2pSVkh6NldZZEotNzd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYC11S5f
Zclum4V4snYCzSNJANlVn5jQug4LRCcKcGsVegarkKqiKVpbk231wHBB7uH4pnV6
iwUmrS5MWyKSwTxNdMzAltdsLY/CnZfIJPx8WKpoUTw5xrLARNbMZ9jbLyip87lV
pMju5skx8BKLjUc09+NTppG5KwpjeONUGHr9+lHDI0ClkTv/FNuCvknSV1XFvbrV
myh8nzB5QSzWvppKOMnb+5IPmfqpDynOS4NNEbiE6KLlgS9cyACOloN0b5m969dr
ZT3TP6FYgVj5c5uBbeBwr+WD8PXzWHk7D2pH/p4sLuHAlqAIpcnxISG8BKGJf/8Z
2d5AEfsHkYPXFQ==
-----END CERTIFICATE-----
Generated at Fri May 9 05:14:04 2025 by rpki-client