Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
File: V1j80i-3oR3qizfkw_YiqnpHue4.mft (raw, json)
Hash identifier: OqG16f6aaNFz4I0MC4z/+7XnHyL25PAmiSwOu7SREP8=
Subject key identifier: F2:E6:40:4B:30:9C:98:39:D8:1B:46:20:5E:71:7A:39:02:53:8B:E5
Authority key identifier: 57:58:FC:D2:2F:B7:A1:1D:EA:8B:37:E4:C3:F6:22:AA:7A:47:B9:EE
Certificate issuer: /CN=5758fcd22fb7a11dea8b37e4c3f622aa7a47b9ee
Certificate serial: 019659F06914562565E82C558799B92D40E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
Manifest number: 120E
Signing time: Mon 21 Apr 2025 20:00:49 +0000
Manifest this update: Mon 21 Apr 2025 20:00:49 +0000
Manifest next update: Tue 22 Apr 2025 20:00:49 +0000
Files and hashes: 1: 1cAFysoNqNIZH8FwmwvYqJt5bM4.roa (hash: ODKSC75jE0xq09vjpL4sB7ddbosHMLlBxEPWj0XoiqQ=)
2: V1j80i-3oR3qizfkw_YiqnpHue4.crl (hash: 4P/CCBf8ncgrujR3yV6DtFphW8w/LxB1ItKJUvI5yfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:69:14:56:25:65:e8:2c:55:87:99:b9:2d:40:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5758fcd22fb7a11dea8b37e4c3f622aa7a47b9ee
Validity
Not Before: Apr 21 20:00:49 2025 GMT
Not After : Apr 22 20:00:49 2025 GMT
Subject: CN=f2e6404b309c9839d81b46205e717a3902538be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:45:49:3e:e4:58:40:92:b2:2e:c3:2a:ee:0b:
11:bb:54:ee:c3:2b:6b:0c:f0:cc:15:3b:36:40:0a:
a8:6b:c7:f5:ce:5a:fb:c3:62:b0:ca:7e:f2:67:df:
ed:a3:11:cf:cb:fe:ce:e1:ef:20:8d:28:4f:bf:3d:
33:97:c2:16:f1:63:da:dd:90:e9:05:fb:d1:32:51:
1a:64:0a:db:13:8d:4e:24:03:22:6e:6d:bb:c6:b0:
5a:57:30:53:76:f5:0c:69:2c:b8:6f:ea:a5:a1:d9:
bd:68:d4:c4:a7:5b:08:e7:d9:5f:55:32:e4:26:78:
2d:cf:8d:43:8f:7f:6e:cb:ea:d5:34:50:f8:32:0e:
ab:86:25:56:8a:2d:49:94:b7:ef:d2:d3:88:57:e6:
c6:6a:fc:2c:10:a4:49:19:4e:5c:e2:8e:4f:c8:4b:
1e:2d:1b:0e:79:93:62:06:ac:c8:90:6b:f7:19:00:
78:19:a1:7f:49:06:6e:eb:9a:ca:ad:a2:b0:09:ce:
ca:e2:16:e5:4d:81:3d:a7:f1:a2:3c:87:90:dd:a9:
6f:9f:ea:b1:cc:92:39:4c:12:eb:4b:ad:5d:8d:99:
cd:f9:96:86:59:33:a5:99:3a:cd:77:e7:df:2e:35:
a5:4b:23:3e:07:95:58:6a:0c:11:5a:13:62:86:04:
ed:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E6:40:4B:30:9C:98:39:D8:1B:46:20:5E:71:7A:39:02:53:8B:E5
X509v3 Authority Key Identifier:
keyid:57:58:FC:D2:2F:B7:A1:1D:EA:8B:37:E4:C3:F6:22:AA:7A:47:B9:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:1a:68:5c:14:c5:9c:25:c9:98:4e:ba:44:85:6d:74:20:f1:
45:ea:69:40:69:18:da:a1:45:1b:15:98:1a:ca:88:31:5b:06:
e9:1d:45:76:dd:2f:9f:60:e8:2d:f2:f8:3e:35:a6:05:0a:7f:
e1:1c:d1:4f:c8:e8:52:a3:4c:73:7e:f9:24:09:49:16:a1:ed:
98:0f:92:6b:5f:42:21:45:4e:09:40:26:07:47:90:e7:41:3d:
7c:48:9e:a0:bb:88:bf:35:31:75:5e:1b:5e:2a:34:e9:0e:89:
1d:40:98:d9:a7:25:e3:26:a9:41:00:2f:0c:78:df:42:13:a2:
d6:a2:06:32:bb:b3:e1:21:bb:d5:7f:99:fb:f0:32:77:7e:90:
1f:26:11:83:17:87:5f:65:13:ce:79:85:7e:04:9e:ee:1a:bd:
f8:3c:ac:e0:6c:89:9b:45:ea:3c:0e:c2:49:c5:30:22:05:7c:
4d:8e:4a:61:e8:84:df:38:ac:f5:6f:32:08:f0:36:f8:12:62:
df:4d:16:8b:b3:77:c2:0c:d3:c3:13:24:44:b0:e2:d2:b3:f1:
ec:a5:c4:b0:d8:06:0c:8b:c9:8b:20:70:e1:f7:79:21:7d:00:
4a:50:49:bf:dd:c4:d7:fd:a6:76:2a:78:51:b2:e9:0a:f6:8a:
8e:80:3f:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZ8GkUViVl6CxVh5m5LUDnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NThmY2QyMmZiN2ExMWRlYThiMzdlNGMzZjYyMmFhN2E0
N2I5ZWUwHhcNMjUwNDIxMjAwMDQ5WhcNMjUwNDIyMjAwMDQ5WjAzMTEwLwYDVQQD
EyhmMmU2NDA0YjMwOWM5ODM5ZDgxYjQ2MjA1ZTcxN2EzOTAyNTM4YmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EVJPuRYQJKyLsMq7gsRu1Tuwytr
DPDMFTs2QAqoa8f1zlr7w2Kwyn7yZ9/toxHPy/7O4e8gjShPvz0zl8IW8WPa3ZDp
BfvRMlEaZArbE41OJAMibm27xrBaVzBTdvUMaSy4b+qlodm9aNTEp1sI59lfVTLk
Jngtz41Dj39uy+rVNFD4Mg6rhiVWii1JlLfv0tOIV+bGavwsEKRJGU5c4o5PyEse
LRsOeZNiBqzIkGv3GQB4GaF/SQZu65rKraKwCc7K4hblTYE9p/GiPIeQ3alvn+qx
zJI5TBLrS61djZnN+ZaGWTOlmTrNd+ffLjWlSyM+B5VYagwRWhNihgTtPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLmQEswnJg52BtGIF5xejkCU4vlMB8GA1UdIwQY
MBaAFFdY/NIvt6Ed6os35MP2Iqp6R7nuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFqODBpLTNvUjNxaXpma3dfWWlxbnBIdWU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80ZDgyMDctZTdjYi00MjMyLTgyOTAt
MjUwYmVjOWRjY2ExLzEvVjFqODBpLTNvUjNxaXpma3dfWWlxbnBIdWU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC80ZDgyMDctZTdjYi00MjMyLTgyOTAtMjUwYmVjOWRjY2Ex
LzEvVjFqODBpLTNvUjNxaXpma3dfWWlxbnBIdWU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlBpoXBTF
nCXJmE66RIVtdCDxReppQGkY2qFFGxWYGsqIMVsG6R1Fdt0vn2DoLfL4PjWmBQp/
4RzRT8joUqNMc375JAlJFqHtmA+Sa19CIUVOCUAmB0eQ50E9fEieoLuIvzUxdV4b
Xio06Q6JHUCY2acl4yapQQAvDHjfQhOi1qIGMruz4SG71X+Z+/Ayd36QHyYRgxeH
X2UTznmFfgSe7hq9+Dys4GyJm0XqPA7CScUwIgV8TY5KYeiE3zis9W8yCPA2+BJi
300Wi7N3wgzTwxMkRLDi0rPx7KXEsNgGDIvJiyBw4fd5IX0ASlBJv93E1/2mdip4
UbLpCvaKjoA/eA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:43:10 2025 by rpki-client