Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File: 89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier: z3iP+DA/IDYA8tQssWp0wD6mrPbO/PQTJsDP3uqmQrw=
Subject key identifier: 59:2B:7C:0F:3A:E2:96:92:67:41:39:8D:E0:13:F1:C3:FC:D1:10:78
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer: /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial: 019655DCF77C9E0BDCF0BA3AE20CE976D3EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 01:01:06 +0000
Manifest this update: Mon 21 Apr 2025 01:01:06 +0000
Manifest next update: Tue 22 Apr 2025 01:01:06 +0000
Files and hashes: 1: 2XS2qKu1oL_DsuI3OSXAyPPmXaM.roa (hash: 1rGV+fsNs0SO2Zvvg0olbcFYooCwn1FYxZF5w23Xb0A=)
2: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: iH6kPJLhIXi5zoRaesT89XI8ElVz3DNQ5789R1ZixoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:f7:7c:9e:0b:dc:f0:ba:3a:e2:0c:e9:76:d3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Validity
Not Before: Apr 21 01:01:06 2025 GMT
Not After : Apr 22 01:01:06 2025 GMT
Subject: CN=592b7c0f3ae296926741398de013f1c3fcd11078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:81:2c:49:10:5f:1c:0f:c2:14:0a:a5:e8:f8:
a8:b3:f3:af:41:46:cf:b4:4e:ec:b0:a8:0a:75:89:
e5:4c:9b:85:91:ca:59:47:51:38:b6:54:82:4f:e1:
29:da:fb:c3:81:87:65:ce:b4:ea:86:2e:1b:54:59:
86:75:dd:2e:ff:0b:81:67:9c:06:ef:8f:e8:ee:47:
ae:ab:38:d7:2a:f7:12:46:9a:b0:ae:82:d0:b9:12:
8a:53:84:47:ab:f0:5c:f9:2d:7a:80:a3:e0:08:25:
91:d5:8b:6b:1a:f0:d9:09:90:5f:e0:aa:7b:bf:48:
9a:aa:ed:9a:2c:9c:f6:b1:fb:14:ea:d1:08:01:d5:
87:aa:86:a3:98:26:37:e9:9c:8a:5b:8d:2c:3e:0e:
93:9a:85:9e:bb:e7:40:9d:a1:1e:3d:65:a1:2c:a7:
d7:1f:67:17:65:dc:0a:eb:40:9b:af:72:87:9a:ab:
3f:21:cb:bc:e5:03:02:93:a2:09:5f:37:d5:c0:d5:
61:60:17:2f:1e:18:f7:f5:56:aa:24:6e:dd:38:f5:
47:b3:1f:1b:da:be:90:74:e3:dd:ad:b8:2b:dd:89:
62:e8:b5:8c:a9:72:f1:56:70:7a:43:8d:51:e2:09:
20:90:0e:f9:4a:6e:d2:3d:cb:f8:b9:e5:ad:1b:e7:
2f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2B:7C:0F:3A:E2:96:92:67:41:39:8D:E0:13:F1:C3:FC:D1:10:78
X509v3 Authority Key Identifier:
keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:3e:59:82:22:84:b2:c4:7c:f3:74:d2:7e:96:ca:a9:59:7c:
cd:6a:4d:4a:de:86:26:6b:a8:cb:c6:f9:f8:92:81:53:a9:b8:
5e:70:4c:90:26:fc:e4:80:34:88:ae:62:c0:92:0e:18:b8:9f:
68:62:3e:80:ae:1a:89:05:a1:e9:a5:11:d9:b3:f4:62:80:b4:
fb:76:c1:2c:06:69:79:2c:f5:69:a0:3f:df:88:42:31:c8:48:
da:be:40:6a:33:ef:40:95:df:ed:52:25:93:47:d3:8f:e3:4c:
05:d0:eb:0e:4b:12:47:88:05:e6:52:ce:60:79:8d:ae:c7:55:
ab:09:c0:c1:da:e5:93:bc:70:ec:b7:37:bb:1c:3f:ee:d5:1c:
70:0f:b4:4d:4d:ac:bc:47:24:c2:2c:1f:8e:9d:31:21:f6:e3:
3d:3d:f6:9b:7d:fc:cf:cc:89:32:7d:a2:40:2d:80:05:2b:f7:
f0:a4:a3:00:8b:93:ae:35:2c:ce:ca:0b:73:c5:22:b7:2c:11:
63:02:5d:43:73:89:8e:0f:d3:d3:87:9e:cb:00:49:9a:0f:6d:
bf:ab:93:6a:76:69:94:69:43:83:f1:f4:7d:3e:83:ed:4a:14:
eb:14:35:6a:d6:18:13:96:78:4c:57:94:e2:5f:7e:27:30:0e:
d6:e8:70:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3Pd8ngvc8Lo64gzpdtPrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZDQ5NGI4YjI3MWFmYjdjNjJmMTM5N2Y3MTJjZjJkY2Qz
NjQxODUwHhcNMjUwNDIxMDEwMTA2WhcNMjUwNDIyMDEwMTA2WjAzMTEwLwYDVQQD
Eyg1OTJiN2MwZjNhZTI5NjkyNjc0MTM5OGRlMDEzZjFjM2ZjZDExMDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YEsSRBfHA/CFAql6Pios/OvQUbP
tE7ssKgKdYnlTJuFkcpZR1E4tlSCT+Ep2vvDgYdlzrTqhi4bVFmGdd0u/wuBZ5wG
74/o7keuqzjXKvcSRpqwroLQuRKKU4RHq/Bc+S16gKPgCCWR1YtrGvDZCZBf4Kp7
v0iaqu2aLJz2sfsU6tEIAdWHqoajmCY36ZyKW40sPg6TmoWeu+dAnaEePWWhLKfX
H2cXZdwK60Cbr3KHmqs/Icu85QMCk6IJXzfVwNVhYBcvHhj39VaqJG7dOPVHsx8b
2r6QdOPdrbgr3Yli6LWMqXLxVnB6Q41R4gkgkA75Sm7SPcv4ueWtG+cvgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkrfA864paSZ0E5jeAT8cP80RB4MB8GA1UdIwQY
MBaAFPPUlLiyca+3xi8Tl/cSzy3NNkGFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xMjg1ODgtMzIwNy00ZjM2LTk4M2Mt
Zjc5YWQ4MTIyZWY1LzEvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8xMjg1ODgtMzIwNy00ZjM2LTk4M2MtZjc5YWQ4MTIyZWY1
LzEvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmj5ZgiKE
ssR883TSfpbKqVl8zWpNSt6GJmuoy8b5+JKBU6m4XnBMkCb85IA0iK5iwJIOGLif
aGI+gK4aiQWh6aUR2bP0YoC0+3bBLAZpeSz1aaA/34hCMchI2r5AajPvQJXf7VIl
k0fTj+NMBdDrDksSR4gF5lLOYHmNrsdVqwnAwdrlk7xw7Lc3uxw/7tUccA+0TU2s
vEckwiwfjp0xIfbjPT32m338z8yJMn2iQC2ABSv38KSjAIuTrjUszsoLc8UitywR
YwJdQ3OJjg/T04eeywBJmg9tv6uTanZplGlDg/H0fT6D7UoU6xQ1atYYE5Z4TFeU
4l9+JzAO1uhwhA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:42:24 2025 by rpki-client