Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
File: c-FXspGMrcqKWp-8Zul3YIpt9eE.mft (raw, json)
Hash identifier: nKKrBwvKSWhG267OxiBE80I6wUgwqdwRmFn/AkVtvT0=
Subject key identifier: 88:17:ED:4A:FD:F3:28:1E:C4:5A:BE:59:0E:13:F5:F9:14:13:43:ED
Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
Certificate issuer: /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Certificate serial: 0196089DF661EE0D175C18E874FF53781F3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
Manifest number: 14DF
Signing time: Sun 06 Apr 2025 01:01:32 +0000
Manifest this update: Sun 06 Apr 2025 01:01:32 +0000
Manifest next update: Mon 07 Apr 2025 01:01:32 +0000
Files and hashes: 1: 9Vc3AbW6vlZ_1l6ygzFXdiG_9DU.roa (hash: XyjyaFRHv8L+Xv8vUnenIR3U/Eb6y+TGYMaeT4tV8mY=)
2: F8Nk--QAXVfgvDbLL_6xQcd6OeY.roa (hash: B5PNCVqEZ3htMuoUo9SXwMTUf5kV2N6tfRSmohV4ztI=)
3: c-FXspGMrcqKWp-8Zul3YIpt9eE.crl (hash: Mlz+CnSk9MNfgoaWHUdrpBaoc/2MahpkCwFUFQz0DOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:08:9d:f6:61:ee:0d:17:5c:18:e8:74:ff:53:78:1f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Validity
Not Before: Apr 6 01:01:32 2025 GMT
Not After : Apr 7 01:01:32 2025 GMT
Subject: CN=8817ed4afdf3281ec45abe590e13f5f9141343ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:31:03:30:97:07:99:e6:b1:a2:07:d7:ae:
79:64:03:92:f6:04:a8:5b:89:00:ac:a2:80:22:dc:
cb:3a:b0:53:1f:bf:ec:b2:74:10:df:3e:0e:88:d8:
a7:64:83:5a:c8:89:8d:ff:0c:95:21:c8:6b:39:31:
01:dd:08:43:d2:8b:d2:77:59:8a:b4:31:59:70:c8:
29:3b:47:9d:3b:e2:46:b8:e0:8f:96:a4:8c:bb:d3:
d1:f7:ec:80:20:4f:4d:98:b4:73:30:cd:33:4c:ff:
69:63:29:55:f5:32:b3:06:cf:25:b4:e7:5b:d4:47:
90:1e:cd:61:55:be:49:74:ff:dd:e1:de:41:69:75:
ee:b0:fc:4f:52:3d:0d:26:63:e4:0f:a6:98:f8:8f:
15:66:6a:a2:04:e8:64:c5:d3:5f:5a:64:25:39:7d:
26:03:31:23:b5:d2:d1:e2:24:83:5b:4d:fb:c5:71:
54:59:4e:cb:2f:48:ca:cb:64:fc:28:0c:42:19:f5:
cf:c6:f7:42:53:8e:f8:88:ea:dc:61:34:e7:e1:63:
c0:91:f7:52:99:86:6e:ef:0d:9d:9e:b4:50:26:a8:
04:0f:72:f2:eb:fe:48:3f:9c:38:59:bb:b4:27:de:
ed:fc:ad:77:78:a1:44:40:9e:a6:19:35:98:21:46:
59:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:17:ED:4A:FD:F3:28:1E:C4:5A:BE:59:0E:13:F5:F9:14:13:43:ED
X509v3 Authority Key Identifier:
keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:36:8e:e5:db:9c:f3:ef:03:6e:ca:28:a1:4f:e1:a4:92:3c:
fc:48:68:bf:37:2d:e1:7b:2f:3c:cb:a9:3a:6a:37:30:00:4f:
bc:ca:da:11:15:d7:5a:1d:21:04:d6:f9:78:10:ce:61:64:30:
6e:5b:1a:9b:73:7a:79:d3:3f:d5:f0:96:6e:69:0d:c5:98:bc:
f6:8e:bc:dd:d5:61:59:8c:c6:89:df:96:c0:80:d9:0d:98:cd:
43:d0:40:b3:fb:37:ac:ef:28:d4:d4:79:b9:5a:e1:c3:f4:08:
f8:e6:38:d0:e6:13:0b:7e:03:51:b4:e8:c0:3a:66:b1:2d:7d:
3e:d4:80:7e:2c:e2:21:67:64:86:c5:db:02:60:03:b4:ea:35:
14:cf:bb:b9:18:5c:75:6e:70:7e:cd:2d:ed:19:22:a0:da:12:
f8:49:c7:41:33:b7:39:03:fa:ac:fb:7b:12:24:24:8f:ae:86:
55:fe:9b:64:13:fa:05:7c:1d:c4:f8:8f:a7:e3:10:4d:b4:a8:
84:f6:63:a7:d5:0e:49:88:e1:71:f5:80:cb:73:dc:f6:e1:e7:
eb:55:e1:fc:9c:87:bb:72:1f:c2:10:27:61:ba:ca:8f:95:5a:
39:25:7d:70:01:a7:13:65:fd:7b:94:90:3f:53:0d:9c:e2:a5:
45:ed:7f:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYInfZh7g0XXBjodP9TeB89MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZTE1N2IyOTE4Y2FkY2E4YTVhOWZiYzY2ZTk3NzYwOGE2
ZGY1ZTEwHhcNMjUwNDA2MDEwMTMyWhcNMjUwNDA3MDEwMTMyWjAzMTEwLwYDVQQD
Eyg4ODE3ZWQ0YWZkZjMyODFlYzQ1YWJlNTkwZTEzZjVmOTE0MTM0M2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/QxAzCXB5nmsaIH1655ZAOS9gSo
W4kArKKAItzLOrBTH7/ssnQQ3z4OiNinZINayImN/wyVIchrOTEB3QhD0ovSd1mK
tDFZcMgpO0edO+JGuOCPlqSMu9PR9+yAIE9NmLRzMM0zTP9pYylV9TKzBs8ltOdb
1EeQHs1hVb5JdP/d4d5BaXXusPxPUj0NJmPkD6aY+I8VZmqiBOhkxdNfWmQlOX0m
AzEjtdLR4iSDW037xXFUWU7LL0jKy2T8KAxCGfXPxvdCU474iOrcYTTn4WPAkfdS
mYZu7w2dnrRQJqgED3Ly6/5IP5w4Wbu0J97t/K13eKFEQJ6mGTWYIUZZzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgX7Ur98ygexFq+WQ4T9fkUE0PtMB8GA1UdIwQY
MBaAFHPhV7KRjK3KilqfvGbpd2CKbfXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9iYmNkNTMtYzRmOC00MjQ1LWJiOTAt
MDBhMTU0YjhlY2IxLzEvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9iYmNkNTMtYzRmOC00MjQ1LWJiOTAtMDBhMTU0YjhlY2Ix
LzEvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTaO5duc
8+8DbsoooU/hpJI8/Ehovzct4XsvPMupOmo3MABPvMraERXXWh0hBNb5eBDOYWQw
blsam3N6edM/1fCWbmkNxZi89o683dVhWYzGid+WwIDZDZjNQ9BAs/s3rO8o1NR5
uVrhw/QI+OY40OYTC34DUbTowDpmsS19PtSAfiziIWdkhsXbAmADtOo1FM+7uRhc
dW5wfs0t7RkioNoS+EnHQTO3OQP6rPt7EiQkj66GVf6bZBP6BXwdxPiPp+MQTbSo
hPZjp9UOSYjhcfWAy3Pc9uHn61Xh/JyHu3IfwhAnYbrKj5VaOSV9cAGnE2X9e5SQ
P1MNnOKlRe1/Dw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:16:19 2025 by rpki-client