Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
File: sxxM5mPh7CRedHzYRvGmnduDSzs.mft (raw, json)
Hash identifier: zNczls8E87lIsFfVIYH/pPInYmZOZ0ZXLdAC+JXxZbM=
Subject key identifier: 67:E4:40:15:2A:FA:22:DB:C8:7A:C9:D3:CA:9B:33:C9:16:CE:B2:BF
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 01960D8D42F2D2EFE3319D0760411FABA717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
Manifest number: 02CB
Signing time: Mon 07 Apr 2025 00:01:23 +0000
Manifest this update: Mon 07 Apr 2025 00:01:23 +0000
Manifest next update: Tue 08 Apr 2025 00:01:23 +0000
Files and hashes: 1: S8F_BqZIysXEe93wY7E7gYPrrEE.roa (hash: yxA+Gb1gegChlT9RImwWVjBq+UzqZu56Rk2vXQ11x70=)
2: mHdbhQxgyf7CV9jCGJvliFVilXc.roa (hash: 4CdqTf57TkDxaRHOcnXl2aFyjkgmNRswPmW9ZMUYxw8=)
3: sxxM5mPh7CRedHzYRvGmnduDSzs.crl (hash: n2oI4gCvAEf4swd3RAuMKkz9omqbRX3Bt/W8smoIUGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0d:8d:42:f2:d2:ef:e3:31:9d:07:60:41:1f:ab:a7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Apr 7 00:01:23 2025 GMT
Not After : Apr 8 00:01:23 2025 GMT
Subject: CN=67e440152afa22dbc87ac9d3ca9b33c916ceb2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:92:b6:58:ae:d0:c3:cd:37:f6:cb:aa:d9:72:
a9:53:2c:6a:35:e3:87:20:50:8b:3e:1a:7a:01:6e:
a0:15:70:1d:dc:cd:13:c4:1c:62:91:98:55:cf:62:
e1:36:a8:f3:72:21:32:b9:7a:09:f0:b6:60:d4:b1:
b5:a8:a0:c3:a4:a7:77:0c:fb:e0:77:44:f0:d5:2c:
0d:a1:6a:93:48:90:19:b1:bc:18:b1:c1:22:18:ee:
be:78:13:65:9e:80:fb:5a:0c:02:9a:e4:ce:6c:4b:
1e:f4:0f:09:0b:01:19:b7:9b:24:70:a5:ad:ca:58:
7c:e7:6f:d1:0e:b2:4d:53:c1:6c:03:14:fd:cb:0e:
27:3d:df:61:a6:6c:9f:18:6a:74:ca:1a:07:04:bc:
1f:88:0b:21:5b:07:74:35:eb:ff:a4:97:a3:9f:d4:
ef:ed:ef:a2:97:0d:93:ca:4d:01:d3:35:e7:c3:02:
b7:0a:ea:39:db:97:c3:d7:fc:6c:43:fc:ae:ea:c3:
eb:bb:b4:1c:12:9c:70:27:3d:df:cc:99:c2:f7:a6:
b1:a4:a0:25:dd:f2:5a:33:ee:79:d1:f6:ec:a0:00:
64:b1:be:1c:dd:dc:13:d8:cd:f3:0d:b1:f4:93:7c:
fe:bf:8a:df:61:b7:f3:d6:15:be:66:3d:8a:4b:6a:
e4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E4:40:15:2A:FA:22:DB:C8:7A:C9:D3:CA:9B:33:C9:16:CE:B2:BF
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:36:b9:0e:51:b1:c0:cb:d0:0f:c9:56:0a:76:11:9c:18:a0:
6d:1a:60:d5:b9:68:de:60:91:2e:33:30:d2:b9:99:a0:57:33:
12:11:c2:62:65:f2:c0:d3:59:68:86:3e:3f:53:93:ce:03:c1:
9b:6b:b5:eb:77:c0:79:0f:49:a4:c0:97:b8:02:5a:0a:f5:91:
d1:fb:29:84:ab:05:29:3e:2c:f1:5a:b4:aa:16:80:fd:d6:80:
d1:40:32:99:2e:6d:64:63:cb:de:f1:b8:35:2c:65:db:f5:77:
29:04:dc:60:77:63:04:47:86:5c:5b:e8:90:60:db:18:d7:50:
e7:51:99:e4:cf:36:51:51:75:45:ac:02:93:4c:c8:df:ff:29:
d2:50:fb:50:01:cb:60:d3:90:71:e5:82:dd:ba:94:1a:de:a5:
61:0e:0b:f3:71:c9:3b:a8:67:e1:9a:c3:c3:89:24:e0:61:61:
cd:e5:f6:ab:63:64:da:aa:8a:fb:c4:42:fd:44:21:cc:d7:bd:
1f:5f:b1:2b:b0:16:18:fd:9a:17:a3:10:8c:95:a3:64:8c:07:
26:f8:a5:7c:18:2e:e6:33:53:97:aa:0f:09:4b:48:f6:44:2a:
07:3d:33:29:de:bf:79:3a:8c:d4:64:4c:33:8e:c7:01:30:f4:
5e:cc:61:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYNjULy0u/jMZ0HYEEfq6cXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMWM0Y2U2NjNlMWVjMjQ1ZTc0N2NkODQ2ZjFhNjlkZGI4
MzRiM2IwHhcNMjUwNDA3MDAwMTIzWhcNMjUwNDA4MDAwMTIzWjAzMTEwLwYDVQQD
Eyg2N2U0NDAxNTJhZmEyMmRiYzg3YWM5ZDNjYTliMzNjOTE2Y2ViMmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppK2WK7Qw8039suq2XKpUyxqNeOH
IFCLPhp6AW6gFXAd3M0TxBxikZhVz2LhNqjzciEyuXoJ8LZg1LG1qKDDpKd3DPvg
d0Tw1SwNoWqTSJAZsbwYscEiGO6+eBNlnoD7WgwCmuTObEse9A8JCwEZt5skcKWt
ylh852/RDrJNU8FsAxT9yw4nPd9hpmyfGGp0yhoHBLwfiAshWwd0Nev/pJejn9Tv
7e+ilw2Tyk0B0zXnwwK3Cuo525fD1/xsQ/yu6sPru7QcEpxwJz3fzJnC96axpKAl
3fJaM+550fbsoABksb4c3dwT2M3zDbH0k3z+v4rfYbfz1hW+Zj2KS2rkmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfkQBUq+iLbyHrJ08qbM8kWzrK/MB8GA1UdIwQY
MBaAFLMcTOZj4ewkXnR82Ebxpp3bg0s7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84NGQ0NzYtMzIzMy00MTMxLThmZmMt
NDY1YWRjMjk1OWYyLzEvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy84NGQ0NzYtMzIzMy00MTMxLThmZmMtNDY1YWRjMjk1OWYy
LzEvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWDa5DlGx
wMvQD8lWCnYRnBigbRpg1blo3mCRLjMw0rmZoFczEhHCYmXywNNZaIY+P1OTzgPB
m2u163fAeQ9JpMCXuAJaCvWR0fsphKsFKT4s8Vq0qhaA/daA0UAymS5tZGPL3vG4
NSxl2/V3KQTcYHdjBEeGXFvokGDbGNdQ51GZ5M82UVF1RawCk0zI3/8p0lD7UAHL
YNOQceWC3bqUGt6lYQ4L83HJO6hn4ZrDw4kk4GFhzeX2q2Nk2qqK+8RC/UQhzNe9
H1+xK7AWGP2aF6MQjJWjZIwHJvilfBgu5jNTl6oPCUtI9kQqBz0zKd6/eTqM1GRM
M47HATD0XsxhvA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:37:13 2025 by rpki-client