Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
File: spvHpkk9OBeN1_XpxJDI7zqKWYs.mft (raw, json)
Hash identifier: PTzIpnOnmhQlbNXTt6UjQ9s96TCvnwHO0e7cgUQPoBM=
Subject key identifier: B9:4F:10:DA:93:E5:A3:27:81:97:30:4B:BB:0D:84:E8:97:1D:18:78
Authority key identifier: B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
Certificate issuer: /CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Certificate serial: 0196586FCE868AC28C204BDE259658D2593B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
Manifest number: 0102
Signing time: Mon 21 Apr 2025 13:00:44 +0000
Manifest this update: Mon 21 Apr 2025 13:00:44 +0000
Manifest next update: Tue 22 Apr 2025 13:00:44 +0000
Files and hashes: 1: _a9iaZrjBk-wbx-ww9Y6UH5mTzg.roa (hash: 5gzPI03HllGyMTQY0xFdUnePky078f9CBw1LIzGaktA=)
2: spvHpkk9OBeN1_XpxJDI7zqKWYs.crl (hash: P6296MWivarG3jJk+GpINseq1Vz3MI0gwxVkYRRemcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:ce:86:8a:c2:8c:20:4b:de:25:96:58:d2:59:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Validity
Not Before: Apr 21 13:00:44 2025 GMT
Not After : Apr 22 13:00:44 2025 GMT
Subject: CN=b94f10da93e5a3278197304bbb0d84e8971d1878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:eb:62:ff:42:da:1f:79:4b:ca:4b:4d:88:7b:
05:c1:e0:c2:32:8d:b0:1d:94:4c:28:b1:fe:3c:ba:
9f:8f:ed:75:8c:fe:9e:a6:c7:8a:c8:b2:ba:5a:42:
d7:d9:c1:e1:a3:8a:19:b2:8e:17:50:d8:4a:d2:a7:
02:ce:d0:0f:e8:76:f5:ae:9a:8a:41:4c:75:3c:d6:
d6:74:14:48:e9:97:79:17:d0:6f:2e:56:49:fd:00:
44:03:d7:a0:e9:7d:47:c2:4b:fe:53:7e:d8:e7:63:
10:d7:07:b2:44:16:99:1f:3d:bd:1d:68:c1:bf:63:
09:97:7d:78:a6:9d:a2:90:7c:fe:c8:a9:a5:ce:92:
bd:e5:c5:c8:80:92:14:f7:e8:64:a6:71:d5:fe:bc:
36:24:5f:5a:7d:60:03:87:8a:5e:6d:65:bb:6b:88:
ec:d7:95:0c:49:aa:ed:86:97:f0:5c:f7:77:23:dd:
0c:2b:1b:a0:45:67:f1:90:a5:c3:af:36:7a:0d:eb:
b7:ed:7a:b5:15:eb:ed:f8:ee:dd:23:1a:84:f4:c5:
87:94:dc:88:0d:cf:49:cc:dd:5d:5b:e9:8d:44:d2:
91:c2:41:d1:a1:35:0c:c2:5f:20:16:ac:46:6b:d2:
65:fd:b3:3a:95:f1:ae:33:19:4a:7a:ce:e9:05:50:
af:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4F:10:DA:93:E5:A3:27:81:97:30:4B:BB:0D:84:E8:97:1D:18:78
X509v3 Authority Key Identifier:
keyid:B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f6:e5:9a:d2:de:77:67:49:55:0e:21:c6:0e:96:d2:54:da:
3b:43:f3:ea:5e:c7:5d:87:2e:82:a1:44:28:12:cc:f6:95:0b:
48:36:9c:ee:23:2f:6a:37:9f:b2:e8:2c:dc:66:13:3f:dc:7c:
32:af:12:9e:c9:92:3c:1b:e2:62:d9:c6:a3:91:27:2d:26:df:
83:06:a0:15:6f:af:63:a8:55:96:56:63:94:98:45:7b:0c:da:
0f:a3:47:85:90:eb:91:24:6b:92:e7:9c:f4:bb:53:5e:0e:dc:
af:85:48:53:00:22:bc:74:76:0d:cf:fe:66:c8:95:b3:51:a7:
2a:16:c7:60:bc:9c:62:a1:a8:f2:fe:8d:db:f5:21:4b:c9:de:
0f:36:06:51:a7:1b:17:eb:85:68:80:12:a8:0e:84:a1:6b:f7:
f6:15:f4:38:8a:40:55:45:af:22:fc:57:d0:f5:56:f0:b7:ce:
e4:b7:b8:b2:b7:4f:ad:72:50:ff:9a:a9:cd:6d:df:fe:68:9e:
04:8f:51:f0:7b:47:87:6e:c9:5f:3a:00:5d:84:58:3f:fc:18:
52:54:6e:60:f6:5a:54:8d:68:d8:76:0d:e4:b2:95:c0:e8:e1:
bd:d8:88:35:b7:ad:fb:a9:db:c2:b3:13:49:24:47:ef:7c:75:
c2:bd:c0:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYb86GisKMIEveJZZY0lk7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyOWJjN2E2NDkzZDM4MTc4ZGQ3ZjVlOWM0OTBjOGVmM2E4
YTU5OGIwHhcNMjUwNDIxMTMwMDQ0WhcNMjUwNDIyMTMwMDQ0WjAzMTEwLwYDVQQD
EyhiOTRmMTBkYTkzZTVhMzI3ODE5NzMwNGJiYjBkODRlODk3MWQxODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOti/0LaH3lLyktNiHsFweDCMo2w
HZRMKLH+PLqfj+11jP6epseKyLK6WkLX2cHho4oZso4XUNhK0qcCztAP6Hb1rpqK
QUx1PNbWdBRI6Zd5F9BvLlZJ/QBEA9eg6X1Hwkv+U37Y52MQ1weyRBaZHz29HWjB
v2MJl314pp2ikHz+yKmlzpK95cXIgJIU9+hkpnHV/rw2JF9afWADh4pebWW7a4js
15UMSarthpfwXPd3I90MKxugRWfxkKXDrzZ6Deu37Xq1Fevt+O7dIxqE9MWHlNyI
Dc9JzN1dW+mNRNKRwkHRoTUMwl8gFqxGa9Jl/bM6lfGuMxlKes7pBVCv6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlPENqT5aMngZcwS7sNhOiXHRh4MB8GA1UdIwQY
MBaAFLKbx6ZJPTgXjdf16cSQyO86ilmLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3B2SHBrazlPQmVOMV9YcHhKREk3enFLV1lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84YWY4YWYtNTlhNC00MjBjLTllM2Ut
ZDQ4MmRhOTgwNGQ3LzEvc3B2SHBrazlPQmVOMV9YcHhKREk3enFLV1lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS84YWY4YWYtNTlhNC00MjBjLTllM2UtZDQ4MmRhOTgwNGQ3
LzEvc3B2SHBrazlPQmVOMV9YcHhKREk3enFLV1lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/blmtLe
d2dJVQ4hxg6W0lTaO0Pz6l7HXYcugqFEKBLM9pULSDac7iMvajefsugs3GYTP9x8
Mq8SnsmSPBviYtnGo5EnLSbfgwagFW+vY6hVllZjlJhFewzaD6NHhZDrkSRrkuec
9LtTXg7cr4VIUwAivHR2Dc/+ZsiVs1GnKhbHYLycYqGo8v6N2/UhS8neDzYGUacb
F+uFaIASqA6EoWv39hX0OIpAVUWvIvxX0PVW8LfO5Le4srdPrXJQ/5qpzW3f/mie
BI9R8HtHh27JXzoAXYRYP/wYUlRuYPZaVI1o2HYN5LKVwOjhvdiINbet+6nbwrMT
SSRH73x1wr3Abw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:01 2025 by rpki-client