Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
File: ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft (raw, json)
Hash identifier: yIbtm71VCgmBzo7p+8v10oQq8+kwG7MM46C8YK+tjEI=
Subject key identifier: 89:08:E9:B8:5C:77:DB:BB:BD:24:2D:EC:48:81:C1:E4:61:39:EC:8A
Authority key identifier: 7D:F1:1A:31:60:DB:8C:E7:91:8B:F3:EC:58:B5:C5:E1:E3:E9:38:21
Certificate issuer: /CN=7df11a3160db8ce7918bf3ec58b5c5e1e3e93821
Certificate serial: 01957910108D92967087A955A9B1A808FFA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
Manifest number: 148C
Signing time: Sun 09 Mar 2025 04:00:50 +0000
Manifest this update: Sun 09 Mar 2025 04:00:50 +0000
Manifest next update: Mon 10 Mar 2025 04:00:50 +0000
Files and hashes: 1: Hdo0JQgTFMLfp514_zX_eH0BV28.roa (hash: 1zoX3E+YpaDl71akpZOBfWw1Iq/htQIg0CTgRLbNZSk=)
2: ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl (hash: o3TN5PLhjqqnT20+JhDLKo8z1LiTRx/tOeRJ/BANrLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:10:10:8d:92:96:70:87:a9:55:a9:b1:a8:08:ff:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df11a3160db8ce7918bf3ec58b5c5e1e3e93821
Validity
Not Before: Mar 9 04:00:50 2025 GMT
Not After : Mar 10 04:00:50 2025 GMT
Subject: CN=8908e9b85c77dbbbbd242dec4881c1e46139ec8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:f8:8e:3b:71:cb:13:33:ad:e9:ac:6a:ec:
f0:0a:fa:2b:dd:3c:74:f8:65:22:7d:82:e5:41:72:
25:c2:d8:f3:f6:1f:24:10:35:c4:2d:54:55:49:23:
4f:1d:63:ce:51:e4:4f:9d:fe:ac:d9:4c:1f:c1:7a:
ab:13:f0:80:a5:1d:a6:d5:94:ef:45:e8:4f:10:cb:
5e:67:96:13:dd:a9:ec:28:fa:19:37:c1:1e:65:b3:
a4:b5:c3:d7:de:b4:d5:d7:51:6b:83:89:61:eb:79:
87:6b:a6:44:c3:16:f0:b5:86:9c:08:c4:f3:7d:59:
83:07:5e:51:86:30:0d:9b:9d:cc:87:a9:59:6d:fe:
1c:c0:62:9e:21:fc:87:a1:3a:20:ae:c1:37:78:75:
fe:eb:8d:54:bc:84:91:cb:91:01:52:fa:b8:bd:71:
95:6c:9e:b9:2e:2d:ed:1f:3e:7a:38:95:ae:2b:39:
50:c1:77:62:46:7d:4c:b2:73:bc:82:2d:e0:4c:1a:
ff:40:56:bf:5a:f9:5f:63:2a:c9:73:94:fe:2f:bb:
24:b3:68:38:7c:81:80:22:9d:1b:27:d9:88:1e:f9:
d8:e7:f0:b4:76:6b:94:5d:19:98:58:c2:9a:61:4f:
09:cb:77:cd:ff:38:7f:69:e9:1b:44:55:73:00:08:
20:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:08:E9:B8:5C:77:DB:BB:BD:24:2D:EC:48:81:C1:E4:61:39:EC:8A
X509v3 Authority Key Identifier:
keyid:7D:F1:1A:31:60:DB:8C:E7:91:8B:F3:EC:58:B5:C5:E1:E3:E9:38:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:36:99:ce:b7:7b:09:e7:d9:7c:da:e3:31:e1:4b:10:e3:06:
35:2e:14:e0:8c:5b:e2:36:26:f7:1b:40:c2:cb:e7:b0:27:28:
1a:58:57:f2:86:30:99:97:d7:2f:e5:4b:0c:9d:1f:c7:2e:e0:
06:2e:6a:cd:9e:98:a0:91:8a:1a:b6:1d:6b:d3:d8:b5:0e:4b:
7b:d6:15:83:21:fb:f7:d2:43:f6:59:ab:db:21:25:65:98:90:
38:0c:bf:d7:18:47:af:69:d9:d2:27:68:15:bc:ac:93:42:2f:
e5:d9:66:d0:51:f2:64:3a:13:8c:be:89:a3:f3:13:34:eb:58:
91:3e:4c:85:12:84:d6:62:74:4f:69:d2:1a:be:ca:5c:be:e9:
f0:47:69:48:27:82:1e:0c:1c:02:f8:c6:c1:9e:13:94:17:ff:
22:e7:c1:6f:2a:0f:5e:aa:34:3e:e7:9e:89:32:18:74:da:cf:
19:70:fc:45:51:5e:78:28:14:ce:4a:10:1f:df:85:37:a5:9f:
b8:25:c6:2f:f5:7d:72:91:05:e5:29:f0:9e:b5:ea:a6:ea:0b:
06:39:fc:bd:8d:74:75:b9:28:b7:19:52:d9:fc:b5:ce:c6:bc:
b8:4b:cd:99:b0:40:d9:55:dd:46:d1:3e:db:74:58:81:9c:3a:
9c:af:9c:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZV5EBCNkpZwh6lVqbGoCP+kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZjExYTMxNjBkYjhjZTc5MThiZjNlYzU4YjVjNWUxZTNl
OTM4MjEwHhcNMjUwMzA5MDQwMDUwWhcNMjUwMzEwMDQwMDUwWjAzMTEwLwYDVQQD
Eyg4OTA4ZTliODVjNzdkYmJiYmQyNDJkZWM0ODgxYzFlNDYxMzllYzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUP4jjtxyxMzremsauzwCvor3Tx0
+GUifYLlQXIlwtjz9h8kEDXELVRVSSNPHWPOUeRPnf6s2UwfwXqrE/CApR2m1ZTv
RehPEMteZ5YT3ansKPoZN8EeZbOktcPX3rTV11Frg4lh63mHa6ZEwxbwtYacCMTz
fVmDB15RhjANm53Mh6lZbf4cwGKeIfyHoTogrsE3eHX+641UvISRy5EBUvq4vXGV
bJ65Li3tHz56OJWuKzlQwXdiRn1MsnO8gi3gTBr/QFa/WvlfYyrJc5T+L7sks2g4
fIGAIp0bJ9mIHvnY5/C0dmuUXRmYWMKaYU8Jy3fN/zh/aekbRFVzAAggFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkI6bhcd9u7vSQt7EiBweRhOeyKMB8GA1UdIwQY
MBaAFH3xGjFg24znkYvz7Fi1xeHj6TghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZFYU1XRGJqT2VSaV9Qc1dMWEY0ZVBwT0NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy84NWIyOWItMGVhMi00NzQxLWI0Mzkt
ZTRiNjZhM2ZlNWJjLzEvZmZFYU1XRGJqT2VSaV9Qc1dMWEY0ZVBwT0NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy84NWIyOWItMGVhMi00NzQxLWI0MzktZTRiNjZhM2ZlNWJj
LzEvZmZFYU1XRGJqT2VSaV9Qc1dMWEY0ZVBwT0NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDaZzrd7
CefZfNrjMeFLEOMGNS4U4Ixb4jYm9xtAwsvnsCcoGlhX8oYwmZfXL+VLDJ0fxy7g
Bi5qzZ6YoJGKGrYda9PYtQ5Le9YVgyH799JD9lmr2yElZZiQOAy/1xhHr2nZ0ido
Fbysk0Iv5dlm0FHyZDoTjL6Jo/MTNOtYkT5MhRKE1mJ0T2nSGr7KXL7p8EdpSCeC
HgwcAvjGwZ4TlBf/IufBbyoPXqo0PueeiTIYdNrPGXD8RVFeeCgUzkoQH9+FN6Wf
uCXGL/V9cpEF5SnwnrXqpuoLBjn8vY10dbkotxlS2fy1zsa8uEvNmbBA2VXdRtE+
23RYgZw6nK+cXA==
-----END CERTIFICATE-----
Generated at Sun Mar 9 11:38:53 2025 by rpki-client