Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
File: 52CwD7DMWV_lQtYibj8KPlFl8cw.mft (raw, json)
Hash identifier: +8Z0rcd6qKI9b7EeTXQSVXqLbyJ7Qpno8AfLnpsNZfQ=
Subject key identifier: 25:0B:B9:0D:D4:AD:04:40:99:D8:B1:1B:B0:41:2F:2F:E1:1E:16:4D
Authority key identifier: E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC
Certificate issuer: /CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
Certificate serial: 01964F6D4802D86B9BD8D4EB134954D9488E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
Manifest number: 04A3
Signing time: Sat 19 Apr 2025 19:01:23 +0000
Manifest this update: Sat 19 Apr 2025 19:01:23 +0000
Manifest next update: Sun 20 Apr 2025 19:01:23 +0000
Files and hashes: 1: 52CwD7DMWV_lQtYibj8KPlFl8cw.crl (hash: IP9nDMuAHDzKepzGEgbKuwMLp+/VGjx6xTPBFvb4hPg=)
2: rKGVKqiZpnbfrBEvUIL3z2bcD3w.roa (hash: GqgeMXx+9CHaMaMRbd16hQlhBApo1up4EaH0YwEA5E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:48:02:d8:6b:9b:d8:d4:eb:13:49:54:d9:48:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
Validity
Not Before: Apr 19 19:01:23 2025 GMT
Not After : Apr 20 19:01:23 2025 GMT
Subject: CN=250bb90dd4ad044099d8b11bb0412f2fe11e164d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:fc:b8:d0:76:84:d5:e0:97:a9:a6:c7:dd:
82:95:25:6c:c3:55:d2:09:6d:6e:a0:4b:9b:10:0e:
7e:da:e7:1c:6d:9d:b9:ea:57:09:2e:f8:aa:ed:cb:
2c:8c:c3:4d:c1:f7:5e:92:ec:60:04:b9:6d:47:90:
9b:8a:54:85:7f:c8:71:6d:19:74:6d:fc:ec:4a:64:
87:67:9f:00:98:33:39:d5:db:d4:07:99:85:8f:ea:
b0:1c:08:98:e5:24:1d:a6:62:13:14:cc:dc:d7:9a:
26:89:3f:7f:9c:e1:e0:22:fa:c4:ce:e9:37:cb:5b:
53:43:3d:bb:e3:b3:eb:a7:57:07:82:e4:0f:c6:d6:
cc:91:f6:e5:12:9e:ca:20:22:e3:99:13:13:c2:26:
03:67:24:12:7d:3f:41:56:98:7f:1f:8b:08:40:00:
7e:a5:79:2a:a8:39:f7:cf:13:5f:72:90:18:41:f7:
3e:17:ff:ac:aa:59:c9:49:f8:c5:d9:ba:b5:0f:4b:
08:c0:90:38:14:ae:63:ea:3a:0e:64:01:7a:50:ff:
e2:8b:b6:a0:7b:9e:36:13:65:6c:be:11:e5:a8:8f:
df:85:cb:24:d0:7d:44:ec:8d:0a:66:4b:5c:de:91:
77:7b:38:c1:68:0a:99:f7:3f:05:5f:75:5a:fd:76:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0B:B9:0D:D4:AD:04:40:99:D8:B1:1B:B0:41:2F:2F:E1:1E:16:4D
X509v3 Authority Key Identifier:
keyid:E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5b:dc:8c:34:47:58:4b:36:96:de:1f:bb:d2:ee:48:19:d6:
7a:7e:89:36:3a:b1:9e:81:5f:79:eb:0b:06:9a:10:18:14:96:
c5:88:94:8e:a5:69:f2:db:ee:35:7d:61:e1:a5:f9:e0:ef:61:
da:ad:ff:81:c3:92:35:fa:a7:ad:e4:4b:6e:14:7b:ef:0e:01:
c3:c8:3a:85:c3:45:e1:13:d9:e7:75:66:10:30:aa:2e:76:44:
fc:b0:cf:61:61:28:71:81:8e:f6:d8:79:6a:c6:3e:bf:e7:0f:
d8:94:e6:f9:0c:6d:f5:83:a3:92:95:ce:b8:3d:eb:dc:f3:d2:
64:13:d8:b2:97:b1:34:90:0f:7d:83:21:72:a5:ae:52:d0:e4:
9a:fc:26:b6:0b:16:42:ec:63:98:d2:3a:df:0e:89:9c:d1:e9:
5b:da:3f:17:cf:6a:4e:b4:5b:b0:41:d0:8d:85:22:0c:b4:63:
92:06:e8:c9:75:c1:7a:31:2c:2a:40:14:58:a6:14:39:1e:1c:
1d:b0:3a:59:ea:f0:f8:5e:b7:39:2b:f9:3b:35:76:00:18:6f:
4b:ce:43:1d:60:45:4f:f6:80:36:a7:ca:0a:90:2d:a7:c2:05:
b7:b4:e5:cb:d7:18:d5:9d:6c:71:e1:38:43:27:f9:a1:d4:f2:
5e:52:e0:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbUgC2Gub2NTrE0lU2UiOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjBiMDBmYjBjYzU5NWZlNTQyZDYyMjZlM2YwYTNlNTE2
NWYxY2MwHhcNMjUwNDE5MTkwMTIzWhcNMjUwNDIwMTkwMTIzWjAzMTEwLwYDVQQD
EygyNTBiYjkwZGQ0YWQwNDQwOTlkOGIxMWJiMDQxMmYyZmUxMWUxNjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupv8uNB2hNXgl6mmx92ClSVsw1XS
CW1uoEubEA5+2uccbZ256lcJLviq7cssjMNNwfdekuxgBLltR5CbilSFf8hxbRl0
bfzsSmSHZ58AmDM51dvUB5mFj+qwHAiY5SQdpmITFMzc15omiT9/nOHgIvrEzuk3
y1tTQz2747Prp1cHguQPxtbMkfblEp7KICLjmRMTwiYDZyQSfT9BVph/H4sIQAB+
pXkqqDn3zxNfcpAYQfc+F/+sqlnJSfjF2bq1D0sIwJA4FK5j6joOZAF6UP/ii7ag
e542E2VsvhHlqI/fhcsk0H1E7I0KZktc3pF3ezjBaAqZ9z8FX3Va/XZNKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCULuQ3UrQRAmdixG7BBLy/hHhZNMB8GA1UdIwQY
MBaAFOdgsA+wzFlf5ULWIm4/Cj5RZfHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJDd0Q3RE1XVl9sUXRZaWJqOEtQbEZsOGN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iZWEzZDAtZDMzZS00NGJjLTgyOTYt
OTRlNGM5ZmQ3MThhLzEvNTJDd0Q3RE1XVl9sUXRZaWJqOEtQbEZsOGN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9iZWEzZDAtZDMzZS00NGJjLTgyOTYtOTRlNGM5ZmQ3MThh
LzEvNTJDd0Q3RE1XVl9sUXRZaWJqOEtQbEZsOGN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVvcjDRH
WEs2lt4fu9LuSBnWen6JNjqxnoFfeesLBpoQGBSWxYiUjqVp8tvuNX1h4aX54O9h
2q3/gcOSNfqnreRLbhR77w4Bw8g6hcNF4RPZ53VmEDCqLnZE/LDPYWEocYGO9th5
asY+v+cP2JTm+Qxt9YOjkpXOuD3r3PPSZBPYspexNJAPfYMhcqWuUtDkmvwmtgsW
QuxjmNI63w6JnNHpW9o/F89qTrRbsEHQjYUiDLRjkgboyXXBejEsKkAUWKYUOR4c
HbA6Werw+F63OSv5OzV2ABhvS85DHWBFT/aANqfKCpAtp8IFt7Tly9cY1Z1sceE4
Qyf5odTyXlLgxw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:19:13 2025 by rpki-client