Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
File: x_o8rcpOExoPvhueQNujg4M89Io.mft (raw, json)
Hash identifier: iXx5nKItydyjuptwoIvJ6qWarIHzzeb1eG1atbTvPS4=
Subject key identifier: 7C:56:68:F6:09:F5:68:44:4F:0F:7F:A1:4F:68:0D:04:03:3F:4D:11
Authority key identifier: C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
Certificate issuer: /CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Certificate serial: 019645567138EADDFEBC84DF123E463635C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
Manifest number: 14BF
Signing time: Thu 17 Apr 2025 20:00:14 +0000
Manifest this update: Thu 17 Apr 2025 20:00:14 +0000
Manifest next update: Fri 18 Apr 2025 20:00:14 +0000
Files and hashes: 1: 6BkAjCciZdkVim2iQSRHdt1sfiU.roa (hash: ht4W9yWg20hMczJ5oRJNnUfqsbvH+S+TLA3MoaL5IE8=)
2: x_o8rcpOExoPvhueQNujg4M89Io.crl (hash: FjL+Tg0hkh7L9KHvSYnjhWI2TBLUpfs/mBgpbR7Kl9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:71:38:ea:dd:fe:bc:84:df:12:3e:46:36:35:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Validity
Not Before: Apr 17 20:00:14 2025 GMT
Not After : Apr 18 20:00:14 2025 GMT
Subject: CN=7c5668f609f568444f0f7fa14f680d04033f4d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:d7:05:84:71:a2:0a:70:84:57:06:2b:9b:
b7:77:a6:37:37:74:80:eb:38:eb:71:7c:3a:ae:5f:
05:67:23:a0:5b:39:a7:ec:35:8e:36:a7:14:67:d1:
da:eb:1f:a9:8b:00:08:05:09:41:57:d1:43:e4:18:
92:a8:43:06:a0:7d:9e:9f:8f:05:c5:8b:9b:48:95:
9c:e8:2b:79:1c:02:3c:16:06:8a:7e:b9:7b:e6:c6:
8a:7e:9b:7d:54:6d:b0:79:35:70:de:47:96:ce:97:
e1:42:8b:83:92:72:40:d6:02:6e:70:1e:84:53:ee:
fc:e1:0e:46:6b:92:ca:29:bc:7f:35:a5:16:58:7e:
16:48:ac:8d:fe:cf:81:70:36:1b:65:92:3e:4c:80:
47:9b:58:f1:ac:4a:95:65:c1:29:59:fe:75:39:9b:
1b:26:36:8f:9b:b5:33:76:2e:df:24:c3:df:1c:03:
93:1e:e2:58:ee:d5:e4:b2:1f:55:b1:93:11:50:c1:
3a:43:95:c6:77:2f:ed:44:46:4b:be:c7:0c:4e:f9:
71:af:54:2b:71:31:93:61:77:a3:2a:9c:15:2e:19:
b2:f1:d7:5d:74:e4:ef:0f:7e:ca:26:89:cc:1e:50:
8d:ad:37:15:17:f9:6d:22:5e:17:74:30:cd:77:ae:
f9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:56:68:F6:09:F5:68:44:4F:0F:7F:A1:4F:68:0D:04:03:3F:4D:11
X509v3 Authority Key Identifier:
keyid:C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ac:fc:90:f0:e6:f4:0d:f3:b0:e7:30:dd:f0:04:eb:ef:bd:
d6:81:d7:f4:91:90:bf:c4:9c:a0:c9:17:ca:0f:a2:71:c6:b6:
10:fa:71:ce:1e:29:7a:76:e3:df:c4:05:c2:f2:fc:6b:dd:a6:
d4:11:a8:2b:09:df:52:c7:06:8a:ef:bd:c4:96:dd:3e:51:1f:
be:d4:60:eb:d8:73:b6:22:cf:48:87:ca:f5:c6:cf:d8:01:d0:
9f:97:66:c9:b0:ef:e8:01:4b:5d:36:57:3c:60:69:2f:a0:c2:
e4:a8:b0:3a:bf:55:fc:9d:dd:95:e5:71:a8:03:bc:51:67:3c:
e7:9f:cf:f6:06:be:d0:81:1d:a5:33:4d:0c:1e:0e:a7:43:53:
47:53:81:9e:d6:f9:05:7d:5d:ec:79:a5:8e:c4:22:68:b7:9b:
6e:e2:a8:6b:27:ba:e3:63:18:3b:b3:d7:46:f2:3a:d0:c2:30:
30:8c:9e:6a:84:46:7b:fe:2e:a7:58:59:70:d1:78:a2:55:03:
f8:e9:0b:4f:b4:21:d3:7e:4a:22:88:93:d3:4e:b0:5c:97:ea:
94:61:53:cc:79:aa:25:bc:57:1c:34:75:b3:0d:9d:8b:2e:4a:
6c:15:00:5d:6c:c6:9f:96:69:dd:aa:bf:72:e3:ff:b6:dc:f5:
89:fc:17:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFVnE46t3+vITfEj5GNjXAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZmEzY2FkY2E0ZTEzMWEwZmJlMWI5ZTQwZGJhMzgzODMz
Y2Y0OGEwHhcNMjUwNDE3MjAwMDE0WhcNMjUwNDE4MjAwMDE0WjAzMTEwLwYDVQQD
Eyg3YzU2NjhmNjA5ZjU2ODQ0NGYwZjdmYTE0ZjY4MGQwNDAzM2Y0ZDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnorXBYRxogpwhFcGK5u3d6Y3N3SA
6zjrcXw6rl8FZyOgWzmn7DWONqcUZ9Ha6x+piwAIBQlBV9FD5BiSqEMGoH2en48F
xYubSJWc6Ct5HAI8FgaKfrl75saKfpt9VG2weTVw3keWzpfhQouDknJA1gJucB6E
U+784Q5Ga5LKKbx/NaUWWH4WSKyN/s+BcDYbZZI+TIBHm1jxrEqVZcEpWf51OZsb
JjaPm7Uzdi7fJMPfHAOTHuJY7tXksh9VsZMRUME6Q5XGdy/tREZLvscMTvlxr1Qr
cTGTYXejKpwVLhmy8ddddOTvD37KJonMHlCNrTcVF/ltIl4XdDDNd675NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxWaPYJ9WhETw9/oU9oDQQDP00RMB8GA1UdIwQY
MBaAFMf6PK3KThMaD74bnkDbo4ODPPSKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveF9vOHJjcE9FeG9Qdmh1ZVFOdWpnNE04OUlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iNzI1OTItNTk2MS00YzVlLWEyMGYt
ZjFkNDU2ODY5Zjk3LzEveF9vOHJjcE9FeG9Qdmh1ZVFOdWpnNE04OUlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9iNzI1OTItNTk2MS00YzVlLWEyMGYtZjFkNDU2ODY5Zjk3
LzEveF9vOHJjcE9FeG9Qdmh1ZVFOdWpnNE04OUlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvKz8kPDm
9A3zsOcw3fAE6++91oHX9JGQv8ScoMkXyg+icca2EPpxzh4penbj38QFwvL8a92m
1BGoKwnfUscGiu+9xJbdPlEfvtRg69hztiLPSIfK9cbP2AHQn5dmybDv6AFLXTZX
PGBpL6DC5KiwOr9V/J3dleVxqAO8UWc855/P9ga+0IEdpTNNDB4Op0NTR1OBntb5
BX1d7HmljsQiaLebbuKoaye642MYO7PXRvI60MIwMIyeaoRGe/4up1hZcNF4olUD
+OkLT7Qh035KIoiT006wXJfqlGFTzHmqJbxXHDR1sw2diy5KbBUAXWzGn5Zp3aq/
cuP/ttz1ifwXIw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 01:55:27 2025 by rpki-client