Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
File: pAoIH7qPsz77RiWe-T9oeNcBUOs.mft (raw, json)
Hash identifier: DzmcOS+ygbbcxj28IoEUBEYjkcQ7Ho9DVzCH9d0EK/0=
Subject key identifier: FB:DE:C5:2A:D9:99:45:49:F7:8F:2F:E9:9D:0F:FC:EE:EB:9A:3E:9D
Authority key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
Certificate issuer: /CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Certificate serial: 01958BF2499975BA61E289636AEF70C8221F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
Manifest number: 09F2
Signing time: Wed 12 Mar 2025 20:01:06 +0000
Manifest this update: Wed 12 Mar 2025 20:01:06 +0000
Manifest next update: Thu 13 Mar 2025 20:01:06 +0000
Files and hashes: 1: YA2knZBu4eCfckA4blXB6sNuHgY.roa (hash: shDh2slGwfDF1H72vnxsQTQ+XE9meHhIbU3+zi7hhrg=)
2: da6BAAfAoBTasYkztEyeFbO3dYM.roa (hash: svpwmdWuctN25b8D5PcCmhJa0TO40FFmvswQDucJFfQ=)
3: pAoIH7qPsz77RiWe-T9oeNcBUOs.crl (hash: 0J3fjUIoC46HlRpHRiAVphJ0uF72wgWRgz6IZkGBUxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:49:99:75:ba:61:e2:89:63:6a:ef:70:c8:22:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Validity
Not Before: Mar 12 20:01:06 2025 GMT
Not After : Mar 13 20:01:06 2025 GMT
Subject: CN=fbdec52ad9994549f78f2fe99d0ffceeeb9a3e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2f:04:59:e6:5e:18:b3:02:7b:bc:a9:2c:47:
99:e2:3a:f1:84:db:55:d7:e6:6d:5f:a1:0f:82:27:
6b:7a:ad:d1:52:0d:f9:d1:bc:a7:4e:cb:6f:bd:c6:
b5:7f:0f:4c:8e:5f:96:84:ac:7a:36:af:40:a9:41:
85:32:5f:cb:ac:62:d9:39:f1:46:2a:66:67:a0:7f:
b3:d4:9a:0c:7a:27:af:d5:fa:0b:47:c0:b9:ab:c6:
8c:3c:b6:9b:93:f8:cd:3c:c6:cf:81:7c:cc:7c:3f:
1b:19:16:91:88:ca:84:3e:d7:8c:fc:38:fd:41:99:
d6:44:7e:13:11:c9:92:3c:de:81:65:f2:96:be:e6:
31:fb:be:ac:9f:72:5d:e5:ac:1c:36:e5:9e:b7:2d:
44:89:52:1a:e4:52:dd:90:d5:1a:78:41:e1:4e:62:
24:bb:34:58:8a:8b:c2:99:2e:08:76:2e:ea:65:41:
29:c7:b1:5d:69:42:6c:c6:66:42:33:fc:61:63:54:
d9:b0:a0:ee:61:b7:89:2d:ef:b8:3a:71:6a:10:92:
8d:21:e2:7e:9a:38:a6:00:42:93:e2:38:64:ed:14:
f3:ed:16:e4:04:f4:95:67:ed:86:53:55:1c:9f:76:
26:50:ea:f3:c5:7b:6c:d0:b2:96:5f:3d:a9:21:9c:
7f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DE:C5:2A:D9:99:45:49:F7:8F:2F:E9:9D:0F:FC:EE:EB:9A:3E:9D
X509v3 Authority Key Identifier:
keyid:A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4f:5c:ca:52:21:c6:1b:04:ce:6c:72:67:e2:c8:d8:34:f3:
66:4c:00:b8:49:80:b5:d2:04:b5:01:43:85:20:86:a3:c9:9d:
3c:22:a6:9c:43:e4:49:3a:03:6a:eb:b5:0c:9c:2d:5f:dd:7c:
aa:3d:bb:c8:0a:ae:56:35:54:1b:85:07:2f:43:04:82:95:3f:
70:24:28:8f:96:c8:a8:2f:7d:35:42:e0:9f:b0:a1:da:5a:78:
00:47:c2:8d:76:64:86:e4:00:08:41:6a:72:d7:a7:a7:00:ed:
2c:8c:69:e0:7d:43:16:ed:45:94:57:30:9b:8d:e5:5d:69:8d:
2c:60:3c:08:7d:0a:68:1f:4a:ac:cb:8b:93:d9:0e:18:79:4f:
ed:a2:ac:53:48:d6:6a:55:22:04:0d:56:de:70:07:dc:1e:04:
c4:d2:3a:fd:ef:20:8b:cc:3c:33:25:b4:13:ab:b2:d9:f6:de:
d3:79:ef:31:88:c8:65:a7:bf:6b:12:49:88:0d:3b:c0:94:2b:
2f:6d:4a:e0:ca:39:82:4e:0d:cf:25:30:11:0f:12:3e:5a:1a:
0c:0a:86:9b:c2:08:fa:0c:72:9c:33:b4:34:9e:b0:5f:9c:12:
e0:d2:1c:14:3d:67:8b:1b:54:c5:ac:1b:b3:99:04:43:48:ed:
24:39:78:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWL8kmZdbph4oljau9wyCIfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MGEwODFmYmE4ZmIzM2VmYjQ2MjU5ZWY5M2Y2ODc4ZDcw
MTUwZWIwHhcNMjUwMzEyMjAwMTA2WhcNMjUwMzEzMjAwMTA2WjAzMTEwLwYDVQQD
EyhmYmRlYzUyYWQ5OTk0NTQ5Zjc4ZjJmZTk5ZDBmZmNlZWViOWEzZTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5C8EWeZeGLMCe7ypLEeZ4jrxhNtV
1+ZtX6EPgidreq3RUg350bynTstvvca1fw9Mjl+WhKx6Nq9AqUGFMl/LrGLZOfFG
KmZnoH+z1JoMeiev1foLR8C5q8aMPLabk/jNPMbPgXzMfD8bGRaRiMqEPteM/Dj9
QZnWRH4TEcmSPN6BZfKWvuYx+76sn3Jd5awcNuWety1EiVIa5FLdkNUaeEHhTmIk
uzRYiovCmS4Idi7qZUEpx7FdaUJsxmZCM/xhY1TZsKDuYbeJLe+4OnFqEJKNIeJ+
mjimAEKT4jhk7RTz7RbkBPSVZ+2GU1Ucn3YmUOrzxXts0LKWXz2pIZx/hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvexSrZmUVJ948v6Z0P/O7rmj6dMB8GA1UdIwQY
MBaAFKQKCB+6j7M++0Ylnvk/aHjXAVDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jYjI3YTAtOTRkMi00OWFhLTg1ZWEt
YWU5MWU0NjYyZDkzLzEvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jYjI3YTAtOTRkMi00OWFhLTg1ZWEtYWU5MWU0NjYyZDkz
LzEvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADE9cylIh
xhsEzmxyZ+LI2DTzZkwAuEmAtdIEtQFDhSCGo8mdPCKmnEPkSToDauu1DJwtX918
qj27yAquVjVUG4UHL0MEgpU/cCQoj5bIqC99NULgn7Ch2lp4AEfCjXZkhuQACEFq
ctenpwDtLIxp4H1DFu1FlFcwm43lXWmNLGA8CH0KaB9KrMuLk9kOGHlP7aKsU0jW
alUiBA1W3nAH3B4ExNI6/e8gi8w8MyW0E6uy2fbe03nvMYjIZae/axJJiA07wJQr
L21K4Mo5gk4NzyUwEQ8SPloaDAqGm8II+gxynDO0NJ6wX5wS4NIcFD1nixtUxawb
s5kEQ0jtJDl4bg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:10 2025 by rpki-client