Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json)
Hash identifier: n8Uvk3tIBaBwkQ9Gwx7Q7ZYYItjwvxtqWsA3/rn5gaw=
Subject key identifier: 7D:79:3D:B3:AC:B7:5E:24:4E:13:99:51:6B:77:14:D2:B6:B9:F2:0B
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial: 0196048A12ACE18158981E81CAF8E85F973E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
Manifest number: 0E02
Signing time: Sat 05 Apr 2025 06:01:19 +0000
Manifest this update: Sat 05 Apr 2025 06:01:19 +0000
Manifest next update: Sun 06 Apr 2025 06:01:19 +0000
Files and hashes: 1: 5bB3yoqJtJ8O9S62QfWorgiioFY.roa (hash: 8Ndb6O5ZdaPJ5izfIbfWtZrPZCIF+KxMhtKJ5R+rDRA=)
2: F2pyX4AW0yNP_DxkJy2c7z3MxKg.roa (hash: YtC8cOEf9B52eoNJhdsOBs1/lz34UsGpGhA4ymHbCSI=)
3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: g7UWeh+1ZJ4fjqx/PUkNOiozS99Cd23SzlsjhEKYH/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:8a:12:ac:e1:81:58:98:1e:81:ca:f8:e8:5f:97:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Validity
Not Before: Apr 5 06:01:19 2025 GMT
Not After : Apr 6 06:01:19 2025 GMT
Subject: CN=7d793db3acb75e244e1399516b7714d2b6b9f20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6a:36:67:03:a9:e6:89:21:e0:c2:f7:31:f8:
09:cb:df:7e:50:e9:33:ab:f8:e6:d0:bc:d6:b1:be:
3f:c0:ad:f1:c2:da:7c:cb:de:a5:ca:30:28:1e:0c:
53:d1:a6:d5:29:6d:f3:b4:db:cf:db:fe:cb:e5:46:
c8:d5:28:f3:de:7b:d9:09:49:78:16:f8:ab:db:4b:
de:72:54:cf:3c:47:f1:30:6d:06:63:f4:22:a2:9b:
7c:e6:e7:d7:d3:c8:53:11:04:fb:b6:fb:59:8f:41:
10:5a:e0:d2:23:33:6c:c3:12:f4:0e:1d:e8:f5:c6:
a4:ea:01:4e:96:0e:dd:5e:d1:d5:08:14:7b:8c:d7:
d5:bd:20:77:26:75:35:e2:d5:f9:74:94:5d:7b:62:
3f:13:46:19:8c:74:b2:5f:7f:58:af:17:f0:60:e6:
1a:53:99:b7:4a:3f:e6:5b:2a:ec:1a:dd:93:7d:7d:
c9:1a:4e:03:5c:6e:fa:a8:f8:be:bd:f4:5e:85:ef:
8b:31:d1:5d:d4:71:a6:a4:1c:99:28:76:0d:d4:b9:
84:83:8d:48:c1:31:3c:bd:70:4b:fa:85:26:d6:97:
1f:2d:1e:ac:81:05:86:94:b8:bb:1f:13:74:8f:6c:
d5:92:8b:7e:e8:d8:61:61:9d:19:48:1f:c1:41:d1:
19:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:79:3D:B3:AC:B7:5E:24:4E:13:99:51:6B:77:14:D2:B6:B9:F2:0B
X509v3 Authority Key Identifier:
keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3c:49:2c:7d:45:df:bd:04:f1:4b:fe:0a:06:22:d2:22:72:
7f:02:0c:68:87:64:f7:bf:77:c6:d2:e3:55:7d:be:88:ef:f2:
ff:26:af:8a:39:fc:86:f8:4e:0c:28:e6:3c:5a:cd:bc:4a:46:
58:91:51:9f:87:62:3d:35:fd:a2:bf:a6:11:47:8e:c8:e1:4f:
a4:c6:c9:54:15:56:d4:3d:62:e5:a3:4b:52:dd:0a:fb:45:26:
2e:bc:ed:5c:a6:69:8f:9a:c4:06:cb:2d:5c:22:f8:ce:d2:41:
3e:ee:93:56:1c:3b:f5:e1:e5:90:d3:57:f1:df:0e:b9:0f:f2:
5f:15:aa:12:eb:3b:ae:70:13:5a:0e:fa:60:31:7c:84:a7:f1:
40:5a:08:ad:ff:3a:30:16:05:80:d8:b9:59:7a:e4:69:e3:d4:
d7:c6:f1:31:da:5d:ad:6d:62:21:f0:db:c8:41:fc:94:bb:57:
db:09:6c:a0:be:8b:36:7f:da:cc:39:d5:9a:6b:f4:57:19:9c:
e4:c4:4f:fa:22:e5:a7:39:75:cd:22:5c:f2:d2:dc:45:a3:eb:
36:c1:56:e7:29:60:c3:59:c7:28:ff:ca:0e:76:0d:fb:41:91:
75:0f:bb:cc:6a:f7:d6:c7:68:2f:54:09:b4:94:63:32:28:ef:
65:96:2d:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYEihKs4YFYmB6ByvjoX5c+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZWQwYzA5MDFjNjllNWM1ZDhmNTFhNjc1ZDA1NTk4MmY5
MWQyYTcwHhcNMjUwNDA1MDYwMTE5WhcNMjUwNDA2MDYwMTE5WjAzMTEwLwYDVQQD
Eyg3ZDc5M2RiM2FjYjc1ZTI0NGUxMzk5NTE2Yjc3MTRkMmI2YjlmMjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2o2ZwOp5okh4ML3MfgJy99+UOkz
q/jm0LzWsb4/wK3xwtp8y96lyjAoHgxT0abVKW3ztNvP2/7L5UbI1Sjz3nvZCUl4
Fvir20veclTPPEfxMG0GY/Qiopt85ufX08hTEQT7tvtZj0EQWuDSIzNswxL0Dh3o
9cak6gFOlg7dXtHVCBR7jNfVvSB3JnU14tX5dJRde2I/E0YZjHSyX39YrxfwYOYa
U5m3Sj/mWyrsGt2TfX3JGk4DXG76qPi+vfRehe+LMdFd1HGmpByZKHYN1LmEg41I
wTE8vXBL+oUm1pcfLR6sgQWGlLi7HxN0j2zVkot+6NhhYZ0ZSB/BQdEZVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH15PbOst14kThOZUWt3FNK2ufILMB8GA1UdIwQY
MBaAFIjtDAkBxp5cXY9RpnXQVZgvkdKnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU8wTUNRSEdubHhkajFHbWRkQlZtQy1SMHFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wOTg1ODMtMzZjZS00NjkyLTlkYzMt
OWQ5ODhhNjAwNzU3LzEvaU8wTUNRSEdubHhkajFHbWRkQlZtQy1SMHFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8wOTg1ODMtMzZjZS00NjkyLTlkYzMtOWQ5ODhhNjAwNzU3
LzEvaU8wTUNRSEdubHhkajFHbWRkQlZtQy1SMHFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALTxJLH1F
370E8Uv+CgYi0iJyfwIMaIdk9793xtLjVX2+iO/y/yavijn8hvhODCjmPFrNvEpG
WJFRn4diPTX9or+mEUeOyOFPpMbJVBVW1D1i5aNLUt0K+0UmLrztXKZpj5rEBsst
XCL4ztJBPu6TVhw79eHlkNNX8d8OuQ/yXxWqEus7rnATWg76YDF8hKfxQFoIrf86
MBYFgNi5WXrkaePU18bxMdpdrW1iIfDbyEH8lLtX2wlsoL6LNn/azDnVmmv0Vxmc
5MRP+iLlpzl1zSJc8tLcRaPrNsFW5ylgw1nHKP/KDnYN+0GRdQ+7zGr31sdoL1QJ
tJRjMijvZZYtvA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:28:04 2025 by rpki-client