Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
File: fmXasjlAyzlPmqpmT-pNb49C4xg.mft (raw, json)
Hash identifier: esCTbjxlpFKFGtuTSTkvImV4KlvKNBVBq4FSB1h8JIQ=
Subject key identifier: 10:CE:1A:9C:D8:C6:ED:AD:66:2B:DB:D4:06:3F:47:C6:4B:01:7A:11
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial: 019638AE0058A1CB114F65CB5EE58F54F561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
Manifest number: 14F7
Signing time: Tue 15 Apr 2025 09:00:49 +0000
Manifest this update: Tue 15 Apr 2025 09:00:49 +0000
Manifest next update: Wed 16 Apr 2025 09:00:49 +0000
Files and hashes: 1: B9gQbAB9xsN6pQfQdJIwTw0mN8w.roa (hash: x4fcMnOhpMuR2+7kVYptH+8Mn3pldQm1ilWOcm4WRJw=)
2: fmXasjlAyzlPmqpmT-pNb49C4xg.crl (hash: hOF64lU2o7uv7GS4F/j6UnEmsBqVxXRT1UZenYxUtp8=)
3: jKTi0IFy2Gsl-io5IjP67e8YnpY.roa (hash: zmbRyxceh2NVjEHPxC/G8V+VaBl1rJ3CnIcL4cBiYPg=)
4: li9wgS4CzymH0Pk4gTdAaGRdlAo.roa (hash: kP4uhWCvNqfaCH4owPFsoej6RgMi05GSx/V0iC7WmCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:ae:00:58:a1:cb:11:4f:65:cb:5e:e5:8f:54:f5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Validity
Not Before: Apr 15 09:00:49 2025 GMT
Not After : Apr 16 09:00:49 2025 GMT
Subject: CN=10ce1a9cd8c6edad662bdbd4063f47c64b017a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:4d:7d:2a:35:7f:39:b1:d9:58:c4:19:9f:
f8:45:d5:f0:8a:6a:2e:dc:70:3b:fa:6e:7e:0b:58:
30:14:2b:fa:79:22:26:77:64:4b:20:43:82:72:f8:
84:b5:1f:70:78:44:1a:5a:4e:b2:cd:9a:13:1c:54:
f8:95:c3:ad:92:42:0d:1c:2f:f0:31:08:d0:1c:6c:
5b:b0:a9:a1:e3:8f:70:04:b4:48:15:76:b5:df:b4:
7c:72:0c:74:5b:87:d5:9b:63:58:21:39:ad:d0:d6:
a1:fa:0c:ae:84:76:65:e8:cb:80:23:66:04:0e:74:
98:80:c7:cb:3f:df:fa:8d:1d:aa:72:bc:f5:41:e1:
1a:46:9c:26:aa:bd:72:16:ef:4e:7d:1f:e6:c8:5f:
90:90:e5:02:71:72:7c:de:38:58:78:60:26:72:e3:
66:01:a1:0c:c7:64:5e:66:f5:ef:b2:ec:aa:4d:0a:
36:05:5a:e6:0d:ec:a8:ff:e3:c3:44:8c:41:df:98:
93:c6:5c:d5:84:c5:f1:5c:32:f7:5e:c8:52:44:15:
6e:a0:7e:e2:d6:b9:29:db:ea:89:3f:72:8c:46:bf:
fa:05:45:b8:19:71:1e:7e:19:9a:e7:55:51:ff:e4:
0e:fa:eb:55:27:fe:8c:d0:7e:d5:c9:4c:f2:4d:c5:
9e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CE:1A:9C:D8:C6:ED:AD:66:2B:DB:D4:06:3F:47:C6:4B:01:7A:11
X509v3 Authority Key Identifier:
keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:48:a3:9e:9c:9a:60:ab:7d:a4:94:9f:43:37:8a:28:67:d9:
00:13:4e:e2:db:05:d0:b0:a3:92:52:7b:47:d9:b5:da:6d:e1:
b2:fb:c2:3e:e5:13:cd:72:30:fe:ec:9b:32:64:85:fa:bb:5f:
36:3a:a1:ed:de:8a:96:94:e7:13:a2:6a:1c:93:bc:19:98:8f:
ee:0c:a5:f2:13:b9:fb:05:b3:ab:0e:19:3a:32:9a:e7:3f:a5:
a6:8b:fc:74:24:08:36:fd:89:0a:ab:83:5b:40:88:be:dd:29:
ff:6d:49:13:6d:b1:df:2b:48:9e:a6:77:04:5d:3f:ed:06:31:
87:46:95:d1:1f:e2:76:64:c8:2a:ce:55:35:d2:44:b5:79:f4:
1b:46:88:64:69:68:1a:9a:63:9d:0b:32:a3:29:93:f6:8b:4a:
10:33:13:d7:82:09:bb:0b:97:ab:54:8f:74:ca:2c:b9:39:ad:
d9:3e:c4:0c:62:b9:1d:54:6f:db:f0:cd:7c:9e:91:0f:a0:bd:
95:b2:f0:d2:bf:2e:bc:32:6a:0c:cd:93:2b:13:e6:fc:2a:a9:
95:d2:04:b5:7e:3d:30:52:31:2e:8d:cf:d0:b5:ab:11:d8:79:
1b:aa:13:d1:65:9a:10:9b:9d:8a:7f:0b:38:9a:fd:29:20:1a:
53:b8:0b:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY4rgBYocsRT2XLXuWPVPVhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNjVkYWIyMzk0MGNiMzk0ZjlhYWE2NjRmZWE0ZDZmOGY0
MmUzMTgwHhcNMjUwNDE1MDkwMDQ5WhcNMjUwNDE2MDkwMDQ5WjAzMTEwLwYDVQQD
EygxMGNlMWE5Y2Q4YzZlZGFkNjYyYmRiZDQwNjNmNDdjNjRiMDE3YTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDNNfSo1fzmx2VjEGZ/4RdXwimou
3HA7+m5+C1gwFCv6eSImd2RLIEOCcviEtR9weEQaWk6yzZoTHFT4lcOtkkINHC/w
MQjQHGxbsKmh449wBLRIFXa137R8cgx0W4fVm2NYITmt0Nah+gyuhHZl6MuAI2YE
DnSYgMfLP9/6jR2qcrz1QeEaRpwmqr1yFu9OfR/myF+QkOUCcXJ83jhYeGAmcuNm
AaEMx2ReZvXvsuyqTQo2BVrmDeyo/+PDRIxB35iTxlzVhMXxXDL3XshSRBVuoH7i
1rkp2+qJP3KMRr/6BUW4GXEefhma51VR/+QO+utVJ/6M0H7VyUzyTcWeswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDOGpzYxu2tZivb1AY/R8ZLAXoRMB8GA1UdIwQY
MBaAFH5l2rI5QMs5T5qqZk/qTW+PQuMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYt
ODQ5Y2ZjYWJiNjU3LzEvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYtODQ5Y2ZjYWJiNjU3
LzEvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlkijnpya
YKt9pJSfQzeKKGfZABNO4tsF0LCjklJ7R9m12m3hsvvCPuUTzXIw/uybMmSF+rtf
Njqh7d6KlpTnE6JqHJO8GZiP7gyl8hO5+wWzqw4ZOjKa5z+lpov8dCQINv2JCquD
W0CIvt0p/21JE22x3ytInqZ3BF0/7QYxh0aV0R/idmTIKs5VNdJEtXn0G0aIZGlo
GppjnQsyoymT9otKEDMT14IJuwuXq1SPdMosuTmt2T7EDGK5HVRv2/DNfJ6RD6C9
lbLw0r8uvDJqDM2TKxPm/CqpldIEtX49MFIxLo3P0LWrEdh5G6oT0WWaEJudin8L
OJr9KSAaU7gLZQ==
-----END CERTIFICATE-----
Generated at Tue Apr 15 11:42:12 2025 by rpki-client