Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
File: rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft (raw, json)
Hash identifier: q4hy0vXrM0QsJjxbYZA0lZHHZM1JvhV57caUaULoF2M=
Subject key identifier: E8:11:EE:CC:14:41:4C:95:4F:AB:A6:E5:AB:E6:A6:2B:E5:14:82:79
Authority key identifier: AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
Certificate issuer: /CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Certificate serial: 01964BFE36AA35C295895B0E150B606CD09E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 03:01:13 +0000
Manifest this update: Sat 19 Apr 2025 03:01:13 +0000
Manifest next update: Sun 20 Apr 2025 03:01:13 +0000
Files and hashes: 1: 82G84G32y1mgU0Q3YtZB3rFx4UE.roa (hash: lPGmw8XEMipvSgR8GKq/jdBXSYYQonaEL52/1uh2Mmo=)
2: Deo2xTMuFm8QocUJ-a4RvviXgQw.roa (hash: nYDs1ZDulSnhALP5AjppGJbC8hnqemDJikGGe6pDTwQ=)
3: rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl (hash: 7JMgHaFa6Mm9NB7kY/h2HQuQpFDQiePJ1+on5NsUNr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fe:36:aa:35:c2:95:89:5b:0e:15:0b:60:6c:d0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Validity
Not Before: Apr 19 03:01:13 2025 GMT
Not After : Apr 20 03:01:13 2025 GMT
Subject: CN=e811eecc14414c954faba6e5abe6a62be5148279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:33:75:39:4f:52:74:41:0b:88:22:25:a2:65:
e2:4f:d9:5d:9a:90:fe:9f:ce:d3:ce:a6:b9:f3:1f:
42:08:c3:2b:0e:e0:d5:8e:9b:44:79:c1:93:d5:a6:
62:c4:fb:0b:af:96:18:74:8e:65:84:b3:f2:ae:a2:
b3:d7:d0:2b:50:43:0f:c2:27:5c:73:89:32:23:f8:
ce:e8:7c:f9:3e:44:c9:6a:e5:dc:19:e0:07:ca:64:
f5:cc:fd:d1:ac:92:97:be:29:9f:d8:d4:38:b5:8f:
4a:72:d9:f3:aa:3e:c9:18:6e:22:0d:d5:a3:6a:90:
c0:6b:4b:c2:fb:3c:2e:d7:54:b1:10:7f:cb:7d:0a:
79:be:b8:ee:d5:f9:c7:d5:b4:05:70:48:95:b9:82:
cd:9c:6a:39:f2:01:b8:8a:2c:e6:b8:62:b0:42:a5:
82:fd:34:2c:d8:82:9e:e4:bd:ac:6b:d3:33:b9:77:
3c:c3:40:07:b0:0c:99:ab:a1:21:c7:d5:0c:77:8e:
65:c0:a5:92:66:12:24:c7:50:db:cc:10:35:fc:22:
2c:48:85:7b:c2:a4:5d:3a:9a:ec:f7:22:47:36:2c:
b3:45:f2:be:5c:f7:8b:2e:dc:86:18:d9:ff:ec:10:
96:00:47:9b:ae:d0:eb:6d:a0:1c:7c:82:f2:0f:94:
67:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:11:EE:CC:14:41:4C:95:4F:AB:A6:E5:AB:E6:A6:2B:E5:14:82:79
X509v3 Authority Key Identifier:
keyid:AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:80:33:dd:78:9b:39:a2:4d:73:1e:2f:a9:d2:68:75:40:8c:
25:63:1a:c0:76:bf:30:14:b9:9a:53:3b:7b:a9:e8:f7:6e:ac:
ab:fa:08:6f:d9:61:76:d5:fe:99:ad:84:b7:6c:46:a2:9b:99:
43:97:41:76:16:7c:01:60:a9:73:58:8e:b7:ab:8d:26:b4:1e:
aa:c5:38:4f:50:91:55:9b:93:f5:09:e7:49:70:7a:9b:ea:65:
51:e0:80:ee:19:61:dd:5f:3c:13:93:93:06:ff:67:61:86:61:
6e:fd:48:2a:35:b9:cf:28:66:9a:5d:c6:95:2a:76:b6:db:69:
46:c7:6b:6e:e1:1a:87:e0:6e:8d:a2:95:df:29:b7:e4:04:31:
cc:2b:35:30:0f:5b:dd:1b:7b:c1:58:8a:1a:ee:68:bd:68:88:
2d:3d:c8:43:11:e6:cb:25:6f:b0:14:f8:b0:a0:d3:ed:55:1a:
69:3e:e3:52:da:13:79:20:02:00:32:e6:91:a7:f6:21:91:c3:
74:d8:ee:d7:5b:9a:af:f3:37:8f:21:11:51:80:1a:ff:c0:7f:
99:0d:5e:51:27:ef:25:0d:b8:93:70:f8:ca:d5:1c:56:cc:63:
e4:4a:5b:55:f7:b8:d6:d7:ca:10:69:94:90:1d:aa:ed:27:96:
af:c2:2c:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZL/jaqNcKViVsOFQtgbNCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYmQ4ZTk5ZjgyN2ZmOTVkMjgxZDRmZjdiYzI3ZjA0NWZh
YmYxMDUwHhcNMjUwNDE5MDMwMTEzWhcNMjUwNDIwMDMwMTEzWjAzMTEwLwYDVQQD
EyhlODExZWVjYzE0NDE0Yzk1NGZhYmE2ZTVhYmU2YTYyYmU1MTQ4Mjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DN1OU9SdEELiCIlomXiT9ldmpD+
n87Tzqa58x9CCMMrDuDVjptEecGT1aZixPsLr5YYdI5lhLPyrqKz19ArUEMPwidc
c4kyI/jO6Hz5PkTJauXcGeAHymT1zP3RrJKXvimf2NQ4tY9Kctnzqj7JGG4iDdWj
apDAa0vC+zwu11SxEH/LfQp5vrju1fnH1bQFcEiVuYLNnGo58gG4iizmuGKwQqWC
/TQs2IKe5L2sa9MzuXc8w0AHsAyZq6Ehx9UMd45lwKWSZhIkx1DbzBA1/CIsSIV7
wqRdOprs9yJHNiyzRfK+XPeLLtyGGNn/7BCWAEebrtDrbaAcfILyD5RngQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgR7swUQUyVT6um5avmpivlFIJ5MB8GA1UdIwQY
MBaAFK29jpn4J/+V0oHU/3vCfwRfq/EFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmIyT21mZ25fNVhTZ2RUX2U4Sl9CRi1yOFFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iOTkzYzctZmE4ZC00M2MwLTkzNzQt
MWQzMWExOTYwMTQ3LzEvcmIyT21mZ25fNVhTZ2RUX2U4Sl9CRi1yOFFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9iOTkzYzctZmE4ZC00M2MwLTkzNzQtMWQzMWExOTYwMTQ3
LzEvcmIyT21mZ25fNVhTZ2RUX2U4Sl9CRi1yOFFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4Az3Xib
OaJNcx4vqdJodUCMJWMawHa/MBS5mlM7e6no926sq/oIb9lhdtX+ma2Et2xGopuZ
Q5dBdhZ8AWCpc1iOt6uNJrQeqsU4T1CRVZuT9QnnSXB6m+plUeCA7hlh3V88E5OT
Bv9nYYZhbv1IKjW5zyhmml3GlSp2tttpRsdrbuEah+BujaKV3ym35AQxzCs1MA9b
3Rt7wViKGu5ovWiILT3IQxHmyyVvsBT4sKDT7VUaaT7jUtoTeSACADLmkaf2IZHD
dNju11uar/M3jyERUYAa/8B/mQ1eUSfvJQ24k3D4ytUcVsxj5EpbVfe41tfKEGmU
kB2q7SeWr8IsHw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:29:40 2025 by rpki-client