Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
File: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft (raw, json)
Hash identifier: RCl6pSEDSfeMolJWNibt6c2QpylZk0wQU/X2vsI8z2g=
Subject key identifier: C2:0C:0F:09:B4:79:51:60:D0:F3:69:0E:1B:16:72:86:DE:CD:D6:E8
Authority key identifier: AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
Certificate issuer: /CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Certificate serial: 019642C41A3FF32D1A7B80BFA12434909592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
Manifest number: 14FB
Signing time: Thu 17 Apr 2025 08:01:09 +0000
Manifest this update: Thu 17 Apr 2025 08:01:09 +0000
Manifest next update: Fri 18 Apr 2025 08:01:09 +0000
Files and hashes: 1: G67im2f6_ZhJBmi9qes0fIWNsWo.roa (hash: rcGVW1BtLRG5wqd17uLZEGASDvopWpXiN4N5Gl4c/9Y=)
2: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl (hash: zAHuoUVboLPN2qrwZRqvxwjbn62KWdPThp2a/ilL/cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:c4:1a:3f:f3:2d:1a:7b:80:bf:a1:24:34:90:95:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Validity
Not Before: Apr 17 08:01:09 2025 GMT
Not After : Apr 18 08:01:09 2025 GMT
Subject: CN=c20c0f09b4795160d0f3690e1b167286decdd6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:09:6d:e9:1b:ba:4e:db:0b:38:d2:94:48:4a:
23:ce:7b:7b:91:0e:71:0e:de:bb:65:96:f1:32:fe:
5e:be:67:56:49:9a:20:54:ad:98:08:35:1d:2e:d0:
e0:1b:8d:08:c5:3a:2f:40:8d:83:2b:2c:4e:34:5d:
90:ba:c8:be:df:ae:81:80:c6:f3:09:3b:1e:88:71:
db:83:1e:55:1c:42:0b:5f:46:a2:27:14:b8:04:31:
7f:e3:5a:46:63:f0:d0:83:67:9f:6f:44:6c:9b:fc:
a9:10:12:b5:b0:f4:2d:33:26:e3:a8:e9:4e:51:67:
26:e1:94:6c:a5:cf:bf:37:4e:dc:07:c4:39:82:a7:
9d:ca:38:be:20:96:92:8a:58:02:b1:2c:51:fd:bf:
4b:92:39:d0:d0:f4:cd:c8:09:71:fc:d7:9c:65:3f:
ee:db:1a:78:43:d2:a2:71:7c:86:dd:d4:26:fd:bf:
73:05:f9:93:e8:7f:82:e6:20:78:e7:8b:8b:6f:fc:
3f:f2:89:ef:45:67:7e:06:ba:9d:b9:4f:68:ee:39:
f0:8e:8a:ea:0f:62:96:01:5f:0b:cb:3a:37:82:d8:
46:5e:76:3b:eb:89:5f:9a:60:2e:83:55:e2:23:f6:
e6:7a:11:45:d9:5f:78:2a:0d:39:f6:8e:e9:77:b8:
44:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0C:0F:09:B4:79:51:60:D0:F3:69:0E:1B:16:72:86:DE:CD:D6:E8
X509v3 Authority Key Identifier:
keyid:AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:da:8b:3d:87:f6:1f:98:5a:f9:ab:47:89:50:a5:35:0f:fb:
53:e7:04:9d:11:31:fb:37:c0:03:eb:a4:44:d2:70:69:0b:76:
f9:9d:33:43:97:b9:d4:a9:0e:9b:c9:24:9e:c9:7c:9f:a3:af:
71:a2:d4:d4:70:9a:90:fb:13:ce:64:9d:28:98:2e:3e:c1:bf:
2d:f9:2c:ea:52:c5:db:ef:fe:25:80:a5:8f:1f:f0:7a:5a:3d:
3a:9b:90:45:60:f8:9e:d0:eb:85:db:80:e4:dc:d1:0a:f5:a7:
7d:5c:97:17:ef:46:04:2e:b7:ce:49:97:50:da:15:10:99:40:
3b:a3:78:61:e2:4c:3b:88:95:de:ca:7b:3f:9e:9c:7d:a4:61:
4e:00:82:6c:ee:b5:52:e4:1c:04:68:e4:d3:05:9f:84:9a:16:
c4:b9:1d:d8:e9:ee:55:62:2c:3f:a7:30:8e:83:2d:56:c7:d2:
60:56:af:22:0e:43:40:eb:9e:58:bc:2c:38:8e:eb:61:6d:2d:
7c:9f:e6:ed:69:49:84:a1:66:ef:8c:d5:59:c7:46:c1:76:6e:
fe:00:aa:d6:d2:2c:ab:32:05:e1:56:7c:42:b5:ab:6b:fc:50:
6b:cd:c8:36:9b:67:cd:52:0b:88:01:1a:be:08:c4:c5:e4:49:
d5:de:12:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZCxBo/8y0ae4C/oSQ0kJWSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOGY1NDM4MDczYTYyMWFlYTc3MmY1Y2I3YTRlZmQ1OGM2
Yjc3NGMwHhcNMjUwNDE3MDgwMTA5WhcNMjUwNDE4MDgwMTA5WjAzMTEwLwYDVQQD
EyhjMjBjMGYwOWI0Nzk1MTYwZDBmMzY5MGUxYjE2NzI4NmRlY2RkNmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAlt6Ru6TtsLONKUSEojznt7kQ5x
Dt67ZZbxMv5evmdWSZogVK2YCDUdLtDgG40IxTovQI2DKyxONF2Qusi+366BgMbz
CTseiHHbgx5VHEILX0aiJxS4BDF/41pGY/DQg2efb0Rsm/ypEBK1sPQtMybjqOlO
UWcm4ZRspc+/N07cB8Q5gqedyji+IJaSilgCsSxR/b9LkjnQ0PTNyAlx/NecZT/u
2xp4Q9KicXyG3dQm/b9zBfmT6H+C5iB454uLb/w/8onvRWd+BrqduU9o7jnwjorq
D2KWAV8Lyzo3gthGXnY764lfmmAug1XiI/bmehFF2V94Kg059o7pd7hEHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIMDwm0eVFg0PNpDhsWcobezdboMB8GA1UdIwQY
MBaAFK2PVDgHOmIa6ncvXLek79WMa3dMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclk5VU9BYzZZaHJxZHk5Y3Q2VHYxWXhyZDB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9kMTRlZjUtZjRkYi00M2JjLThjY2Yt
MTc3OGJhMjVkOGI5LzEvclk5VU9BYzZZaHJxZHk5Y3Q2VHYxWXhyZDB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9kMTRlZjUtZjRkYi00M2JjLThjY2YtMTc3OGJhMjVkOGI5
LzEvclk5VU9BYzZZaHJxZHk5Y3Q2VHYxWXhyZDB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUdqLPYf2
H5ha+atHiVClNQ/7U+cEnREx+zfAA+ukRNJwaQt2+Z0zQ5e51KkOm8kknsl8n6Ov
caLU1HCakPsTzmSdKJguPsG/Lfks6lLF2+/+JYCljx/welo9OpuQRWD4ntDrhduA
5NzRCvWnfVyXF+9GBC63zkmXUNoVEJlAO6N4YeJMO4iV3sp7P56cfaRhTgCCbO61
UuQcBGjk0wWfhJoWxLkd2OnuVWIsP6cwjoMtVsfSYFavIg5DQOueWLwsOI7rYW0t
fJ/m7WlJhKFm74zVWcdGwXZu/gCq1tIsqzIF4VZ8QrWra/xQa83INptnzVILiAEa
vgjExeRJ1d4SAQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 13:28:21 2025 by rpki-client