Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
File: z0D92CoP3ztwvhgiHuumDYAe178.mft (raw, json)
Hash identifier: fKjmRLb7W3xViMQnvmfz/jWc8JM2O3/haBO6jjag1vI=
Subject key identifier: AA:B4:1E:F7:22:59:4E:5D:6A:E0:2B:C2:95:9A:A3:8C:14:11:03:B5
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 0196391BFC8CE31DEEC328EA7BCF4C860A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
Manifest number: 1503
Signing time: Tue 15 Apr 2025 11:00:57 +0000
Manifest this update: Tue 15 Apr 2025 11:00:57 +0000
Manifest next update: Wed 16 Apr 2025 11:00:57 +0000
Files and hashes: 1: 3CMB0mE1xTb-XY0wsKNGKjk0bFk.roa (hash: lQQ7mzHc9z9XCmBgSmyDJlA6JGPYMp41l5No4NnlwB0=)
2: bIWvsgV4TrBP7pw5O1uwj4fGsZQ.roa (hash: 9Cz0tiQS8/nDaglgPuFlELicHHSaEtfkwdT1X8AgbOU=)
3: z0D92CoP3ztwvhgiHuumDYAe178.crl (hash: f0idIhOBRJVinl5zn1JaSsqqxCFP1rRFr910OkPAVJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:1b:fc:8c:e3:1d:ee:c3:28:ea:7b:cf:4c:86:0a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Apr 15 11:00:57 2025 GMT
Not After : Apr 16 11:00:57 2025 GMT
Subject: CN=aab41ef722594e5d6ae02bc2959aa38c141103b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:62:7d:48:58:5e:64:b9:ae:39:5a:86:e2:
08:f5:99:57:1f:c0:83:5b:e3:1c:2d:c3:87:30:44:
ec:de:fd:b8:53:f3:95:7a:00:61:e2:4a:60:26:5f:
06:fc:33:a1:f0:b4:15:98:5c:5b:d8:8e:8a:4a:38:
2d:0d:10:3b:bf:5a:8f:e4:5d:8a:81:32:48:87:31:
6d:7f:40:60:69:e7:56:7a:f5:b1:91:4b:88:98:b6:
37:3f:5b:32:db:06:24:3f:9e:4c:48:55:a3:b9:3b:
92:ef:c5:81:6c:50:94:15:da:b8:90:16:bd:da:0c:
0b:0a:81:80:bd:05:0c:d3:5a:87:0b:9a:fc:5b:b1:
7c:37:eb:76:a2:83:b3:bb:2b:07:cd:ae:69:d0:b6:
81:25:57:5d:20:72:42:79:d7:fc:c8:c6:9e:91:36:
b8:d4:7c:ba:b9:09:15:1b:7e:2b:52:cc:08:3f:27:
6a:3a:72:16:57:18:c0:06:ec:eb:3c:1f:a9:1e:44:
d4:d1:a6:2a:ff:f8:30:21:25:3b:49:ee:22:9e:29:
9f:83:e8:ff:ab:27:b0:cf:95:e7:8f:c4:1e:a3:86:
39:97:3e:2f:07:89:28:24:71:e1:7a:60:1f:79:5d:
9c:58:5c:04:e3:c1:51:25:9f:d4:96:b3:88:f3:43:
96:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B4:1E:F7:22:59:4E:5D:6A:E0:2B:C2:95:9A:A3:8C:14:11:03:B5
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:25:fc:42:31:25:31:47:7d:30:07:17:0e:7f:74:84:b2:ff:
d1:91:ea:4a:15:ab:41:a8:45:0a:68:bb:0e:de:4d:ab:e8:5c:
92:f6:c5:09:a4:dd:cd:8e:80:fa:f5:39:16:ab:14:5d:fd:7a:
9e:f6:ff:79:ad:99:fc:de:cf:b4:82:6b:2b:52:e4:f9:0e:08:
69:56:31:a7:e3:91:0b:8d:f8:41:6a:df:ad:c5:d5:c1:98:36:
81:5f:30:a1:16:a1:86:c7:22:bb:3d:83:16:ac:a1:b6:62:a9:
f3:ef:27:39:6e:da:94:da:d5:f5:2b:8e:35:a3:bb:53:6b:12:
9c:41:4a:59:3e:7d:b0:46:3e:e2:c8:a4:e3:19:16:be:1b:b5:
8e:46:0e:12:59:2c:61:c2:2c:61:e3:e5:62:1d:a2:2c:15:fe:
20:2c:f9:01:d7:4b:ee:eb:a9:a8:0a:ce:6e:4b:c1:59:d0:75:
15:95:9b:3a:c2:24:bc:a6:8b:00:41:c6:d7:d3:85:de:32:55:
eb:ab:87:76:5f:b6:b6:3a:18:e9:3d:98:06:45:43:96:01:14:
53:8f:0c:3d:68:66:e9:ba:42:8d:1c:b0:f4:d7:35:77:64:ec:
06:47:9e:86:af:2f:ed:ec:be:06:8a:8d:1e:a1:23:0c:83:2f:
a7:90:da:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY5G/yM4x3uwyjqe89MhgpjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNDBmZGQ4MmEwZmRmM2I3MGJlMTgyMjFlZWJhNjBkODAx
ZWQ3YmYwHhcNMjUwNDE1MTEwMDU3WhcNMjUwNDE2MTEwMDU3WjAzMTEwLwYDVQQD
EyhhYWI0MWVmNzIyNTk0ZTVkNmFlMDJiYzI5NTlhYTM4YzE0MTEwM2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGhifUhYXmS5rjlahuII9ZlXH8CD
W+McLcOHMETs3v24U/OVegBh4kpgJl8G/DOh8LQVmFxb2I6KSjgtDRA7v1qP5F2K
gTJIhzFtf0BgaedWevWxkUuImLY3P1sy2wYkP55MSFWjuTuS78WBbFCUFdq4kBa9
2gwLCoGAvQUM01qHC5r8W7F8N+t2ooOzuysHza5p0LaBJVddIHJCedf8yMaekTa4
1Hy6uQkVG34rUswIPydqOnIWVxjABuzrPB+pHkTU0aYq//gwISU7Se4inimfg+j/
qyewz5Xnj8Qeo4Y5lz4vB4koJHHhemAfeV2cWFwE48FRJZ/UlrOI80OWNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKq0HvciWU5dauArwpWao4wUEQO1MB8GA1UdIwQY
MBaAFM9A/dgqD987cL4YIh7rpg2AHte/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejBEOTJDb1AzenR3dmhnaUh1dW1EWUFlMTc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83OTI3MzctNmEwMi00MjRiLTgyY2It
YTI5Y2U3ZGExMGZkLzEvejBEOTJDb1AzenR3dmhnaUh1dW1EWUFlMTc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83OTI3MzctNmEwMi00MjRiLTgyY2ItYTI5Y2U3ZGExMGZk
LzEvejBEOTJDb1AzenR3dmhnaUh1dW1EWUFlMTc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHyX8QjEl
MUd9MAcXDn90hLL/0ZHqShWrQahFCmi7Dt5Nq+hckvbFCaTdzY6A+vU5FqsUXf16
nvb/ea2Z/N7PtIJrK1Lk+Q4IaVYxp+ORC434QWrfrcXVwZg2gV8woRahhsciuz2D
FqyhtmKp8+8nOW7alNrV9SuONaO7U2sSnEFKWT59sEY+4sik4xkWvhu1jkYOElks
YcIsYePlYh2iLBX+ICz5AddL7uupqArObkvBWdB1FZWbOsIkvKaLAEHG19OF3jJV
66uHdl+2tjoY6T2YBkVDlgEUU48MPWhm6bpCjRyw9Nc1d2TsBkeehq8v7ey+BoqN
HqEjDIMvp5Da0Q==
-----END CERTIFICATE-----
Generated at Tue Apr 15 20:03:13 2025 by rpki-client