Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
File: U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft (raw, json)
Hash identifier: /ozAoJgLBKbQBn6I/agpLKtUJyZrQAWw6pjUujdNHCM=
Subject key identifier: 13:58:4B:EC:A4:FE:2B:66:D8:91:38:B0:90:6D:7B:99:FF:4A:FC:9E
Authority key identifier: 53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
Certificate issuer: /CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Certificate serial: 01960FB35ED0B3A563A31E2E9386F24E1C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
Manifest number: 32
Signing time: Mon 07 Apr 2025 10:02:15 +0000
Manifest this update: Mon 07 Apr 2025 10:02:15 +0000
Manifest next update: Tue 08 Apr 2025 10:02:15 +0000
Files and hashes: 1: U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl (hash: eQCCXYoHYwgMn4mM4LUrrBmH26679JEQAloojvGRlZg=)
2: d_MgrBI_XqLm3vPMbVfOHRCRjlM.roa (hash: 8wS5nxJpvzUto4TBQuuJYHRS4iSYHZpu3buUsV2eb9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:b3:5e:d0:b3:a5:63:a3:1e:2e:93:86:f2:4e:1c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Validity
Not Before: Apr 7 10:02:15 2025 GMT
Not After : Apr 8 10:02:15 2025 GMT
Subject: CN=13584beca4fe2b66d89138b0906d7b99ff4afc9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:9c:36:d2:19:bf:5c:ad:e1:e9:86:f1:30:
e7:5d:0d:a5:59:45:f8:59:08:94:64:e1:19:01:da:
8e:98:a1:9a:fc:a6:ed:c3:2c:f2:9e:0f:8f:5b:19:
5a:6e:04:c1:19:24:7a:ac:62:cf:2a:bd:a5:f3:44:
70:ea:09:e9:08:d1:83:6b:b1:93:6d:ab:06:b5:14:
fa:c8:ec:54:ef:08:60:99:5b:eb:17:1e:dd:38:6a:
62:83:64:62:4b:0a:ae:b2:35:47:39:d6:16:48:a3:
d2:f5:91:b1:18:13:54:75:d3:2f:b6:c6:1b:bf:6e:
18:a2:95:4b:1b:46:87:d2:0f:65:2e:4e:46:a8:d3:
02:db:d7:9f:80:c3:5f:29:8b:5a:64:cd:9f:26:ea:
a6:c2:95:fd:6f:e5:9c:34:fb:51:13:bc:04:55:9f:
74:95:b5:2f:20:76:0d:22:1f:6a:8c:9b:8c:1c:2f:
22:8a:94:51:7c:1b:a7:19:86:ea:da:f1:a0:a5:82:
0b:c5:23:58:d2:9e:e3:ba:f7:73:25:61:a5:72:f2:
1f:8c:f9:33:89:1e:05:fb:18:d5:98:55:0c:52:58:
fd:ad:04:a2:91:c6:9a:83:74:53:43:b0:a6:85:12:
7d:c6:76:45:ec:91:bc:23:e8:c4:45:16:6a:9e:3f:
be:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:58:4B:EC:A4:FE:2B:66:D8:91:38:B0:90:6D:7B:99:FF:4A:FC:9E
X509v3 Authority Key Identifier:
keyid:53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:df:ef:23:e5:36:ed:2c:85:5f:81:65:79:33:d0:d7:7b:c1:
ab:b9:86:9f:e4:1a:b6:55:28:1f:14:b1:b0:4f:8b:b8:e5:fc:
de:27:4f:0b:46:40:64:37:5e:88:a5:2a:6d:0b:04:1c:6e:46:
2b:94:51:da:00:f3:7e:05:64:b4:24:81:f6:33:12:89:aa:c8:
cc:ad:01:1f:e7:57:51:76:22:86:5e:0e:9c:13:53:75:48:60:
d2:05:56:8f:9e:da:a9:05:40:54:be:ea:4e:8d:d0:70:c2:e7:
09:e3:ce:25:f5:ce:49:b6:50:1d:59:79:43:08:1d:d8:7d:9b:
73:8e:01:cc:c4:47:60:24:d0:11:dd:76:32:12:a1:d4:de:c7:
84:d5:05:de:9e:fd:f7:22:1a:49:55:41:cb:8d:80:72:dd:3f:
67:35:0c:d7:05:00:7b:ae:bb:ae:ff:43:99:00:ab:25:a2:98:
ea:be:aa:8e:df:51:30:d2:08:10:21:42:27:c4:f6:a8:e3:4a:
41:21:06:ee:a6:c3:ce:14:34:e2:9b:7b:57:b5:77:07:b4:82:
27:26:dc:4d:a0:6d:66:de:f5:dc:6e:ec:12:16:b7:26:e4:a1:
65:b6:81:68:6a:07:b3:8c:a9:7b:50:20:cf:f5:47:f8:b5:78:
bb:9f:cc:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYPs17Qs6Vjox4uk4byThxPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNzAwNzMxYzVhZGM3MGJjYjcxM2U1N2E1MWE0MDNlNjRl
ZDkxYzgwHhcNMjUwNDA3MTAwMjE1WhcNMjUwNDA4MTAwMjE1WjAzMTEwLwYDVQQD
EygxMzU4NGJlY2E0ZmUyYjY2ZDg5MTM4YjA5MDZkN2I5OWZmNGFmYzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGOcNtIZv1yt4emG8TDnXQ2lWUX4
WQiUZOEZAdqOmKGa/Kbtwyzyng+PWxlabgTBGSR6rGLPKr2l80Rw6gnpCNGDa7GT
basGtRT6yOxU7whgmVvrFx7dOGpig2RiSwqusjVHOdYWSKPS9ZGxGBNUddMvtsYb
v24YopVLG0aH0g9lLk5GqNMC29efgMNfKYtaZM2fJuqmwpX9b+WcNPtRE7wEVZ90
lbUvIHYNIh9qjJuMHC8iipRRfBunGYbq2vGgpYILxSNY0p7juvdzJWGlcvIfjPkz
iR4F+xjVmFUMUlj9rQSikcaag3RTQ7CmhRJ9xnZF7JG8I+jERRZqnj++iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNYS+yk/itm2JE4sJBte5n/SvyeMB8GA1UdIwQY
MBaAFFNwBzHFrccLy3E+V6UaQD5k7ZHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC84M2NmNzMtYjdjZS00NDQwLWE0YWQt
N2M1MjNiNThkZWNmLzEvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC84M2NmNzMtYjdjZS00NDQwLWE0YWQtN2M1MjNiNThkZWNm
LzEvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9/vI+U2
7SyFX4FleTPQ13vBq7mGn+QatlUoHxSxsE+LuOX83idPC0ZAZDdeiKUqbQsEHG5G
K5RR2gDzfgVktCSB9jMSiarIzK0BH+dXUXYihl4OnBNTdUhg0gVWj57aqQVAVL7q
To3QcMLnCePOJfXOSbZQHVl5Qwgd2H2bc44BzMRHYCTQEd12MhKh1N7HhNUF3p79
9yIaSVVBy42Act0/ZzUM1wUAe667rv9DmQCrJaKY6r6qjt9RMNIIECFCJ8T2qONK
QSEG7qbDzhQ04pt7V7V3B7SCJybcTaBtZt713G7sEha3JuShZbaBaGoHs4ype1Ag
z/VH+LV4u5/MeA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:01:04 2025 by rpki-client