Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json)
Hash identifier: DwJl7OTRGJSrjEOUdWti6JU0SY1xol2+xbAOF1bgxHs=
Subject key identifier: F1:FA:DF:FB:A9:E4:FF:57:4B:87:04:88:3B:0C:22:22:23:0F:22:F2
Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Certificate serial: 01964745360E51117593973BD40749764CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 05:00:40 +0000
Manifest this update: Fri 18 Apr 2025 05:00:40 +0000
Manifest next update: Sat 19 Apr 2025 05:00:40 +0000
Files and hashes: 1: XsL5B3czGNBOzfHerg03TyaBu5U.roa (hash: ISMIcudQZ6/ngajT0MeHKZhAvNpAbEEMDN0b+U1wlIs=)
2: nYmjNrZRKkBKMRuyZNosQ-6fI8k.roa (hash: f30eW/l6+8yoMbQlTrT6KOfEquADaqjJm6m5OwGISv8=)
3: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: 7J5s7ZshRH/lAh/cYwvL7tVe2C/tgT4EiuNcMGG634Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:45:36:0e:51:11:75:93:97:3b:d4:07:49:76:4c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Validity
Not Before: Apr 18 05:00:40 2025 GMT
Not After : Apr 19 05:00:40 2025 GMT
Subject: CN=f1fadffba9e4ff574b8704883b0c2222230f22f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2d:6b:d1:47:85:67:dd:dd:59:79:a1:35:d1:
4e:8c:6c:4a:82:10:4c:d9:4d:4d:12:20:16:25:93:
c6:d0:93:35:84:23:62:f9:58:7f:e7:b8:f1:09:8c:
27:3d:fc:f1:47:04:28:40:15:04:f0:83:e5:1a:ff:
41:7f:82:e1:9f:8a:7a:62:4a:a4:ee:31:c0:1e:66:
3c:c8:4a:ba:95:73:ec:f9:f4:00:03:1f:ca:e8:5f:
1b:9f:c1:a8:74:8d:18:8f:17:a5:56:03:48:3f:8b:
33:19:8a:22:76:46:a8:ff:ce:13:eb:57:ed:22:4b:
2c:02:28:58:a1:cc:e2:49:47:79:46:b9:98:9b:ab:
f3:ba:8a:36:ba:3a:67:db:c6:46:9d:e1:2f:9f:60:
64:39:11:8f:7d:4a:39:42:d1:92:a4:cb:a1:58:a8:
a3:02:76:9f:ef:d7:ce:71:32:19:1b:36:af:02:c8:
0c:28:a0:ad:c6:d0:32:10:05:01:10:99:06:3e:a9:
0b:6b:80:7a:b2:66:85:eb:f8:bb:04:86:70:ce:77:
1a:80:f3:6f:7a:40:95:ba:30:c5:64:49:f4:a8:b9:
d1:cd:4c:02:c0:89:c0:80:ad:70:73:1f:76:97:e5:
ed:88:d2:be:b8:e5:ca:81:a5:49:a2:3d:9f:30:6b:
8d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FA:DF:FB:A9:E4:FF:57:4B:87:04:88:3B:0C:22:22:23:0F:22:F2
X509v3 Authority Key Identifier:
keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fc:f6:a5:7b:97:78:c5:c6:af:1a:86:7d:f7:68:71:df:8e:
a0:c3:18:87:9f:17:14:71:de:b2:b8:67:52:32:b6:04:f1:0a:
04:81:3e:96:c5:28:bc:39:c9:bd:50:34:45:0f:1c:44:e5:4b:
7f:15:00:d3:c2:72:10:05:0e:d1:c8:97:6b:4a:37:3a:3d:34:
9b:ef:1c:2e:88:43:68:78:78:c8:98:5c:74:6a:7c:96:63:e9:
07:ed:2f:f6:28:5e:1e:bb:1e:72:5f:81:59:2c:c7:0c:8a:15:
5d:a0:fa:c7:2a:1b:fc:8b:57:2b:4f:bf:01:3e:a8:cf:a8:77:
56:f6:64:00:28:63:b8:32:a9:a5:4b:ae:65:72:c0:56:7f:5b:
08:c3:1e:62:49:b1:9b:e7:b8:48:75:97:9f:5c:a3:82:70:c5:
0b:66:a0:e5:d7:ca:35:a7:03:63:9a:cf:3a:e0:70:e7:01:1b:
4c:cc:ae:52:34:8e:bd:88:16:7a:b5:45:69:04:4c:3c:0b:d0:
80:45:f0:3e:1a:8b:08:e5:61:3c:f1:d9:59:7f:5e:37:52:84:
46:b8:82:40:96:17:a0:14:02:19:36:41:ad:a5:8c:ec:42:89:
32:6e:1c:a9:29:a3:99:d9:5f:e2:40:8b:63:24:75:31:12:8e:
97:ac:89:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZHRTYOURF1k5c71AdJdkzfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMWRjMThhNGIxZmJmZTJjMmJhYmQ4YmJiNDdmZTFmZDFj
ZjIyZjgwHhcNMjUwNDE4MDUwMDQwWhcNMjUwNDE5MDUwMDQwWjAzMTEwLwYDVQQD
EyhmMWZhZGZmYmE5ZTRmZjU3NGI4NzA0ODgzYjBjMjIyMjIzMGYyMmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S1r0UeFZ93dWXmhNdFOjGxKghBM
2U1NEiAWJZPG0JM1hCNi+Vh/57jxCYwnPfzxRwQoQBUE8IPlGv9Bf4Lhn4p6Ykqk
7jHAHmY8yEq6lXPs+fQAAx/K6F8bn8GodI0YjxelVgNIP4szGYoidkao/84T61ft
IkssAihYocziSUd5RrmYm6vzuoo2ujpn28ZGneEvn2BkORGPfUo5QtGSpMuhWKij
Anaf79fOcTIZGzavAsgMKKCtxtAyEAUBEJkGPqkLa4B6smaF6/i7BIZwzncagPNv
ekCVujDFZEn0qLnRzUwCwInAgK1wcx92l+XtiNK+uOXKgaVJoj2fMGuN8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPH63/up5P9XS4cEiDsMIiIjDyLyMB8GA1UdIwQY
MBaAFK4dwYpLH7/iwrq9i7tH/h/RzyL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wMzc2ZDEtMTJjYS00MTM1LTk0ODMt
OGU3MTQ5ZjA0YTRlLzEvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8wMzc2ZDEtMTJjYS00MTM1LTk0ODMtOGU3MTQ5ZjA0YTRl
LzEvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATfz2pXuX
eMXGrxqGffdocd+OoMMYh58XFHHesrhnUjK2BPEKBIE+lsUovDnJvVA0RQ8cROVL
fxUA08JyEAUO0ciXa0o3Oj00m+8cLohDaHh4yJhcdGp8lmPpB+0v9iheHrsecl+B
WSzHDIoVXaD6xyob/ItXK0+/AT6oz6h3VvZkAChjuDKppUuuZXLAVn9bCMMeYkmx
m+e4SHWXn1yjgnDFC2ag5dfKNacDY5rPOuBw5wEbTMyuUjSOvYgWerVFaQRMPAvQ
gEXwPhqLCOVhPPHZWX9eN1KERriCQJYXoBQCGTZBraWM7EKJMm4cqSmjmdlf4kCL
YyR1MRKOl6yJxg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 08:51:03 2025 by rpki-client