Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
File: mZYvXuAnimDLvNQWkZH3FIEhatQ.mft (raw, json)
Hash identifier: oOLknRQGoDhC8/uRX/WGGjIHXXIAuBPcIndnQC9dwdE=
Subject key identifier: 58:C5:42:CF:61:D3:49:B4:F4:D2:5B:D5:FA:7D:66:41:00:94:46:22
Authority key identifier: 99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
Certificate issuer: /CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Certificate serial: 01958BBB1AED87A041DCBC0D713250711CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
Manifest number: 11CD
Signing time: Wed 12 Mar 2025 19:00:49 +0000
Manifest this update: Wed 12 Mar 2025 19:00:49 +0000
Manifest next update: Thu 13 Mar 2025 19:00:49 +0000
Files and hashes: 1: PcKfcpxjxCfbogVi4GU3TNWXfWo.roa (hash: FyEhv9qszU5/I+NRa1KRYr4i13WZJNlUiL5+rA2wd9M=)
2: dKjh9OyM_cot3UzX7jW4QBDob5U.roa (hash: HTTUqeSNDV7AnFAFILfDkkX8OZRGZuFCWYdTMt5tQp0=)
3: mZYvXuAnimDLvNQWkZH3FIEhatQ.crl (hash: y+lFV5F86BVytiyj9iqO/Z8iBifN5kZgi4LeR8B6BtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:1a:ed:87:a0:41:dc:bc:0d:71:32:50:71:1c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Validity
Not Before: Mar 12 19:00:49 2025 GMT
Not After : Mar 13 19:00:49 2025 GMT
Subject: CN=58c542cf61d349b4f4d25bd5fa7d664100944622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:a2:8e:48:2d:bc:fd:eb:05:ad:82:a3:40:
d4:69:a3:7b:76:5f:90:d7:23:fd:a3:36:d9:25:45:
8e:a3:5f:43:64:ff:c2:fe:ae:cb:d9:24:17:b3:00:
cb:37:07:d4:74:8b:57:b2:74:b4:11:56:ee:cd:f8:
2b:0a:b8:75:ab:0b:19:8c:f2:03:5d:c0:30:a6:2b:
e8:31:25:55:99:64:b6:eb:c7:05:cb:9a:25:70:b8:
3e:11:86:f1:15:8c:2e:2d:2e:90:ce:6f:34:e9:32:
97:75:be:b8:3c:5c:f0:cf:e6:dd:a8:fe:51:90:99:
bc:1a:7f:b5:fb:82:b9:7e:ca:49:7d:09:a6:1d:58:
12:ae:d8:40:52:ef:1d:0b:2f:7e:e4:cf:cc:ab:29:
24:3a:e5:dd:5b:d3:72:45:a2:7d:84:a7:a3:bc:b9:
d9:c9:85:69:92:ce:41:68:4d:ed:ca:f4:25:85:75:
fa:80:22:3d:4a:6b:eb:3a:0a:e3:eb:37:84:f0:2c:
bd:f6:d6:42:0b:d8:b8:07:4e:ff:a0:a3:bd:d7:69:
c2:b3:26:e6:0c:51:21:c5:1f:e2:23:c0:e5:6c:c5:
4d:63:0d:a3:48:49:81:88:b3:76:8b:91:4e:e7:8a:
c4:7b:7d:99:e4:ec:32:94:35:4b:46:8d:31:e0:b0:
32:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C5:42:CF:61:D3:49:B4:F4:D2:5B:D5:FA:7D:66:41:00:94:46:22
X509v3 Authority Key Identifier:
keyid:99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:06:88:9d:f6:63:fc:3d:cc:2d:0b:28:f9:5a:e4:d7:6d:d3:
8a:31:03:b7:59:bd:46:e5:73:76:f4:11:d7:f7:55:eb:a1:13:
8e:7b:ba:a7:33:2c:83:46:ff:3a:fb:9a:8e:cd:bf:2c:f2:ee:
53:6c:86:bc:67:39:c1:75:5b:b6:9e:09:22:9f:32:c3:64:3e:
76:e3:49:c0:3f:77:39:91:96:a9:98:10:55:04:eb:b4:37:cc:
ff:11:e8:db:f7:c7:62:6a:72:ab:bc:2b:90:14:37:ba:12:16:
2c:3d:0c:9b:01:4d:84:9c:f2:db:f5:22:0c:46:d8:e4:36:e8:
a9:e3:34:a5:cc:94:07:a9:4e:b6:41:6d:d4:a1:6d:3c:2a:c5:
84:f1:d1:c6:f7:db:1c:03:a9:34:f5:de:a9:71:34:6d:5c:4c:
b1:c0:0a:04:ca:7c:78:a5:9b:e4:f2:ff:99:3b:52:20:cf:c4:
ac:82:2b:0e:54:12:f7:8e:32:63:38:d0:a9:8e:4c:de:dc:ef:
bf:b0:b1:c9:53:b1:cd:18:4b:e3:53:6f:bd:3b:6a:b1:02:7c:
eb:be:a8:0f:7d:db:68:1e:24:da:9b:2c:66:8b:69:58:40:82:
b1:36:85:b1:10:95:2d:5c:c9:80:48:61:a3:ef:9a:12:0b:53:
bb:b9:d7:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLuxrth6BB3LwNcTJQcRzsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5OTYyZjVlZTAyNzhhNjBjYmJjZDQxNjkxOTFmNzE0ODEy
MTZhZDQwHhcNMjUwMzEyMTkwMDQ5WhcNMjUwMzEzMTkwMDQ5WjAzMTEwLwYDVQQD
Eyg1OGM1NDJjZjYxZDM0OWI0ZjRkMjViZDVmYTdkNjY0MTAwOTQ0NjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniKijkgtvP3rBa2Co0DUaaN7dl+Q
1yP9ozbZJUWOo19DZP/C/q7L2SQXswDLNwfUdItXsnS0EVbuzfgrCrh1qwsZjPID
XcAwpivoMSVVmWS268cFy5olcLg+EYbxFYwuLS6Qzm806TKXdb64PFzwz+bdqP5R
kJm8Gn+1+4K5fspJfQmmHVgSrthAUu8dCy9+5M/MqykkOuXdW9NyRaJ9hKejvLnZ
yYVpks5BaE3tyvQlhXX6gCI9SmvrOgrj6zeE8Cy99tZCC9i4B07/oKO912nCsybm
DFEhxR/iI8DlbMVNYw2jSEmBiLN2i5FO54rEe32Z5OwylDVLRo0x4LAyPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjFQs9h00m09NJb1fp9ZkEAlEYiMB8GA1UdIwQY
MBaAFJmWL17gJ4pgy7zUFpGR9xSBIWrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVpZdlh1QW5pbURMdk5RV2taSDNGSUVoYXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZWRkMjUtZmY5MC00MGFlLThhMjAt
Zjc2YjgzNTNhZDY4LzEvbVpZdlh1QW5pbURMdk5RV2taSDNGSUVoYXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xZWRkMjUtZmY5MC00MGFlLThhMjAtZjc2YjgzNTNhZDY4
LzEvbVpZdlh1QW5pbURMdk5RV2taSDNGSUVoYXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARAaInfZj
/D3MLQso+Vrk123TijEDt1m9RuVzdvQR1/dV66ETjnu6pzMsg0b/Ovuajs2/LPLu
U2yGvGc5wXVbtp4JIp8yw2Q+duNJwD93OZGWqZgQVQTrtDfM/xHo2/fHYmpyq7wr
kBQ3uhIWLD0MmwFNhJzy2/UiDEbY5DboqeM0pcyUB6lOtkFt1KFtPCrFhPHRxvfb
HAOpNPXeqXE0bVxMscAKBMp8eKWb5PL/mTtSIM/ErIIrDlQS944yYzjQqY5M3tzv
v7CxyVOxzRhL41NvvTtqsQJ8676oD33baB4k2pssZotpWECCsTaFsRCVLVzJgEhh
o++aEgtTu7nXxA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:48 2025 by rpki-client