Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
File: u_5CyzDD1Jb5bxHtk890NhcIx-E.mft (raw, json)
Hash identifier: RjHHZUrE9NZMdDL2TbrNnwxGqaG2kzqh3jS9U8HffwQ=
Subject key identifier: B5:13:8C:1F:97:26:EE:38:30:4A:61:14:98:2A:B8:CD:24:16:A4:27
Authority key identifier: BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1
Certificate issuer: /CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1
Certificate serial: 019659147849CDFCF9D27608C94B9B2B7BFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
Manifest number: 0597
Signing time: Mon 21 Apr 2025 16:00:35 +0000
Manifest this update: Mon 21 Apr 2025 16:00:35 +0000
Manifest next update: Tue 22 Apr 2025 16:00:35 +0000
Files and hashes: 1: T97PhxMy-s6iz7MiHiiatck56go.roa (hash: IEjvDcy1RVm7HLUPdOdFrc1JxBew7Tzwoxa/LhSLExY=)
2: u_5CyzDD1Jb5bxHtk890NhcIx-E.crl (hash: 786XmzCTwY8trKbZ+z0T/ZPE6VfidS516yy9SKs203Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:78:49:cd:fc:f9:d2:76:08:c9:4b:9b:2b:7b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1
Validity
Not Before: Apr 21 16:00:35 2025 GMT
Not After : Apr 22 16:00:35 2025 GMT
Subject: CN=b5138c1f9726ee38304a6114982ab8cd2416a427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:29:bf:df:d7:5d:fa:5f:4e:fb:29:d9:ca:24:
b8:5f:63:f2:76:24:aa:a1:e9:fc:28:40:07:de:86:
8d:c6:8c:0b:d2:99:e5:33:26:f0:1b:99:db:de:d3:
75:19:85:31:4b:88:50:49:41:79:df:c2:e5:f4:f2:
1d:02:93:58:73:3b:3b:ff:d4:9e:70:d0:fc:86:fe:
05:74:c2:f4:73:2e:67:a4:2d:56:6a:c8:c1:4a:32:
12:ef:8d:6c:00:bc:02:9a:f4:df:e8:21:64:c6:a2:
66:7c:ca:0d:4b:9a:a1:12:91:02:db:6b:22:7c:31:
a9:ec:b5:7d:b6:d0:0b:64:f2:95:11:6f:9f:43:1d:
7d:e2:c5:66:7e:c8:fe:52:21:28:65:22:c5:c6:8f:
50:68:0a:1e:70:c3:4e:6d:e2:c6:b7:73:4d:ee:25:
98:a2:44:bc:cb:61:dc:ab:52:64:54:cf:e5:8b:63:
5c:8c:e7:37:36:07:1e:1f:69:01:cd:65:d0:e6:55:
4f:9c:54:cc:24:7b:e7:d7:f8:4e:93:73:ed:e6:b8:
17:58:07:0c:97:1b:70:b2:23:b2:01:84:9f:59:47:
c6:59:b8:e5:9b:ba:e1:5b:2f:d3:b1:86:63:b6:cc:
58:81:59:21:a0:8b:8e:cc:28:42:a4:ab:43:a1:c7:
a7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:13:8C:1F:97:26:EE:38:30:4A:61:14:98:2A:B8:CD:24:16:A4:27
X509v3 Authority Key Identifier:
keyid:BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:71:f1:50:95:60:ab:26:fe:87:4a:a8:98:2d:4d:7d:ab:1d:
5e:f5:a3:88:9f:ed:f3:15:94:3a:56:5e:30:43:de:c3:82:ec:
d3:24:f2:8c:5e:ee:8b:65:28:07:62:f4:85:4c:ae:3f:0e:d3:
da:94:31:0a:3f:49:6d:cd:04:db:1f:b4:ed:45:49:ef:bf:62:
f2:3d:ee:bc:92:a6:7a:78:e9:34:a4:e2:a4:27:7d:b3:63:42:
15:f0:cd:66:14:fe:ba:51:4f:4c:2c:76:f1:1c:67:46:6b:a7:
18:06:c2:49:67:78:85:7a:f7:c5:58:3f:8d:ee:9c:f0:d4:be:
6e:bf:82:71:c2:c1:47:6f:59:94:30:33:68:46:44:69:c9:d6:
c3:e8:64:92:7f:bd:ca:29:27:76:8b:63:3a:06:4b:45:4d:5a:
1f:98:6b:b0:44:d9:16:6f:14:0c:46:ec:37:f1:d6:69:e1:10:
7f:3e:f8:dc:94:97:d3:03:4d:42:86:d9:43:83:40:d2:b0:98:
c3:b1:fe:e3:c0:72:9a:ea:cc:2e:9e:55:05:91:73:ea:16:6f:
80:6c:e6:25:e8:02:83:bc:03:c6:83:ae:3b:91:89:af:82:3f:
fe:73:68:43:8b:ac:e3:44:94:7d:4a:b3:03:0a:81:6d:b1:08:
d1:ab:55:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZFHhJzfz50nYIyUubK3v7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmU0MmNiMzBjM2Q0OTZmOTZmMTFlZDkzY2Y3NDM2MTcw
OGM3ZTEwHhcNMjUwNDIxMTYwMDM1WhcNMjUwNDIyMTYwMDM1WjAzMTEwLwYDVQQD
EyhiNTEzOGMxZjk3MjZlZTM4MzA0YTYxMTQ5ODJhYjhjZDI0MTZhNDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkym/39dd+l9O+ynZyiS4X2PydiSq
oen8KEAH3oaNxowL0pnlMybwG5nb3tN1GYUxS4hQSUF538Ll9PIdApNYczs7/9Se
cND8hv4FdML0cy5npC1WasjBSjIS741sALwCmvTf6CFkxqJmfMoNS5qhEpEC22si
fDGp7LV9ttALZPKVEW+fQx194sVmfsj+UiEoZSLFxo9QaAoecMNObeLGt3NN7iWY
okS8y2Hcq1JkVM/li2NcjOc3NgceH2kBzWXQ5lVPnFTMJHvn1/hOk3Pt5rgXWAcM
lxtwsiOyAYSfWUfGWbjlm7rhWy/TsYZjtsxYgVkhoIuOzChCpKtDocenaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUTjB+XJu44MEphFJgquM0kFqQnMB8GA1UdIwQY
MBaAFLv+Qssww9SW+W8R7ZPPdDYXCMfhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV81Q3l6REQxSmI1YnhIdGs4OTBOaGNJeC1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jMjZhN2MtMmJlZi00YWJjLWEyMjUt
ZjFkMTE0MTNlMThhLzEvdV81Q3l6REQxSmI1YnhIdGs4OTBOaGNJeC1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9jMjZhN2MtMmJlZi00YWJjLWEyMjUtZjFkMTE0MTNlMThh
LzEvdV81Q3l6REQxSmI1YnhIdGs4OTBOaGNJeC1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl3HxUJVg
qyb+h0qomC1NfasdXvWjiJ/t8xWUOlZeMEPew4Ls0yTyjF7ui2UoB2L0hUyuPw7T
2pQxCj9Jbc0E2x+07UVJ779i8j3uvJKmenjpNKTipCd9s2NCFfDNZhT+ulFPTCx2
8RxnRmunGAbCSWd4hXr3xVg/je6c8NS+br+CccLBR29ZlDAzaEZEacnWw+hkkn+9
yikndotjOgZLRU1aH5hrsETZFm8UDEbsN/HWaeEQfz743JSX0wNNQobZQ4NA0rCY
w7H+48BymurMLp5VBZFz6hZvgGzmJegCg7wDxoOuO5GJr4I//nNoQ4us40SUfUqz
AwqBbbEI0atV1Q==
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:21:45 2025 by rpki-client