Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
File: 0j8EewbItyce4Qya9dFEPwE5wSc.mft (raw, json)
Hash identifier: zmOZK1LgzNh1SXawAEp6numDJSiLMbc7HfUMLBwsyzg=
Subject key identifier: 0C:B1:48:6A:EF:83:6A:47:48:88:8B:56:62:E2:22:F7:CE:E0:CC:A8
Authority key identifier: D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
Certificate issuer: /CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Certificate serial: 01963BE5F1111DEA5CB7448F568265C18868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
Manifest number: 14F1
Signing time: Wed 16 Apr 2025 00:00:47 +0000
Manifest this update: Wed 16 Apr 2025 00:00:47 +0000
Manifest next update: Thu 17 Apr 2025 00:00:47 +0000
Files and hashes: 1: 0j8EewbItyce4Qya9dFEPwE5wSc.crl (hash: Od9wASer1t+3i+Jgrh5NBeyMZD6b4NIJmbJn1qbAIgo=)
2: J_WwZWRwUeRaMtDotR_iY7Q6fWw.roa (hash: jAGifMZyJSQbsPFRP+S78wMNisVnQ/cWhKpvEThjZOI=)
3: K6nmXLryL1T-tWqAokSMk69cu-4.roa (hash: WBKa7aT4uLMRBq7574LflAMd1wdXVfKmsx/BV6lZJyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:e5:f1:11:1d:ea:5c:b7:44:8f:56:82:65:c1:88:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Validity
Not Before: Apr 16 00:00:47 2025 GMT
Not After : Apr 17 00:00:47 2025 GMT
Subject: CN=0cb1486aef836a4748888b5662e222f7cee0cca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:34:ff:05:01:de:e9:7b:53:cf:87:5f:6c:
ea:4b:f0:70:5c:04:f3:92:ea:db:bf:97:66:de:ca:
4f:ee:0e:f9:1a:a3:2d:63:e8:f2:28:8e:bd:59:2c:
62:8e:cb:16:df:31:f9:17:7c:ae:38:6e:02:39:e1:
62:dd:c0:fa:51:48:61:df:ba:21:27:35:db:3c:55:
5e:cb:91:19:fd:9e:b9:9d:5d:55:72:76:8c:ee:d0:
67:09:f2:62:7a:ac:a2:40:1c:41:15:a9:13:14:fe:
39:8f:15:17:13:07:87:90:b2:56:e5:2f:dc:e3:ec:
ab:02:9d:70:13:80:fe:84:c9:e9:19:25:ac:78:77:
c6:6b:47:5c:cb:b6:68:c1:8a:aa:0f:55:37:24:5e:
cc:42:ff:f1:09:9c:81:05:ec:3d:d6:9e:60:31:c4:
d8:1d:e6:17:c9:9b:4b:f1:f6:6b:66:a7:42:1c:09:
7e:b1:24:e9:3f:30:6b:a2:44:86:c8:dd:1a:1a:8d:
21:f6:4c:47:9a:e4:33:ab:01:9e:5c:6e:b5:1d:a1:
21:11:fa:1a:55:6c:e5:d9:b8:73:ed:fe:61:9d:47:
5f:9e:39:7d:e4:d1:c1:a4:2c:09:cf:30:1f:36:96:
6d:92:97:62:25:0d:c0:ff:2d:22:00:34:d5:fe:8e:
24:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B1:48:6A:EF:83:6A:47:48:88:8B:56:62:E2:22:F7:CE:E0:CC:A8
X509v3 Authority Key Identifier:
keyid:D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d0:cc:0e:16:b4:d2:3a:af:c7:c6:32:4f:3d:bc:28:b6:cd:
22:d3:8e:e1:ae:0a:4a:85:a0:07:01:7b:1f:db:b0:2c:f7:66:
41:81:e6:75:56:97:fe:f9:3e:63:e9:11:c8:cd:56:64:ee:40:
43:35:84:98:1f:c6:1e:20:93:96:e2:6f:c1:7b:59:d9:4c:59:
23:db:92:80:90:3a:ea:d7:8b:ca:c5:94:8c:b1:b6:63:db:60:
6d:69:66:47:56:3a:d5:80:a1:ca:14:79:2c:d8:8a:07:70:91:
c4:dd:64:d0:7e:01:81:2d:ab:ee:84:2c:d2:ec:e4:5e:f6:f3:
79:1a:92:1a:58:d1:6a:b3:5b:b3:63:ef:13:8e:8d:3f:82:b9:
42:ce:67:2a:78:a9:a1:fb:11:3d:86:a8:6b:9a:13:48:7f:ee:
17:2c:42:8b:a4:2d:a3:36:9d:e9:4f:54:06:d4:a6:11:ad:a7:
53:06:3b:3d:30:95:f0:8b:6a:46:c6:06:eb:78:c9:5e:15:58:
6a:df:74:b8:25:21:21:e9:b3:12:2a:1b:bd:14:c4:bd:d9:fc:
60:c6:57:72:13:62:1a:a1:c3:45:42:21:f3:a0:bf:cf:38:ef:
20:23:f7:16:55:1a:c1:6f:17:22:9a:80:51:3d:45:21:a4:f9:
31:68:54:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY75fERHepct0SPVoJlwYhoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyM2YwNDdiMDZjOGI3MjcxZWUxMGM5YWY1ZDE0NDNmMDEz
OWMxMjcwHhcNMjUwNDE2MDAwMDQ3WhcNMjUwNDE3MDAwMDQ3WjAzMTEwLwYDVQQD
EygwY2IxNDg2YWVmODM2YTQ3NDg4ODhiNTY2MmUyMjJmN2NlZTBjY2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruE0/wUB3ul7U8+HX2zqS/BwXATz
kurbv5dm3spP7g75GqMtY+jyKI69WSxijssW3zH5F3yuOG4COeFi3cD6UUhh37oh
JzXbPFVey5EZ/Z65nV1VcnaM7tBnCfJieqyiQBxBFakTFP45jxUXEweHkLJW5S/c
4+yrAp1wE4D+hMnpGSWseHfGa0dcy7ZowYqqD1U3JF7MQv/xCZyBBew91p5gMcTY
HeYXyZtL8fZrZqdCHAl+sSTpPzBrokSGyN0aGo0h9kxHmuQzqwGeXG61HaEhEfoa
VWzl2bhz7f5hnUdfnjl95NHBpCwJzzAfNpZtkpdiJQ3A/y0iADTV/o4kGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyxSGrvg2pHSIiLVmLiIvfO4MyoMB8GA1UdIwQY
MBaAFNI/BHsGyLcnHuEMmvXRRD8BOcEnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGo4RWV3Ykl0eWNlNFF5YTlkRkVQd0U1d1NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81MThmMTEtZDhmOS00N2EwLTk2MDAt
NWIwMGZiZjRhNTI5LzEvMGo4RWV3Ykl0eWNlNFF5YTlkRkVQd0U1d1NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS81MThmMTEtZDhmOS00N2EwLTk2MDAtNWIwMGZiZjRhNTI5
LzEvMGo4RWV3Ykl0eWNlNFF5YTlkRkVQd0U1d1NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9DMDha0
0jqvx8YyTz28KLbNItOO4a4KSoWgBwF7H9uwLPdmQYHmdVaX/vk+Y+kRyM1WZO5A
QzWEmB/GHiCTluJvwXtZ2UxZI9uSgJA66teLysWUjLG2Y9tgbWlmR1Y61YChyhR5
LNiKB3CRxN1k0H4BgS2r7oQs0uzkXvbzeRqSGljRarNbs2PvE46NP4K5Qs5nKnip
ofsRPYaoa5oTSH/uFyxCi6Qtozad6U9UBtSmEa2nUwY7PTCV8ItqRsYG63jJXhVY
at90uCUhIemzEiobvRTEvdn8YMZXchNiGqHDRUIh86C/zzjvICP3FlUawW8XIpqA
UT1FIaT5MWhU/w==
-----END CERTIFICATE-----
Generated at Wed Apr 16 05:00:32 2025 by rpki-client