Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
File: iuS5P-tx3eKCO3DH27eeD5m1bBs.mft (raw, json)
Hash identifier: yPMHuwat/ioEBb9rMwC+ZSfzu/VRPeuL8KTC43ydy3U=
Subject key identifier: 25:68:57:E0:56:00:0F:2D:CE:8A:76:EE:14:99:C9:CA:9E:F2:83:21
Authority key identifier: 8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
Certificate issuer: /CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Certificate serial: 019659F02199310999DD24DF1EE49D89EDDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
Manifest number: 0818
Signing time: Mon 21 Apr 2025 20:00:31 +0000
Manifest this update: Mon 21 Apr 2025 20:00:31 +0000
Manifest next update: Tue 22 Apr 2025 20:00:31 +0000
Files and hashes: 1: J2gFJxTXec_tCl5fYmT5ueu90dA.roa (hash: eqh0jr48WZnOgc9VcsakSv2fxPv1f923UQBSwi0u554=)
2: iuS5P-tx3eKCO3DH27eeD5m1bBs.crl (hash: iBU8oHBgGbGjf5rJoA6PyGH6poGk2yn0PTd3uvMvJsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:21:99:31:09:99:dd:24:df:1e:e4:9d:89:ed:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Validity
Not Before: Apr 21 20:00:31 2025 GMT
Not After : Apr 22 20:00:31 2025 GMT
Subject: CN=256857e056000f2dce8a76ee1499c9ca9ef28321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0d:9c:e4:45:1a:4d:21:94:09:87:78:72:b2:
6a:a0:76:3a:6f:fb:85:10:ba:85:46:b2:ac:c3:85:
ab:d1:5f:16:99:a8:48:d2:a4:9c:0d:fb:b0:d4:0d:
60:82:27:8d:3e:0d:75:e0:14:73:da:58:84:58:a7:
7c:b4:c0:27:54:c5:21:6b:41:08:b6:32:a3:4d:4f:
b6:3f:0e:26:7a:0f:7b:13:bb:84:ce:0a:6d:d4:2f:
b8:d4:7b:8e:66:9f:63:7f:ab:68:73:23:01:b0:92:
23:2e:e9:d6:3f:c9:2a:6c:cb:f4:d1:79:28:cc:cf:
d5:37:07:32:9b:a5:d6:b3:75:46:be:e6:4c:ed:be:
a2:3b:41:ff:78:90:81:08:94:69:ca:8a:a2:38:53:
6e:59:8f:a2:fd:64:0e:cb:c2:fc:d6:99:9c:66:01:
35:10:e7:53:e6:5c:1a:8b:ac:67:f8:05:7a:1e:48:
bd:e4:42:97:7f:ff:6c:b1:91:a2:af:81:6e:d5:7a:
03:6c:98:15:43:42:5c:9f:47:68:6e:10:48:d7:c0:
61:49:05:e1:8f:fd:4b:9b:ef:58:29:34:fb:a0:22:
d2:b5:d2:6c:4c:96:56:f9:9e:55:8d:d0:11:a6:e5:
ff:9c:92:19:b6:bc:ab:ba:1b:53:b3:1d:a6:2e:e5:
11:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:68:57:E0:56:00:0F:2D:CE:8A:76:EE:14:99:C9:CA:9E:F2:83:21
X509v3 Authority Key Identifier:
keyid:8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:96:ea:94:f5:63:94:c9:0d:18:f0:6f:d3:55:83:72:2f:16:
39:f5:cf:4c:6f:c0:09:a0:fc:db:d9:0f:2c:51:1f:1f:08:35:
13:12:37:8a:80:17:4f:cd:19:d1:ba:b5:04:65:86:e9:bd:b3:
64:16:c7:d4:ad:e4:e8:b7:42:95:72:9a:9a:49:2b:48:4b:6a:
51:45:7f:bb:bd:a0:b8:73:2a:68:2c:a4:07:7b:8b:ce:b4:2d:
51:6c:a0:1a:58:c6:d4:66:fa:23:13:6c:46:db:e8:92:61:3b:
f5:f4:5f:f3:7e:b3:29:db:8f:c2:a5:71:35:b1:f6:d9:52:5d:
c5:b2:2e:96:4b:3b:a9:52:7d:b5:68:0c:09:56:49:9b:12:8b:
17:87:9d:08:f6:be:d9:1c:48:f4:33:ca:21:8b:35:bf:e1:aa:
db:4c:00:d4:83:97:28:c4:ce:d3:4a:43:d6:e2:6e:75:57:5a:
93:eb:e3:4b:ad:c9:92:df:0d:55:49:7e:62:19:b9:b7:34:ae:
d4:b6:3c:14:6b:58:4c:70:a0:59:3b:fe:e5:d5:9a:54:97:aa:
be:91:d6:ad:a2:33:aa:88:d6:df:33:c2:4a:94:be:37:39:48:
db:9f:79:c8:e0:45:11:9c:cd:71:8d:6f:33:22:88:31:a0:60:
21:3f:85:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZ8CGZMQmZ3STfHuSdie3aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZTRiOTNmZWI3MWRkZTI4MjNiNzBjN2RiYjc5ZTBmOTli
NTZjMWIwHhcNMjUwNDIxMjAwMDMxWhcNMjUwNDIyMjAwMDMxWjAzMTEwLwYDVQQD
EygyNTY4NTdlMDU2MDAwZjJkY2U4YTc2ZWUxNDk5YzljYTllZjI4MzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw2c5EUaTSGUCYd4crJqoHY6b/uF
ELqFRrKsw4Wr0V8WmahI0qScDfuw1A1ggieNPg114BRz2liEWKd8tMAnVMUha0EI
tjKjTU+2Pw4meg97E7uEzgpt1C+41HuOZp9jf6tocyMBsJIjLunWP8kqbMv00Xko
zM/VNwcym6XWs3VGvuZM7b6iO0H/eJCBCJRpyoqiOFNuWY+i/WQOy8L81pmcZgE1
EOdT5lwai6xn+AV6Hki95EKXf/9ssZGir4Fu1XoDbJgVQ0Jcn0dobhBI18BhSQXh
j/1Lm+9YKTT7oCLStdJsTJZW+Z5VjdARpuX/nJIZtryruhtTsx2mLuUROQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVoV+BWAA8tzop27hSZycqe8oMhMB8GA1UdIwQY
MBaAFIrkuT/rcd3igjtwx9u3ng+ZtWwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXVTNVAtdHgzZUtDTzNESDI3ZWVENW0xYkJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83MGU2NzgtODQ5NS00NmFlLTk2ZDct
MjljNTE3NjkwMmM2LzEvaXVTNVAtdHgzZUtDTzNESDI3ZWVENW0xYkJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC83MGU2NzgtODQ5NS00NmFlLTk2ZDctMjljNTE3NjkwMmM2
LzEvaXVTNVAtdHgzZUtDTzNESDI3ZWVENW0xYkJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJpbqlPVj
lMkNGPBv01WDci8WOfXPTG/ACaD829kPLFEfHwg1ExI3ioAXT80Z0bq1BGWG6b2z
ZBbH1K3k6LdClXKamkkrSEtqUUV/u72guHMqaCykB3uLzrQtUWygGljG1Gb6IxNs
RtvokmE79fRf836zKduPwqVxNbH22VJdxbIulks7qVJ9tWgMCVZJmxKLF4edCPa+
2RxI9DPKIYs1v+Gq20wA1IOXKMTO00pD1uJudVdak+vjS63Jkt8NVUl+Yhm5tzSu
1LY8FGtYTHCgWTv+5dWaVJeqvpHWraIzqojW3zPCSpS+NzlI2595yOBFEZzNcY1v
MyKIMaBgIT+FRA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:40:57 2025 by rpki-client