Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
File: 1s5JJV9AanJVk8YuHECHeVhtVu8.mft (raw, json)
Hash identifier: 29iEs7NgVSqJKYMFFGDsJH3hV2f8Bec6Zfa7ETRYTtQ=
Subject key identifier: FF:F8:D3:FD:BF:39:14:DE:D3:64:E0:10:6D:47:EB:D7:45:FC:8D:11
Authority key identifier: D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
Certificate issuer: /CN=d6ce49255f406a725593c62e1c408779586d56ef
Certificate serial: 0196537FDEC0A3B7CB0715221581D6C69C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
Manifest number: 0A5A
Signing time: Sun 20 Apr 2025 14:00:10 +0000
Manifest this update: Sun 20 Apr 2025 14:00:10 +0000
Manifest next update: Mon 21 Apr 2025 14:00:10 +0000
Files and hashes: 1: 1s5JJV9AanJVk8YuHECHeVhtVu8.crl (hash: a72VyUpPV/mkhh7quF0wi2am04bYgTcbJj+AyGVYIaU=)
2: CK8FwiyJmMBb-zg5kXzIAY_6FI0.roa (hash: XErrRj96RGdiXdkf0Z1TwKUF+3V+yB+0bX3FZbrkGHY=)
3: EJfhhxSKJku019QQkt99LIZFHTw.roa (hash: SjUIL6Kbq6N31Fxq4qDA2LJmnHYs1GWAH6ODttxmcK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:7f:de:c0:a3:b7:cb:07:15:22:15:81:d6:c6:9c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce49255f406a725593c62e1c408779586d56ef
Validity
Not Before: Apr 20 14:00:10 2025 GMT
Not After : Apr 21 14:00:10 2025 GMT
Subject: CN=fff8d3fdbf3914ded364e0106d47ebd745fc8d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f5:e4:8a:7c:13:79:7a:36:dd:38:31:90:7a:
8f:e2:cd:02:26:54:d6:3b:41:df:1e:cf:4e:e7:30:
05:bc:eb:c5:11:9d:5a:8e:3e:77:07:37:da:0b:f8:
16:ec:c8:0c:62:f0:ad:52:dc:93:22:67:a6:a9:b2:
fc:d6:2d:f8:66:8f:c3:42:a9:3b:a0:8b:64:c6:fc:
dd:3e:65:af:47:ce:16:91:9d:56:bb:33:4c:37:cd:
48:42:77:02:f6:cd:6a:a0:f0:2e:09:84:65:ab:97:
8b:de:23:ad:54:3d:a0:f4:37:6a:41:d7:2a:e0:ac:
b6:06:97:12:d2:9b:7b:6f:8a:c4:f2:15:d4:ba:35:
a4:ff:4b:20:c2:89:93:d8:95:28:60:b5:f6:9a:e2:
11:60:d2:b2:7d:44:f3:93:bd:38:f7:d5:87:85:a9:
a7:d0:18:ae:2e:ba:e8:65:fd:bb:3c:eb:0c:2c:03:
be:b8:b7:62:91:69:c2:86:02:94:ba:1c:cf:85:4f:
bd:71:0d:00:00:7b:6b:99:9a:04:d5:03:08:7f:32:
8e:6b:ba:43:ae:e3:ee:2b:2f:88:2f:2b:97:28:8c:
ca:33:82:02:a6:d0:6a:71:ea:09:42:3e:16:2e:25:
96:90:3d:a6:0c:01:ab:72:23:f5:3c:dc:7f:84:db:
a5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F8:D3:FD:BF:39:14:DE:D3:64:E0:10:6D:47:EB:D7:45:FC:8D:11
X509v3 Authority Key Identifier:
keyid:D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:cb:2f:b1:ad:ac:2d:8d:80:15:13:e4:cd:c0:74:55:fd:c8:
45:ca:df:b4:88:8a:08:cd:79:7c:1d:8d:43:c2:c9:65:60:f2:
96:7f:3b:89:40:5c:0a:81:62:fd:46:5e:99:38:f3:de:0c:2b:
8c:3d:a6:a4:46:af:c1:88:89:b7:8a:e9:17:01:22:3b:b7:a4:
1f:e1:92:78:56:8b:9f:c4:71:55:a0:59:8a:85:81:6d:41:4c:
96:4f:44:7b:76:9a:00:97:1e:96:55:e1:50:d9:04:9f:13:f1:
99:d8:80:87:7a:5a:2f:c1:6c:0f:ca:c9:9e:14:60:1a:56:c6:
45:53:c0:d2:47:24:c9:ca:dd:4c:4d:58:89:44:9a:79:ac:47:
20:68:24:2f:48:7b:38:a9:4f:1b:d6:0b:e3:41:21:91:e7:2f:
68:ac:1c:34:04:f4:b8:89:3c:ab:83:26:c0:fe:3f:37:58:17:
43:fc:5d:22:cc:41:d3:d5:6b:d3:72:37:8f:f3:db:19:80:df:
c7:56:e6:91:7c:31:d6:75:1e:60:c0:c6:60:11:c1:b1:56:d5:
6e:a5:47:6f:2c:19:46:9b:1f:7f:da:c0:5f:c2:bc:70:46:e4:
8a:80:e1:26:09:0f:3f:d3:10:d6:c1:07:a4:1a:ce:7c:42:52:
98:a3:37:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTf97Ao7fLBxUiFYHWxpyLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2Y2U0OTI1NWY0MDZhNzI1NTkzYzYyZTFjNDA4Nzc5NTg2
ZDU2ZWYwHhcNMjUwNDIwMTQwMDEwWhcNMjUwNDIxMTQwMDEwWjAzMTEwLwYDVQQD
EyhmZmY4ZDNmZGJmMzkxNGRlZDM2NGUwMTA2ZDQ3ZWJkNzQ1ZmM4ZDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvXkinwTeXo23TgxkHqP4s0CJlTW
O0HfHs9O5zAFvOvFEZ1ajj53BzfaC/gW7MgMYvCtUtyTImemqbL81i34Zo/DQqk7
oItkxvzdPmWvR84WkZ1WuzNMN81IQncC9s1qoPAuCYRlq5eL3iOtVD2g9DdqQdcq
4Ky2BpcS0pt7b4rE8hXUujWk/0sgwomT2JUoYLX2muIRYNKyfUTzk70499WHhamn
0BiuLrroZf27POsMLAO+uLdikWnChgKUuhzPhU+9cQ0AAHtrmZoE1QMIfzKOa7pD
ruPuKy+ILyuXKIzKM4ICptBqceoJQj4WLiWWkD2mDAGrciP1PNx/hNulqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/40/2/ORTe02TgEG1H69dF/I0RMB8GA1UdIwQY
MBaAFNbOSSVfQGpyVZPGLhxAh3lYbVbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXM1SkpWOUFhbkpWazhZdUhFQ0hlVmh0VnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84YjUzMmYtNjc4Mi00MDQ0LTllZmIt
NjcyNWQ5ODE5NmM2LzEvMXM1SkpWOUFhbkpWazhZdUhFQ0hlVmh0VnU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84YjUzMmYtNjc4Mi00MDQ0LTllZmItNjcyNWQ5ODE5NmM2
LzEvMXM1SkpWOUFhbkpWazhZdUhFQ0hlVmh0VnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMsvsa2s
LY2AFRPkzcB0Vf3IRcrftIiKCM15fB2NQ8LJZWDyln87iUBcCoFi/UZemTjz3gwr
jD2mpEavwYiJt4rpFwEiO7ekH+GSeFaLn8RxVaBZioWBbUFMlk9Ee3aaAJcellXh
UNkEnxPxmdiAh3paL8FsD8rJnhRgGlbGRVPA0kckycrdTE1YiUSaeaxHIGgkL0h7
OKlPG9YL40EhkecvaKwcNAT0uIk8q4MmwP4/N1gXQ/xdIsxB09Vr03I3j/PbGYDf
x1bmkXwx1nUeYMDGYBHBsVbVbqVHbywZRpsff9rAX8K8cEbkioDhJgkPP9MQ1sEH
pBrOfEJSmKM3xQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:07:09 2025 by rpki-client