Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
File: U1vkU3bViYdFK9Bka5p0z562yy0.mft (raw, json)
Hash identifier: j2rmYsC8ZYJlV90ahMP4flfWY9NQxcr0HzxbcwZ6Fuo=
Subject key identifier: AA:FF:3C:3E:BD:37:DD:F0:42:90:FA:B6:9A:F0:78:B8:B6:86:60:0A
Authority key identifier: 53:5B:E4:53:76:D5:89:87:45:2B:D0:64:6B:9A:74:CF:9E:B6:CB:2D
Certificate issuer: /CN=535be45376d58987452bd0646b9a74cf9eb6cb2d
Certificate serial: 019646D7B982485200ACE8BD3309731AAC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
Manifest number: 14F7
Signing time: Fri 18 Apr 2025 03:01:04 +0000
Manifest this update: Fri 18 Apr 2025 03:01:04 +0000
Manifest next update: Sat 19 Apr 2025 03:01:04 +0000
Files and hashes: 1: U1vkU3bViYdFK9Bka5p0z562yy0.crl (hash: h17BPe3esI39UHDWLvCMyrCnhFlvUYhYDXrjw7BuIAM=)
2: bldtfvyuIcb6nqjUAl8Ak0zMF30.roa (hash: dx6ZT1WJQ+QEzva9Bd5tv/adJVLszcwVSLKhJy+UO24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:d7:b9:82:48:52:00:ac:e8:bd:33:09:73:1a:ac:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535be45376d58987452bd0646b9a74cf9eb6cb2d
Validity
Not Before: Apr 18 03:01:04 2025 GMT
Not After : Apr 19 03:01:04 2025 GMT
Subject: CN=aaff3c3ebd37ddf04290fab69af078b8b686600a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:85:bb:7f:59:81:cb:73:8b:6b:7a:3d:10:18:
9e:a8:d2:68:f7:c5:15:79:ea:22:d9:27:71:a3:d1:
68:f2:35:ba:d5:82:62:00:f0:1c:27:7c:2d:39:ae:
d1:38:9c:f9:e2:73:b9:0b:81:17:c7:22:11:81:81:
90:e8:d8:a2:0a:d2:fa:0e:f0:9a:23:52:95:be:b4:
11:6e:e4:8e:3d:dc:9d:18:b7:1f:c9:67:16:2f:47:
f5:26:d2:66:f9:fa:08:5f:20:95:a5:6a:6f:e8:92:
67:71:7d:17:c0:45:4b:3e:27:e7:f4:61:35:fa:38:
50:8a:9e:77:34:34:85:70:e4:90:79:83:a1:4d:91:
21:3e:5f:ed:a7:11:b8:15:d8:cd:b3:5a:e3:34:85:
11:cc:34:bf:07:c5:cd:13:59:ac:31:29:47:35:0e:
24:82:53:50:ac:d2:a9:ea:8c:52:f3:83:ac:38:0c:
c8:25:cb:80:f5:6a:9f:6a:7e:12:05:4b:0a:12:8b:
26:22:77:c6:bc:2c:6a:d0:65:f4:68:9f:a0:02:98:
7d:d9:bc:ef:23:58:02:ec:50:fa:30:00:78:82:fc:
7b:f0:94:ce:9c:c1:05:95:af:92:4c:1a:a5:52:34:
fa:db:fa:0b:c2:c8:4f:2d:63:bf:8c:11:65:5c:90:
7c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FF:3C:3E:BD:37:DD:F0:42:90:FA:B6:9A:F0:78:B8:B6:86:60:0A
X509v3 Authority Key Identifier:
keyid:53:5B:E4:53:76:D5:89:87:45:2B:D0:64:6B:9A:74:CF:9E:B6:CB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:41:16:e2:bf:2f:a5:54:0e:97:cd:b5:7c:7f:c5:3b:14:aa:
51:8a:80:dd:a1:51:3d:6d:03:a4:59:2b:dd:55:53:4e:40:26:
8d:a3:8e:99:19:34:4b:a2:33:56:54:a5:0d:a9:80:0e:14:b5:
ce:d1:de:cc:a4:c2:f3:68:60:42:e9:d6:e8:29:1a:47:72:47:
3d:80:7a:0f:de:30:18:59:91:19:0a:a2:6d:a7:b3:75:76:1a:
1c:4c:12:cc:b0:62:96:b4:bd:fe:51:cf:9c:9d:ac:49:f6:53:
86:d9:3e:29:9c:44:4a:ee:67:77:b2:2d:a6:a5:1f:6e:59:22:
33:95:e8:f8:2f:24:5a:12:03:fe:64:b8:c1:b3:7f:e2:a5:a7:
8a:62:7d:45:29:43:b3:7e:63:0f:71:ea:09:ef:3a:77:e2:cd:
1c:bc:37:5d:ed:dc:ec:42:25:37:76:83:2a:99:ef:2d:9c:b5:
b6:29:22:99:80:2e:ec:18:8e:b9:fe:4a:84:53:41:16:50:0e:
6a:66:64:10:f0:a1:15:cc:53:d3:5d:e1:0f:52:95:3e:44:25:
28:9b:b6:b1:e6:f2:ef:58:60:6a:1f:4d:75:ff:5e:7e:77:6b:
62:a7:b1:6b:90:38:aa:d9:55:89:8d:f7:bf:51:83:75:bb:68:
93:6a:87:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZG17mCSFIArOi9MwlzGqw9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNWJlNDUzNzZkNTg5ODc0NTJiZDA2NDZiOWE3NGNmOWVi
NmNiMmQwHhcNMjUwNDE4MDMwMTA0WhcNMjUwNDE5MDMwMTA0WjAzMTEwLwYDVQQD
EyhhYWZmM2MzZWJkMzdkZGYwNDI5MGZhYjY5YWYwNzhiOGI2ODY2MDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIW7f1mBy3OLa3o9EBieqNJo98UV
eeoi2Sdxo9Fo8jW61YJiAPAcJ3wtOa7ROJz54nO5C4EXxyIRgYGQ6NiiCtL6DvCa
I1KVvrQRbuSOPdydGLcfyWcWL0f1JtJm+foIXyCVpWpv6JJncX0XwEVLPifn9GE1
+jhQip53NDSFcOSQeYOhTZEhPl/tpxG4FdjNs1rjNIURzDS/B8XNE1msMSlHNQ4k
glNQrNKp6oxS84OsOAzIJcuA9Wqfan4SBUsKEosmInfGvCxq0GX0aJ+gAph92bzv
I1gC7FD6MAB4gvx78JTOnMEFla+STBqlUjT62/oLwshPLWO/jBFlXJB8/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKr/PD69N93wQpD6tprweLi2hmAKMB8GA1UdIwQY
MBaAFFNb5FN21YmHRSvQZGuadM+etsstMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTF2a1UzYlZpWWRGSzlCa2E1cDB6NTYyeXkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mYjM5YTgtNjIzYi00NDM1LTk0ZmUt
Y2VjOTJiNTc4MDA2LzEvVTF2a1UzYlZpWWRGSzlCa2E1cDB6NTYyeXkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mYjM5YTgtNjIzYi00NDM1LTk0ZmUtY2VjOTJiNTc4MDA2
LzEvVTF2a1UzYlZpWWRGSzlCa2E1cDB6NTYyeXkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0EW4r8v
pVQOl821fH/FOxSqUYqA3aFRPW0DpFkr3VVTTkAmjaOOmRk0S6IzVlSlDamADhS1
ztHezKTC82hgQunW6CkaR3JHPYB6D94wGFmRGQqibaezdXYaHEwSzLBilrS9/lHP
nJ2sSfZThtk+KZxESu5nd7ItpqUfblkiM5Xo+C8kWhID/mS4wbN/4qWnimJ9RSlD
s35jD3HqCe86d+LNHLw3Xe3c7EIlN3aDKpnvLZy1tikimYAu7BiOuf5KhFNBFlAO
amZkEPChFcxT013hD1KVPkQlKJu2seby71hgah9Ndf9efndrYqexa5A4qtlViY33
v1GDdbtok2qHwQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:59:06 2025 by rpki-client