Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
File: dCsbXAdcPTvfo1JdR2sbKGfCoso.mft (raw, json)
Hash identifier: VHZhT0cA7J9d/acNxo0FZ7TWiI7HCJOlqwSktbEiKNY=
Subject key identifier: 8E:92:6F:46:17:6C:2B:D9:62:F1:68:A8:0D:5A:04:0A:D6:76:22:0D
Authority key identifier: 74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
Certificate issuer: /CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Certificate serial: 0197462FC4BEF1129839CF3689D72EEBA4E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
Manifest number: 12B2
Signing time: Fri 06 Jun 2025 17:00:24 +0000
Manifest this update: Fri 06 Jun 2025 17:00:24 +0000
Manifest next update: Sat 07 Jun 2025 17:00:24 +0000
Files and hashes: 1: 40QNfW5uxL4jypZTwjAvEPXJ-ss.roa (hash: scLT9GShE++kyEVNQ4Xr6VT4pmzB0wfzNMHjViw3ltA=)
2: dCsbXAdcPTvfo1JdR2sbKGfCoso.crl (hash: lEsYu0OtnxaP2v7n/9TFYOyXndblVzQUNvavkDjP2rg=)
3: to-C9o8M7rUM05HxGikjjRHVAbw.roa (hash: JaaGI9qnzexOYc7maJGwDizpvZfHfNfRXKpM/h4aHAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:c4:be:f1:12:98:39:cf:36:89:d7:2e:eb:a4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Validity
Not Before: Jun 6 17:00:24 2025 GMT
Not After : Jun 7 17:00:24 2025 GMT
Subject: CN=8e926f46176c2bd962f168a80d5a040ad676220d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:a1:77:01:f8:86:19:8f:b2:84:0d:cf:31:
dd:73:31:fd:25:8d:17:1b:08:e9:4e:ae:6a:f7:2e:
4a:4a:fb:cd:60:4f:d3:5a:1f:b0:f5:5e:61:c6:3c:
51:a4:d0:c7:5f:00:4f:09:ca:01:df:1b:e2:b3:0a:
a9:e8:63:ea:10:38:1e:29:73:d0:3e:17:1f:f2:cf:
49:c8:c6:31:8a:d0:4c:08:76:3d:b8:0f:ea:d2:cb:
e6:03:36:16:c2:d2:e1:7c:8b:55:e5:e8:be:54:13:
e0:8b:a4:81:c0:b0:1a:2a:e8:aa:35:b7:8d:83:8e:
79:b1:3c:8a:4f:1d:8e:ef:67:41:10:3d:c9:f1:8a:
0e:ba:18:99:5a:14:fd:60:69:09:78:60:b4:8c:a8:
05:38:0b:21:9e:7f:14:ec:dd:6e:cb:54:e0:12:1b:
1c:4e:03:1a:b6:ae:51:5e:49:10:e1:ca:14:cf:63:
01:d3:45:99:fb:0d:5c:af:eb:69:5e:f5:dd:ad:ce:
36:e2:c3:a3:52:1d:d4:47:48:c0:67:93:e8:9e:ad:
22:ca:43:61:a4:71:1b:33:03:58:c7:d0:d3:d8:38:
b4:47:2f:ef:50:7e:77:7d:a8:ac:da:aa:0e:e9:f5:
1d:4a:ff:b3:39:98:d9:c8:b3:c0:e6:11:4b:5e:2f:
64:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:92:6F:46:17:6C:2B:D9:62:F1:68:A8:0D:5A:04:0A:D6:76:22:0D
X509v3 Authority Key Identifier:
keyid:74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a4:7a:dc:8a:14:3a:72:a6:6c:fb:d5:f1:ab:ab:18:9f:5c:
b1:40:9f:15:8b:bb:4b:97:fa:11:df:24:37:ba:24:09:39:e0:
12:f0:35:89:18:a6:7f:92:c0:ec:66:64:db:2e:25:bf:3c:3c:
4c:00:dd:dd:de:db:b4:57:11:7e:0d:51:a4:ef:c1:9c:6e:94:
c1:fb:46:25:3b:8e:78:29:17:61:68:99:0e:40:7c:1d:ec:34:
ff:cf:2a:4c:2e:a0:86:7a:58:06:cc:a6:8f:c5:7c:9c:4d:cd:
cc:87:04:32:52:5a:3a:28:41:09:8f:35:c0:0f:11:06:b7:d1:
7e:ea:0e:01:e3:0b:34:16:d1:40:fb:c4:72:d7:d6:8e:f2:91:
34:c5:c8:72:53:cb:ae:f0:fe:e4:99:61:d9:a6:cc:d4:4e:16:
a6:91:9c:34:6b:20:f0:f9:51:52:75:b2:e7:73:e1:db:da:09:
54:a6:91:aa:36:c6:8e:8c:a8:83:43:c7:fd:65:30:ea:a0:a6:
da:44:bd:81:19:02:c4:d0:2f:37:24:8b:40:59:66:93:db:62:
a4:70:89:29:ca:97:dd:44:3e:a1:f7:e0:65:94:c3:62:b6:f7:
eb:d2:4c:68:6a:ff:10:21:b0:28:bf:a1:e9:d2:54:71:c5:71:
1b:87:45:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGL8S+8RKYOc82idcu66TmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MmIxYjVjMDc1YzNkM2JkZmEzNTI1ZDQ3NmIxYjI4Njdj
MmEyY2EwHhcNMjUwNjA2MTcwMDI0WhcNMjUwNjA3MTcwMDI0WjAzMTEwLwYDVQQD
Eyg4ZTkyNmY0NjE3NmMyYmQ5NjJmMTY4YTgwZDVhMDQwYWQ2NzYyMjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfWhdwH4hhmPsoQNzzHdczH9JY0X
GwjpTq5q9y5KSvvNYE/TWh+w9V5hxjxRpNDHXwBPCcoB3xviswqp6GPqEDgeKXPQ
Phcf8s9JyMYxitBMCHY9uA/q0svmAzYWwtLhfItV5ei+VBPgi6SBwLAaKuiqNbeN
g455sTyKTx2O72dBED3J8YoOuhiZWhT9YGkJeGC0jKgFOAshnn8U7N1uy1TgEhsc
TgMatq5RXkkQ4coUz2MB00WZ+w1cr+tpXvXdrc424sOjUh3UR0jAZ5Ponq0iykNh
pHEbMwNYx9DT2Di0Ry/vUH53fais2qoO6fUdSv+zOZjZyLPA5hFLXi9kCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6Sb0YXbCvZYvFoqA1aBArWdiINMB8GA1UdIwQY
MBaAFHQrG1wHXD0736NSXUdrGyhnwqLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZENzYlhBZGNQVHZmbzFKZFIyc2JLR2ZDb3NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yMDJhNzktNWJmZS00YTQ4LWE3Zjkt
NDE0MTk2YWM2NDZlLzEvZENzYlhBZGNQVHZmbzFKZFIyc2JLR2ZDb3NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8yMDJhNzktNWJmZS00YTQ4LWE3ZjktNDE0MTk2YWM2NDZl
LzEvZENzYlhBZGNQVHZmbzFKZFIyc2JLR2ZDb3NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKR63IoU
OnKmbPvV8aurGJ9csUCfFYu7S5f6Ed8kN7okCTngEvA1iRimf5LA7GZk2y4lvzw8
TADd3d7btFcRfg1RpO/BnG6UwftGJTuOeCkXYWiZDkB8Hew0/88qTC6ghnpYBsym
j8V8nE3NzIcEMlJaOihBCY81wA8RBrfRfuoOAeMLNBbRQPvEctfWjvKRNMXIclPL
rvD+5Jlh2abM1E4WppGcNGsg8PlRUnWy53Ph29oJVKaRqjbGjoyog0PH/WUw6qCm
2kS9gRkCxNAvNySLQFlmk9tipHCJKcqX3UQ+offgZZTDYrb369JMaGr/ECGwKL+h
6dJUccVxG4dFhQ==
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:33:44 2025 by rpki-client