Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
File: U0eCGSFVj2agN_6coNzBBGz0hOA.mft (raw, json)
Hash identifier: DSUSvuiNavj3KVnQ8DZTZ3sAOG/4FmZ4/tbbV0ChvEU=
Subject key identifier: E3:CB:1B:2C:A8:68:B2:D8:F5:E8:D4:ED:24:41:73:C7:26:88:16:37
Authority key identifier: 53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0
Certificate issuer: /CN=5347821921558f66a037fe9ca0dcc1046cf484e0
Certificate serial: 01964D7F22D269278D2D76C09B75CA1CDD3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
Manifest number: 14F6
Signing time: Sat 19 Apr 2025 10:01:39 +0000
Manifest this update: Sat 19 Apr 2025 10:01:39 +0000
Manifest next update: Sun 20 Apr 2025 10:01:39 +0000
Files and hashes: 1: B4WLDJveFZVT_m8u5hStR6xu-pU.roa (hash: Nm6S6CMIoGZCCHyW+OnF60p//0+/EWirysqpstDuGNc=)
2: U0eCGSFVj2agN_6coNzBBGz0hOA.crl (hash: IDB7pCUovWK/b2Md+CKV9MWV9Ma62w7HnVcU3Qf9oPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7f:22:d2:69:27:8d:2d:76:c0:9b:75:ca:1c:dd:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5347821921558f66a037fe9ca0dcc1046cf484e0
Validity
Not Before: Apr 19 10:01:39 2025 GMT
Not After : Apr 20 10:01:39 2025 GMT
Subject: CN=e3cb1b2ca868b2d8f5e8d4ed244173c726881637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c0:c9:32:26:5d:e2:1d:d2:c4:8b:cd:61:c5:
2e:30:ac:e8:e7:c9:a0:e0:38:4f:d8:07:bd:52:ca:
79:95:07:34:7e:b7:a2:8b:0b:77:d2:6d:bf:ee:1d:
f6:26:52:9f:cc:50:39:74:85:68:77:e9:7f:4b:41:
21:3e:9a:76:c5:3e:22:22:56:f7:1f:4e:31:16:f4:
9f:38:48:eb:67:1d:8e:03:dd:d0:59:48:07:d2:db:
9d:f4:f0:ea:49:ca:95:07:65:9d:1d:72:31:c6:94:
d0:62:e7:bd:f5:dc:87:21:1d:04:da:29:cf:b0:8d:
d7:ba:cd:ce:07:ae:a4:06:33:42:84:07:24:84:e0:
2c:cf:56:ff:3a:79:a5:4b:e4:2d:5f:a8:aa:2f:c9:
e1:b2:ca:a7:4f:91:31:58:47:2b:bf:dd:eb:f5:b6:
be:41:35:5b:09:b2:b3:7f:53:01:1d:85:d3:fe:09:
fd:11:25:4b:6b:61:cf:95:5d:fc:07:8b:80:46:3c:
ba:43:b7:2a:67:98:16:be:f4:1e:4b:c7:11:0b:c0:
98:be:d1:70:4d:62:49:fe:ef:a1:7a:87:8e:70:bc:
b1:a9:55:ea:21:44:bf:cb:52:e3:af:72:a3:37:35:
e5:b2:07:7b:ac:c4:49:28:be:2d:39:f0:81:e6:65:
73:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CB:1B:2C:A8:68:B2:D8:F5:E8:D4:ED:24:41:73:C7:26:88:16:37
X509v3 Authority Key Identifier:
keyid:53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:80:de:1a:da:71:2b:74:dc:b6:d7:1e:72:13:fd:25:71:ae:
92:4d:6e:64:4b:7b:01:62:5f:cc:c7:cb:9e:57:cd:32:c1:1b:
13:64:9f:94:56:f9:5c:3a:0f:44:d4:fe:69:7a:6f:43:0f:d7:
0e:0d:c3:0e:c6:14:44:2d:d1:b6:f5:ca:03:8e:84:11:b7:bd:
5a:2a:e6:e6:c1:dc:df:53:9b:9f:7a:c0:57:91:43:0a:d4:ce:
46:79:e1:e8:80:40:b4:02:db:dd:0b:c5:d8:a1:6a:04:37:60:
94:28:25:59:33:f8:d7:86:b0:22:a8:05:ae:a2:6e:e4:8b:9e:
b3:9c:1f:22:ee:4b:52:2e:e9:f3:5f:18:d1:08:74:8d:db:f4:
5e:d1:0e:36:11:c9:79:59:50:6f:c5:b0:25:c6:3a:01:a4:d2:
cb:d4:3e:9b:9a:12:60:9c:0e:32:02:c1:24:f9:7c:4c:03:40:
e6:37:ca:14:36:fd:48:5c:c9:8c:81:b1:f8:05:78:9e:d0:7f:
cf:75:09:9a:05:c9:7b:cb:05:6b:6d:17:7e:a9:b7:e6:60:25:
61:b4:95:b1:99:95:76:60:c1:36:dd:37:16:0f:a9:41:fa:9a:
7f:22:40:d8:28:9b:d5:a7:6a:f9:33:4d:ea:9f:ea:f6:56:38:
27:66:8c:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfyLSaSeNLXbAm3XKHN07MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNDc4MjE5MjE1NThmNjZhMDM3ZmU5Y2EwZGNjMTA0NmNm
NDg0ZTAwHhcNMjUwNDE5MTAwMTM5WhcNMjUwNDIwMTAwMTM5WjAzMTEwLwYDVQQD
EyhlM2NiMWIyY2E4NjhiMmQ4ZjVlOGQ0ZWQyNDQxNzNjNzI2ODgxNjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycDJMiZd4h3SxIvNYcUuMKzo58mg
4DhP2Ae9Usp5lQc0freiiwt30m2/7h32JlKfzFA5dIVod+l/S0EhPpp2xT4iIlb3
H04xFvSfOEjrZx2OA93QWUgH0tud9PDqScqVB2WdHXIxxpTQYue99dyHIR0E2inP
sI3Xus3OB66kBjNChAckhOAsz1b/OnmlS+QtX6iqL8nhssqnT5ExWEcrv93r9ba+
QTVbCbKzf1MBHYXT/gn9ESVLa2HPlV38B4uARjy6Q7cqZ5gWvvQeS8cRC8CYvtFw
TWJJ/u+heoeOcLyxqVXqIUS/y1Ljr3KjNzXlsgd7rMRJKL4tOfCB5mVzuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPLGyyoaLLY9ejU7SRBc8cmiBY3MB8GA1UdIwQY
MBaAFFNHghkhVY9moDf+nKDcwQRs9ITgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTBlQ0dTRlZqMmFnTl82Y29OekJCR3owaE9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85NGVjYzQtZjRmZC00ZmNlLTgwNTQt
ZWQxNzc0YWRiZjJmLzEvVTBlQ0dTRlZqMmFnTl82Y29OekJCR3owaE9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85NGVjYzQtZjRmZC00ZmNlLTgwNTQtZWQxNzc0YWRiZjJm
LzEvVTBlQ0dTRlZqMmFnTl82Y29OekJCR3owaE9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYDeGtpx
K3TcttcechP9JXGukk1uZEt7AWJfzMfLnlfNMsEbE2SflFb5XDoPRNT+aXpvQw/X
Dg3DDsYURC3RtvXKA46EEbe9Wirm5sHc31Obn3rAV5FDCtTORnnh6IBAtALb3QvF
2KFqBDdglCglWTP414awIqgFrqJu5Iues5wfIu5LUi7p818Y0Qh0jdv0XtEONhHJ
eVlQb8WwJcY6AaTSy9Q+m5oSYJwOMgLBJPl8TANA5jfKFDb9SFzJjIGx+AV4ntB/
z3UJmgXJe8sFa20Xfqm35mAlYbSVsZmVdmDBNt03Fg+pQfqafyJA2Cib1adq+TNN
6p/q9lY4J2aM9A==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:23:00 2025 by rpki-client