Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
File: 0PT6gHWHU7JDohZe3ep12-7oJsQ.mft (raw, json)
Hash identifier: WHoayQkYZ+12XzcMN/o5Htuv3yDiIwcYzsGv6vifUHQ=
Subject key identifier: 43:28:92:BF:1F:9A:0D:82:39:2B:F7:A6:26:27:A5:A7:E7:2C:4B:A3
Authority key identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
Certificate issuer: /CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Certificate serial: 01964AB4170141C5FFCEECB273421164882A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
Manifest number: 0FE4
Signing time: Fri 18 Apr 2025 21:00:38 +0000
Manifest this update: Fri 18 Apr 2025 21:00:38 +0000
Manifest next update: Sat 19 Apr 2025 21:00:38 +0000
Files and hashes: 1: 0PT6gHWHU7JDohZe3ep12-7oJsQ.crl (hash: bOXOeKrWbCVLx9wxta+t5mMEC+0/w5DFn9PPuoiYANA=)
2: dylc3WZzrjgV2VB-T70ps5y7_v8.roa (hash: CjiSp/7ghqmIWPlGrqN52h+3zV23QhuVF2kvnW7CFVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b4:17:01:41:c5:ff:ce:ec:b2:73:42:11:64:88:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Validity
Not Before: Apr 18 21:00:38 2025 GMT
Not After : Apr 19 21:00:38 2025 GMT
Subject: CN=432892bf1f9a0d82392bf7a62627a5a7e72c4ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:86:07:9a:c3:f4:e7:a8:b6:74:f8:da:a6:64:
f5:1f:79:0b:4e:c6:e0:11:76:de:45:51:ae:b5:8f:
35:6f:49:d8:74:d4:96:26:22:6a:6e:f9:9e:0e:a0:
4d:16:97:72:67:5f:2a:1d:6f:cb:46:1c:d4:31:3a:
69:ab:8d:70:55:6f:dc:e8:6e:32:dd:77:df:04:9b:
dd:98:10:57:8d:89:33:08:2d:98:9c:96:da:a6:c7:
cd:71:0c:34:ca:49:ff:cf:ca:01:8a:31:37:73:14:
45:fc:9f:ec:10:af:eb:cd:9a:cd:1e:d0:79:f9:40:
ab:d1:2c:5a:0b:5e:43:0c:cc:e4:df:a8:2a:99:12:
ef:ce:87:2f:47:e0:fc:7a:7d:90:90:cf:3c:6a:80:
4c:ce:c6:72:1b:51:d5:a9:60:9a:fc:60:a0:b6:63:
9a:21:64:bf:3c:14:5a:66:8a:d8:4c:37:51:f3:53:
fe:e4:38:bb:ce:77:49:08:a8:8d:db:4d:7d:ee:37:
9f:e9:0b:b5:f4:30:71:95:8b:e0:ef:c5:31:0c:3e:
4a:81:0c:e4:ba:f2:45:39:de:01:c5:d5:c6:b5:b0:
a4:76:59:68:41:ed:ce:b9:3b:ed:82:31:8d:92:5c:
b7:5b:98:d3:75:44:70:89:4c:12:55:8b:6d:af:63:
38:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:28:92:BF:1F:9A:0D:82:39:2B:F7:A6:26:27:A5:A7:E7:2C:4B:A3
X509v3 Authority Key Identifier:
keyid:D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:fd:cc:1c:bd:e1:09:59:63:b7:50:94:db:cd:f1:99:ff:f3:
ff:c1:18:86:04:eb:02:90:66:9b:9f:59:6a:be:18:6f:23:22:
a6:56:27:1b:84:4f:a6:d9:69:59:e3:b7:ef:80:8f:cf:6b:e3:
4d:ba:3d:3c:40:0e:b2:69:c2:ea:08:9f:2b:72:a8:9b:fb:79:
5f:85:de:75:e1:84:d7:2f:93:53:16:42:9e:11:bd:f3:94:da:
92:4e:fa:de:3d:4b:b6:49:b1:2a:e8:0b:c2:d1:41:e5:c7:37:
cf:a9:f1:5c:a9:e6:68:fd:3c:13:9a:d1:95:4f:26:3f:6f:0d:
21:bd:a9:99:47:51:52:53:6e:f4:0f:78:4e:36:06:a4:08:04:
4b:c3:9b:d8:d6:c4:69:a0:53:16:05:0c:f0:0e:c7:69:0d:29:
8a:9e:02:a0:fb:85:20:4d:d4:28:1b:5b:b3:d2:5e:bc:eb:84:
6d:be:b1:de:f7:e7:f9:68:cf:b5:e0:4d:60:80:a4:a6:73:4a:
74:f3:2f:c6:f1:d7:69:84:f0:64:16:90:52:2b:53:a2:4d:03:
1f:32:97:18:15:75:88:4b:ff:0e:ba:d1:12:d9:ee:34:e0:bf:
50:12:b1:38:d2:fb:ff:cf:8b:8f:e6:f6:4b:a1:58:ee:3f:c1:
ef:a4:dd:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKtBcBQcX/zuyyc0IRZIgqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjRmYTgwNzU4NzUzYjI0M2EyMTY1ZWRkZWE3NWRiZWVl
ODI2YzQwHhcNMjUwNDE4MjEwMDM4WhcNMjUwNDE5MjEwMDM4WjAzMTEwLwYDVQQD
Eyg0MzI4OTJiZjFmOWEwZDgyMzkyYmY3YTYyNjI3YTVhN2U3MmM0YmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oYHmsP056i2dPjapmT1H3kLTsbg
EXbeRVGutY81b0nYdNSWJiJqbvmeDqBNFpdyZ18qHW/LRhzUMTppq41wVW/c6G4y
3XffBJvdmBBXjYkzCC2YnJbapsfNcQw0ykn/z8oBijE3cxRF/J/sEK/rzZrNHtB5
+UCr0SxaC15DDMzk36gqmRLvzocvR+D8en2QkM88aoBMzsZyG1HVqWCa/GCgtmOa
IWS/PBRaZorYTDdR81P+5Di7zndJCKiN20197jef6Qu19DBxlYvg78UxDD5KgQzk
uvJFOd4BxdXGtbCkdlloQe3OuTvtgjGNkly3W5jTdURwiUwSVYttr2M4qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMokr8fmg2COSv3piYnpafnLEujMB8GA1UdIwQY
MBaAFND0+oB1h1OyQ6IWXt3qddvu6CbEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jYTVjMTktZTQ5Ni00OWU4LThiOTMt
NzJhMWYzNzcxOWJiLzEvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jYTVjMTktZTQ5Ni00OWU4LThiOTMtNzJhMWYzNzcxOWJi
LzEvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMf3MHL3h
CVljt1CU283xmf/z/8EYhgTrApBmm59Zar4YbyMiplYnG4RPptlpWeO374CPz2vj
Tbo9PEAOsmnC6gifK3Kom/t5X4XedeGE1y+TUxZCnhG985Takk763j1LtkmxKugL
wtFB5cc3z6nxXKnmaP08E5rRlU8mP28NIb2pmUdRUlNu9A94TjYGpAgES8Ob2NbE
aaBTFgUM8A7HaQ0pip4CoPuFIE3UKBtbs9JevOuEbb6x3vfn+WjPteBNYICkpnNK
dPMvxvHXaYTwZBaQUitTok0DHzKXGBV1iEv/DrrREtnuNOC/UBKxONL7/8+Lj+b2
S6FY7j/B76Tdfg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:13:33 2025 by rpki-client