Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier: B6Mye8cg1Se4MxmYO98TykisfVSD3jq6IrBH2BoG/ys=
Subject key identifier: D8:BF:0A:3C:EF:37:7C:C4:35:1B:DB:5D:8E:63:D5:19:75:02:C4:62
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial: 019658DD366384D9F65453C55DE380EC3C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number: 0843
Signing time: Mon 21 Apr 2025 15:00:14 +0000
Manifest this update: Mon 21 Apr 2025 15:00:14 +0000
Manifest next update: Tue 22 Apr 2025 15:00:14 +0000
Files and hashes: 1: NOXjVjJhFkrwhntmdhaI015mrJA.roa (hash: 0zhl6bNJIqtyw3r+CngdcF4zpHGL2Q4MHDezzg25GbA=)
2: T3NYMawRHngwhI3EFd9dMZQSV1E.roa (hash: f99KOEwXdj6H3ZJRNRBeTA3dMK19zszZZ6xzWHN3tPk=)
3: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: PskwwucYZqgbStt7P9H6Nb4cD9vDt/j8OFXlMWe8Vg0=)
4: o1Invfm5a-IuNysIWHt4ChcWwgI.roa (hash: gMX4tPW+RL6Xt4ksxgpRLp72pxNXeej67eQtVQ5iB/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 15:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:36:63:84:d9:f6:54:53:c5:5d:e3:80:ec:3c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
Validity
Not Before: Apr 21 15:00:14 2025 GMT
Not After : Apr 22 15:00:14 2025 GMT
Subject: CN=d8bf0a3cef377cc4351bdb5d8e63d5197502c462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1b:d1:e8:aa:19:ed:9b:bd:ce:7d:fa:a8:26:
cf:29:cb:f0:32:a9:31:21:e8:04:2d:48:87:88:d8:
2e:83:1b:6f:b1:1d:51:0a:a5:07:a7:75:66:6c:88:
01:99:98:2f:45:f0:c3:5e:18:e3:42:29:97:1a:e0:
af:2c:a5:a9:17:87:dd:7b:87:cb:de:96:06:79:83:
46:43:e9:d6:53:4f:8c:63:3e:a8:59:ea:6d:6b:39:
a4:1b:35:46:7b:a4:2a:c8:bb:26:0f:44:0c:44:03:
e9:b6:fb:22:89:b9:d9:a5:79:85:ba:f4:98:3d:aa:
d8:57:17:94:00:76:a1:c6:16:7f:eb:08:fb:49:96:
ad:3d:26:ba:d5:b0:84:f1:b2:8a:8c:cd:25:43:0a:
02:b8:f4:6a:15:0c:d3:f2:f2:b5:55:9a:fc:cc:31:
c9:9b:8d:3c:d5:f4:01:09:f8:02:01:a3:06:46:59:
a3:c4:92:72:87:32:74:41:1d:b2:33:14:6c:92:73:
85:20:83:40:0e:12:af:c7:70:a3:2b:7e:e4:76:7a:
e6:d4:d0:33:c6:82:51:dc:a3:8f:bc:e7:03:f0:1a:
a4:55:ab:ab:0a:5c:8b:df:88:51:0d:e0:39:5d:a8:
0f:6c:12:7a:76:21:6c:9d:aa:c6:f5:5d:f4:f5:a0:
d5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BF:0A:3C:EF:37:7C:C4:35:1B:DB:5D:8E:63:D5:19:75:02:C4:62
X509v3 Authority Key Identifier:
keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b6:0d:1b:bc:9a:19:f3:d2:eb:70:df:1f:ff:a2:9a:a0:5b:
58:19:4b:99:bb:c5:e8:76:fd:ad:d2:f8:8d:cf:b9:6e:cd:63:
d6:92:8c:0e:22:91:3b:e5:1f:e5:b6:88:2d:71:ea:55:9f:9e:
6a:10:84:44:af:6d:af:10:a1:19:35:23:4a:70:f5:22:d9:5c:
c9:66:3a:52:71:68:55:92:a7:33:b0:93:a1:e9:94:f5:3a:2f:
32:f3:0c:61:e9:0f:ed:7c:f3:87:ec:df:1f:e3:64:76:e7:4a:
e1:73:67:ac:00:1a:0a:a8:20:7b:48:5d:53:95:05:c9:bc:61:
c6:bb:eb:ff:a4:7b:6b:b1:82:96:44:41:2f:ba:93:58:0c:fe:
72:a4:b5:04:82:03:6d:58:d1:d0:ed:58:d6:5a:5c:27:74:1e:
11:03:78:bc:d0:3e:fb:a2:19:9e:7d:5f:dc:bb:e0:c3:b8:f1:
e6:00:d5:56:da:75:05:b6:44:a7:81:12:9f:4b:f2:dc:67:7b:
c5:b7:a8:4a:ca:12:e8:d5:71:b1:50:18:65:e2:d1:7d:6c:24:
1e:4a:80:58:9b:30:0b:6f:f8:73:ff:cd:26:7a:40:4d:d3:41:
b8:92:84:ca:2e:08:a6:8a:dc:6e:14:c8:43:e1:89:7c:8c:88:
33:56:93:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZY3TZjhNn2VFPFXeOA7Dw2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwOTgwYjYwZTBkMzBlNDk4ZGUxYmFhNjQ1YTFiZTU3YTk1
MjA0OWQwHhcNMjUwNDIxMTUwMDE0WhcNMjUwNDIyMTUwMDE0WjAzMTEwLwYDVQQD
EyhkOGJmMGEzY2VmMzc3Y2M0MzUxYmRiNWQ4ZTYzZDUxOTc1MDJjNDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBvR6KoZ7Zu9zn36qCbPKcvwMqkx
IegELUiHiNgugxtvsR1RCqUHp3VmbIgBmZgvRfDDXhjjQimXGuCvLKWpF4fde4fL
3pYGeYNGQ+nWU0+MYz6oWeptazmkGzVGe6QqyLsmD0QMRAPptvsiibnZpXmFuvSY
ParYVxeUAHahxhZ/6wj7SZatPSa61bCE8bKKjM0lQwoCuPRqFQzT8vK1VZr8zDHJ
m4081fQBCfgCAaMGRlmjxJJyhzJ0QR2yMxRsknOFIINADhKvx3CjK37kdnrm1NAz
xoJR3KOPvOcD8BqkVaurClyL34hRDeA5XagPbBJ6diFsnarG9V309aDVMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNi/CjzvN3zENRvbXY5j1Rl1AsRiMB8GA1UdIwQY
MBaAFHCYC2Dg0w5JjeG6pkWhvlepUgSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNTZjMTEtMjVlMS00OWM4LTg4NjMt
N2YzN2I3NzhjMDExLzEvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kNTZjMTEtMjVlMS00OWM4LTg4NjMtN2YzN2I3NzhjMDEx
LzEvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7YNG7ya
GfPS63DfH/+imqBbWBlLmbvF6Hb9rdL4jc+5bs1j1pKMDiKRO+Uf5baILXHqVZ+e
ahCERK9trxChGTUjSnD1ItlcyWY6UnFoVZKnM7CToemU9TovMvMMYekP7Xzzh+zf
H+NkdudK4XNnrAAaCqgge0hdU5UFybxhxrvr/6R7a7GClkRBL7qTWAz+cqS1BIID
bVjR0O1Y1lpcJ3QeEQN4vNA++6IZnn1f3Lvgw7jx5gDVVtp1BbZEp4ESn0vy3Gd7
xbeoSsoS6NVxsVAYZeLRfWwkHkqAWJswC2/4c//NJnpATdNBuJKEyi4IporcbhTI
Q+GJfIyIM1aTug==
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:05:34 2025 by rpki-client