Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
File: cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft (raw, json)
Hash identifier: V8QSl03bY3jRN4XevSyacgwfKjqEl7AGksywoMz252Y=
Subject key identifier: BB:62:3E:90:8C:69:88:1E:B4:C1:0A:B0:B0:D7:A5:33:06:31:1E:4E
Authority key identifier: 70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
Certificate issuer: /CN=70c12309ee98d442ec8a7650127eb0e621894df1
Certificate serial: 01960FE97531C2D0422612DA95F03191ED42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
Manifest number: 14DA
Signing time: Mon 07 Apr 2025 11:01:20 +0000
Manifest this update: Mon 07 Apr 2025 11:01:20 +0000
Manifest next update: Tue 08 Apr 2025 11:01:20 +0000
Files and hashes: 1: 8Lh_EZUjo4d8T-WMsVc5_oid1Mo.roa (hash: cbyV06wf44D7SymSNRd5DeNmzcspVDJoD1qFeH8lxNU=)
2: cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl (hash: 7M8S9fT3p/V5j8F3SeegGfN6vcFN+d/CPNSN6+hyEh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:e9:75:31:c2:d0:42:26:12:da:95:f0:31:91:ed:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c12309ee98d442ec8a7650127eb0e621894df1
Validity
Not Before: Apr 7 11:01:20 2025 GMT
Not After : Apr 8 11:01:20 2025 GMT
Subject: CN=bb623e908c69881eb4c10ab0b0d7a53306311e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4d:be:7d:b5:8a:c3:1e:04:02:4e:24:55:4c:
2f:4e:01:d1:54:f7:fb:b8:9a:07:7a:f2:1a:a4:12:
69:a3:e3:51:c6:2c:89:a5:eb:66:3a:32:3b:8c:b8:
9a:33:04:18:75:1d:9d:2a:24:19:aa:04:57:fd:7f:
da:aa:b4:a7:2a:ec:7e:3b:a6:f0:53:cb:62:5c:08:
73:6d:fa:e0:1b:7d:18:81:3b:9c:4f:af:ef:73:5d:
9e:1c:1e:8d:6a:08:22:94:15:40:1d:fd:5c:b3:2e:
b8:df:97:ac:98:da:75:62:d1:5c:f6:94:e0:9a:b4:
d3:fd:5b:96:e0:22:8d:1b:a1:7d:41:9d:b8:63:89:
d3:21:ea:83:47:b2:b9:54:d6:1e:bd:3b:2f:38:e7:
83:e0:95:dd:7c:e1:11:19:79:b0:e9:24:cf:b0:c6:
a7:1e:c1:6f:2d:22:7d:d7:6a:f1:28:ed:a8:ae:e5:
9c:e4:37:73:8f:dd:ee:b0:99:d8:a8:69:2a:a8:85:
c7:ca:66:35:17:ac:b8:53:34:a8:db:d9:18:9a:ef:
dd:75:fb:98:24:e9:52:19:54:0e:0c:23:e0:38:1f:
b2:33:6a:82:e0:be:e3:b4:db:b3:80:68:fe:af:9b:
9e:4a:99:45:9b:1f:f4:9d:d7:7b:28:e0:c1:fc:4f:
85:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:62:3E:90:8C:69:88:1E:B4:C1:0A:B0:B0:D7:A5:33:06:31:1E:4E
X509v3 Authority Key Identifier:
keyid:70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4f:cd:15:ab:84:60:b5:d7:8b:b8:39:3d:e0:90:c3:1d:6e:
24:70:10:78:f0:19:94:78:d9:05:c9:d2:0f:97:ed:86:af:fc:
6d:5d:29:34:4c:83:6f:f7:fa:c9:2d:98:af:60:22:c9:96:e5:
31:bb:ba:d2:17:da:2f:d1:56:2f:e6:99:d1:01:bc:fe:e9:12:
e7:ee:ac:2e:03:b5:24:00:80:81:ac:2b:60:02:fb:5c:bd:17:
67:a5:d4:37:92:68:47:33:df:09:0f:f2:50:88:ec:e1:4c:9a:
90:a9:6d:be:47:a2:90:0c:73:4c:45:72:04:e6:53:83:64:63:
8d:36:0b:d5:e3:4d:2e:f2:70:58:2d:4a:a7:ed:7b:70:d9:a4:
9a:39:7c:61:c7:dc:29:3b:4b:a3:36:60:3f:5a:89:6b:0b:97:
08:64:ed:0a:42:6b:8e:15:79:a6:5e:18:53:0d:16:2d:85:10:
d5:a2:1c:ae:53:a6:7b:b0:b5:d0:50:af:55:19:0c:47:d8:4e:
be:36:85:1d:13:b0:90:e3:32:ef:7e:72:70:71:8b:cb:db:bf:
29:5a:e9:ba:9c:6f:3f:d1:d7:80:3e:4c:f5:b9:db:af:b9:ce:
6c:e4:73:82:70:7a:09:0a:12:ff:35:26:c2:e0:d7:53:0f:9a:
85:04:f1:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYP6XUxwtBCJhLalfAxke1CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYzEyMzA5ZWU5OGQ0NDJlYzhhNzY1MDEyN2ViMGU2MjE4
OTRkZjEwHhcNMjUwNDA3MTEwMTIwWhcNMjUwNDA4MTEwMTIwWjAzMTEwLwYDVQQD
EyhiYjYyM2U5MDhjNjk4ODFlYjRjMTBhYjBiMGQ3YTUzMzA2MzExZTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4U2+fbWKwx4EAk4kVUwvTgHRVPf7
uJoHevIapBJpo+NRxiyJpetmOjI7jLiaMwQYdR2dKiQZqgRX/X/aqrSnKux+O6bw
U8tiXAhzbfrgG30YgTucT6/vc12eHB6NaggilBVAHf1csy6435esmNp1YtFc9pTg
mrTT/VuW4CKNG6F9QZ24Y4nTIeqDR7K5VNYevTsvOOeD4JXdfOERGXmw6STPsMan
HsFvLSJ912rxKO2oruWc5Ddzj93usJnYqGkqqIXHymY1F6y4UzSo29kYmu/ddfuY
JOlSGVQODCPgOB+yM2qC4L7jtNuzgGj+r5ueSplFmx/0ndd7KODB/E+F1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtiPpCMaYgetMEKsLDXpTMGMR5OMB8GA1UdIwQY
MBaAFHDBIwnumNRC7Ip2UBJ+sOYhiU3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY01FakNlNlkxRUxzaW5aUUVuNnc1aUdKVGZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi82OWIyOTAtZDM3NS00ZTg5LThmYjUt
ZmIyMzVkYmE3YjE4LzEvY01FakNlNlkxRUxzaW5aUUVuNnc1aUdKVGZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi82OWIyOTAtZDM3NS00ZTg5LThmYjUtZmIyMzVkYmE3YjE4
LzEvY01FakNlNlkxRUxzaW5aUUVuNnc1aUdKVGZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWk/NFauE
YLXXi7g5PeCQwx1uJHAQePAZlHjZBcnSD5fthq/8bV0pNEyDb/f6yS2Yr2AiyZbl
Mbu60hfaL9FWL+aZ0QG8/ukS5+6sLgO1JACAgawrYAL7XL0XZ6XUN5JoRzPfCQ/y
UIjs4UyakKltvkeikAxzTEVyBOZTg2RjjTYL1eNNLvJwWC1Kp+17cNmkmjl8Ycfc
KTtLozZgP1qJawuXCGTtCkJrjhV5pl4YUw0WLYUQ1aIcrlOme7C10FCvVRkMR9hO
vjaFHROwkOMy735ycHGLy9u/KVrpupxvP9HXgD5M9bnbr7nObORzgnB6CQoS/zUm
wuDXUw+ahQTxQw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:12:41 2025 by rpki-client