Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json)
Hash identifier: +DP46hxgXSv4Q+v6/lxzHy/5p6pDPVFFGAxTk+et7c4=
Subject key identifier: 25:55:6E:AD:A4:0A:5F:0C:31:80:86:BB:F6:07:81:F8:AB:3F:A7:6C
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 01961321127AF132179024384E1CECB85D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
Manifest number: 156A
Signing time: Tue 08 Apr 2025 02:00:56 +0000
Manifest this update: Tue 08 Apr 2025 02:00:56 +0000
Manifest next update: Wed 09 Apr 2025 02:00:56 +0000
Files and hashes: 1: 2bWjaCPUw-X9yUtaNeVHbtBR4RY.roa (hash: wUmEh6plZKTlbe1wgPAmlbbKo/l6BC2G8XZaRSw27eo=)
2: 58pgEzEV4itxzFdqyuzKp1koy9E.roa (hash: tH6QFOaJ/p4keTuKKE46gn/xyoU7W70E/+/4aSveeLE=)
3: AGmA39KwwTaMo71xV9rDHmreSZs.roa (hash: Ryun1mCIWyFFcbzTBG9eqylu4psXL7qEbax/r+ERVGA=)
4: BL8I68n0S5EatljR0k4XZsKHA24.roa (hash: iOoLcUwIbkzuVCDzFIpNedtLQogspd3V7HdfhJiPZWg=)
5: BaSPDYM6MErqXQc7hbonxO3hOP4.roa (hash: AgREuMxC9LWBmMGpuhqiDAzwfQdn2bSFaeGwQAYr9Ig=)
6: BxtsjwaylqDgyShxS785H67TnbY.roa (hash: tVOA9jGSji8cVYr6ivVtJAHBG6QSJ270Wt89fBmSzFA=)
7: DskJ3QKfzbRX76wY5Y62eU4erR4.roa (hash: Om0rFiAWDXCVX1P62G7M/6mKMjWs5VmA/8EV8q++G+4=)
8: HaOpzJMZyGr1VwIN0yxcsvqMx_k.roa (hash: FGjU24P26y4GfKNamGPK1MiLr1Hu7PhFhnVoCJb38j8=)
9: InrDEGCfKU8jJed9KnH2vx-d78Y.roa (hash: NgTZkZMP5rtVotSPrvAaVc/98gXGQA3bDBX67D3E0+U=)
10: JgPouA_jmpHV5hDbLij9YLal33o.roa (hash: 7YwHFYuVdRf9mWnshpfvLYgyOJrwWP6qz4/AQwJWL+Y=)
11: JkkRBzU6KqC4iLmQvNFLg1pZbqQ.roa (hash: qQIWTHDKXS9dJmmc6TGCroCf2SQogHaE6HLb5eCxiv8=)
12: KrudkOICJ6o23J172JFVZgrTE8Q.roa (hash: LOElKXAo1zxfoDmHY1gKUaU9NBQHXV4qqyUFnydMwws=)
13: NcVlekWCiF1MqD0pMFbt8sBm4xk.roa (hash: zMGQInzAKzEgCcQ8IjKoVLyb75jlj1C6HwQ11XN+6E8=)
14: OTxCQduV-uqIoeFa9Cq4lhI0Plg.roa (hash: SntazOe0GcprBZUsg09GtT5xfUWIyPvf8ofxR/XlEEQ=)
15: Q-cb4AjNFoWCznmTrkTd9_2MtQ8.roa (hash: 2USY3xNUmziDvmtALMRGKfhIKkZceNSRez2thcTQVsI=)
16: Q7A84Re88TEGuWZsIYTnNdLRtqQ.roa (hash: 62XanU5j/TVPu9hICaR497zqHzXQbEaOUBFnOheHiVs=)
17: U1dZiJQ-sCfZlcybNwHIMoVg7mU.roa (hash: V0t6ji4+oFj9qeofPxTRdRG8LndbBllIM0CiNf6vz94=)
18: Vb_RpJ-2VDeLhxtyu1EnKEq8cTI.roa (hash: H3HLjc2fYtCp8h81NRRKqe5UGP2PQxcS5tkL3rkueM8=)
19: Xd0NxuFWE7SrjCz2XQTm-U1qFF4.roa (hash: KWb4JfeZyHfW6hW0TUPUkEkeyeCxBn40dOa4ZcgMqfE=)
20: Y5ftqTR9TzbpNFX0jR_lEw_2cbw.roa (hash: uZQd1l561DGTXpFyA9bvh0eURkUHs50E2fAXnc2P9cU=)
21: YMY8SkwxP4m-8h-3OwtOnhDx180.roa (hash: PqKx3y2u4bSihph2gbhVet/cNiHB7Rg66rh7uA+7Zwk=)
22: Z3imJD5C2mxpSzOVHM29bAYX1wQ.roa (hash: moH5xKYZJc8UlbCB5NGLSkdO+EeL9UBqJaguHu9lcVE=)
23: acgWZk7QsmW2aj_bCsaJjnM5BPc.roa (hash: HUCf1r1zAbFUe3WPNLagsH4LPR/2P6TikCHZR4iIaH0=)
24: bmqkA80pr4vo9LBw5jf9WENmXyM.roa (hash: GfCiAUJS2zYIKRhmR2J5s7yCccX26jfET5bMvpXh8wA=)
25: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: tZ7jD/kXuo/MoHZ+M4qOvrENz+1M/cWV+yWD6vjJutU=)
26: hHcyNgOmxrhkn3DhNfaigHX94g8.roa (hash: B65e/+ApHFBG2pXE/i7USQDriRyCgT5A9AG/tPBTPh8=)
27: mFTOVg0gctQNNx0jyIBOYgUT6fg.roa (hash: k28x1ZIzqND1Svau80gR07/HyKpYAy94wpGkGRTlP0U=)
28: mJ-PnuZffkBvMXhplb_lo8QtEyc.roa (hash: cnmwpchuXHms2rojiNGzRDXyf/+oMqIEDUIf1Odq2us=)
29: qpXqPI2Lm4U2S7PWScdAxzqLkns.roa (hash: Bzilqha0faSvo6uHWLbDknjpYoOKZ5PiVLmh9/Jq3LE=)
30: uyXQtDlM4ZwnqdZAtXrlk36c7e4.roa (hash: YXJ2U0awsdiqeieBuuyLP082uokuubFdWDICnN4d+bI=)
31: zAHjS8tPU8HEmTCCDINtaHrVJIM.roa (hash: 0QsNUBchy9W2sgLs15kxSXqG8C8jBUSbYSVE7+dh+t0=)
32: zDVyzwRVn1CT-RP9xlaFiJNPMHE.roa (hash: OeT1n7LBHt2BLA6NJKyqqdEda9ZFBBnrzNwADjp7exA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:21:12:7a:f1:32:17:90:24:38:4e:1c:ec:b8:5d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Apr 8 02:00:56 2025 GMT
Not After : Apr 9 02:00:56 2025 GMT
Subject: CN=25556eada40a5f0c318086bbf60781f8ab3fa76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:54:a4:83:c6:a7:2f:eb:ca:28:fc:a0:ca:
26:c2:5c:0a:2f:cd:e3:94:5a:21:7d:0c:0b:c8:d7:
f7:ba:7d:2f:38:09:3b:c8:2d:f2:7e:18:84:8a:bb:
b4:30:25:2b:73:81:ae:2b:84:62:99:34:8e:06:21:
47:28:e8:b7:d1:97:a7:f0:2d:ea:04:e8:16:92:69:
cd:e1:ee:f3:c2:7c:c2:01:84:c2:56:15:fa:e8:17:
00:ec:e0:53:a3:5b:72:2a:e5:64:f8:ca:64:fa:51:
83:71:81:1a:30:1d:3a:09:dc:36:86:db:6e:00:8d:
76:c4:2d:c9:d2:5f:a4:d9:8c:79:89:13:b7:ce:2d:
d2:87:54:f8:8c:cd:ce:88:ef:33:4d:6e:4c:ab:64:
59:03:37:20:1f:e2:8d:25:b4:06:e8:19:a5:e1:d2:
c3:29:b3:1a:46:e9:7b:ae:39:12:5e:db:64:1c:65:
48:ef:8d:fd:a6:1b:ba:6c:bb:0d:f3:2b:17:a9:6b:
23:08:e4:10:74:f3:46:81:4d:69:b1:b4:eb:5c:db:
c2:64:62:1c:e5:3f:5b:3d:7b:da:3e:67:36:69:37:
90:8a:4e:c2:49:aa:aa:d8:0f:b4:0f:9b:b8:18:9c:
59:f3:61:ae:bc:c6:d8:c0:a7:6f:c9:db:69:74:0e:
1f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:55:6E:AD:A4:0A:5F:0C:31:80:86:BB:F6:07:81:F8:AB:3F:A7:6C
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:1a:f6:9a:07:4e:88:09:66:73:a1:cb:8e:7c:24:a4:2e:b9:
57:c2:2b:b3:55:0c:a2:39:5b:aa:71:99:92:7a:57:2a:38:76:
8c:f4:57:ca:a4:28:f4:52:56:80:6e:dd:3b:04:f1:d6:ef:63:
d2:e8:58:8a:b3:d6:5c:c2:46:9b:83:98:44:20:a5:42:c9:2b:
6e:65:cc:a9:f5:47:ed:b3:6e:16:46:3f:0e:23:38:43:68:e8:
b4:36:f0:ef:90:09:4e:1f:62:ab:9b:3f:28:2f:a9:84:5f:b0:
27:d0:be:81:74:87:c5:b0:a2:c9:e7:26:12:19:ea:9e:a0:b8:
89:09:a9:04:b0:bf:ca:e3:98:a4:3e:85:ee:91:76:3d:87:0e:
4b:45:d2:5b:ae:67:41:7f:24:d8:a7:e9:e6:af:ac:3e:b4:1a:
9f:eb:65:de:0b:1f:bd:35:4b:e4:b0:27:bb:5e:f5:46:1c:ab:
65:0c:7b:37:fb:02:39:4c:d0:f3:e8:b3:5d:68:77:4f:ed:97:
d1:22:77:fc:14:62:73:77:ab:ce:65:ef:ea:2b:39:f4:5d:3e:
18:08:fe:7e:97:11:e5:05:00:f1:c9:74:ec:6a:75:b6:1b:a8:
ee:98:98:1a:07:ae:ea:df:fe:fd:93:de:eb:68:9f:d7:dd:c4:
85:a3:1e:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYTIRJ68TIXkCQ4ThzsuF1YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjUwNDA4MDIwMDU2WhcNMjUwNDA5MDIwMDU2WjAzMTEwLwYDVQQD
EygyNTU1NmVhZGE0MGE1ZjBjMzE4MDg2YmJmNjA3ODFmOGFiM2ZhNzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9ZUpIPGpy/ryij8oMomwlwKL83j
lFohfQwLyNf3un0vOAk7yC3yfhiEiru0MCUrc4GuK4RimTSOBiFHKOi30Zen8C3q
BOgWkmnN4e7zwnzCAYTCVhX66BcA7OBTo1tyKuVk+Mpk+lGDcYEaMB06Cdw2httu
AI12xC3J0l+k2Yx5iRO3zi3Sh1T4jM3OiO8zTW5Mq2RZAzcgH+KNJbQG6Bml4dLD
KbMaRul7rjkSXttkHGVI7439phu6bLsN8ysXqWsjCOQQdPNGgU1psbTrXNvCZGIc
5T9bPXvaPmc2aTeQik7CSaqq2A+0D5u4GJxZ82GuvMbYwKdvydtpdA4fZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVVbq2kCl8MMYCGu/YHgfirP6dsMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBr2mgdO
iAlmc6HLjnwkpC65V8Irs1UMojlbqnGZknpXKjh2jPRXyqQo9FJWgG7dOwTx1u9j
0uhYirPWXMJGm4OYRCClQskrbmXMqfVH7bNuFkY/DiM4Q2jotDbw75AJTh9iq5s/
KC+phF+wJ9C+gXSHxbCiyecmEhnqnqC4iQmpBLC/yuOYpD6F7pF2PYcOS0XSW65n
QX8k2Kfp5q+sPrQan+tl3gsfvTVL5LAnu171RhyrZQx7N/sCOUzQ8+izXWh3T+2X
0SJ3/BRic3erzmXv6is59F0+GAj+fpcR5QUA8cl07Gp1thuo7piYGgeu6t/+/ZPe
62if193EhaMeHQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:44:35 2025 by rpki-client