Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
File: fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft (raw, json)
Hash identifier: xRJk+RaSgQ+niWsUQyxJlkJmjgQuC7iqV2d5rfouAws=
Subject key identifier: 79:B9:51:FD:00:46:3D:27:F6:F1:08:DD:9D:07:B6:E0:AC:3B:60:67
Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
Certificate issuer: /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Certificate serial: 019629728A42C033FA0CE90808C0BAE5FDB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
Manifest number: 02D8
Signing time: Sat 12 Apr 2025 10:01:34 +0000
Manifest this update: Sat 12 Apr 2025 10:01:34 +0000
Manifest next update: Sun 13 Apr 2025 10:01:34 +0000
Files and hashes: 1: ahfN64_p8VtI62YroQrVTvBrIO0.roa (hash: sZaDoXjnbfKoPFXFsVFkCxokaAJgn9I/0mc/e5HXWnI=)
2: fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl (hash: j8IegRfrIp4zfVAMrWPPOm8SRlq4Q+24l3/b63IEK0g=)
3: o9U5Dfyd-pSAin_ZdTXibSOZdr8.roa (hash: mqF6uwOJbIfnUqauX0VbeIR/n/OPtHF+diV/fjZGJJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:72:8a:42:c0:33:fa:0c:e9:08:08:c0:ba:e5:fd:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Validity
Not Before: Apr 12 10:01:34 2025 GMT
Not After : Apr 13 10:01:34 2025 GMT
Subject: CN=79b951fd00463d27f6f108dd9d07b6e0ac3b6067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:20:59:3c:29:23:36:f1:81:0b:65:e2:e1:
72:7e:be:94:51:2d:36:8a:e4:76:2a:75:89:e8:a7:
42:b2:58:48:70:1c:27:98:03:8a:e7:c3:41:6d:ad:
96:9c:b5:6a:c7:da:31:34:e8:bf:d4:b4:72:47:97:
e8:9d:47:44:3e:c5:c5:53:84:39:24:03:26:45:6a:
14:f4:02:15:70:4d:a9:e6:37:01:5e:8b:b3:01:3b:
b9:a7:ef:80:11:ca:06:0e:22:28:1d:e5:30:49:1f:
0e:dc:bf:e2:b9:32:cd:3c:5d:7c:06:0d:80:17:89:
3f:8a:53:ef:a0:c9:62:0e:4d:64:80:5c:02:fa:dd:
ce:2f:51:e8:da:1e:85:24:79:66:2f:a9:07:be:ab:
2a:2f:2d:38:9f:31:86:e6:c9:ca:50:87:ff:55:29:
e0:21:ac:f5:1c:3b:f7:45:fc:7e:0f:f1:f9:7d:af:
bd:cc:f9:15:e6:5d:48:c9:72:d2:ca:5e:f3:5b:0f:
36:59:bb:9f:7d:15:7c:d0:36:ca:8c:3c:38:28:dd:
b9:ba:69:4c:27:05:0b:3d:cb:89:a1:e3:10:48:5f:
d2:77:3c:05:12:74:a2:cb:a4:a8:c5:d1:d0:bb:b7:
af:b4:00:7e:c4:43:db:b8:7f:5c:16:7b:d9:cc:5d:
0f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B9:51:FD:00:46:3D:27:F6:F1:08:DD:9D:07:B6:E0:AC:3B:60:67
X509v3 Authority Key Identifier:
keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:4a:e0:d9:17:75:f4:fa:d4:fb:c6:b8:46:cc:ef:42:5f:e4:
29:ce:d7:ff:8f:56:50:28:71:b4:71:2b:d1:e7:18:68:e4:84:
5d:7f:0f:4c:aa:60:0d:ef:a0:a9:73:13:e2:40:69:a3:8e:de:
0b:13:86:26:12:0a:d2:31:cf:b1:be:06:52:6a:97:b9:bb:6f:
37:0d:00:39:10:ed:d7:95:95:bd:4c:01:17:a2:50:2a:fb:c5:
b9:52:b6:03:90:f7:06:eb:6e:3e:1a:df:2a:5d:e0:1a:db:4b:
03:0c:f0:ec:d4:bb:4f:3b:dc:6f:83:f3:2c:b5:e8:ec:b6:08:
6a:97:fa:3b:61:81:02:e1:9b:1b:9b:55:f9:bb:f9:17:14:7f:
50:98:99:78:17:ca:5a:10:7c:5a:2e:e5:d1:31:1a:9b:0c:67:
3e:56:2e:fd:78:65:63:f6:b1:79:46:d2:a8:4e:2f:4a:43:1d:
ab:81:99:8a:2e:a5:0a:b9:5c:ac:95:29:4a:e6:90:a9:cf:1e:
c3:6f:67:c3:ad:9b:29:46:c9:51:68:0c:ec:f6:58:fa:3b:9f:
39:b0:c8:28:3d:41:dd:dd:a1:9c:8d:a5:29:8e:76:a3:1f:36:
ca:76:8f:ab:d2:bf:da:20:76:d7:3d:f4:e4:ef:d4:79:c6:39:
fd:15:f6:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYpcopCwDP6DOkICMC65f24MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMmVhM2VjYWQ1YTQwMmI4ZmU1YTJhNjEzOGFmNjZhYWMy
NTdmZjkwHhcNMjUwNDEyMTAwMTM0WhcNMjUwNDEzMTAwMTM0WjAzMTEwLwYDVQQD
Eyg3OWI5NTFmZDAwNDYzZDI3ZjZmMTA4ZGQ5ZDA3YjZlMGFjM2I2MDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvsgWTwpIzbxgQtl4uFyfr6UUS02
iuR2KnWJ6KdCslhIcBwnmAOK58NBba2WnLVqx9oxNOi/1LRyR5fonUdEPsXFU4Q5
JAMmRWoU9AIVcE2p5jcBXouzATu5p++AEcoGDiIoHeUwSR8O3L/iuTLNPF18Bg2A
F4k/ilPvoMliDk1kgFwC+t3OL1Ho2h6FJHlmL6kHvqsqLy04nzGG5snKUIf/VSng
Iaz1HDv3Rfx+D/H5fa+9zPkV5l1IyXLSyl7zWw82WbuffRV80DbKjDw4KN25umlM
JwULPcuJoeMQSF/SdzwFEnSiy6SoxdHQu7evtAB+xEPbuH9cFnvZzF0PYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHm5Uf0ARj0n9vEI3Z0HtuCsO2BnMB8GA1UdIwQY
MBaAFH0uo+ytWkArj+WiphOK9mqsJX/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80NDc2NzctOTk3Mi00ZGY4LWI1MDgt
YjkxYjkyZDRkODAxLzEvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80NDc2NzctOTk3Mi00ZGY4LWI1MDgtYjkxYjkyZDRkODAx
LzEvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUrg2Rd1
9PrU+8a4RszvQl/kKc7X/49WUChxtHEr0ecYaOSEXX8PTKpgDe+gqXMT4kBpo47e
CxOGJhIK0jHPsb4GUmqXubtvNw0AORDt15WVvUwBF6JQKvvFuVK2A5D3ButuPhrf
Kl3gGttLAwzw7NS7Tzvcb4PzLLXo7LYIapf6O2GBAuGbG5tV+bv5FxR/UJiZeBfK
WhB8Wi7l0TEamwxnPlYu/XhlY/axeUbSqE4vSkMdq4GZii6lCrlcrJUpSuaQqc8e
w29nw62bKUbJUWgM7PZY+jufObDIKD1B3d2hnI2lKY52ox82ynaPq9K/2iB21z30
5O/UecY5/RX2gQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 16:44:23 2025 by rpki-client