Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
File: fVllljYInjIyRpdinCGNo4orZz0.mft (raw, json)
Hash identifier: KUBZubru+oKRIy9bgKSXZ4wMqkxWEyA3wuiPKxA71W0=
Subject key identifier: 8F:C7:D2:59:14:8A:69:41:51:CF:FA:84:16:18:64:56:FE:63:EC:71
Authority key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
Certificate issuer: /CN=7d59659636089e32324697629c218da38a2b673d
Certificate serial: 0196458D80EC48F6E9DCA2D04BED6365ED19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
Manifest number: 1330
Signing time: Thu 17 Apr 2025 21:00:23 +0000
Manifest this update: Thu 17 Apr 2025 21:00:23 +0000
Manifest next update: Fri 18 Apr 2025 21:00:23 +0000
Files and hashes: 1: UK9YjHWc92sXiUJt3VZoNIq4t0k.roa (hash: igI+4irUGdklUjezFA8tc/PWzUHzep3VbVTtAZ5nupE=)
2: fVllljYInjIyRpdinCGNo4orZz0.crl (hash: Hffd40CMPaGNETCi6rFIVfiMQ0PJWOQQsn7WFszNOBc=)
3: zUIN-vPBSWAo7u0peNQbk111_tY.roa (hash: ycq1Cqg0dupTJx5bcb6gz2Vt69i1lXhyAaV7FfHeKNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:80:ec:48:f6:e9:dc:a2:d0:4b:ed:63:65:ed:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d59659636089e32324697629c218da38a2b673d
Validity
Not Before: Apr 17 21:00:23 2025 GMT
Not After : Apr 18 21:00:23 2025 GMT
Subject: CN=8fc7d259148a694151cffa8416186456fe63ec71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e4:55:bd:15:5b:1a:6f:86:f2:66:a5:14:be:
ee:a0:da:71:af:d8:e6:e7:50:93:f8:37:fb:49:6a:
01:94:ca:d3:38:61:bf:ed:71:96:49:5f:99:64:3d:
26:d6:3b:0d:1f:b7:3b:09:6a:1a:8d:0d:2f:ee:f8:
51:85:6e:8b:89:76:cc:3e:fd:10:05:73:88:1c:e2:
93:4e:58:61:ec:0b:9d:83:53:3a:56:d8:e0:9a:6f:
29:06:fb:4e:92:49:fc:c1:54:98:f2:c6:4e:2e:97:
ee:bb:3b:e8:53:bc:c8:5b:38:c9:3f:35:c9:b6:44:
1b:24:00:89:74:d5:f1:16:3b:6e:f3:3c:5c:27:28:
62:b6:d9:d9:cf:21:bf:d5:63:59:5c:61:4c:f3:dd:
be:c9:ac:77:6c:32:1e:c3:2f:e0:9d:ab:8d:39:87:
7f:72:54:5f:ff:a1:9a:fa:b0:19:2a:9f:04:e7:0d:
5f:18:24:95:f0:b9:0d:53:9b:1c:32:13:cc:2e:5b:
d7:b0:0d:9d:ed:5e:29:26:5b:01:de:08:e2:aa:4e:
13:37:ff:12:1b:4c:1a:84:14:22:1d:98:31:96:e3:
86:77:8d:38:1f:e6:e7:3a:31:27:95:17:74:73:dc:
64:b3:81:04:48:08:39:22:ac:92:ff:22:e1:19:ce:
f1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C7:D2:59:14:8A:69:41:51:CF:FA:84:16:18:64:56:FE:63:EC:71
X509v3 Authority Key Identifier:
keyid:7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8e:13:6d:0d:4d:07:4f:a8:3c:c4:97:ad:ec:75:89:28:e8:
0d:5a:b2:27:95:04:d5:75:ff:bb:cc:96:77:91:91:8c:74:c1:
2c:88:25:c8:e7:dc:b4:b5:29:90:bf:37:72:67:da:41:94:a6:
50:4d:91:ad:b8:44:fa:a8:15:98:ce:d4:51:13:e9:08:bd:39:
48:8b:5e:5c:05:47:ac:56:2f:be:52:cb:67:88:8c:3c:11:9d:
8b:d1:00:d7:b7:33:9e:ff:b1:b3:a7:80:95:91:81:7f:9c:c7:
f6:1a:e8:ee:dd:8e:f5:34:1a:7a:87:aa:0b:a4:0d:41:d6:9a:
88:35:4e:1c:d7:93:d8:cc:87:f4:27:bf:9b:41:bb:2f:eb:06:
f7:f1:09:a2:51:34:85:42:59:38:f1:df:5e:fa:f1:ea:4d:1c:
a6:55:d2:1b:37:0b:85:01:85:33:b1:1e:07:b4:38:75:4b:1c:
4b:ce:bd:54:20:6d:47:e0:b6:aa:72:71:ed:27:c2:07:f1:37:
be:f2:17:b5:0f:0f:25:bc:85:c1:c9:9d:f9:ae:39:55:76:c3:
98:64:a5:92:c1:57:eb:8c:6a:2c:92:fd:22:92:37:a1:b6:c8:
b8:6b:88:13:82:6a:8b:40:d1:0b:62:f0:a6:5a:56:71:1e:7d:
3f:df:c8:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFjYDsSPbp3KLQS+1jZe0ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTk2NTk2MzYwODllMzIzMjQ2OTc2MjljMjE4ZGEzOGEy
YjY3M2QwHhcNMjUwNDE3MjEwMDIzWhcNMjUwNDE4MjEwMDIzWjAzMTEwLwYDVQQD
Eyg4ZmM3ZDI1OTE0OGE2OTQxNTFjZmZhODQxNjE4NjQ1NmZlNjNlYzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+RVvRVbGm+G8malFL7uoNpxr9jm
51CT+Df7SWoBlMrTOGG/7XGWSV+ZZD0m1jsNH7c7CWoajQ0v7vhRhW6LiXbMPv0Q
BXOIHOKTTlhh7Audg1M6Vtjgmm8pBvtOkkn8wVSY8sZOLpfuuzvoU7zIWzjJPzXJ
tkQbJACJdNXxFjtu8zxcJyhittnZzyG/1WNZXGFM892+yax3bDIewy/gnauNOYd/
clRf/6Ga+rAZKp8E5w1fGCSV8LkNU5scMhPMLlvXsA2d7V4pJlsB3gjiqk4TN/8S
G0wahBQiHZgxluOGd404H+bnOjEnlRd0c9xks4EESAg5IqyS/yLhGc7xEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/H0lkUimlBUc/6hBYYZFb+Y+xxMB8GA1UdIwQY
MBaAFH1ZZZY2CJ4yMkaXYpwhjaOKK2c9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZsbGxqWUluakl5UnBkaW5DR05vNG9yWnowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy82NTJlZjAtYWUzMC00NWJhLTk5NzAt
NmMxY2Y3MjVkOGY3LzEvZlZsbGxqWUluakl5UnBkaW5DR05vNG9yWnowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy82NTJlZjAtYWUzMC00NWJhLTk5NzAtNmMxY2Y3MjVkOGY3
LzEvZlZsbGxqWUluakl5UnBkaW5DR05vNG9yWnowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfo4TbQ1N
B0+oPMSXrex1iSjoDVqyJ5UE1XX/u8yWd5GRjHTBLIglyOfctLUpkL83cmfaQZSm
UE2RrbhE+qgVmM7UURPpCL05SIteXAVHrFYvvlLLZ4iMPBGdi9EA17cznv+xs6eA
lZGBf5zH9hro7t2O9TQaeoeqC6QNQdaaiDVOHNeT2MyH9Ce/m0G7L+sG9/EJolE0
hUJZOPHfXvrx6k0cplXSGzcLhQGFM7EeB7Q4dUscS869VCBtR+C2qnJx7SfCB/E3
vvIXtQ8PJbyFwcmd+a45VXbDmGSlksFX64xqLJL9IpI3obbIuGuIE4Jqi0DRC2Lw
plpWcR59P9/I1g==
-----END CERTIFICATE-----
Generated at Fri Apr 18 02:08:43 2025 by rpki-client