Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
File: aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft (raw, json)
Hash identifier: YSZXnRELknr4tpiCQuokjbzW45nCh9sgVrmyMpz6Iso=
Subject key identifier: 91:D3:C8:C6:0C:17:B9:8A:98:CB:DC:84:FB:EB:FA:1C:81:39:DD:A6
Authority key identifier: 69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04
Certificate issuer: /CN=69226ceb40c671f30acf11fa36b8d7d1c6754704
Certificate serial: 0196421EBB75BDD713C20524CA20CCC556C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
Manifest number: 14F4
Signing time: Thu 17 Apr 2025 05:00:32 +0000
Manifest this update: Thu 17 Apr 2025 05:00:32 +0000
Manifest next update: Fri 18 Apr 2025 05:00:32 +0000
Files and hashes: 1: YixLFlfODucpz3SmvGUoO943czQ.roa (hash: U+vdy0unHKQkRcci4HnKyZFl5mHyggPlDsq3RNujwyk=)
2: aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl (hash: fDQddYBwb5jee1I29ra1McWpnK2dzIho2Y6R83RxEdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:1e:bb:75:bd:d7:13:c2:05:24:ca:20:cc:c5:56:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69226ceb40c671f30acf11fa36b8d7d1c6754704
Validity
Not Before: Apr 17 05:00:32 2025 GMT
Not After : Apr 18 05:00:32 2025 GMT
Subject: CN=91d3c8c60c17b98a98cbdc84fbebfa1c8139dda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:e0:c8:34:14:a8:fc:4d:eb:7e:33:e5:92:
4f:52:0e:52:c2:59:e2:23:8e:69:e0:fd:e3:a2:96:
0a:aa:7e:31:05:c0:c3:e7:a0:18:a8:fd:99:60:b9:
7e:9e:71:07:da:ab:d8:71:6f:0b:f7:51:1c:44:48:
2c:06:70:fa:21:7c:37:00:ff:11:02:13:aa:90:12:
ce:c4:27:41:4d:a0:b4:7e:d5:bb:3e:eb:83:ac:b5:
ed:a8:7b:b8:03:bd:07:3e:d8:5e:cc:f6:a3:50:4d:
c6:2d:e9:3c:bb:50:96:f6:68:21:db:f7:61:2b:8a:
f6:44:dd:d3:1e:82:c6:26:32:ba:1d:6f:a6:6e:eb:
07:2e:cd:01:18:af:bb:15:59:de:df:a3:de:a2:77:
a9:8e:fe:0b:ec:e4:5a:83:8b:83:b6:63:2a:c5:1f:
7d:53:41:21:c3:c5:73:b8:82:dd:cf:01:e3:3f:17:
7f:e4:38:0d:4b:91:ad:7d:31:b6:d7:e7:4c:b3:c7:
e8:db:23:6b:9e:8b:90:fd:1e:f9:5b:b5:dd:18:4b:
28:f6:b1:0f:1c:a6:84:5c:5d:c8:b6:b2:e8:f0:9a:
d7:34:8b:48:d1:31:dd:cc:fc:ba:e9:52:3e:0d:f5:
d0:a2:30:c8:37:f0:25:b8:3f:aa:fb:a0:fa:a8:2d:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D3:C8:C6:0C:17:B9:8A:98:CB:DC:84:FB:EB:FA:1C:81:39:DD:A6
X509v3 Authority Key Identifier:
keyid:69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4c:ff:58:8b:c5:b8:1e:12:10:76:33:8c:d1:5d:32:17:97:
ff:b5:1b:17:ee:81:cd:6d:a4:00:45:28:02:73:cf:77:97:4f:
a2:05:4c:63:98:8b:38:23:ff:9d:b7:f4:f5:8a:29:f4:d2:77:
ef:07:ff:2c:a3:9f:d6:db:d5:38:eb:e8:f1:8a:13:8f:25:40:
e8:0e:4c:ef:f2:e3:57:b7:d4:48:ec:9f:ac:aa:c6:04:03:51:
ea:48:48:a3:a7:00:74:ec:51:75:a6:f3:69:7f:8d:35:59:fb:
ba:24:35:43:20:db:1c:f9:d7:5e:77:60:03:7f:b7:dd:be:30:
1f:3b:95:9f:8f:34:da:e4:5a:aa:6d:ac:75:63:59:f5:cd:d6:
19:4c:12:2e:ee:dc:9a:3b:8b:3d:e0:52:5f:29:b5:3a:ec:36:
13:f6:83:45:c1:2e:93:0f:f3:54:68:af:b4:74:e2:3a:04:f2:
a4:9c:a6:17:e0:15:de:6d:f6:81:ec:44:5b:e3:5d:08:31:ec:
96:03:e7:23:b7:f7:a3:cd:8f:29:bb:14:6b:89:fc:7e:10:0a:
5f:28:83:cb:0b:23:6d:53:f6:1e:65:e5:94:93:e5:8d:3d:af:
b9:6c:45:86:52:84:4f:9c:be:75:49:af:cf:ae:68:5c:15:d8:
20:31:19:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZCHrt1vdcTwgUkyiDMxVbCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MjI2Y2ViNDBjNjcxZjMwYWNmMTFmYTM2YjhkN2QxYzY3
NTQ3MDQwHhcNMjUwNDE3MDUwMDMyWhcNMjUwNDE4MDUwMDMyWjAzMTEwLwYDVQQD
Eyg5MWQzYzhjNjBjMTdiOThhOThjYmRjODRmYmViZmExYzgxMzlkZGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoDgyDQUqPxN634z5ZJPUg5Swlni
I45p4P3jopYKqn4xBcDD56AYqP2ZYLl+nnEH2qvYcW8L91EcREgsBnD6IXw3AP8R
AhOqkBLOxCdBTaC0ftW7PuuDrLXtqHu4A70HPthezPajUE3GLek8u1CW9mgh2/dh
K4r2RN3THoLGJjK6HW+mbusHLs0BGK+7FVne36Peonepjv4L7ORag4uDtmMqxR99
U0Ehw8VzuILdzwHjPxd/5DgNS5GtfTG21+dMs8fo2yNrnouQ/R75W7XdGEso9rEP
HKaEXF3ItrLo8JrXNItI0THdzPy66VI+DfXQojDIN/AluD+q+6D6qC1NKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHTyMYMF7mKmMvchPvr+hyBOd2mMB8GA1UdIwQY
MBaAFGkibOtAxnHzCs8R+ja419HGdUcEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVNKczYwREdjZk1LenhINk5yalgwY1oxUndRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mZmYxYzctY2VlMS00ZmE2LWE5OWIt
YzljOGFiMTg4ODUzLzEvYVNKczYwREdjZk1LenhINk5yalgwY1oxUndRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9mZmYxYzctY2VlMS00ZmE2LWE5OWItYzljOGFiMTg4ODUz
LzEvYVNKczYwREdjZk1LenhINk5yalgwY1oxUndRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0z/WIvF
uB4SEHYzjNFdMheX/7UbF+6BzW2kAEUoAnPPd5dPogVMY5iLOCP/nbf09Yop9NJ3
7wf/LKOf1tvVOOvo8YoTjyVA6A5M7/LjV7fUSOyfrKrGBANR6khIo6cAdOxRdabz
aX+NNVn7uiQ1QyDbHPnXXndgA3+33b4wHzuVn4802uRaqm2sdWNZ9c3WGUwSLu7c
mjuLPeBSXym1Ouw2E/aDRcEukw/zVGivtHTiOgTypJymF+AV3m32gexEW+NdCDHs
lgPnI7f3o82PKbsUa4n8fhAKXyiDywsjbVP2HmXllJPljT2vuWxFhlKET5y+dUmv
z65oXBXYIDEZ+A==
-----END CERTIFICATE-----
Generated at Thu Apr 17 09:03:13 2025 by rpki-client