Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
File: pT2P6iKY_zVCptwIkLEIySIYNjU.mft (raw, json)
Hash identifier: 9EEfrVUSyJ3xipz0Uwbpnlov6shLTCRM5A1FlPWiwzA=
Subject key identifier: 7C:25:9B:91:1D:FF:66:89:E4:62:7B:6B:59:75:94:43:2B:B8:8D:0A
Authority key identifier: A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
Certificate issuer: /CN=a53d8fea2298ff3542a6dc0890b108c922183635
Certificate serial: 01958C60C6B758C52F2F3A549F33DF0B5C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
Manifest number: 0CDF
Signing time: Wed 12 Mar 2025 22:01:47 +0000
Manifest this update: Wed 12 Mar 2025 22:01:47 +0000
Manifest next update: Thu 13 Mar 2025 22:01:47 +0000
Files and hashes: 1: LIngfuzVyfR9OxY7cIj5Eo9UJhU.roa (hash: I7nX5ROvffTNGyuWZrNpPLtJJE4OFOAqh82VhWKzBDY=)
2: pT2P6iKY_zVCptwIkLEIySIYNjU.crl (hash: R7ArlN1Gv9gjsTc7QrNRp6xjx1j7TBnSlVZDBcamfMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:c6:b7:58:c5:2f:2f:3a:54:9f:33:df:0b:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53d8fea2298ff3542a6dc0890b108c922183635
Validity
Not Before: Mar 12 22:01:47 2025 GMT
Not After : Mar 13 22:01:47 2025 GMT
Subject: CN=7c259b911dff6689e4627b6b597594432bb88d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:71:33:14:83:44:33:de:80:45:fb:4d:24:5a:
68:cc:dd:4a:0d:f3:51:9b:27:db:3a:2d:c9:59:ff:
19:63:08:ec:30:97:47:ee:86:27:d9:54:07:0e:5e:
02:44:91:fc:15:07:1f:f9:31:7f:8f:eb:1f:c7:e0:
64:28:54:c9:1c:81:bb:9c:0e:6d:78:b6:75:11:d6:
9b:37:d9:5f:6f:f4:71:19:39:66:e2:7a:87:28:06:
bc:32:92:d2:dc:85:67:d0:c8:1c:15:65:ae:5e:3b:
5a:62:45:7d:35:37:f1:5f:b3:1a:17:c0:08:f2:af:
ea:02:4b:d5:52:6a:ce:01:5a:b5:a6:96:bf:62:3b:
6a:b6:52:53:92:12:04:ea:23:02:da:1c:a1:22:bb:
59:ae:ab:77:59:c9:47:51:64:f0:c3:0a:2c:a4:33:
35:1e:9f:2d:a0:2f:e7:62:0f:76:fb:49:c7:05:d0:
fc:33:56:e9:73:1a:2d:a5:ee:f2:4a:ff:ea:e6:e2:
e4:84:d0:77:02:fb:29:01:da:33:53:89:0a:78:a0:
fa:5c:3c:49:71:8b:da:ef:38:97:ed:4b:72:52:53:
3a:60:92:3c:43:f5:79:cd:8c:ca:4b:80:5d:0a:62:
6b:7c:38:5c:2b:70:3f:78:f4:e4:87:a3:21:b6:ee:
45:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:25:9B:91:1D:FF:66:89:E4:62:7B:6B:59:75:94:43:2B:B8:8D:0A
X509v3 Authority Key Identifier:
keyid:A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6d:f7:3c:6c:e6:a7:32:9e:95:3f:d7:c1:42:9d:f1:c2:ae:
a1:fd:9f:33:48:ac:03:81:13:ae:5f:e5:b6:90:61:7a:91:55:
20:1a:91:4c:24:cb:3e:a9:2b:01:c7:f3:09:5a:e1:98:b7:0c:
31:de:b4:08:06:ee:41:9a:da:f7:f0:60:b8:58:84:c1:29:04:
86:df:8b:b5:e4:e4:1e:ae:be:9b:51:3f:dc:16:eb:13:07:13:
c4:32:89:49:9c:04:51:4e:73:db:e8:aa:c9:80:10:fe:bb:81:
4b:33:37:2f:c7:05:dd:80:ac:b4:59:65:80:74:04:5e:6e:e0:
9f:16:c1:f9:25:c2:05:5b:5d:cf:1a:95:92:c0:45:98:4b:19:
af:e2:f6:f4:f3:ba:3c:2d:1f:56:20:c5:07:d3:03:39:b3:ad:
fc:d5:be:60:0d:57:c5:40:76:4b:c0:0b:a2:9b:32:17:b4:ca:
a1:63:f0:37:05:31:31:ce:7c:d4:ca:2a:11:5d:5f:f8:fc:40:
49:2d:5c:5f:25:57:ae:7d:03:0a:9f:e2:02:55:68:9c:07:70:
02:4d:8a:0b:10:6c:fb:6d:8c:0f:b9:e2:42:64:37:20:4e:e9:
8d:5d:c7:ac:4f:b7:f4:38:a3:13:db:57:57:bc:c6:6b:1d:4f:
9a:8e:fa:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMYMa3WMUvLzpUnzPfC1yAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1M2Q4ZmVhMjI5OGZmMzU0MmE2ZGMwODkwYjEwOGM5MjIx
ODM2MzUwHhcNMjUwMzEyMjIwMTQ3WhcNMjUwMzEzMjIwMTQ3WjAzMTEwLwYDVQQD
Eyg3YzI1OWI5MTFkZmY2Njg5ZTQ2MjdiNmI1OTc1OTQ0MzJiYjg4ZDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnEzFINEM96ARftNJFpozN1KDfNR
myfbOi3JWf8ZYwjsMJdH7oYn2VQHDl4CRJH8FQcf+TF/j+sfx+BkKFTJHIG7nA5t
eLZ1EdabN9lfb/RxGTlm4nqHKAa8MpLS3IVn0MgcFWWuXjtaYkV9NTfxX7MaF8AI
8q/qAkvVUmrOAVq1ppa/YjtqtlJTkhIE6iMC2hyhIrtZrqt3WclHUWTwwwospDM1
Hp8toC/nYg92+0nHBdD8M1bpcxotpe7ySv/q5uLkhNB3AvspAdozU4kKeKD6XDxJ
cYva7ziX7UtyUlM6YJI8Q/V5zYzKS4BdCmJrfDhcK3A/ePTkh6Mhtu5F3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwlm5Ed/2aJ5GJ7a1l1lEMruI0KMB8GA1UdIwQY
MBaAFKU9j+oimP81QqbcCJCxCMkiGDY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFQyUDZpS1lfelZDcHR3SWtMRUl5U0lZTmpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iYTNiYTMtOTUxZS00MjgwLWFmOTgt
Y2Q4MjQyNzhjY2U4LzEvcFQyUDZpS1lfelZDcHR3SWtMRUl5U0lZTmpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9iYTNiYTMtOTUxZS00MjgwLWFmOTgtY2Q4MjQyNzhjY2U4
LzEvcFQyUDZpS1lfelZDcHR3SWtMRUl5U0lZTmpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXm33PGzm
pzKelT/XwUKd8cKuof2fM0isA4ETrl/ltpBhepFVIBqRTCTLPqkrAcfzCVrhmLcM
Md60CAbuQZra9/BguFiEwSkEht+LteTkHq6+m1E/3BbrEwcTxDKJSZwEUU5z2+iq
yYAQ/ruBSzM3L8cF3YCstFllgHQEXm7gnxbB+SXCBVtdzxqVksBFmEsZr+L29PO6
PC0fViDFB9MDObOt/NW+YA1XxUB2S8ALopsyF7TKoWPwNwUxMc581MoqEV1f+PxA
SS1cXyVXrn0DCp/iAlVonAdwAk2KCxBs+22MD7niQmQ3IE7pjV3HrE+39DijE9tX
V7zGax1Pmo76ag==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:40 2025 by rpki-client