Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
File: 386WGuDhYY50mciKIlWbsgJQIq0.mft (raw, json)
Hash identifier: 84miYlEIS4+6Iqr3/u5wKD9ULqLXDn40xoCJJV6+3As=
Subject key identifier: 97:CF:00:B5:11:A1:65:74:99:46:6E:D5:F9:E6:A5:DE:C8:38:5A:03
Authority key identifier: DF:CE:96:1A:E0:E1:61:8E:74:99:C8:8A:22:55:9B:B2:02:50:22:AD
Certificate issuer: /CN=dfce961ae0e1618e7499c88a22559bb2025022ad
Certificate serial: 019655387F437F7F0564D517E1E00744EF69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
Manifest number: 0437
Signing time: Sun 20 Apr 2025 22:01:27 +0000
Manifest this update: Sun 20 Apr 2025 22:01:27 +0000
Manifest next update: Mon 21 Apr 2025 22:01:27 +0000
Files and hashes: 1: 386WGuDhYY50mciKIlWbsgJQIq0.crl (hash: nh1cXG3kYnryg+/CJeEMGLJN84hKmN2ONtD2S+n3XBM=)
2: cW1dQczT5TIbX2h9QMnQvvvgst0.roa (hash: LoF7bKHNx/b/rqvPxychY/FV7Mf6p5uxTp1lxzEa+Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:7f:43:7f:7f:05:64:d5:17:e1:e0:07:44:ef:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfce961ae0e1618e7499c88a22559bb2025022ad
Validity
Not Before: Apr 20 22:01:27 2025 GMT
Not After : Apr 21 22:01:27 2025 GMT
Subject: CN=97cf00b511a1657499466ed5f9e6a5dec8385a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8b:38:0e:c3:56:62:3f:23:22:3d:91:41:01:
dc:75:36:4a:05:99:2f:b0:01:0a:c4:3a:c6:24:9a:
68:46:e7:24:76:6c:c5:18:0e:d6:4e:ab:79:b5:aa:
3c:7e:78:39:9b:97:4e:e2:a0:3d:88:44:b1:91:16:
4e:d6:f4:b1:82:67:1d:35:47:50:f8:60:f0:14:c8:
b0:c4:43:55:84:bb:d5:b9:c0:21:ab:38:1e:86:58:
cf:66:2b:ba:06:03:bd:82:34:2d:a5:99:b1:08:ee:
99:bb:2f:54:60:61:4c:7f:8e:3d:5a:d1:a7:57:0d:
bd:57:ac:f3:7a:41:5b:ec:90:31:2d:78:8e:e5:e2:
3d:56:f5:7b:d4:06:a0:bc:f0:fd:43:37:40:38:96:
9f:8f:bf:6f:74:67:c3:f2:03:42:bc:62:e5:cc:c5:
1a:13:67:ff:52:32:5b:41:c0:bd:33:c2:9b:ff:83:
f1:d5:e8:dc:2e:dd:ec:20:a9:66:11:00:b8:60:4d:
60:3e:98:83:03:ba:8a:42:b2:b1:08:1b:7a:71:7e:
4d:6f:65:e0:be:b1:f1:de:e8:0c:78:30:78:00:25:
4e:23:b5:01:6f:43:7c:29:7c:05:41:3a:cc:8b:44:
e1:19:62:fd:9e:06:24:e6:d9:6f:db:fc:97:4e:7d:
5c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CF:00:B5:11:A1:65:74:99:46:6E:D5:F9:E6:A5:DE:C8:38:5A:03
X509v3 Authority Key Identifier:
keyid:DF:CE:96:1A:E0:E1:61:8E:74:99:C8:8A:22:55:9B:B2:02:50:22:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d8:ea:be:4f:94:d9:8c:6f:9d:d3:d5:22:26:7d:1f:9f:34:
59:93:e7:e0:a1:92:b9:50:45:94:e6:9d:1e:14:87:80:7f:49:
ff:8d:43:5b:b8:0e:72:7a:f1:59:9e:24:c2:18:a2:8b:8b:77:
0b:67:44:7c:61:2b:a5:28:a2:1d:49:bf:7a:b2:8a:2b:49:e7:
fd:2d:49:2f:c2:c8:ba:d0:cd:cc:97:a4:2e:1f:bc:b7:39:25:
dc:b9:f6:9f:d8:18:1d:98:9b:c3:bd:50:18:e1:ae:bd:05:c8:
c2:d4:7b:ed:ba:a2:de:51:ba:82:ae:c7:a6:30:04:f9:d5:3a:
db:2d:de:c2:53:16:c1:aa:19:e8:83:7b:bf:65:ec:7f:ea:50:
b4:9c:e2:f8:06:c9:1c:c6:28:89:3d:19:2e:96:0a:da:97:72:
e0:0d:62:d1:16:28:6d:2e:c3:e9:be:82:c8:8b:2a:37:31:97:
99:15:be:1c:78:07:b9:f5:e6:78:b8:0f:66:59:78:4e:9a:3d:
55:be:ca:99:77:93:95:18:82:7c:08:f2:31:b4:cb:7c:b1:6d:
29:fc:fd:89:37:22:62:2b:e6:18:7d:12:07:d8:91:34:4e:ca:
7b:71:28:a8:e5:8a:d8:4d:79:89:90:01:39:da:52:aa:b1:54:
d7:c8:a7:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVOH9Df38FZNUX4eAHRO9pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmY2U5NjFhZTBlMTYxOGU3NDk5Yzg4YTIyNTU5YmIyMDI1
MDIyYWQwHhcNMjUwNDIwMjIwMTI3WhcNMjUwNDIxMjIwMTI3WjAzMTEwLwYDVQQD
Eyg5N2NmMDBiNTExYTE2NTc0OTk0NjZlZDVmOWU2YTVkZWM4Mzg1YTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4s4DsNWYj8jIj2RQQHcdTZKBZkv
sAEKxDrGJJpoRuckdmzFGA7WTqt5tao8fng5m5dO4qA9iESxkRZO1vSxgmcdNUdQ
+GDwFMiwxENVhLvVucAhqzgehljPZiu6BgO9gjQtpZmxCO6Zuy9UYGFMf449WtGn
Vw29V6zzekFb7JAxLXiO5eI9VvV71AagvPD9QzdAOJafj79vdGfD8gNCvGLlzMUa
E2f/UjJbQcC9M8Kb/4Px1ejcLt3sIKlmEQC4YE1gPpiDA7qKQrKxCBt6cX5Nb2Xg
vrHx3ugMeDB4ACVOI7UBb0N8KXwFQTrMi0ThGWL9ngYk5tlv2/yXTn1cqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfPALURoWV0mUZu1fnmpd7IOFoDMB8GA1UdIwQY
MBaAFN/Olhrg4WGOdJnIiiJVm7ICUCKtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzg2V0d1RGhZWTUwbWNpS0lsV2JzZ0pRSXEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mMTZhNGEtZWFiYS00ZTBlLTk3YWEt
ZTMzZDYxNmYxOWU4LzEvMzg2V0d1RGhZWTUwbWNpS0lsV2JzZ0pRSXEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9mMTZhNGEtZWFiYS00ZTBlLTk3YWEtZTMzZDYxNmYxOWU4
LzEvMzg2V0d1RGhZWTUwbWNpS0lsV2JzZ0pRSXEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldjqvk+U
2YxvndPVIiZ9H580WZPn4KGSuVBFlOadHhSHgH9J/41DW7gOcnrxWZ4kwhiii4t3
C2dEfGErpSiiHUm/erKKK0nn/S1JL8LIutDNzJekLh+8tzkl3Ln2n9gYHZibw71Q
GOGuvQXIwtR77bqi3lG6gq7HpjAE+dU62y3ewlMWwaoZ6IN7v2Xsf+pQtJzi+AbJ
HMYoiT0ZLpYK2pdy4A1i0RYobS7D6b6CyIsqNzGXmRW+HHgHufXmeLgPZll4Tpo9
Vb7KmXeTlRiCfAjyMbTLfLFtKfz9iTciYivmGH0SB9iRNE7Ke3EoqOWK2E15iZAB
OdpSqrFU18incQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:38 2025 by rpki-client