Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
File: rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft (raw, json)
Hash identifier: m2KMvvI3GGbF2rGfIkzPo0zVdCRs5wIb/MLpKXRyHuY=
Subject key identifier: 30:0E:68:61:E4:1B:47:87:6F:0E:AB:F7:B8:E6:8A:72:4C:66:99:9A
Authority key identifier: AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
Certificate issuer: /CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Certificate serial: 0196A8B07C31863CF6A445D1FBA294A930C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
Manifest number: 11A3
Signing time: Wed 07 May 2025 03:01:00 +0000
Manifest this update: Wed 07 May 2025 03:01:00 +0000
Manifest next update: Thu 08 May 2025 03:01:00 +0000
Files and hashes: 1: r6C99vK2TllFCTWcqpJRSg5MRPM.roa (hash: 3+br3Wh/zPJPiW24ubp7XOxLj4qW7AeahE4kU9GEl1U=)
2: rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl (hash: 3YbluYJuC7GY9cZ6ghpeuBZKn7z3Ry8QWqY2UQNeD1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:b0:7c:31:86:3c:f6:a4:45:d1:fb:a2:94:a9:30:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Validity
Not Before: May 7 03:01:00 2025 GMT
Not After : May 8 03:01:00 2025 GMT
Subject: CN=300e6861e41b47876f0eabf7b8e68a724c66999a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:18:ff:bf:ea:d5:7c:15:4d:d5:03:55:92:d8:
c4:b4:1c:e2:85:d4:d0:91:58:eb:b7:28:4c:59:3b:
c4:74:6b:39:f5:60:6b:8c:0b:27:ef:64:1a:3b:c5:
1c:5d:87:d5:95:fe:26:4e:1e:7b:ae:b2:49:c2:02:
af:b0:0a:2f:53:d0:58:cf:6b:96:26:10:9c:ed:58:
f3:4c:93:95:46:40:3a:27:53:26:6a:70:32:cc:6e:
54:c7:2c:62:44:88:e1:88:cd:fc:72:97:fb:32:6d:
41:07:f7:30:b4:72:49:b2:5a:fe:ae:8b:1a:1c:b1:
ee:c7:37:fe:ce:28:73:82:c7:fe:aa:14:bd:bd:1d:
d4:8a:aa:72:8f:93:18:a5:0e:03:82:0b:2c:90:0e:
7d:bc:69:f9:95:cc:84:b6:a9:84:f1:05:6f:02:8f:
35:04:8b:34:92:c7:45:59:e9:79:f8:86:e1:09:85:
7a:36:28:19:be:7a:4e:39:5b:c5:42:81:bd:b6:b2:
f8:86:1d:2b:56:63:0a:60:28:f8:fa:4a:d2:83:b6:
d3:68:5b:0b:0d:f8:3f:11:80:c2:ea:21:5d:be:86:
b7:6f:73:99:8d:f8:b1:cc:00:b6:c4:38:35:c4:37:
55:5e:33:51:42:d2:96:55:95:f7:ef:08:0c:32:0b:
b8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0E:68:61:E4:1B:47:87:6F:0E:AB:F7:B8:E6:8A:72:4C:66:99:9A
X509v3 Authority Key Identifier:
keyid:AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5d:70:6e:c5:83:82:79:4a:5d:39:38:3d:78:ed:77:df:f5:
a2:a2:b6:94:22:88:84:d4:68:b1:20:39:7d:d0:a8:d5:bf:00:
93:8c:d7:6e:4e:96:5c:90:52:4a:25:8c:0b:c6:da:63:b3:32:
b7:14:74:a3:3f:c8:7e:f6:94:c2:60:69:1d:2f:52:84:7c:9e:
37:e4:5b:4b:76:7a:f3:37:ab:f2:88:0a:80:92:f7:9a:8a:60:
4e:a0:19:1d:5e:90:a7:24:13:76:5e:d9:21:f5:b0:ad:fc:2a:
08:69:92:1f:0a:e0:82:e2:fc:43:35:26:41:e4:89:db:9d:c1:
42:97:a7:52:27:80:02:d2:fa:9a:ea:e0:ed:91:db:92:2e:74:
83:e9:ed:db:de:f5:7f:58:01:84:61:4b:cb:24:0e:36:64:84:
bb:05:eb:36:3a:4f:6a:e3:34:b7:3b:93:a8:51:e4:e9:22:dd:
3b:ee:a9:ca:51:04:65:39:00:36:83:15:29:fd:9c:cc:9e:05:
81:b5:92:0e:81:a1:69:6e:06:f0:a9:c9:60:6b:38:8f:89:1b:
5f:3a:b3:fe:98:84:16:27:db:57:32:10:20:71:bd:a5:54:e4:
60:39:0c:ea:7d:5f:3c:2a:64:d7:4c:ba:79:7d:23:1d:e8:c3:
21:20:4e:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaosHwxhjz2pEXR+6KUqTDHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOGRkMTdhNzY4ZTNiNmZiZmE3YTcwMDlhNzAwN2ViZTY1
YjQ1YzgwHhcNMjUwNTA3MDMwMTAwWhcNMjUwNTA4MDMwMTAwWjAzMTEwLwYDVQQD
EygzMDBlNjg2MWU0MWI0Nzg3NmYwZWFiZjdiOGU2OGE3MjRjNjY5OTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Bj/v+rVfBVN1QNVktjEtBzihdTQ
kVjrtyhMWTvEdGs59WBrjAsn72QaO8UcXYfVlf4mTh57rrJJwgKvsAovU9BYz2uW
JhCc7VjzTJOVRkA6J1MmanAyzG5UxyxiRIjhiM38cpf7Mm1BB/cwtHJJslr+rosa
HLHuxzf+zihzgsf+qhS9vR3Uiqpyj5MYpQ4DggsskA59vGn5lcyEtqmE8QVvAo81
BIs0ksdFWel5+IbhCYV6NigZvnpOOVvFQoG9trL4hh0rVmMKYCj4+krSg7bTaFsL
Dfg/EYDC6iFdvoa3b3OZjfixzAC2xDg1xDdVXjNRQtKWVZX37wgMMgu4/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAOaGHkG0eHbw6r97jminJMZpmaMB8GA1UdIwQY
MBaAFK2N0Xp2jjtvv6enAJpwB+vmW0XIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclkzUmVuYU9PMi1fcDZjQW1uQUg2LVpiUmNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy85OGIzNWItOTQ1ZS00MGM1LWJiOTUt
OWVhZGQzNTFmYzc5LzEvclkzUmVuYU9PMi1fcDZjQW1uQUg2LVpiUmNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy85OGIzNWItOTQ1ZS00MGM1LWJiOTUtOWVhZGQzNTFmYzc5
LzEvclkzUmVuYU9PMi1fcDZjQW1uQUg2LVpiUmNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgV1wbsWD
gnlKXTk4PXjtd9/1oqK2lCKIhNRosSA5fdCo1b8Ak4zXbk6WXJBSSiWMC8baY7My
txR0oz/IfvaUwmBpHS9ShHyeN+RbS3Z68zer8ogKgJL3mopgTqAZHV6QpyQTdl7Z
IfWwrfwqCGmSHwrgguL8QzUmQeSJ253BQpenUieAAtL6murg7ZHbki50g+nt2971
f1gBhGFLyyQONmSEuwXrNjpPauM0tzuTqFHk6SLdO+6pylEEZTkANoMVKf2czJ4F
gbWSDoGhaW4G8KnJYGs4j4kbXzqz/piEFifbVzIQIHG9pVTkYDkM6n1fPCpk10y6
eX0jHejDISBOjg==
-----END CERTIFICATE-----
Generated at Wed May 7 06:26:32 2025 by rpki-client