Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
File: 458aboTAJ378tW2UKw615FZHESk.mft (raw, json)
Hash identifier: Pe4qJrWkP3weKIMnbMFFN4YarpJEeQS6ga4rDz1CBow=
Subject key identifier: D7:EE:3C:E6:2D:CC:4B:D1:76:91:51:9E:BF:F0:9B:3A:86:EB:FF:CA
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 019657939BBAFB3D1D8405C934BCB8CCE5F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
Manifest number: 1506
Signing time: Mon 21 Apr 2025 09:00:13 +0000
Manifest this update: Mon 21 Apr 2025 09:00:13 +0000
Manifest next update: Tue 22 Apr 2025 09:00:13 +0000
Files and hashes: 1: 00-pDRnkJ28HOY9PiW3UHtRlnaA.roa (hash: ajRA1r/wZbCFV5DRURYHBboFEqfVmi4nUu+o5RsVv7I=)
2: 458aboTAJ378tW2UKw615FZHESk.crl (hash: uZcm1uMARQS04xopVehFKybdUBoa95u+NoEYy2QDHuw=)
3: h0icjzgutWd6lA-1BOIfw-Gwjqg.roa (hash: S1MAwDWcpRVxYAC6r+etNs1goxhniGxwWQ8E6EEXeo8=)
4: w1G2WgRwg5TMv1o-ctrHxpnkGg8.roa (hash: agU6Qqy0fnivl3H4SG64+Hxp9Tp7KmPmlQXRx4PQep0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:9b:ba:fb:3d:1d:84:05:c9:34:bc:b8:cc:e5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Apr 21 09:00:13 2025 GMT
Not After : Apr 22 09:00:13 2025 GMT
Subject: CN=d7ee3ce62dcc4bd17691519ebff09b3a86ebffca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:89:9d:cc:45:11:76:14:f9:0b:64:06:63:66:
55:ec:96:82:5a:f3:91:b1:d9:5a:84:1c:13:d5:a6:
cd:14:16:70:2c:26:0a:d7:9a:23:84:28:de:41:ed:
ef:1e:93:08:07:66:be:2f:fc:39:55:ed:70:f2:81:
df:96:b7:c9:5d:18:51:e1:d7:6a:d9:36:2b:b9:c5:
ec:8e:87:f6:61:45:3d:17:6c:16:11:5b:ea:7c:dc:
46:b5:35:e6:cb:c8:f2:de:d9:25:28:59:18:76:88:
cb:62:2a:ec:3f:88:0d:b5:cd:f6:0d:93:b6:9d:35:
f0:4e:c2:85:52:1d:7c:f1:ac:e5:bd:61:3a:3c:e7:
f7:3c:a2:5a:0c:20:a1:fc:a9:6c:06:c7:e0:0f:6d:
cf:db:88:a3:b5:13:5c:cd:40:bc:26:c4:94:ce:f3:
a4:81:af:17:77:43:d6:81:1f:4f:18:19:e1:db:9b:
1c:cb:59:fa:a5:3a:a1:fd:3e:6b:21:fd:ca:e1:b7:
6a:f7:4b:97:39:69:29:84:f9:99:df:96:ac:2d:e0:
64:3f:a6:cd:58:fa:26:0b:38:57:6f:05:12:fb:ae:
5d:ce:85:fc:0a:26:e6:b0:ef:a1:86:da:f3:4f:c4:
e9:de:3c:32:26:a8:f1:77:84:5d:0c:8a:cc:b6:68:
03:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EE:3C:E6:2D:CC:4B:D1:76:91:51:9E:BF:F0:9B:3A:86:EB:FF:CA
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:3f:ea:14:eb:89:d5:e9:10:d6:1b:ba:05:06:1a:76:64:0b:
4d:4e:84:d7:f2:d4:9d:cd:57:2b:22:5c:f2:ff:f4:f8:75:c6:
c0:56:59:21:7f:08:89:f8:8c:0d:58:1f:a4:a2:28:8a:d0:61:
d1:40:64:1e:d3:48:9d:6a:a6:f7:4d:da:6e:aa:98:53:cb:53:
f8:9b:05:3e:34:00:89:6a:3a:1c:5e:d6:7e:e3:13:00:28:c0:
bb:f1:e7:61:0e:6e:43:13:c4:3d:45:b6:34:87:10:ba:28:d6:
a8:c2:6c:65:af:8a:a8:76:ca:83:db:8f:4c:b0:96:a1:85:1d:
39:45:a1:8e:9e:bd:53:b1:72:d5:07:8e:ed:39:d1:69:12:5e:
5f:54:34:17:77:87:e8:5c:64:60:e4:f5:6b:17:e3:bf:9b:be:
72:81:99:06:6d:3d:d2:03:75:da:98:97:55:87:dc:9d:56:37:
ca:48:c0:d5:49:e5:2e:34:20:6b:7e:e5:8d:67:7a:f4:c8:89:
ee:e3:0f:85:4e:d5:7d:91:53:fe:96:cf:77:a9:61:95:89:78:
73:5f:ff:6b:23:fe:06:07:70:c7:b6:4c:ea:3c:16:d3:fe:c0:
c6:df:3c:a9:d6:76:4f:36:a9:3f:36:1e:dc:ab:ab:bc:8b:33:
9c:c7:da:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXk5u6+z0dhAXJNLy4zOX1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOWYxYTZlODRjMDI3N2VmY2I1NmQ5NDJiMGViNWU0NTY0
NzExMjkwHhcNMjUwNDIxMDkwMDEzWhcNMjUwNDIyMDkwMDEzWjAzMTEwLwYDVQQD
EyhkN2VlM2NlNjJkY2M0YmQxNzY5MTUxOWViZmYwOWIzYTg2ZWJmZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYmdzEURdhT5C2QGY2ZV7JaCWvOR
sdlahBwT1abNFBZwLCYK15ojhCjeQe3vHpMIB2a+L/w5Ve1w8oHflrfJXRhR4ddq
2TYrucXsjof2YUU9F2wWEVvqfNxGtTXmy8jy3tklKFkYdojLYirsP4gNtc32DZO2
nTXwTsKFUh188azlvWE6POf3PKJaDCCh/KlsBsfgD23P24ijtRNczUC8JsSUzvOk
ga8Xd0PWgR9PGBnh25scy1n6pTqh/T5rIf3K4bdq90uXOWkphPmZ35asLeBkP6bN
WPomCzhXbwUS+65dzoX8CibmsO+hhtrzT8Tp3jwyJqjxd4RdDIrMtmgDpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfuPOYtzEvRdpFRnr/wmzqG6//KMB8GA1UdIwQY
MBaAFOOfGm6EwCd+/LVtlCsOteRWRxEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xNjBhNzctNzU2ZC00NDFhLTg2YzMt
MGU1MzkyNzU3ZjgyLzEvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8xNjBhNzctNzU2ZC00NDFhLTg2YzMtMGU1MzkyNzU3Zjgy
LzEvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABT/qFOuJ
1ekQ1hu6BQYadmQLTU6E1/LUnc1XKyJc8v/0+HXGwFZZIX8IifiMDVgfpKIoitBh
0UBkHtNInWqm903abqqYU8tT+JsFPjQAiWo6HF7WfuMTACjAu/HnYQ5uQxPEPUW2
NIcQuijWqMJsZa+KqHbKg9uPTLCWoYUdOUWhjp69U7Fy1QeO7TnRaRJeX1Q0F3eH
6FxkYOT1axfjv5u+coGZBm090gN12piXVYfcnVY3ykjA1UnlLjQga37ljWd69MiJ
7uMPhU7VfZFT/pbPd6lhlYl4c1//ayP+Bgdwx7ZM6jwW0/7Axt88qdZ2TzapPzYe
3KurvIsznMfabg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 11:19:48 2025 by rpki-client