Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
File: b4CWRAfF2qRAiKz-leZIi4APreU.mft (raw, json)
Hash identifier: lckuO2JvWuEP6jWuAHK2gN/fTfatph0MYWK+y6CIypw=
Subject key identifier: 78:BF:58:B0:D0:04:1C:1F:85:2E:71:D1:88:0E:8E:F3:8F:E8:95:B7
Authority key identifier: 6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
Certificate issuer: /CN=6f80964407c5daa44088acfe95e6488b800fade5
Certificate serial: 0196594B5FF628152DCCEC10D3C21D52B4BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
Manifest number: 0CFC
Signing time: Mon 21 Apr 2025 17:00:33 +0000
Manifest this update: Mon 21 Apr 2025 17:00:33 +0000
Manifest next update: Tue 22 Apr 2025 17:00:33 +0000
Files and hashes: 1: F1clSCHfCrBchpNItB3_ECdQ4G0.roa (hash: UEaaY9HoQsqjcDAMUvi86kguZEF+pqvnu6gxjIkAd84=)
2: UvaL6VYsICABr4f2mztYJpGnmok.roa (hash: sDs2WTxe4PeqzEe78b/roJLSHAUp5tH9OZKXA5ved2I=)
3: b4CWRAfF2qRAiKz-leZIi4APreU.crl (hash: e3JU4ywztXuypgnW23CmSrIjvMFFuTRLTgzTSE4dl7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:5f:f6:28:15:2d:cc:ec:10:d3:c2:1d:52:b4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f80964407c5daa44088acfe95e6488b800fade5
Validity
Not Before: Apr 21 17:00:33 2025 GMT
Not After : Apr 22 17:00:33 2025 GMT
Subject: CN=78bf58b0d0041c1f852e71d1880e8ef38fe895b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:de:03:06:c5:97:00:af:df:e0:80:e4:01:20:
c2:61:40:70:3a:6a:68:71:3d:fc:8c:8d:84:cb:97:
ed:cc:ee:2c:e7:bb:28:b3:6b:e5:03:8d:b5:bd:d3:
8b:bb:bc:5a:14:5f:ef:ee:38:76:9c:36:85:98:aa:
ef:07:e2:3f:32:f0:e6:d2:1a:4e:14:1d:fd:79:43:
e2:97:a7:92:fd:fa:d3:65:9c:e5:9b:b6:38:ea:08:
78:7a:8d:97:eb:d6:5a:e5:5c:dd:93:d0:ea:a1:e7:
35:89:2b:b9:a7:17:e6:66:1d:f1:9f:d9:90:8b:59:
23:62:a1:26:a4:95:2a:eb:03:45:67:8f:c4:a2:0f:
00:0d:0b:36:52:13:4c:bf:79:99:58:c1:6d:6f:46:
d7:2b:a1:8b:e2:2f:f4:1d:9b:7c:61:00:22:df:5e:
6e:32:f6:c1:03:82:a1:cb:42:dc:27:12:c5:4c:a0:
de:8d:c8:49:d6:a1:03:8e:8a:87:fe:ac:49:25:30:
ab:3f:13:90:d0:49:88:a3:17:ab:0e:37:f7:b8:4d:
10:1d:31:cf:05:d9:9a:1a:26:3d:5e:8b:d4:e0:f8:
30:40:9b:39:b5:9f:2b:f7:1c:36:48:be:95:17:67:
d8:26:a9:be:51:bb:f8:e9:6a:fd:4c:aa:a8:62:78:
b9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BF:58:B0:D0:04:1C:1F:85:2E:71:D1:88:0E:8E:F3:8F:E8:95:B7
X509v3 Authority Key Identifier:
keyid:6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6d:8f:a7:28:62:52:80:46:05:e7:1c:3b:36:45:94:1c:ee:
2f:6a:e8:fe:db:cf:f0:16:09:98:cc:1d:b0:be:d0:3a:66:dc:
82:d1:d5:5a:f5:84:1f:ea:f0:90:d3:8a:6c:32:15:07:d1:c6:
35:22:3b:93:05:2a:98:e4:65:4c:ca:34:a2:a5:b1:48:04:c5:
5e:9b:1f:7a:59:ed:5c:77:ec:34:7b:c5:4a:32:ea:18:a2:4d:
bf:8d:c7:06:36:05:5b:33:90:9a:6c:63:95:5b:2a:49:b0:03:
7c:74:c2:e2:9d:5a:d8:a5:0a:ea:e4:62:35:45:b7:15:cb:e9:
df:4e:79:2f:a9:09:ce:c0:7b:13:a1:f6:2c:67:0c:24:83:c5:
39:d0:80:ec:5b:a3:cc:67:0e:c6:ea:67:df:93:6f:3e:77:1e:
78:e3:a4:86:25:58:1d:a8:02:b5:ff:e3:73:e7:aa:9c:59:b6:
ee:7d:fe:46:c7:ec:ac:2d:75:e8:79:98:6d:bf:c5:c9:33:0f:
ba:62:18:c3:b1:a2:71:4a:db:04:76:1d:46:0a:43:df:e8:a9:
fa:dd:95:c7:86:91:0d:cb:da:f8:87:99:32:0c:2e:af:e7:42:
f9:6e:bf:43:84:7a:00:40:7b:72:3f:cc:30:6b:72:dc:6a:e6:
34:7c:b5:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZS1/2KBUtzOwQ08IdUrS8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODA5NjQ0MDdjNWRhYTQ0MDg4YWNmZTk1ZTY0ODhiODAw
ZmFkZTUwHhcNMjUwNDIxMTcwMDMzWhcNMjUwNDIyMTcwMDMzWjAzMTEwLwYDVQQD
Eyg3OGJmNThiMGQwMDQxYzFmODUyZTcxZDE4ODBlOGVmMzhmZTg5NWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz94DBsWXAK/f4IDkASDCYUBwOmpo
cT38jI2Ey5ftzO4s57sos2vlA421vdOLu7xaFF/v7jh2nDaFmKrvB+I/MvDm0hpO
FB39eUPil6eS/frTZZzlm7Y46gh4eo2X69Za5Vzdk9Dqoec1iSu5pxfmZh3xn9mQ
i1kjYqEmpJUq6wNFZ4/Eog8ADQs2UhNMv3mZWMFtb0bXK6GL4i/0HZt8YQAi315u
MvbBA4Khy0LcJxLFTKDejchJ1qEDjoqH/qxJJTCrPxOQ0EmIoxerDjf3uE0QHTHP
BdmaGiY9XovU4PgwQJs5tZ8r9xw2SL6VF2fYJqm+Ubv46Wr9TKqoYni5mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHi/WLDQBBwfhS5x0YgOjvOP6JW3MB8GA1UdIwQY
MBaAFG+AlkQHxdqkQIis/pXmSIuAD63lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRDV1JBZkYycVJBaUt6LWxlWklpNEFQcmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iOTA2YzktMmIzZC00MzdjLWEzY2Qt
NWQ5MmNlZjIzYzVhLzEvYjRDV1JBZkYycVJBaUt6LWxlWklpNEFQcmVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9iOTA2YzktMmIzZC00MzdjLWEzY2QtNWQ5MmNlZjIzYzVh
LzEvYjRDV1JBZkYycVJBaUt6LWxlWklpNEFQcmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALW2Ppyhi
UoBGBeccOzZFlBzuL2ro/tvP8BYJmMwdsL7QOmbcgtHVWvWEH+rwkNOKbDIVB9HG
NSI7kwUqmORlTMo0oqWxSATFXpsfelntXHfsNHvFSjLqGKJNv43HBjYFWzOQmmxj
lVsqSbADfHTC4p1a2KUK6uRiNUW3Fcvp3055L6kJzsB7E6H2LGcMJIPFOdCA7Fuj
zGcOxupn35NvPnceeOOkhiVYHagCtf/jc+eqnFm27n3+RsfsrC116HmYbb/FyTMP
umIYw7GicUrbBHYdRgpD3+ip+t2Vx4aRDcva+IeZMgwur+dC+W6/Q4R6AEB7cj/M
MGty3GrmNHy11Q==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:23 2025 by rpki-client