Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
File: rCGhE9G6AdEH_feRMIwKUfPQbdo.mft (raw, json)
Hash identifier: KlpapXzvQAWqO9kanDaeybGls22Hp8rDNwN2C0ixEwA=
Subject key identifier: F1:EC:5E:94:62:87:FE:DC:7F:C8:10:C0:EC:4B:A8:15:B8:07:8C:58
Authority key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
Certificate issuer: /CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Certificate serial: 019655DD20F3717EB9E101665255A5CD4199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
Manifest number: 03E7
Signing time: Mon 21 Apr 2025 01:01:17 +0000
Manifest this update: Mon 21 Apr 2025 01:01:17 +0000
Manifest next update: Tue 22 Apr 2025 01:01:17 +0000
Files and hashes: 1: 0Yi_JnLw94TXhrC5nYi7nz8aE9Q.roa (hash: PcfAm6zv9EFMWgISV3l4XmKFXD7W1Vvh/DKcICx2Ck4=)
2: rCGhE9G6AdEH_feRMIwKUfPQbdo.crl (hash: S1nJmHHax+MZHFQt2zvnao+Vs6KyX76WFNqqb/CqKFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:20:f3:71:7e:b9:e1:01:66:52:55:a5:cd:41:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Validity
Not Before: Apr 21 01:01:17 2025 GMT
Not After : Apr 22 01:01:17 2025 GMT
Subject: CN=f1ec5e946287fedc7fc810c0ec4ba815b8078c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:53:89:b0:75:a3:1f:a6:5e:5f:53:70:95:
0b:94:7b:71:31:e1:55:b0:7e:38:80:84:c0:5d:e6:
ea:c6:61:e7:ca:fd:a6:eb:c6:a9:ce:d7:b5:54:c2:
bf:e6:ca:7f:fd:df:89:ae:03:6d:34:9b:22:4b:4f:
d0:d1:ee:1b:c7:57:96:bd:f1:ce:c7:e3:2e:eb:8f:
a9:89:a5:36:fe:83:cc:54:a8:31:ac:45:ea:8e:63:
f2:04:8b:8b:ac:e9:4a:d5:dd:b5:af:89:24:23:68:
eb:bf:b6:a7:9f:d3:2b:fe:e8:33:4d:39:a5:1d:93:
5b:c2:60:09:b3:36:dc:c7:6f:76:d5:ae:f5:33:cc:
a7:e9:6d:bf:cb:07:d0:b2:ee:24:cd:36:4b:27:a4:
3b:25:33:33:86:dd:2d:01:62:d4:5c:5c:bd:0e:9c:
15:31:4e:3b:ea:15:fe:9d:8c:a3:bb:c4:f2:b1:01:
c7:58:be:e1:2f:f9:c3:fc:74:c9:63:9a:68:aa:f5:
1b:4f:73:20:85:2e:09:d8:7b:e0:53:c6:69:ec:3d:
9d:10:3e:0e:42:f6:3d:27:ee:10:82:e3:14:94:5a:
89:09:63:59:9c:4f:08:97:33:91:a6:50:ca:a6:92:
59:0f:eb:8f:21:25:0d:8e:69:da:e2:6e:90:9a:7a:
14:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EC:5E:94:62:87:FE:DC:7F:C8:10:C0:EC:4B:A8:15:B8:07:8C:58
X509v3 Authority Key Identifier:
keyid:AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:37:1e:a3:37:ff:48:14:f8:4f:1d:cb:fe:9b:86:d6:f3:b2:
ff:9b:59:03:52:b0:a2:f9:91:48:3e:66:92:3c:88:4e:6b:e3:
51:66:30:33:e3:64:b3:ff:f0:a8:ff:45:5e:57:a3:9f:4d:fc:
a2:5d:2f:b8:8a:dc:f0:9d:63:01:c9:9e:e2:d6:b0:23:72:f2:
a4:4f:a4:84:57:de:6e:42:0c:84:78:da:58:0c:10:40:48:9c:
89:64:e8:60:88:40:a9:c6:11:d2:2b:4a:19:8c:ab:90:28:90:
a9:56:d8:36:60:19:f6:39:8f:d1:6c:8d:a6:4f:cf:66:59:b5:
2d:d3:99:af:32:57:7f:bd:bc:fb:40:95:29:e4:82:22:a0:da:
be:0f:3a:f2:24:b4:ed:4d:34:57:16:4e:b9:00:da:d7:7c:f9:
0c:ff:df:00:66:fa:39:0d:fe:17:53:e0:f3:68:db:75:d8:c5:
1c:54:24:90:d4:e4:a3:9b:6d:7f:68:68:84:d8:79:90:ba:fd:
73:cc:7d:08:0d:91:3d:42:3b:05:72:27:fd:94:01:23:60:72:
a4:6a:4c:38:2e:1d:0d:3b:1b:6e:d7:b2:8d:54:a2:a5:cf:45:
56:b6:49:aa:94:46:a5:9d:ac:84:ea:00:ec:16:20:00:34:41:
bd:dc:0a:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3SDzcX654QFmUlWlzUGZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMjFhMTEzZDFiYTAxZDEwN2ZkZjc5MTMwOGMwYTUxZjNk
MDZkZGEwHhcNMjUwNDIxMDEwMTE3WhcNMjUwNDIyMDEwMTE3WjAzMTEwLwYDVQQD
EyhmMWVjNWU5NDYyODdmZWRjN2ZjODEwYzBlYzRiYTgxNWI4MDc4YzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTVTibB1ox+mXl9TcJULlHtxMeFV
sH44gITAXebqxmHnyv2m68apzte1VMK/5sp//d+JrgNtNJsiS0/Q0e4bx1eWvfHO
x+Mu64+piaU2/oPMVKgxrEXqjmPyBIuLrOlK1d21r4kkI2jrv7ann9Mr/ugzTTml
HZNbwmAJszbcx2921a71M8yn6W2/ywfQsu4kzTZLJ6Q7JTMzht0tAWLUXFy9DpwV
MU476hX+nYyju8TysQHHWL7hL/nD/HTJY5poqvUbT3MghS4J2HvgU8Zp7D2dED4O
QvY9J+4QguMUlFqJCWNZnE8IlzORplDKppJZD+uPISUNjmna4m6QmnoUmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHsXpRih/7cf8gQwOxLqBW4B4xYMB8GA1UdIwQY
MBaAFKwhoRPRugHRB/33kTCMClHz0G3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81ODkzZjctYjRmMS00OTYxLTk0MjYt
ZmQ3M2I4MDgzM2I3LzEvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My81ODkzZjctYjRmMS00OTYxLTk0MjYtZmQ3M2I4MDgzM2I3
LzEvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzceozf/
SBT4Tx3L/puG1vOy/5tZA1KwovmRSD5mkjyITmvjUWYwM+Nks//wqP9FXlejn038
ol0vuIrc8J1jAcme4tawI3LypE+khFfebkIMhHjaWAwQQEiciWToYIhAqcYR0itK
GYyrkCiQqVbYNmAZ9jmP0WyNpk/PZlm1LdOZrzJXf728+0CVKeSCIqDavg868iS0
7U00VxZOuQDa13z5DP/fAGb6OQ3+F1Pg82jbddjFHFQkkNTko5ttf2hohNh5kLr9
c8x9CA2RPUI7BXIn/ZQBI2BypGpMOC4dDTsbbteyjVSipc9FVrZJqpRGpZ2shOoA
7BYgADRBvdwKMg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:25 2025 by rpki-client