Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
File: _sTvIAvJ0n6e1_O8a1wFKS2EMro.mft (raw, json)
Hash identifier: L79kas7JBSTC/X1q02de3WIZ+xEbCE6HYxMmCKPqcs0=
Subject key identifier: 51:32:B7:56:E5:DC:8D:84:75:67:4B:4A:06:F7:7D:86:33:49:F5:8F
Authority key identifier: FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
Certificate issuer: /CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Certificate serial: 019655DD46EF8415283D10F9ED0F9802A162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
Manifest number: 021C
Signing time: Mon 21 Apr 2025 01:01:27 +0000
Manifest this update: Mon 21 Apr 2025 01:01:27 +0000
Manifest next update: Tue 22 Apr 2025 01:01:27 +0000
Files and hashes: 1: A-WEqq-qnquQ-k-HUeyR2Ta7Ai0.roa (hash: ulBE+6XQU+CVKwFHEP6pOstPObSTz9LyM8DJtWKzepw=)
2: _sTvIAvJ0n6e1_O8a1wFKS2EMro.crl (hash: jfw62zNNObNzciYoiL0GZBZowR236BaAycLuJkAS8/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:46:ef:84:15:28:3d:10:f9:ed:0f:98:02:a1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Validity
Not Before: Apr 21 01:01:27 2025 GMT
Not After : Apr 22 01:01:27 2025 GMT
Subject: CN=5132b756e5dc8d8475674b4a06f77d863349f58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b7:c8:4b:8f:d8:d5:9f:be:52:d7:d3:f1:1b:
5d:3e:03:b9:77:7a:28:f7:27:42:c3:12:14:51:68:
44:1d:2d:f0:44:5b:dc:42:d9:c8:1a:b7:ef:c3:fc:
31:f3:22:aa:89:81:82:17:d9:26:19:76:0a:ef:d4:
f4:50:34:34:1a:87:e8:23:9f:8d:96:f4:2a:28:3e:
67:fe:d3:64:bf:7f:db:2e:9a:58:b5:3c:36:69:3e:
b7:ac:00:ef:c0:1b:01:93:9e:cd:1f:f5:2f:e4:12:
b8:ac:28:93:8b:8a:a0:b3:0f:9a:4a:ee:f3:7d:87:
dd:80:9c:01:39:94:b8:02:fd:df:d3:c3:97:92:16:
96:f8:33:5d:52:1a:f1:e9:db:ad:15:54:5c:83:30:
9a:a0:cc:05:87:a2:0a:80:ab:6d:c9:ab:44:5e:e5:
c1:00:1b:af:5d:7e:dd:b6:b1:eb:bc:c4:3b:85:b1:
f1:37:bd:5d:b5:e1:5c:7d:b7:6f:e2:c3:d0:98:f1:
29:27:b7:d1:09:7e:53:e5:ee:5f:c6:69:2f:79:77:
a4:72:85:54:f5:81:57:d3:28:8c:17:9e:d6:0c:17:
7a:bf:1d:50:93:b6:2a:86:03:e6:ee:d1:66:ff:2d:
ba:7b:c6:fc:fe:9b:99:79:1b:29:65:d6:1f:6d:73:
de:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:32:B7:56:E5:DC:8D:84:75:67:4B:4A:06:F7:7D:86:33:49:F5:8F
X509v3 Authority Key Identifier:
keyid:FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:5d:1d:9f:10:ee:f2:6f:76:75:06:46:97:32:22:76:15:ce:
3e:69:59:9e:78:7f:74:fd:e8:2e:58:48:ce:3a:7a:54:be:3e:
11:1c:f9:50:ba:60:26:d8:1d:b8:06:27:4a:68:ab:56:57:c9:
95:51:f6:2b:d6:42:53:72:4a:be:a0:05:f2:48:98:b5:e2:eb:
f7:8d:8f:1b:84:3e:3b:51:6c:ee:ef:47:69:bd:35:f2:b3:e2:
91:24:3c:8c:f3:d2:1a:f8:c8:93:22:b5:01:13:41:cc:cf:d4:
5b:66:39:88:e5:75:2e:44:df:d1:46:7e:cc:74:5e:92:59:67:
cb:6a:fe:00:79:6b:00:67:3f:12:c8:38:e4:ae:4a:40:32:18:
8b:64:df:71:6f:e3:30:1a:2a:7a:bf:e1:bc:52:1b:90:15:22:
4f:c1:fd:3b:be:aa:b5:43:59:0f:22:b9:c1:c5:63:83:09:19:
53:97:3f:b3:8e:9b:ef:0a:fc:bd:30:52:33:55:6f:63:f6:a7:
a7:7d:9c:53:c1:0f:58:d2:d8:8e:ce:55:32:5f:6c:d1:1b:0d:
45:4e:c6:fb:b0:c3:69:c1:72:b9:32:47:ad:d6:0e:8f:b4:e2:
e7:2c:30:cb:e4:8b:2b:1a:da:8a:ae:05:40:f5:c6:74:c7:34:
8f:7a:87:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3UbvhBUoPRD57Q+YAqFiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzRlZjIwMGJjOWQyN2U5ZWQ3ZjNiYzZiNWMwNTI5MmQ4
NDMyYmEwHhcNMjUwNDIxMDEwMTI3WhcNMjUwNDIyMDEwMTI3WjAzMTEwLwYDVQQD
Eyg1MTMyYjc1NmU1ZGM4ZDg0NzU2NzRiNGEwNmY3N2Q4NjMzNDlmNThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrfIS4/Y1Z++UtfT8RtdPgO5d3oo
9ydCwxIUUWhEHS3wRFvcQtnIGrfvw/wx8yKqiYGCF9kmGXYK79T0UDQ0GofoI5+N
lvQqKD5n/tNkv3/bLppYtTw2aT63rADvwBsBk57NH/Uv5BK4rCiTi4qgsw+aSu7z
fYfdgJwBOZS4Av3f08OXkhaW+DNdUhrx6dutFVRcgzCaoMwFh6IKgKttyatEXuXB
ABuvXX7dtrHrvMQ7hbHxN71dteFcfbdv4sPQmPEpJ7fRCX5T5e5fxmkveXekcoVU
9YFX0yiMF57WDBd6vx1Qk7YqhgPm7tFm/y26e8b8/puZeRspZdYfbXPe1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEyt1bl3I2EdWdLSgb3fYYzSfWPMB8GA1UdIwQY
MBaAFP7E7yALydJ+ntfzvGtcBSkthDK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jMDViODYtNmYxNi00OTY0LWE1MDMt
NWVjY2VjOGQ5M2I0LzEvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jMDViODYtNmYxNi00OTY0LWE1MDMtNWVjY2VjOGQ5M2I0
LzEvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArl0dnxDu
8m92dQZGlzIidhXOPmlZnnh/dP3oLlhIzjp6VL4+ERz5ULpgJtgduAYnSmirVlfJ
lVH2K9ZCU3JKvqAF8kiYteLr942PG4Q+O1Fs7u9Hab018rPikSQ8jPPSGvjIkyK1
ARNBzM/UW2Y5iOV1LkTf0UZ+zHRekllny2r+AHlrAGc/Esg45K5KQDIYi2TfcW/j
MBoqer/hvFIbkBUiT8H9O76qtUNZDyK5wcVjgwkZU5c/s46b7wr8vTBSM1VvY/an
p32cU8EPWNLYjs5VMl9s0RsNRU7G+7DDacFyuTJHrdYOj7Ti5ywwy+SLKxraiq4F
QPXGdMc0j3qHng==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:45:23 2025 by rpki-client