Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
File: RA6IwxN_ipFffaG1wDQcoYwsI0w.mft (raw, json)
Hash identifier: /30dVcNrRg2CojihMqhY30LP96wQSnNb2YrRzxWfVsU=
Subject key identifier: 3B:21:DC:F1:42:98:13:F4:3C:F6:02:FF:85:3A:09:28:44:06:28:86
Authority key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
Certificate issuer: /CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Certificate serial: 01965613DD2F957083959711BBB2867A7B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
Manifest number: 22
Signing time: Mon 21 Apr 2025 02:01:04 +0000
Manifest this update: Mon 21 Apr 2025 02:01:04 +0000
Manifest next update: Tue 22 Apr 2025 02:01:04 +0000
Files and hashes: 1: ERKKjb9maK6l2D8S98DiUvq_sHY.roa (hash: K5h5Qq2Di55EgzF5bOxkfD2fsAbyW8q02xX4iijsUmk=)
2: RA6IwxN_ipFffaG1wDQcoYwsI0w.crl (hash: FheE3IGgpuhmbTBpMMR/Rr5yqILG7lorWYg98k444+M=)
3: uC4_l-E2xjwrvlqz30Q-HpJhGxI.roa (hash: eCi9fijMSbE+YJ8x/iuJrnNqx//o/hxhFT+nJZyvJ+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:dd:2f:95:70:83:95:97:11:bb:b2:86:7a:7b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Validity
Not Before: Apr 21 02:01:04 2025 GMT
Not After : Apr 22 02:01:04 2025 GMT
Subject: CN=3b21dcf1429813f43cf602ff853a092844062886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:85:37:e6:f8:ab:a9:2c:a9:1f:a9:c0:d2:
b8:c5:55:52:5a:ea:ae:78:aa:36:29:78:12:89:d8:
30:88:46:61:f4:6c:0a:fd:25:c2:21:f7:15:34:c2:
0d:f2:a1:94:f9:bc:d8:3b:06:d5:4a:25:b8:1d:56:
b6:2a:3e:ca:4d:a4:48:15:93:a3:0a:eb:aa:41:e0:
6b:61:ac:8f:e7:39:94:20:8b:38:ee:97:68:d4:83:
50:2c:b8:5f:9a:60:c5:36:d3:6a:99:c6:aa:2c:7a:
4a:c7:49:8c:43:7a:da:0e:57:0e:2f:9a:3d:b3:2f:
a1:7f:92:dc:30:c4:a7:be:1f:2c:e9:e1:66:0d:7a:
5c:6e:0f:65:f1:b0:8f:38:68:fd:b2:80:d7:98:f7:
9b:82:25:96:06:68:d3:5f:2b:cd:1b:fd:86:f3:a9:
79:1c:53:c8:4d:77:49:7f:60:3c:38:1f:07:27:7d:
15:79:aa:57:91:d7:89:86:89:51:54:7c:6b:cb:c7:
07:2d:b8:13:ff:87:31:6c:36:a2:74:d4:f9:02:6c:
e2:fc:ae:51:29:1a:76:73:e2:0f:26:91:fc:af:37:
af:75:fc:e9:2c:2b:e3:ef:4a:75:38:e1:c0:27:9d:
3b:fb:46:02:9d:06:b8:13:69:8c:00:ed:89:3c:06:
59:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:21:DC:F1:42:98:13:F4:3C:F6:02:FF:85:3A:09:28:44:06:28:86
X509v3 Authority Key Identifier:
keyid:44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:16:46:09:32:48:e2:d2:db:04:ac:13:bd:24:fc:1c:5b:0c:
f9:28:35:12:9f:7d:df:5a:12:9d:85:ee:68:06:b7:86:09:12:
02:45:5d:27:1b:0f:91:47:ae:be:44:b2:62:0d:23:74:4b:24:
2c:f5:64:3b:78:bf:3b:f2:44:20:2d:30:83:e5:71:b6:e9:3e:
0e:43:50:43:1d:65:a2:15:0c:c1:ed:2e:ce:4b:3e:30:d1:c7:
9e:61:5d:86:a6:28:9c:28:a2:42:50:89:70:5f:4e:15:72:ed:
a5:02:f1:0a:2b:c1:5c:0c:71:1d:70:3a:b2:0d:98:1c:b9:5a:
48:29:91:ca:0e:09:20:5d:12:ca:26:ea:8a:05:c6:cb:df:28:
64:ad:b1:b9:f5:bd:f3:85:16:63:5d:f7:69:04:55:20:64:28:
71:4b:e2:b6:20:91:2d:eb:e9:bf:12:49:1a:d5:4e:bc:61:ad:
88:cb:c8:2a:4d:13:f2:f1:4f:8b:82:86:81:f5:86:06:8c:9f:
43:d3:25:ed:7f:bc:f5:e5:25:67:48:8f:8e:6d:ce:42:ba:65:
ff:46:df:dc:ed:24:06:04:cb:65:40:46:6d:3b:6d:f2:69:83:
5e:01:c4:3f:2c:cb:7b:9f:bb:ca:90:26:54:59:29:55:8b:d2:
35:2d:56:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWE90vlXCDlZcRu7KGensFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MGU4OGMzMTM3ZjhhOTE1ZjdkYTFiNWMwMzQxY2ExOGMy
YzIzNGMwHhcNMjUwNDIxMDIwMTA0WhcNMjUwNDIyMDIwMTA0WjAzMTEwLwYDVQQD
EygzYjIxZGNmMTQyOTgxM2Y0M2NmNjAyZmY4NTNhMDkyODQ0MDYyODg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8GFN+b4q6ksqR+pwNK4xVVSWuqu
eKo2KXgSidgwiEZh9GwK/SXCIfcVNMIN8qGU+bzYOwbVSiW4HVa2Kj7KTaRIFZOj
CuuqQeBrYayP5zmUIIs47pdo1INQLLhfmmDFNtNqmcaqLHpKx0mMQ3raDlcOL5o9
sy+hf5LcMMSnvh8s6eFmDXpcbg9l8bCPOGj9soDXmPebgiWWBmjTXyvNG/2G86l5
HFPITXdJf2A8OB8HJ30VeapXkdeJholRVHxry8cHLbgT/4cxbDaidNT5Amzi/K5R
KRp2c+IPJpH8rzevdfzpLCvj70p1OOHAJ507+0YCnQa4E2mMAO2JPAZZfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsh3PFCmBP0PPYC/4U6CShEBiiGMB8GA1UdIwQY
MBaAFEQOiMMTf4qRX32htcA0HKGMLCNMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkE2SXd4Tl9pcEZmZmFHMXdEUWNvWXdzSTB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8wNzg5YWEtOWU3My00NWVlLTkxYjYt
MTQzZmY2MGQ5OTkxLzEvUkE2SXd4Tl9pcEZmZmFHMXdEUWNvWXdzSTB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8wNzg5YWEtOWU3My00NWVlLTkxYjYtMTQzZmY2MGQ5OTkx
LzEvUkE2SXd4Tl9pcEZmZmFHMXdEUWNvWXdzSTB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkxZGCTJI
4tLbBKwTvST8HFsM+Sg1Ep9931oSnYXuaAa3hgkSAkVdJxsPkUeuvkSyYg0jdEsk
LPVkO3i/O/JEIC0wg+Vxtuk+DkNQQx1lohUMwe0uzks+MNHHnmFdhqYonCiiQlCJ
cF9OFXLtpQLxCivBXAxxHXA6sg2YHLlaSCmRyg4JIF0SyibqigXGy98oZK2xufW9
84UWY133aQRVIGQocUvitiCRLevpvxJJGtVOvGGtiMvIKk0T8vFPi4KGgfWGBoyf
Q9Ml7X+89eUlZ0iPjm3OQrpl/0bf3O0kBgTLZUBGbTtt8mmDXgHEPyzLe5+7ypAm
VFkpVYvSNS1WPw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:51:38 2025 by rpki-client