Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: FO/CHSJLPTurxp2dcCPrrIia+8Nt1pYS/kQqXHkNfqo=
Subject key identifier: C7:8D:F3:66:2A:B3:8D:A2:89:FE:91:8F:0D:CD:75:07:3B:70:2A:28
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 019609421DE33325E9223CB249C503A97DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 1382
Signing time: Sun 06 Apr 2025 04:00:50 +0000
Manifest this update: Sun 06 Apr 2025 04:00:50 +0000
Manifest next update: Mon 07 Apr 2025 04:00:50 +0000
Files and hashes: 1: 25GdIX8pGRrdAAaubJO0FxbYG-s.roa (hash: J7SjJPVMXuJzyuyQBNTx3E62SBRqK9gpWeifxFumUs0=)
2: 6WSzq5tklzrrb4CQ30LLV8NUx2g.roa (hash: UmnImARopszt+4WaNMMPCsufWGExd3hc37DvZdbg1tI=)
3: 8ROo1-f7zOJ7IGVOmN_RufzzbRg.roa (hash: 0g/v1GDnSb/mpf5pKYYz9HEAiGcoNER98ihb6wrQqWo=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: k3/Ov1Z3jc4g5IbZKIjIymEOnTbQRyedQZHsuVwcde8=)
5: OREDNoQ0vwPI3XM_zRsW3yzoE_A.roa (hash: 1cT3zKRDrAQDDxV5Rq7SD/mINGk0AiyR89E6Ur7LkVA=)
6: mQQXMqosDbrfiBBQFe3pss-9NtQ.roa (hash: qAb1oy5TaR+lNTajDgndtpEVHAu7ZMdgoTop9g6Wh6Y=)
7: uSaVwi6W5g3viY9NscHN3tqDzCk.roa (hash: t4D+qU5YVF27z4TGr3wG3ucQjp23my4+sKI2eFqOYYg=)
8: uumQQQ1viq_-gfcaqAufH6g_C7w.roa (hash: AM9mJlfYhSa7Wcw8Wx9nTWnnL8T0GQwXceLp5ft6/NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:42:1d:e3:33:25:e9:22:3c:b2:49:c5:03:a9:7d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Apr 6 04:00:50 2025 GMT
Not After : Apr 7 04:00:50 2025 GMT
Subject: CN=c78df3662ab38da289fe918f0dcd75073b702a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:09:db:98:c3:8b:e9:99:59:c6:a5:70:17:25:
8a:30:6d:1a:67:d7:30:c3:d7:0f:c5:86:47:ae:41:
c2:68:c6:7e:82:a1:5a:a9:56:7f:11:de:1f:d8:a1:
54:e2:0c:19:5b:0d:59:72:65:40:ff:37:b8:2e:90:
c6:bb:51:11:51:b5:16:f5:99:c4:55:ff:28:71:80:
36:16:45:99:1b:85:43:a7:62:3a:2e:fb:fc:78:9e:
4f:f0:10:f6:c5:67:51:bd:03:78:4e:fd:e7:31:b2:
af:89:22:78:94:e6:d6:19:70:05:54:0a:4b:20:d2:
eb:d8:36:a8:00:45:27:6f:2e:12:05:60:12:33:1b:
d7:0a:89:e5:75:d0:d5:d3:0b:31:a3:d8:6e:01:c1:
e8:9c:24:07:9d:2c:2b:eb:36:f8:98:c5:c7:cb:b6:
47:50:25:61:78:2e:a2:bd:6f:da:8c:7d:d1:c6:49:
a7:6a:7b:1b:4b:96:e2:52:45:6f:ed:33:35:60:91:
0a:d3:f6:93:fe:e1:a1:1b:3c:9c:f9:96:71:14:cd:
cb:bb:68:cb:0e:3d:76:f0:4c:08:f3:f4:cd:29:e9:
fd:04:46:88:00:56:82:0b:b0:ed:73:79:4f:a6:cf:
0f:b1:1d:94:5c:0f:51:f4:ab:21:e9:c7:32:de:ea:
7a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8D:F3:66:2A:B3:8D:A2:89:FE:91:8F:0D:CD:75:07:3B:70:2A:28
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:69:2c:25:3b:80:83:ed:e9:bd:8c:6a:d3:32:69:ee:72:03:
a6:39:08:11:90:cc:34:f3:70:5b:db:07:71:0f:c0:0e:df:28:
12:64:9b:d1:49:68:cc:1c:4e:cb:31:0f:76:bb:6a:c9:90:26:
9f:3b:32:07:bc:3a:cd:9a:4f:c6:7c:85:1b:7f:44:cd:ae:33:
6b:c7:f2:31:ea:39:1e:ac:77:4b:e8:73:fe:6d:08:6f:a7:7d:
93:a3:83:9f:67:17:e9:8b:48:4c:07:1b:aa:1f:22:de:49:ef:
8b:f5:29:b1:87:d9:f5:6a:f0:43:be:b9:81:92:f0:fb:c6:d5:
65:d5:cc:d1:18:8f:17:2b:ba:c8:7a:cd:88:81:c1:75:1a:34:
c3:95:0e:ad:04:9a:39:fc:16:ac:b0:a3:68:05:cc:e7:ec:0e:
fb:54:a0:7d:b6:d1:82:a3:a5:28:97:af:eb:60:d5:a5:86:dc:
f9:71:e6:3f:3b:b5:f0:f1:ee:f6:03:2c:54:71:bd:c2:59:b8:
b5:fd:3b:fd:81:3a:27:a1:78:12:2f:bf:e0:a6:0e:f9:a7:6a:
a3:33:38:7f:a0:23:42:11:2a:5c:9b:ee:ad:c1:8a:0a:63:28:
55:37:fd:ec:13:54:4a:a0:9c:c7:db:6d:d1:b6:69:6e:4d:d5:
e7:f1:ae:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYJQh3jMyXpIjyyScUDqX3JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZTg2ZmY5OTczYzkzYWJlNjM5OGYwMzE5NjZjMjlkNzVh
M2JhODYwHhcNMjUwNDA2MDQwMDUwWhcNMjUwNDA3MDQwMDUwWjAzMTEwLwYDVQQD
EyhjNzhkZjM2NjJhYjM4ZGEyODlmZTkxOGYwZGNkNzUwNzNiNzAyYTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgnbmMOL6ZlZxqVwFyWKMG0aZ9cw
w9cPxYZHrkHCaMZ+gqFaqVZ/Ed4f2KFU4gwZWw1ZcmVA/ze4LpDGu1ERUbUW9ZnE
Vf8ocYA2FkWZG4VDp2I6Lvv8eJ5P8BD2xWdRvQN4Tv3nMbKviSJ4lObWGXAFVApL
INLr2DaoAEUnby4SBWASMxvXConlddDV0wsxo9huAcHonCQHnSwr6zb4mMXHy7ZH
UCVheC6ivW/ajH3RxkmnansbS5biUkVv7TM1YJEK0/aT/uGhGzyc+ZZxFM3Lu2jL
Dj128EwI8/TNKen9BEaIAFaCC7Dtc3lPps8PsR2UXA9R9Ksh6ccy3up6bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeN82Yqs42iif6Rjw3NdQc7cCooMB8GA1UdIwQY
MBaAFCHob/mXPJOr5jmPAxlmwp11o7qGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yZjZkZDAtYjc2Zi00N2Q1LWE0YWIt
MzJmZWViNTY2ZWU2LzEvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yZjZkZDAtYjc2Zi00N2Q1LWE0YWItMzJmZWViNTY2ZWU2
LzEvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGksJTuA
g+3pvYxq0zJp7nIDpjkIEZDMNPNwW9sHcQ/ADt8oEmSb0UlozBxOyzEPdrtqyZAm
nzsyB7w6zZpPxnyFG39Eza4za8fyMeo5Hqx3S+hz/m0Ib6d9k6ODn2cX6YtITAcb
qh8i3knvi/UpsYfZ9WrwQ765gZLw+8bVZdXM0RiPFyu6yHrNiIHBdRo0w5UOrQSa
OfwWrLCjaAXM5+wO+1SgfbbRgqOlKJev62DVpYbc+XHmPzu18PHu9gMsVHG9wlm4
tf07/YE6J6F4Ei+/4KYO+adqozM4f6AjQhEqXJvurcGKCmMoVTf97BNUSqCcx9tt
0bZpbk3V5/GuBw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:46:33 2025 by rpki-client