Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
File: PI_isZvT639wpO7atha1MlABFSA.mft (raw, json)
Hash identifier: EXD6kehW+0w6zGjI1jNlrwWJhvFQ248qvftiPtkfOsw=
Subject key identifier: CA:A6:6A:DC:5D:9E:F1:BD:AE:C5:4C:3B:F8:0B:B5:9B:2F:A2:AD:9C
Authority key identifier: 3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
Certificate issuer: /CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Certificate serial: 01965613EAC5B7160AAF09409102745CECBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
Manifest number: 01D1
Signing time: Mon 21 Apr 2025 02:01:07 +0000
Manifest this update: Mon 21 Apr 2025 02:01:07 +0000
Manifest next update: Tue 22 Apr 2025 02:01:07 +0000
Files and hashes: 1: PI_isZvT639wpO7atha1MlABFSA.crl (hash: wBHA4Ji4KnUGalmhUXATUoCa2RFx8G99czmMg0RwmTc=)
2: iTxg6a45pQs6yguLKNzKJpXtu1I.roa (hash: IbbuNrBXDC3r/NQaAU8s873gXp019KR8EegJpijUcwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:ea:c5:b7:16:0a:af:09:40:91:02:74:5c:ec:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Validity
Not Before: Apr 21 02:01:07 2025 GMT
Not After : Apr 22 02:01:07 2025 GMT
Subject: CN=caa66adc5d9ef1bdaec54c3bf80bb59b2fa2ad9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:ff:69:a3:27:35:31:09:bb:0f:61:96:ee:
43:c0:c0:03:94:18:56:1b:c5:eb:e5:3e:5e:93:49:
43:75:4d:03:71:fb:6f:a3:5b:b2:b5:a3:07:9d:ff:
2c:91:22:ee:83:99:d6:21:07:41:c9:26:1f:89:49:
c3:51:c3:44:b9:2b:3a:25:e3:ba:dd:5a:ca:cb:63:
c1:ea:36:bb:e0:58:ab:c7:53:17:26:4e:2e:0b:2e:
00:00:6f:58:ee:42:8a:16:6f:2c:7e:dc:38:95:30:
9a:f1:ff:ab:6d:de:ec:aa:a1:da:15:65:7b:8f:10:
bb:07:01:53:22:2c:4c:f9:6f:03:84:8f:64:4c:db:
d6:29:6b:48:9a:49:e4:2d:9e:e9:37:a4:36:34:10:
6f:6b:67:0b:46:59:c7:a4:d0:07:6f:de:08:d2:82:
10:1f:17:63:62:3b:40:1f:a2:a1:6f:25:84:ea:81:
76:f3:7b:e8:21:67:0b:32:8c:52:61:d0:b0:df:45:
45:92:b4:0d:9a:ca:9f:45:92:24:34:2f:cc:f7:50:
e0:d8:21:37:c9:9b:4e:4d:64:c6:3a:96:8c:ef:35:
dd:2e:4d:46:fd:02:de:06:5e:92:95:fa:da:46:d8:
44:c1:f6:b4:a1:85:90:e7:cf:be:89:39:fe:38:cc:
cc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A6:6A:DC:5D:9E:F1:BD:AE:C5:4C:3B:F8:0B:B5:9B:2F:A2:AD:9C
X509v3 Authority Key Identifier:
keyid:3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a5:94:4c:4f:fd:43:ce:7e:27:a5:f1:a8:55:19:85:22:be:
1e:ec:8d:6e:c2:4a:cc:98:47:0b:dc:19:3b:ed:55:79:d5:07:
3a:71:50:5e:71:91:bc:99:16:a6:4f:14:e3:c0:ff:b0:b7:cc:
5c:4c:fb:2c:8b:01:0b:01:f4:a3:e3:35:b7:eb:fe:ec:27:1f:
d2:53:09:0f:ca:bf:50:42:8e:f8:4b:51:84:00:dd:82:18:5e:
e5:a1:cb:06:06:12:71:91:94:71:01:ef:19:9c:59:b2:79:e3:
cd:9a:82:0d:e5:62:4a:51:4b:84:2a:99:5c:79:25:c4:e2:ff:
c9:ba:8e:1b:43:16:7f:cd:9a:ac:09:7f:c0:db:6b:7e:46:20:
0b:38:70:81:ae:fd:7b:24:59:d7:47:7c:de:0c:f6:03:d1:a4:
4e:95:13:c9:f5:0e:2b:c8:53:30:28:f2:a6:1e:c1:d4:ae:9b:
bc:6b:ab:2f:ee:47:80:11:9e:6e:b0:09:d0:e4:35:fc:a9:e5:
86:25:3f:60:e9:07:8a:d1:f5:b0:10:e1:90:5c:eb:66:1c:fd:
7d:ad:25:5a:f1:9e:94:71:51:44:a2:15:64:cb:36:df:e5:4f:
e5:36:0e:4d:ff:55:5c:86:33:0d:27:6c:ea:d9:ef:7c:96:cc:
90:4e:91:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWE+rFtxYKrwlAkQJ0XOy7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjOGZlMmIxOWJkM2ViN2Y3MGE0ZWVkYWI2MTZiNTMyNTAw
MTE1MjAwHhcNMjUwNDIxMDIwMTA3WhcNMjUwNDIyMDIwMTA3WjAzMTEwLwYDVQQD
EyhjYWE2NmFkYzVkOWVmMWJkYWVjNTRjM2JmODBiYjU5YjJmYTJhZDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplz/aaMnNTEJuw9hlu5DwMADlBhW
G8Xr5T5ek0lDdU0Dcftvo1uytaMHnf8skSLug5nWIQdBySYfiUnDUcNEuSs6JeO6
3VrKy2PB6ja74Firx1MXJk4uCy4AAG9Y7kKKFm8sftw4lTCa8f+rbd7sqqHaFWV7
jxC7BwFTIixM+W8DhI9kTNvWKWtImknkLZ7pN6Q2NBBva2cLRlnHpNAHb94I0oIQ
HxdjYjtAH6KhbyWE6oF283voIWcLMoxSYdCw30VFkrQNmsqfRZIkNC/M91Dg2CE3
yZtOTWTGOpaM7zXdLk1G/QLeBl6SlfraRthEwfa0oYWQ58++iTn+OMzMyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqmatxdnvG9rsVMO/gLtZsvoq2cMB8GA1UdIwQY
MBaAFDyP4rGb0+t/cKTu2rYWtTJQARUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUElfaXNadlQ2Mzl3cE83YXRoYTFNbEFCRlNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lN2VkZDEtYzc5Zi00ODkwLWExNzUt
MTJlNmE2ZWRkMTI0LzEvUElfaXNadlQ2Mzl3cE83YXRoYTFNbEFCRlNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9lN2VkZDEtYzc5Zi00ODkwLWExNzUtMTJlNmE2ZWRkMTI0
LzEvUElfaXNadlQ2Mzl3cE83YXRoYTFNbEFCRlNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqqWUTE/9
Q85+J6XxqFUZhSK+HuyNbsJKzJhHC9wZO+1VedUHOnFQXnGRvJkWpk8U48D/sLfM
XEz7LIsBCwH0o+M1t+v+7Ccf0lMJD8q/UEKO+EtRhADdghhe5aHLBgYScZGUcQHv
GZxZsnnjzZqCDeViSlFLhCqZXHklxOL/ybqOG0MWf82arAl/wNtrfkYgCzhwga79
eyRZ10d83gz2A9GkTpUTyfUOK8hTMCjyph7B1K6bvGurL+5HgBGebrAJ0OQ1/Knl
hiU/YOkHitH1sBDhkFzrZhz9fa0lWvGelHFRRKIVZMs23+VP5TYOTf9VXIYzDSds
6tnvfJbMkE6RQQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:51 2025 by rpki-client