Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
File: sA09NPYeSEaIv_-cxwN1WCN3WZg.mft (raw, json)
Hash identifier: wbm1tkmoZ5aBhpj1bk+JPUvN2e/fpeNTO9Vw/0gYPNU=
Subject key identifier: 5F:62:F9:97:96:CA:EE:85:E0:30:1B:73:A7:4C:D8:E3:C9:3A:34:2C
Authority key identifier: B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
Certificate issuer: /CN=b00d3d34f61e484688bfff9cc703755823775998
Certificate serial: 01965793B3FB232077A8011E6D682CE7D481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
Manifest number: 11B3
Signing time: Mon 21 Apr 2025 09:00:19 +0000
Manifest this update: Mon 21 Apr 2025 09:00:19 +0000
Manifest next update: Tue 22 Apr 2025 09:00:19 +0000
Files and hashes: 1: LKbJBE8NWEbtvlmwjvUv8EH6lzg.roa (hash: OvzM1ONuWDYGL3UTKmOuYTSxh3U96Ifed1WChkSuccI=)
2: sA09NPYeSEaIv_-cxwN1WCN3WZg.crl (hash: i6xkBfXLb8+zFhw3WDPU3Hd5ARJBnSLGKgJba+Unt2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:b3:fb:23:20:77:a8:01:1e:6d:68:2c:e7:d4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00d3d34f61e484688bfff9cc703755823775998
Validity
Not Before: Apr 21 09:00:19 2025 GMT
Not After : Apr 22 09:00:19 2025 GMT
Subject: CN=5f62f99796caee85e0301b73a74cd8e3c93a342c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:04:8f:7b:c9:79:38:92:99:5c:8d:3c:0d:08:
87:1c:4a:d9:54:2d:ee:cf:0e:f3:3e:05:9e:49:b1:
3f:15:08:09:3a:28:db:da:b9:06:21:54:b9:8c:c0:
86:d6:91:75:5f:36:5c:08:eb:42:e6:c2:7d:fa:e0:
da:96:ea:e6:24:3b:08:b1:04:fd:0c:66:9c:f1:73:
55:19:33:74:f0:e8:bf:eb:db:9e:10:d1:23:0d:29:
41:5c:51:3f:0d:71:4e:d4:87:3c:c7:89:77:c6:99:
c2:a1:bd:54:bf:4c:4f:22:95:a7:19:ea:59:54:da:
cc:d5:b3:5a:83:9a:00:72:03:07:bb:a8:f9:5f:99:
f1:93:80:b0:20:39:98:dd:f9:77:38:13:d4:21:c7:
5f:c3:c6:a8:04:38:cb:ed:0e:6c:e6:cc:e5:02:6f:
ac:15:1e:c7:4c:9b:71:7e:4e:7f:92:e7:b4:57:ab:
88:b4:c3:34:17:ff:e0:70:d3:bd:c1:8d:7c:e4:43:
ed:cb:c8:64:e5:e4:a9:85:28:b0:74:5c:b4:42:dd:
9d:2e:d6:5f:90:33:af:14:82:d1:c2:e8:da:da:13:
99:62:f0:1a:5b:9a:a7:2a:8e:9d:70:f6:ff:f8:b6:
d3:b6:54:2b:14:06:11:b0:15:db:79:14:f5:64:4b:
1f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:62:F9:97:96:CA:EE:85:E0:30:1B:73:A7:4C:D8:E3:C9:3A:34:2C
X509v3 Authority Key Identifier:
keyid:B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:c3:1e:0d:9b:cf:90:ee:48:9a:97:fa:ef:e4:fc:84:3e:40:
ba:fa:a1:e5:ee:e0:60:39:1f:86:cd:99:c4:e6:1a:cb:b5:fe:
fa:6e:22:db:8d:5d:76:b4:e9:97:f5:13:1f:ba:0f:ed:98:b3:
7c:3d:c6:bf:1c:64:1b:a0:21:13:42:06:25:6e:54:6b:d9:1f:
3f:c5:f2:25:62:de:5b:00:66:3e:9b:f8:93:e6:28:46:f9:19:
76:4e:8e:72:48:97:32:b0:0e:f0:61:15:49:be:31:6f:b4:95:
12:8a:37:2f:60:5d:5f:80:a5:ee:e3:50:b5:a3:4c:50:24:be:
15:84:ee:b5:f7:70:99:b8:66:cd:11:51:43:63:c0:3a:9d:b1:
bc:57:ce:83:84:a4:7d:12:a0:4a:19:e8:99:be:17:a1:5b:53:
25:d0:be:a4:ab:d4:43:ce:d5:5f:37:f5:27:3e:1b:03:bd:42:
63:ca:68:04:ea:c5:49:1d:ed:5a:46:86:75:87:84:fb:0c:7e:
8a:99:42:18:70:8c:58:98:3f:fc:c6:2d:93:cd:f4:52:68:41:
05:ed:2a:4a:5f:a3:cc:5d:53:7f:0d:42:c7:a7:2a:fd:0f:06:
2b:cb:82:d5:4c:9f:1c:c0:50:23:19:73:ee:d7:08:8b:1d:fc:
5d:4a:ec:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXk7P7IyB3qAEebWgs59SBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMGQzZDM0ZjYxZTQ4NDY4OGJmZmY5Y2M3MDM3NTU4MjM3
NzU5OTgwHhcNMjUwNDIxMDkwMDE5WhcNMjUwNDIyMDkwMDE5WjAzMTEwLwYDVQQD
Eyg1ZjYyZjk5Nzk2Y2FlZTg1ZTAzMDFiNzNhNzRjZDhlM2M5M2EzNDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgSPe8l5OJKZXI08DQiHHErZVC3u
zw7zPgWeSbE/FQgJOijb2rkGIVS5jMCG1pF1XzZcCOtC5sJ9+uDalurmJDsIsQT9
DGac8XNVGTN08Oi/69ueENEjDSlBXFE/DXFO1Ic8x4l3xpnCob1Uv0xPIpWnGepZ
VNrM1bNag5oAcgMHu6j5X5nxk4CwIDmY3fl3OBPUIcdfw8aoBDjL7Q5s5szlAm+s
FR7HTJtxfk5/kue0V6uItMM0F//gcNO9wY185EPty8hk5eSphSiwdFy0Qt2dLtZf
kDOvFILRwuja2hOZYvAaW5qnKo6dcPb/+LbTtlQrFAYRsBXbeRT1ZEsfQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9i+ZeWyu6F4DAbc6dM2OPJOjQsMB8GA1UdIwQY
MBaAFLANPTT2HkhGiL//nMcDdVgjd1mYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0EwOU5QWWVTRWFJdl8tY3h3TjFXQ04zV1pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zYjI1ZjUtYTE5MC00OGZmLWEzZTEt
MTcxZGM1YTk4NDc0LzEvc0EwOU5QWWVTRWFJdl8tY3h3TjFXQ04zV1pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8zYjI1ZjUtYTE5MC00OGZmLWEzZTEtMTcxZGM1YTk4NDc0
LzEvc0EwOU5QWWVTRWFJdl8tY3h3TjFXQ04zV1pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0sMeDZvP
kO5Impf67+T8hD5Auvqh5e7gYDkfhs2ZxOYay7X++m4i241ddrTpl/UTH7oP7Ziz
fD3GvxxkG6AhE0IGJW5Ua9kfP8XyJWLeWwBmPpv4k+YoRvkZdk6OckiXMrAO8GEV
Sb4xb7SVEoo3L2BdX4Cl7uNQtaNMUCS+FYTutfdwmbhmzRFRQ2PAOp2xvFfOg4Sk
fRKgShnomb4XoVtTJdC+pKvUQ87VXzf1Jz4bA71CY8poBOrFSR3tWkaGdYeE+wx+
iplCGHCMWJg//MYtk830UmhBBe0qSl+jzF1Tfw1Cx6cq/Q8GK8uC1UyfHMBQIxlz
7tcIix38XUrsRg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:19 2025 by rpki-client