Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
File: cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft (raw, json)
Hash identifier: J2py9ihxtRKpKkWmlI8PnmRBr7FtZ9j8jGKL3HbyNkc=
Subject key identifier: DF:EF:B3:6C:6B:75:D3:C0:FE:33:17:D9:EF:5C:80:7A:3C:7B:57:BD
Authority key identifier: 72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
Certificate issuer: /CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Certificate serial: 019655A5DDEB60DE3796D0DE4BC1027FD7B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
Manifest number: 1507
Signing time: Mon 21 Apr 2025 00:00:55 +0000
Manifest this update: Mon 21 Apr 2025 00:00:55 +0000
Manifest next update: Tue 22 Apr 2025 00:00:55 +0000
Files and hashes: 1: IR58hW2pF2dLJCna8uyvYq_VZMM.roa (hash: ac2RbFn+3ptdCI7LDC+sf8voL9sYZa7XS3mEnBJ7haQ=)
2: bkHUy_sgghNYVbWsbVxAbLGezkg.roa (hash: yMeTm4bL37IzjPkhConJ8z6pYcZ3+b2hJFSO0Nigh2w=)
3: cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl (hash: VZFngCzsb2gfOUDZmbB2VGZfbHKpsqOHckOhSdturKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:dd:eb:60:de:37:96:d0:de:4b:c1:02:7f:d7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Validity
Not Before: Apr 21 00:00:55 2025 GMT
Not After : Apr 22 00:00:55 2025 GMT
Subject: CN=dfefb36c6b75d3c0fe3317d9ef5c807a3c7b57bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4d:7b:49:db:50:ca:15:d9:18:b1:6b:44:b9:
80:ef:9d:d2:5d:d9:00:08:5f:b9:c1:51:e8:5c:9b:
b3:b9:48:e8:91:58:23:02:b5:9a:7f:cf:d3:a2:4d:
f2:e1:58:57:74:c5:59:a5:a0:f6:25:5d:7c:8e:13:
9c:ce:0b:eb:10:6e:f2:a9:aa:02:25:ae:71:9f:9a:
6f:02:3b:1b:c2:c1:ee:8f:d7:2f:17:33:92:6a:25:
08:9f:28:d4:c1:d7:57:b5:97:c5:01:8e:f6:ad:17:
85:cc:ac:71:4c:17:06:e0:ef:fa:bd:8f:74:bb:ae:
31:aa:da:cb:c5:3d:5c:62:5b:19:03:b6:40:74:e3:
4b:65:41:b6:72:9b:97:f8:e6:30:44:1d:46:b6:d0:
2d:fb:67:83:45:f7:a1:01:22:7f:53:e1:5b:4b:56:
bd:6f:b7:6f:a7:b0:5f:50:7b:aa:0a:8e:92:6a:5a:
52:00:bb:89:ee:c1:46:dd:eb:6d:77:b3:2a:43:04:
ed:df:a5:75:60:8d:11:ff:21:7e:58:c7:c2:b1:f2:
2b:88:dd:be:67:f2:61:7a:fc:93:a7:b0:1b:3a:42:
0f:5a:19:4c:dc:3e:a3:99:ff:f5:cd:26:5f:7d:52:
97:c0:98:63:a9:cc:d8:1c:5c:38:37:5c:9c:e9:31:
4f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EF:B3:6C:6B:75:D3:C0:FE:33:17:D9:EF:5C:80:7A:3C:7B:57:BD
X509v3 Authority Key Identifier:
keyid:72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:cf:fb:c9:35:5f:21:03:07:ea:72:df:b7:41:e1:9b:60:88:
a8:2e:18:36:72:3b:2f:a5:95:01:ce:67:50:78:b6:02:45:a5:
32:fb:d3:fb:17:49:38:aa:d5:08:8b:62:c3:31:be:07:53:d9:
5d:43:4f:c4:96:29:a5:e8:36:7d:8b:42:96:8b:9b:b6:ba:5a:
d2:b1:39:ee:ea:21:17:c9:72:55:0c:dd:f1:5d:0f:01:4b:c4:
d8:b7:ea:12:2f:f0:a0:71:1b:4e:3d:76:2d:fc:e1:7c:d6:71:
7f:1e:6a:68:1c:72:7b:a3:a0:9a:93:a4:5a:40:43:b6:32:4f:
a1:c5:de:8f:01:bc:41:eb:d4:d9:35:79:d4:fc:c9:9a:a9:83:
85:08:2d:81:58:8d:79:8c:39:14:c8:9f:95:37:b4:18:72:0c:
e7:a9:24:9f:96:ca:1e:0f:e7:a4:2d:52:c3:2f:e9:3b:5f:28:
70:ed:aa:11:d4:78:6d:bc:df:7b:19:5c:28:1b:b1:72:c0:df:
26:95:ee:09:f5:08:a0:27:39:ef:ad:af:d4:8d:b2:18:71:0e:
22:21:14:11:dc:43:46:b2:67:68:5f:36:3d:d9:74:61:8f:8b:
07:c5:1c:00:d0:0b:4c:14:8c:0a:bc:2d:0e:f1:e8:76:75:f2:
d0:8d:34:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVpd3rYN43ltDeS8ECf9e1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNzY5ZDZlNGEwZmMyYzk4MDEzYjcyMmViMmJlYjllNmU4
NzFmYzYwHhcNMjUwNDIxMDAwMDU1WhcNMjUwNDIyMDAwMDU1WjAzMTEwLwYDVQQD
EyhkZmVmYjM2YzZiNzVkM2MwZmUzMzE3ZDllZjVjODA3YTNjN2I1N2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok17SdtQyhXZGLFrRLmA753SXdkA
CF+5wVHoXJuzuUjokVgjArWaf8/Tok3y4VhXdMVZpaD2JV18jhOczgvrEG7yqaoC
Ja5xn5pvAjsbwsHuj9cvFzOSaiUInyjUwddXtZfFAY72rReFzKxxTBcG4O/6vY90
u64xqtrLxT1cYlsZA7ZAdONLZUG2cpuX+OYwRB1GttAt+2eDRfehASJ/U+FbS1a9
b7dvp7BfUHuqCo6SalpSALuJ7sFG3ettd7MqQwTt36V1YI0R/yF+WMfCsfIriN2+
Z/JhevyTp7AbOkIPWhlM3D6jmf/1zSZffVKXwJhjqczYHFw4N1yc6TFPNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/vs2xrddPA/jMX2e9cgHo8e1e9MB8GA1UdIwQY
MBaAFHJ2nW5KD8LJgBO3Iusr655uhx/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY25hZGJrb1B3c21BRTdjaTZ5dnJubTZISDhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9jNjc1MjItNzFjNS00MDYxLWExOGIt
NjkzM2E5MGM1M2ZhLzEvY25hZGJrb1B3c21BRTdjaTZ5dnJubTZISDhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9jNjc1MjItNzFjNS00MDYxLWExOGItNjkzM2E5MGM1M2Zh
LzEvY25hZGJrb1B3c21BRTdjaTZ5dnJubTZISDhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATM/7yTVf
IQMH6nLft0Hhm2CIqC4YNnI7L6WVAc5nUHi2AkWlMvvT+xdJOKrVCItiwzG+B1PZ
XUNPxJYppeg2fYtCloubtrpa0rE57uohF8lyVQzd8V0PAUvE2LfqEi/woHEbTj12
LfzhfNZxfx5qaBxye6OgmpOkWkBDtjJPocXejwG8QevU2TV51PzJmqmDhQgtgViN
eYw5FMiflTe0GHIM56kkn5bKHg/npC1Swy/pO18ocO2qEdR4bbzfexlcKBuxcsDf
JpXuCfUIoCc5762v1I2yGHEOIiEUEdxDRrJnaF82Pdl0YY+LB8UcANALTBSMCrwt
DvHodnXy0I00gg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:19:42 2025 by rpki-client