Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
File: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft (raw, json)
Hash identifier: 8C6dZtO1i7iPbogWhDS7+EoKpFist1/r6D4DN3oyXs4=
Subject key identifier: EC:76:FA:3C:BD:A5:06:42:03:BD:86:05:52:D9:31:1A:58:B8:FC:BE
Authority key identifier: D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
Certificate issuer: /CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Certificate serial: 01965613130C923C5F89B9F8E566D9C0AC79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
Manifest number: 14D3
Signing time: Mon 21 Apr 2025 02:00:12 +0000
Manifest this update: Mon 21 Apr 2025 02:00:12 +0000
Manifest next update: Tue 22 Apr 2025 02:00:12 +0000
Files and hashes: 1: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl (hash: WhJjPD4Nm7JwvYl75X22BaMz7LmyipH52RgH5DDBj6Y=)
2: PRL7sgUPxAooAgpR2OCFKktRv4I.roa (hash: 7EnjkpMFrtIGkSxH/V71N/Yi8O1F+vC6f4Et13UAYFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:13:0c:92:3c:5f:89:b9:f8:e5:66:d9:c0:ac:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Validity
Not Before: Apr 21 02:00:12 2025 GMT
Not After : Apr 22 02:00:12 2025 GMT
Subject: CN=ec76fa3cbda5064203bd860552d9311a58b8fcbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:d1:ec:d9:9d:54:7e:f6:42:75:4a:7c:e5:
57:2e:d8:87:1c:fb:ce:f5:02:cf:fe:c2:7c:90:0a:
1b:05:15:03:20:ee:db:37:55:8a:6c:74:f5:c4:97:
0a:88:53:1f:33:9f:fe:e9:f1:7f:69:b0:8a:b2:50:
7c:d7:17:03:75:b7:50:aa:88:b4:9d:f4:fe:68:48:
9f:29:94:24:fb:5c:37:70:2b:77:53:48:30:c5:6c:
ea:36:67:60:fa:f2:21:f9:3c:bc:63:64:f2:23:da:
c0:5f:80:f9:44:47:5b:49:50:a9:87:15:5d:fe:41:
9c:9a:89:4e:bb:94:99:95:f5:07:ad:7d:cd:bd:94:
44:0b:40:d8:25:95:ac:f2:de:bb:a7:d6:aa:6a:f5:
1f:7d:a4:af:9a:36:83:7d:a2:8d:ed:f6:c8:e1:34:
fb:20:cb:e1:e9:70:02:d1:1d:8f:8d:4c:4d:80:60:
e8:83:04:b9:6a:f9:07:91:02:1d:87:7c:cc:e2:5d:
6d:6b:61:4b:4e:26:59:4b:bb:7d:3a:98:a7:35:2e:
b0:88:d1:a8:36:7a:d3:ec:81:95:dc:10:72:dd:78:
34:f3:f0:e5:15:1d:07:18:3c:9d:93:1a:18:74:0c:
34:af:d7:88:3e:6e:53:a2:00:3f:5b:64:66:f2:b1:
29:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:76:FA:3C:BD:A5:06:42:03:BD:86:05:52:D9:31:1A:58:B8:FC:BE
X509v3 Authority Key Identifier:
keyid:D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:83:ff:b4:e2:42:fc:d0:e4:81:60:5f:e3:f5:35:45:06:56:
34:9e:60:08:d0:48:f7:e8:8b:a0:75:30:a1:8f:d7:44:9f:de:
35:9e:67:1c:86:a8:7c:8b:93:8d:54:27:a8:e4:59:46:14:cf:
18:b6:32:de:76:15:2f:22:af:f2:98:40:f9:48:15:69:72:24:
b7:1f:f7:14:35:72:bb:81:0a:53:85:61:17:ee:2e:53:5b:b5:
40:2b:6d:f0:0a:48:7e:1b:f9:7a:5d:16:df:3f:08:3d:61:09:
2b:67:b8:a0:8e:c6:9b:a6:61:c8:58:1c:f2:b7:64:e6:af:3d:
b9:0c:df:ef:58:c7:dd:97:e5:d3:89:15:6c:5c:97:f6:80:db:
f4:f1:a9:b6:db:5b:d4:a1:18:ea:7a:e8:95:55:31:c5:75:4c:
67:57:a8:a8:b3:9f:14:00:de:b4:8c:ed:cc:16:b5:63:31:d8:
6e:79:0f:38:c6:0a:54:ce:85:1f:99:2d:2b:5c:1e:d2:3a:43:
3f:40:22:8f:6c:3b:14:00:a0:09:b0:89:ff:84:c2:eb:12:68:
c5:a4:2d:ab:0f:f6:3d:3e:2e:8f:53:00:f1:fd:b1:3e:54:ef:
c3:65:ff:f0:a1:e8:3a:81:ed:86:2b:6c:62:18:c4:94:84:ec:
e0:15:08:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWExMMkjxfibn45WbZwKx5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjZiODQzNmY2NjM0Y2QzMWQ3MDk3Y2UyNDJhNTQ5OTM1
YjE4ZDcwHhcNMjUwNDIxMDIwMDEyWhcNMjUwNDIyMDIwMDEyWjAzMTEwLwYDVQQD
EyhlYzc2ZmEzY2JkYTUwNjQyMDNiZDg2MDU1MmQ5MzExYTU4YjhmY2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOzR7NmdVH72QnVKfOVXLtiHHPvO
9QLP/sJ8kAobBRUDIO7bN1WKbHT1xJcKiFMfM5/+6fF/abCKslB81xcDdbdQqoi0
nfT+aEifKZQk+1w3cCt3U0gwxWzqNmdg+vIh+Ty8Y2TyI9rAX4D5REdbSVCphxVd
/kGcmolOu5SZlfUHrX3NvZREC0DYJZWs8t67p9aqavUffaSvmjaDfaKN7fbI4TT7
IMvh6XAC0R2PjUxNgGDogwS5avkHkQIdh3zM4l1ta2FLTiZZS7t9OpinNS6wiNGo
NnrT7IGV3BBy3Xg08/DlFR0HGDydkxoYdAw0r9eIPm5TogA/W2Rm8rEp4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOx2+jy9pQZCA72GBVLZMRpYuPy+MB8GA1UdIwQY
MBaAFND2uENvZjTNMdcJfOJCpUmTWxjXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBhNFEyOW1OTTB4MXdsODRrS2xTWk5iR05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC81MTRhNDItMGJlOC00NWU4LWE3ZjAt
NTVkYThlYzM2MDE0LzEvMFBhNFEyOW1OTTB4MXdsODRrS2xTWk5iR05jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC81MTRhNDItMGJlOC00NWU4LWE3ZjAtNTVkYThlYzM2MDE0
LzEvMFBhNFEyOW1OTTB4MXdsODRrS2xTWk5iR05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4P/tOJC
/NDkgWBf4/U1RQZWNJ5gCNBI9+iLoHUwoY/XRJ/eNZ5nHIaofIuTjVQnqORZRhTP
GLYy3nYVLyKv8phA+UgVaXIktx/3FDVyu4EKU4VhF+4uU1u1QCtt8ApIfhv5el0W
3z8IPWEJK2e4oI7Gm6ZhyFgc8rdk5q89uQzf71jH3Zfl04kVbFyX9oDb9PGptttb
1KEY6nrolVUxxXVMZ1eoqLOfFADetIztzBa1YzHYbnkPOMYKVM6FH5ktK1we0jpD
P0Aij2w7FACgCbCJ/4TC6xJoxaQtqw/2PT4uj1MA8f2xPlTvw2X/8KHoOoHthits
YhjElITs4BUIUw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:12 2025 by rpki-client