Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
File: pDJ8VulBFx6jvrom67niP031vPM.mft (raw, json)
Hash identifier: 2tIYtOEED+udAPxEC70b/6qlCYu3UwSVbCAqNF0UMmw=
Subject key identifier: 28:59:8C:01:EF:69:95:1D:3C:E9:C0:2D:6B:E2:A2:94:C6:87:D4:D8
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Certificate issuer: /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial: 019617DA17F47F1860F2F519245388A1CC41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
Manifest number: 05A1
Signing time: Wed 09 Apr 2025 00:01:31 +0000
Manifest this update: Wed 09 Apr 2025 00:01:31 +0000
Manifest next update: Thu 10 Apr 2025 00:01:31 +0000
Files and hashes: 1: 3vdSYlPhYCcKWdxmctUlZz3LRrA.roa (hash: JYH+c4M07iZOS3Xafi4xgQEUcEXeZVf7HAqO1Fudxb4=)
2: IKxoI34yNDqSYAVSbtJ6URAzHH8.roa (hash: /1RKNbwdvJvERdDo7l1kD+y03W4o9/o77qVS9bJMSGs=)
3: cLRpZsuHj1Ogs0ExPm-7o6d-jPI.roa (hash: TUBUIVHrB/n/iv6Q1YfM7h8U6VmMHs60X+y0rpIetb0=)
4: lbRMrKUagBNury-urjZX3f75_Qw.roa (hash: mq29IIHcb8ubsfXIgUD4LUU90hH0YRXl8dREvVbfEwI=)
5: pDJ8VulBFx6jvrom67niP031vPM.crl (hash: w8d6OxzD9pwYn8Dw7bXP5KrVAhkS3i139odn6RYjFh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:17:da:17:f4:7f:18:60:f2:f5:19:24:53:88:a1:cc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Validity
Not Before: Apr 9 00:01:31 2025 GMT
Not After : Apr 10 00:01:31 2025 GMT
Subject: CN=28598c01ef69951d3ce9c02d6be2a294c687d4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ec:73:7d:d4:3d:83:58:b0:2d:53:17:ec:bc:
59:70:f8:3f:31:df:ad:bc:5e:ef:b9:0d:90:41:b2:
37:5b:2b:0d:49:52:ef:fc:6e:4a:ef:74:28:e5:72:
c8:29:44:95:48:83:2d:0c:69:7a:27:67:4e:4a:31:
40:7a:44:9b:65:0c:6f:ca:38:44:a3:66:7d:0c:25:
c9:c4:55:57:db:10:be:b9:2c:61:dd:8c:48:62:4e:
d5:bd:e7:88:41:be:d6:e1:ae:49:e5:ca:a7:5a:9d:
64:58:a9:60:ad:c8:38:51:9d:f6:0d:6f:ab:91:0d:
80:fe:4f:eb:43:c0:e2:c9:1d:48:f9:1c:a4:e7:67:
99:6d:b2:c8:cc:09:fc:3c:86:b0:41:6b:ad:83:06:
37:05:da:d4:02:d0:8d:95:38:8e:f3:6e:f6:e3:d2:
94:4f:a8:c2:d2:ce:f1:ab:16:da:93:3d:a4:7f:a1:
4a:ea:eb:d3:f4:c9:ea:0f:c4:e1:5f:49:14:28:d7:
65:7b:31:ae:30:88:1a:4c:40:e8:fe:27:9f:d5:1a:
32:95:52:b2:8f:6c:f0:fa:e5:44:40:eb:3e:f0:39:
78:05:7d:22:cb:1b:dd:15:f2:89:a2:49:19:bc:14:
78:56:a7:ae:3f:d0:2a:0c:b9:44:a4:b2:36:d1:b9:
b3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:59:8C:01:EF:69:95:1D:3C:E9:C0:2D:6B:E2:A2:94:C6:87:D4:D8
X509v3 Authority Key Identifier:
keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:07:c6:c3:61:b6:7d:b6:12:30:a8:2f:09:e9:23:7a:f5:a6:
a9:fa:41:b7:f6:c3:9c:89:56:06:63:82:85:49:84:2b:49:53:
57:59:72:18:8b:3b:6f:37:aa:4f:2e:cd:38:b6:f8:ef:a3:69:
49:0d:46:46:e4:6b:b5:aa:19:33:4c:48:e2:83:b2:78:d5:3d:
8b:fe:cc:ed:74:69:a2:6b:27:d2:29:b3:2e:ff:e4:a2:8b:9e:
69:d3:13:65:b6:0b:8b:27:a7:7f:d2:41:9c:35:1f:63:ff:e2:
18:c2:67:88:6b:be:85:13:3e:e9:0a:03:6c:30:6b:c4:aa:eb:
e6:63:6c:1b:94:1f:b2:38:55:41:6b:9d:03:ce:5c:fc:5a:0f:
8f:5c:cb:48:2d:f4:7e:e8:c7:3c:a7:f9:8c:7b:fc:85:29:a7:
32:ba:9b:90:19:64:9a:e6:47:f5:c6:e0:9b:f2:fc:c4:74:3e:
a3:5c:3d:cd:f6:fa:25:e5:38:a6:89:36:e9:fc:2a:5b:b4:18:
62:76:1a:d5:a0:b8:b4:f2:73:e1:2e:65:bf:6c:3a:32:3a:83:
54:a8:71:dd:3c:56:63:69:57:a2:a4:36:13:ba:2c:33:05:92:
ad:e9:c1:0f:2d:40:e3:c7:cb:95:09:73:3c:26:92:b1:80:c1:
ea:11:27:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYX2hf0fxhg8vUZJFOIocxBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzI3YzU2ZTk0MTE3MWVhM2JlYmEyNmViYjllMjNmNGRm
NWJjZjMwHhcNMjUwNDA5MDAwMTMxWhcNMjUwNDEwMDAwMTMxWjAzMTEwLwYDVQQD
EygyODU5OGMwMWVmNjk5NTFkM2NlOWMwMmQ2YmUyYTI5NGM2ODdkNGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOxzfdQ9g1iwLVMX7LxZcPg/Md+t
vF7vuQ2QQbI3WysNSVLv/G5K73Qo5XLIKUSVSIMtDGl6J2dOSjFAekSbZQxvyjhE
o2Z9DCXJxFVX2xC+uSxh3YxIYk7VveeIQb7W4a5J5cqnWp1kWKlgrcg4UZ32DW+r
kQ2A/k/rQ8DiyR1I+Ryk52eZbbLIzAn8PIawQWutgwY3BdrUAtCNlTiO827249KU
T6jC0s7xqxbakz2kf6FK6uvT9MnqD8ThX0kUKNdlezGuMIgaTEDo/ief1RoylVKy
j2zw+uVEQOs+8Dl4BX0iyxvdFfKJokkZvBR4VqeuP9AqDLlEpLI20bmzoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChZjAHvaZUdPOnALWviopTGh9TYMB8GA1UdIwQY
MBaAFKQyfFbpQRceo766Juu54j9N9bzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWIt
MjhjMzQzY2U5ZDVkLzEvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWItMjhjMzQzY2U5ZDVk
LzEvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAfGw2G2
fbYSMKgvCekjevWmqfpBt/bDnIlWBmOChUmEK0lTV1lyGIs7bzeqTy7NOLb476Np
SQ1GRuRrtaoZM0xI4oOyeNU9i/7M7XRpomsn0imzLv/kooueadMTZbYLiyenf9JB
nDUfY//iGMJniGu+hRM+6QoDbDBrxKrr5mNsG5QfsjhVQWudA85c/FoPj1zLSC30
fujHPKf5jHv8hSmnMrqbkBlkmuZH9cbgm/L8xHQ+o1w9zfb6JeU4pok26fwqW7QY
YnYa1aC4tPJz4S5lv2w6MjqDVKhx3TxWY2lXoqQ2E7osMwWSrenBDy1A48fLlQlz
PCaSsYDB6hEnRg==
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:56:02 2025 by rpki-client