Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json)
Hash identifier: whesblS7XXddm6GNnRivgFyRR2EtxSN3ESXhLIxH4kA=
Subject key identifier: A6:C8:61:32:97:5B:9F:DD:A0:0A:3F:5C:CE:5F:66:DB:E1:60:27:DE
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 019650B6373F45D4E12CD1215085F8A72C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 01:00:41 +0000
Manifest this update: Sun 20 Apr 2025 01:00:41 +0000
Manifest next update: Mon 21 Apr 2025 01:00:41 +0000
Files and hashes: 1: SNV_1VpgwAmnXneSKWb5jRq8ToE.roa (hash: WATnXIVshclXFF3TBwoPfH1QR7+uJEv7hk540ZBWOkc=)
2: lVzggsEuwHNUmwDhZ4XQcolHpDk.roa (hash: eA/BupKOc3qojEoZ8E13TwJIMViSsM3/KaYEEgTR1Jc=)
3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: mW91eKieUNRRa572RnV9oMOTMCFyKyFE5sbQ/Vmk7s0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:37:3f:45:d4:e1:2c:d1:21:50:85:f8:a7:2c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: Apr 20 01:00:41 2025 GMT
Not After : Apr 21 01:00:41 2025 GMT
Subject: CN=a6c86132975b9fdda00a3f5cce5f66dbe16027de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7f:b2:40:64:e6:10:d7:d0:97:cd:0d:ce:d9:
5d:67:d9:50:74:b2:f3:d2:3b:28:f1:72:9f:2d:2d:
15:ec:0b:c5:5c:7c:08:19:4c:4e:cf:1c:1c:80:0c:
5e:25:43:0a:c3:43:cb:ff:ce:40:0d:d0:47:02:e8:
9f:b2:d3:57:4a:f1:e6:dc:70:83:a2:17:66:de:00:
1f:ac:18:fd:88:50:a2:f4:bb:8b:9a:35:fe:ec:43:
ca:4c:cb:c6:ed:d9:b0:6d:c2:5a:d0:47:2d:f4:dd:
05:a5:7e:3f:48:ff:73:be:c4:81:56:df:91:a0:39:
04:5a:e6:74:e7:16:30:f6:2c:01:e5:44:5b:13:8c:
f5:41:81:5d:64:b8:6c:28:97:23:4a:7d:43:94:fd:
97:f9:f2:5d:b9:eb:cf:6c:15:dc:a1:7c:75:1d:1a:
1c:f2:55:15:95:99:83:b4:1c:14:dd:9d:2d:c5:2f:
c5:6f:08:cf:17:b6:9e:85:ee:f6:81:06:b6:d3:98:
23:49:11:05:b0:4c:3d:6a:dd:99:53:c4:a4:13:a1:
2b:fe:89:e7:42:58:37:73:03:f7:04:de:9f:bf:df:
9d:27:5e:c2:0f:19:46:1e:2c:ea:68:de:e5:e2:a5:
0e:0f:57:2f:ef:13:1d:ac:21:7d:01:b6:f6:07:63:
b0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C8:61:32:97:5B:9F:DD:A0:0A:3F:5C:CE:5F:66:DB:E1:60:27:DE
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ad:6b:fc:41:32:36:e2:76:a6:3a:6a:e4:11:7e:a3:d4:56:
a7:dc:61:fe:d8:f8:cf:9e:ab:59:0f:31:bf:ea:70:79:3a:39:
00:3e:12:6a:08:76:e2:f2:b5:2c:10:79:19:07:e8:72:4a:98:
ea:cd:24:23:7b:13:a5:2d:71:ab:8e:6a:d4:93:ad:48:b0:21:
79:73:19:5e:59:3e:4c:d9:1e:8a:dd:cd:63:81:87:65:3a:47:
7a:e2:30:9b:68:24:ac:15:56:e2:c6:ff:d2:89:74:f7:8b:93:
8f:cb:ed:9b:ff:e1:f4:48:8c:42:f0:83:9c:4d:7e:5a:2f:59:
31:0a:34:4b:01:59:ec:ed:9c:76:bc:34:8c:b7:b6:40:81:cf:
5f:3b:03:ff:57:c4:81:9b:53:52:fd:ff:77:61:0b:91:30:6f:
6c:71:80:b7:a3:be:87:3b:3c:51:c5:f0:fa:16:64:2e:4b:28:
9b:65:b6:f2:5d:84:f8:5f:18:d8:87:61:df:41:e3:5a:d4:35:
73:dd:51:3e:c1:e6:5b:c2:c5:1c:05:2b:7b:a6:2f:98:cb:a2:
17:8d:48:52:51:5b:59:0b:33:d4:5f:93:5c:63:34:95:c3:c9:
27:63:9e:8c:20:34:50:ab:54:ea:8d:38:be:ad:b7:3d:ef:8a:
38:a2:aa:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQtjc/RdThLNEhUIX4pyxnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MmNmM2VhM2Y0NjE5YWRkN2IxZjg1ZTVkYmM3NjhjZDNk
MTc0MmQwHhcNMjUwNDIwMDEwMDQxWhcNMjUwNDIxMDEwMDQxWjAzMTEwLwYDVQQD
EyhhNmM4NjEzMjk3NWI5ZmRkYTAwYTNmNWNjZTVmNjZkYmUxNjAyN2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33+yQGTmENfQl80NztldZ9lQdLLz
0jso8XKfLS0V7AvFXHwIGUxOzxwcgAxeJUMKw0PL/85ADdBHAuifstNXSvHm3HCD
ohdm3gAfrBj9iFCi9LuLmjX+7EPKTMvG7dmwbcJa0Ect9N0FpX4/SP9zvsSBVt+R
oDkEWuZ05xYw9iwB5URbE4z1QYFdZLhsKJcjSn1DlP2X+fJduevPbBXcoXx1HRoc
8lUVlZmDtBwU3Z0txS/FbwjPF7aehe72gQa205gjSREFsEw9at2ZU8SkE6Er/onn
Qlg3cwP3BN6fv9+dJ17CDxlGHizqaN7l4qUOD1cv7xMdrCF9Abb2B2OwGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbIYTKXW5/doAo/XM5fZtvhYCfeMB8GA1UdIwQY
MBaAFKQs8+o/Rhmt17H4Xl28dozT0XQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTIt
Yzc3NzUxNTlmYzgyLzEvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTItYzc3NzUxNTlmYzgy
LzEvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD61r/EEy
NuJ2pjpq5BF+o9RWp9xh/tj4z56rWQ8xv+pweTo5AD4Sagh24vK1LBB5GQfockqY
6s0kI3sTpS1xq45q1JOtSLAheXMZXlk+TNkeit3NY4GHZTpHeuIwm2gkrBVW4sb/
0ol094uTj8vtm//h9EiMQvCDnE1+Wi9ZMQo0SwFZ7O2cdrw0jLe2QIHPXzsD/1fE
gZtTUv3/d2ELkTBvbHGAt6O+hzs8UcXw+hZkLksom2W28l2E+F8Y2Idh30HjWtQ1
c91RPsHmW8LFHAUre6YvmMuiF41IUlFbWQsz1F+TXGM0lcPJJ2OejCA0UKtU6o04
vq23Pe+KOKKqTQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 05:01:53 2025 by rpki-client