Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
File: ifnCFo0tgt39inBjfUQBivMLH5c.mft (raw, json)
Hash identifier: dxW5Y86vHjDINuFRq+LJ+64xQbNL6n5ZPVPw9x/1O7k=
Subject key identifier: 06:65:C9:BF:6B:32:77:D3:54:38:95:23:73:87:6A:0A:C7:5C:08:CE
Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
Certificate issuer: /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Certificate serial: 019655A5FD2E461F685E8FA089313D57DA53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
Manifest number: 36
Signing time: Mon 21 Apr 2025 00:01:03 +0000
Manifest this update: Mon 21 Apr 2025 00:01:03 +0000
Manifest next update: Tue 22 Apr 2025 00:01:03 +0000
Files and hashes: 1: ifnCFo0tgt39inBjfUQBivMLH5c.crl (hash: qzX6elzwFaphvOuvkkI3zgBV51WCAy4F53GIE7TA5Mk=)
2: spqKrZZlSshpL2qYZip0d0WaBBs.roa (hash: nNDCN5SzdqIQPR24IlLa7l1TyfR2hVXqn06sMz/jemo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:fd:2e:46:1f:68:5e:8f:a0:89:31:3d:57:da:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Validity
Not Before: Apr 21 00:01:03 2025 GMT
Not After : Apr 22 00:01:03 2025 GMT
Subject: CN=0665c9bf6b3277d35438952373876a0ac75c08ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:03:85:68:bb:0d:1e:5d:1e:74:4b:47:35:a3:
78:5d:c5:34:49:e0:0e:6d:d0:e8:6d:05:06:02:8e:
86:05:10:90:98:dd:18:ba:eb:c5:20:1e:f5:0a:0e:
9c:a5:b4:50:0e:ad:81:20:0b:5a:5c:b1:c7:98:3a:
36:86:53:b7:83:c5:d4:0f:6d:84:a3:88:ef:fb:af:
64:d3:59:06:f8:cc:44:e6:f9:c0:74:a8:b2:13:0b:
58:78:d5:f9:2a:f7:9c:e3:c2:d6:d8:35:11:20:1a:
98:69:65:fb:4f:84:6d:bb:20:96:3f:65:e7:c3:35:
de:48:e0:f3:76:df:a2:f8:1b:71:78:05:1c:54:97:
f3:22:a8:82:a8:3c:ee:aa:83:17:7f:c8:f8:cf:29:
87:9a:38:53:0e:32:d1:2c:01:c8:30:ad:d1:75:4a:
2c:a0:5b:e6:4c:78:b9:7c:29:8b:f7:b7:df:1c:4c:
6f:c6:06:9c:91:7b:77:08:7e:79:b5:c1:c1:27:7a:
5f:e6:b6:d1:ac:f6:44:69:cc:49:08:fd:04:68:fd:
53:f4:81:32:4f:0b:e7:39:77:5a:6a:ac:34:54:4c:
d8:6b:fe:ad:2d:5d:45:00:8c:d5:c4:88:54:e7:97:
e8:80:25:c6:09:4b:11:f9:80:55:25:ab:55:77:d1:
51:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:65:C9:BF:6B:32:77:D3:54:38:95:23:73:87:6A:0A:C7:5C:08:CE
X509v3 Authority Key Identifier:
keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c1:1b:a5:c9:61:84:4e:73:2f:6e:1a:ab:58:cb:44:31:fd:
25:5d:6e:be:d0:80:0c:27:55:0e:a1:5c:e3:40:7f:44:34:e0:
22:71:d8:85:cd:b2:7f:37:2d:5b:35:ae:8b:78:62:0e:30:0b:
fd:9a:28:7d:95:22:f3:ea:57:44:ce:b9:06:d0:81:db:8c:04:
04:8b:39:02:16:5f:54:94:4c:3a:aa:d3:6b:91:2a:34:7b:4c:
20:bd:9b:5c:e3:d1:f1:eb:ec:22:54:3a:64:21:1f:e4:d2:39:
03:91:bb:b1:ba:a0:01:2e:d2:d2:c6:b7:59:8d:b5:dd:43:9b:
5c:9f:26:c7:23:d1:8b:92:3b:c7:a9:f7:c5:51:b6:fe:fa:4a:
8d:3a:db:3d:f3:4a:05:4c:b9:c0:9c:3e:18:85:7f:ef:e7:aa:
90:96:a7:68:60:03:aa:d3:80:6e:56:45:38:07:16:ab:59:2a:
74:3e:f4:31:58:fc:ed:14:b4:6d:94:5e:71:ab:08:d2:be:4c:
09:b6:64:d4:2a:71:3b:9d:18:cc:08:bf:f9:97:e1:e9:63:3f:
ad:6a:c9:fa:0c:6c:67:0a:f6:f0:13:9b:13:52:48:5f:26:e9:
d9:67:32:d2:9b:ac:7a:f6:67:5b:8f:73:b5:4c:f7:61:7f:81:
f6:42:11:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVpf0uRh9oXo+giTE9V9pTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZjljMjE2OGQyZDgyZGRmZDhhNzA2MzdkNDQwMThhZjMw
YjFmOTcwHhcNMjUwNDIxMDAwMTAzWhcNMjUwNDIyMDAwMTAzWjAzMTEwLwYDVQQD
EygwNjY1YzliZjZiMzI3N2QzNTQzODk1MjM3Mzg3NmEwYWM3NWMwOGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAOFaLsNHl0edEtHNaN4XcU0SeAO
bdDobQUGAo6GBRCQmN0YuuvFIB71Cg6cpbRQDq2BIAtaXLHHmDo2hlO3g8XUD22E
o4jv+69k01kG+MxE5vnAdKiyEwtYeNX5Kvec48LW2DURIBqYaWX7T4RtuyCWP2Xn
wzXeSODzdt+i+BtxeAUcVJfzIqiCqDzuqoMXf8j4zymHmjhTDjLRLAHIMK3RdUos
oFvmTHi5fCmL97ffHExvxgackXt3CH55tcHBJ3pf5rbRrPZEacxJCP0EaP1T9IEy
TwvnOXdaaqw0VEzYa/6tLV1FAIzVxIhU55fogCXGCUsR+YBVJatVd9FRpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZlyb9rMnfTVDiVI3OHagrHXAjOMB8GA1UdIwQY
MBaAFIn5whaNLYLd/YpwY31EAYrzCx+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lMWVhOWItZDUyOS00OGJhLThiYTIt
YmFjYWUwMzBlMzc0LzEvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lMWVhOWItZDUyOS00OGJhLThiYTItYmFjYWUwMzBlMzc0
LzEvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcEbpclh
hE5zL24aq1jLRDH9JV1uvtCADCdVDqFc40B/RDTgInHYhc2yfzctWzWui3hiDjAL
/ZoofZUi8+pXRM65BtCB24wEBIs5AhZfVJRMOqrTa5EqNHtMIL2bXOPR8evsIlQ6
ZCEf5NI5A5G7sbqgAS7S0sa3WY213UObXJ8mxyPRi5I7x6n3xVG2/vpKjTrbPfNK
BUy5wJw+GIV/7+eqkJanaGADqtOAblZFOAcWq1kqdD70MVj87RS0bZRecasI0r5M
CbZk1CpxO50YzAi/+Zfh6WM/rWrJ+gxsZwr28BObE1JIXybp2Wcy0pusevZnW49z
tUz3YX+B9kIRzg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:45:21 2025 by rpki-client