Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
File: pByW6THu5BuJnWLH24NjNEajxCs.mft (raw, json)
Hash identifier: TtK5SgJXVghnts+aPtPSI0NhpzotOXTYjmdUgWv6gss=
Subject key identifier: 60:55:FE:B4:55:24:9B:57:2A:50:3B:5B:17:07:E8:07:1E:D1:CA:CA
Authority key identifier: A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
Certificate issuer: /CN=a41c96e931eee41b899d62c7db83633446a3c42b
Certificate serial: 019655A61C56BAA5ADE332B6E893C7324849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 00:01:11 +0000
Manifest this update: Mon 21 Apr 2025 00:01:11 +0000
Manifest next update: Tue 22 Apr 2025 00:01:11 +0000
Files and hashes: 1: 9Y_dJTvHqJ6_O2HDQsdb4YPQOPM.roa (hash: C4dGnq5v0d5/X1v0Ow3x2iZJ1sOJLLWISEpoXWZpLas=)
2: pByW6THu5BuJnWLH24NjNEajxCs.crl (hash: eYcHdf5eJc2M5eo/OIQEJzfouRw0yl+DB0rmblkJCDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:1c:56:ba:a5:ad:e3:32:b6:e8:93:c7:32:48:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41c96e931eee41b899d62c7db83633446a3c42b
Validity
Not Before: Apr 21 00:01:11 2025 GMT
Not After : Apr 22 00:01:11 2025 GMT
Subject: CN=6055feb455249b572a503b5b1707e8071ed1caca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e6:7a:79:8b:33:b5:73:0c:81:e2:0e:4f:e5:
68:2b:3b:be:07:d8:ed:4f:0e:be:a5:ab:d4:95:d6:
f7:f6:20:3d:4d:b3:3d:5e:0a:b1:82:d8:f3:10:06:
5b:b8:26:ae:2a:54:b3:e1:02:b0:d7:60:8a:26:36:
a6:6c:32:aa:e5:c7:90:08:40:e4:0d:4a:c7:70:eb:
c1:aa:ba:bd:f7:d6:f6:57:15:88:c9:69:dc:1a:a0:
61:00:6c:aa:14:3a:ab:eb:c3:3b:cb:58:02:19:ee:
8b:5b:f6:77:73:67:2d:7d:e7:50:0a:d6:30:dd:ef:
d9:65:62:cd:37:f1:34:9b:43:23:38:e5:e5:51:04:
99:1b:ee:24:cd:92:98:a8:09:23:a4:c0:08:90:13:
19:b3:09:44:75:dd:18:1b:2e:8b:26:80:66:3a:38:
9f:61:cc:e9:59:c5:4b:33:67:0f:63:20:b4:6a:e5:
8f:65:84:32:ba:60:2a:89:87:3e:0f:3b:c8:70:16:
b7:f3:81:05:80:91:68:50:07:59:94:0b:b5:35:89:
ec:23:4d:d6:8a:5a:9b:a6:c5:e4:67:fd:30:14:5a:
97:b0:e4:b0:2d:20:d6:58:65:f5:5c:ac:67:19:1f:
a7:1d:8f:05:c9:ad:06:28:5b:9a:73:64:b8:40:f7:
a7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:55:FE:B4:55:24:9B:57:2A:50:3B:5B:17:07:E8:07:1E:D1:CA:CA
X509v3 Authority Key Identifier:
keyid:A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:77:a7:07:d7:ce:f3:46:ed:b9:87:62:0c:7b:4c:de:38:ac:
f3:36:39:92:15:02:a5:5c:73:45:fc:50:2c:45:7c:d1:64:4c:
5b:7c:a6:1f:c2:48:ae:9c:9d:c4:e6:1a:f4:f3:c4:5b:b1:88:
c9:5f:d0:51:7d:0b:a0:85:26:92:84:e6:76:45:b6:42:5d:2f:
ed:0e:83:fd:61:09:53:f6:44:fc:4d:51:70:d9:16:72:9a:10:
7e:49:4c:6d:5a:74:9d:67:e3:7f:9d:87:50:c7:cc:14:3d:66:
c6:a5:1c:97:6a:30:c2:0f:24:96:3a:84:69:10:0b:7b:64:6b:
a8:e5:04:c7:ec:b6:4c:47:e0:9a:7d:60:c0:ec:8a:ea:54:c3:
d5:d8:03:f1:46:2f:d0:7c:db:b6:65:1c:a6:61:c8:20:df:82:
3c:a3:6d:c7:d1:78:b5:a5:c2:98:ee:25:44:16:50:42:6a:7b:
fa:37:c1:ae:c2:97:8f:9b:2c:e4:b8:89:4c:3f:cf:3d:b8:c1:
9b:62:c2:67:d4:ea:bb:41:86:46:46:bb:4e:c5:cf:93:d9:f6:
b1:46:91:33:f9:8b:40:2c:8a:cf:a2:9c:a6:26:84:be:78:55:
4f:3d:0b:ae:08:f3:52:95:63:f0:e9:0c:25:b0:98:30:f4:93:
34:53:f2:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVphxWuqWt4zK26JPHMkhJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MWM5NmU5MzFlZWU0MWI4OTlkNjJjN2RiODM2MzM0NDZh
M2M0MmIwHhcNMjUwNDIxMDAwMTExWhcNMjUwNDIyMDAwMTExWjAzMTEwLwYDVQQD
Eyg2MDU1ZmViNDU1MjQ5YjU3MmE1MDNiNWIxNzA3ZTgwNzFlZDFjYWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeZ6eYsztXMMgeIOT+VoKzu+B9jt
Tw6+pavUldb39iA9TbM9XgqxgtjzEAZbuCauKlSz4QKw12CKJjambDKq5ceQCEDk
DUrHcOvBqrq999b2VxWIyWncGqBhAGyqFDqr68M7y1gCGe6LW/Z3c2ctfedQCtYw
3e/ZZWLNN/E0m0MjOOXlUQSZG+4kzZKYqAkjpMAIkBMZswlEdd0YGy6LJoBmOjif
YczpWcVLM2cPYyC0auWPZYQyumAqiYc+DzvIcBa384EFgJFoUAdZlAu1NYnsI03W
ilqbpsXkZ/0wFFqXsOSwLSDWWGX1XKxnGR+nHY8Fya0GKFuac2S4QPenmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBV/rRVJJtXKlA7WxcH6Ace0crKMB8GA1UdIwQY
MBaAFKQclukx7uQbiZ1ix9uDYzRGo8QrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEJ5VzZUSHU1QnVKbldMSDI0TmpORWFqeENzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82YmRkNzQtOGNkMC00Y2M0LThiNjct
ZjgzZTNjNzFlZmNiLzEvcEJ5VzZUSHU1QnVKbldMSDI0TmpORWFqeENzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy82YmRkNzQtOGNkMC00Y2M0LThiNjctZjgzZTNjNzFlZmNi
LzEvcEJ5VzZUSHU1QnVKbldMSDI0TmpORWFqeENzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqnenB9fO
80btuYdiDHtM3jis8zY5khUCpVxzRfxQLEV80WRMW3ymH8JIrpydxOYa9PPEW7GI
yV/QUX0LoIUmkoTmdkW2Ql0v7Q6D/WEJU/ZE/E1RcNkWcpoQfklMbVp0nWfjf52H
UMfMFD1mxqUcl2owwg8kljqEaRALe2RrqOUEx+y2TEfgmn1gwOyK6lTD1dgD8UYv
0HzbtmUcpmHIIN+CPKNtx9F4taXCmO4lRBZQQmp7+jfBrsKXj5ss5LiJTD/PPbjB
m2LCZ9Tqu0GGRka7TsXPk9n2sUaRM/mLQCyKz6KcpiaEvnhVTz0LrgjzUpVj8OkM
JbCYMPSTNFPyqQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:15 2025 by rpki-client