Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
File: RlDGwCqb3k4XGH8FsOypUEg7-S0.mft (raw, json)
Hash identifier: pm2EauFGcwX5vHRrPh4a2wRJxmdjtpQZGoG/8yCtbTg=
Subject key identifier: 6C:7B:F1:44:9B:7F:AD:0D:FF:6F:9F:CD:DD:3B:5D:1E:56:B9:41:32
Authority key identifier: 46:50:C6:C0:2A:9B:DE:4E:17:18:7F:05:B0:EC:A9:50:48:3B:F9:2D
Certificate issuer: /CN=4650c6c02a9bde4e17187f05b0eca950483bf92d
Certificate serial: 01965492D53B979B107637418B8E620D653F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 19:00:31 +0000
Manifest this update: Sun 20 Apr 2025 19:00:31 +0000
Manifest next update: Mon 21 Apr 2025 19:00:31 +0000
Files and hashes: 1: 3NLIuHMmWgQs4wJxVy9Hy-aW-pg.roa (hash: E1YEQO+V+WEVpKPvVd6pcBugEFAnXKdDCtGzwwDY3UY=)
2: RlDGwCqb3k4XGH8FsOypUEg7-S0.crl (hash: dQE5TRJep2AzSsfZ39w3uDTNKEkgk+XW5jet9YrzLVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:d5:3b:97:9b:10:76:37:41:8b:8e:62:0d:65:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4650c6c02a9bde4e17187f05b0eca950483bf92d
Validity
Not Before: Apr 20 19:00:31 2025 GMT
Not After : Apr 21 19:00:31 2025 GMT
Subject: CN=6c7bf1449b7fad0dff6f9fcddd3b5d1e56b94132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:c7:86:3c:e5:e8:3f:be:cd:6d:2a:ae:52:
b7:75:f9:85:49:34:c4:7c:1d:79:f0:11:34:a7:90:
32:30:0c:80:64:52:c1:16:7c:ed:11:12:67:a1:f1:
bd:74:d7:35:d2:61:17:a3:21:b1:29:cf:fb:4d:98:
65:7f:34:71:df:2c:bc:29:c2:19:2a:f0:14:69:82:
92:e7:73:ab:e8:81:bc:6a:f1:d2:e3:1b:98:10:2b:
2b:5c:b9:08:39:a7:6a:2b:37:1f:70:d2:be:75:0f:
8f:5f:19:d3:a1:b8:02:b3:06:fd:da:96:3e:be:4d:
77:ff:0e:ee:3f:8c:98:fb:76:7f:8b:96:f5:40:5d:
69:85:47:d3:4b:fa:7f:fb:a7:c0:ac:0d:b6:28:41:
73:58:56:42:05:c9:81:d4:f4:8b:39:75:25:e1:51:
f8:f8:ee:14:68:28:bc:44:6e:49:90:e4:cf:40:f9:
df:ba:ab:44:7a:e1:f2:c0:57:85:6b:4c:3a:6e:6d:
95:6c:19:02:cf:1f:83:3a:70:6c:23:90:ff:2e:48:
48:d2:18:22:a3:ee:d5:88:4d:9a:ce:19:7e:a2:f5:
82:f8:c7:24:d5:6e:af:62:98:a8:1c:70:14:d7:ab:
1e:97:26:e3:51:56:91:a7:1e:07:2d:f3:8d:4f:ab:
46:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7B:F1:44:9B:7F:AD:0D:FF:6F:9F:CD:DD:3B:5D:1E:56:B9:41:32
X509v3 Authority Key Identifier:
keyid:46:50:C6:C0:2A:9B:DE:4E:17:18:7F:05:B0:EC:A9:50:48:3B:F9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:bb:cb:ba:7b:86:31:7d:ea:e6:30:b6:3d:e2:84:42:c7:a8:
5f:2f:50:68:a9:e5:ee:c0:df:80:3b:84:a3:e7:b9:06:80:a6:
b5:97:92:39:b1:58:5f:5b:ae:bd:db:52:3b:9d:50:e8:84:62:
28:bd:11:bc:09:fa:95:d9:50:98:cf:98:ca:3c:1b:ed:ca:d3:
5c:f5:3e:cd:aa:38:08:04:8f:40:4a:26:0a:1e:a6:e7:bf:be:
29:9c:cc:f3:b4:98:8d:7e:32:b4:68:cb:36:61:77:16:ca:e9:
c9:ae:76:ce:2f:1c:a2:2b:40:cd:d5:ed:4c:7d:d4:ab:5c:fb:
56:ea:92:b5:9d:e9:e6:c2:b2:07:db:f7:c4:67:30:bf:b5:5c:
ca:dd:7a:e7:fd:4e:5b:0a:8c:d3:2d:48:74:8c:62:9c:e0:55:
07:7f:79:98:98:61:ec:18:81:90:c1:58:c9:e2:06:5b:f7:79:
4e:59:95:fd:38:7e:f6:da:47:8d:cf:9b:a0:fc:ad:55:4a:5c:
8f:9a:8c:8f:cd:23:0a:85:a0:e1:8c:7f:42:c2:ab:77:f8:0e:
db:93:1f:2e:76:ef:46:ac:02:9a:06:d8:04:22:aa:99:27:10:
02:87:8a:0a:7d:ca:a3:ec:73:bd:49:12:35:53:a8:ef:50:12:
3b:c9:19:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUktU7l5sQdjdBi45iDWU/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NTBjNmMwMmE5YmRlNGUxNzE4N2YwNWIwZWNhOTUwNDgz
YmY5MmQwHhcNMjUwNDIwMTkwMDMxWhcNMjUwNDIxMTkwMDMxWjAzMTEwLwYDVQQD
Eyg2YzdiZjE0NDliN2ZhZDBkZmY2ZjlmY2RkZDNiNWQxZTU2Yjk0MTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJrHhjzl6D++zW0qrlK3dfmFSTTE
fB158BE0p5AyMAyAZFLBFnztERJnofG9dNc10mEXoyGxKc/7TZhlfzRx3yy8KcIZ
KvAUaYKS53Or6IG8avHS4xuYECsrXLkIOadqKzcfcNK+dQ+PXxnTobgCswb92pY+
vk13/w7uP4yY+3Z/i5b1QF1phUfTS/p/+6fArA22KEFzWFZCBcmB1PSLOXUl4VH4
+O4UaCi8RG5JkOTPQPnfuqtEeuHywFeFa0w6bm2VbBkCzx+DOnBsI5D/LkhI0hgi
o+7ViE2azhl+ovWC+Mck1W6vYpioHHAU16selybjUVaRpx4HLfONT6tGUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGx78USbf60N/2+fzd07XR5WuUEyMB8GA1UdIwQY
MBaAFEZQxsAqm95OFxh/BbDsqVBIO/ktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmxER3dDcWIzazRYR0g4RnNPeXBVRWc3LVMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zNzM0MTQtOWNlNC00NmY1LTk0MGUt
NDljMjQyOTJlOWJkLzEvUmxER3dDcWIzazRYR0g4RnNPeXBVRWc3LVMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zNzM0MTQtOWNlNC00NmY1LTk0MGUtNDljMjQyOTJlOWJk
LzEvUmxER3dDcWIzazRYR0g4RnNPeXBVRWc3LVMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7vLunuG
MX3q5jC2PeKEQseoXy9QaKnl7sDfgDuEo+e5BoCmtZeSObFYX1uuvdtSO51Q6IRi
KL0RvAn6ldlQmM+Yyjwb7crTXPU+zao4CASPQEomCh6m57++KZzM87SYjX4ytGjL
NmF3Fsrpya52zi8coitAzdXtTH3Uq1z7VuqStZ3p5sKyB9v3xGcwv7Vcyt165/1O
WwqM0y1IdIxinOBVB395mJhh7BiBkMFYyeIGW/d5TlmV/Th+9tpHjc+boPytVUpc
j5qMj80jCoWg4Yx/QsKrd/gO25MfLnbvRqwCmgbYBCKqmScQAoeKCn3Ko+xzvUkS
NVOo71ASO8kZSA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:13 2025 by rpki-client