Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
File: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft (raw, json)
Hash identifier: WOr2kCrAQrUCK9ysMz0da/bgaRE5tQEmvDt84svbz6A=
Subject key identifier: CB:F7:4E:58:C9:04:33:F4:72:08:29:6A:E2:90:BC:24:B7:39:42:3C
Authority key identifier: 0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
Certificate issuer: /CN=0f784ebe35e41b610be154473bc219d0ad25278f
Certificate serial: 01965CBA58272C58E1298292C268C73E0FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
Manifest number: 041A
Signing time: Tue 22 Apr 2025 09:00:38 +0000
Manifest this update: Tue 22 Apr 2025 09:00:38 +0000
Manifest next update: Wed 23 Apr 2025 09:00:38 +0000
Files and hashes: 1: 6Ws74y6Nwf78AVosGHIH3KZShUI.roa (hash: HtNFOxzPI0ZbD22siO8UeJbW1HbOmrNLXjn5ZOwIrAs=)
2: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl (hash: d6GYn6MA6DzfCr1yf6MrM0SanQWr9T1IleHcJmb2iyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:ba:58:27:2c:58:e1:29:82:92:c2:68:c7:3e:0f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f784ebe35e41b610be154473bc219d0ad25278f
Validity
Not Before: Apr 22 09:00:38 2025 GMT
Not After : Apr 23 09:00:38 2025 GMT
Subject: CN=cbf74e58c90433f47208296ae290bc24b739423c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:20:74:0a:0e:ed:51:3e:05:50:c8:3d:b2:
a0:05:6c:ce:b8:de:bc:38:29:51:c4:4e:d9:eb:05:
78:1b:e1:71:74:b5:9b:9b:db:7e:97:c2:ae:b5:ea:
34:ef:93:f3:8c:b6:2b:cf:9b:35:c0:d6:97:96:cd:
74:e4:b4:28:60:06:2b:88:6c:80:d2:ba:6e:a8:00:
c9:ab:2f:31:38:b0:0c:ee:8a:62:42:da:bf:15:36:
a1:70:ac:9b:04:20:27:e2:35:b3:92:df:0b:e3:28:
42:ed:1a:a6:e7:90:d1:d5:9a:76:52:f6:f2:d3:72:
94:47:3e:48:df:49:9f:e9:7f:43:a0:4d:d0:27:0d:
3f:06:9d:d5:7d:ee:a5:c2:86:33:ae:00:a8:b5:67:
7e:fe:8a:2e:df:9e:20:84:f4:97:f3:3f:8f:07:a6:
e1:49:ff:27:d8:60:39:92:b6:69:74:5c:43:c8:3f:
ed:97:58:7f:ff:24:de:f4:f6:db:df:87:b5:a0:7c:
18:f4:61:b5:ce:bb:ab:23:a4:52:0f:3d:7d:d6:f9:
fd:43:35:b0:11:fa:15:00:41:12:92:16:9d:aa:ac:
b0:6a:e4:26:00:be:86:77:fa:ef:d6:33:c4:36:3b:
5f:02:56:17:c5:74:91:d4:69:a0:3e:6f:24:a3:0f:
67:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F7:4E:58:C9:04:33:F4:72:08:29:6A:E2:90:BC:24:B7:39:42:3C
X509v3 Authority Key Identifier:
keyid:0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b1:cf:2b:0a:09:44:a1:51:f6:ad:11:5a:c7:07:b7:3a:d0:
84:de:34:64:8c:7f:c7:ee:84:f7:67:c8:7f:a0:e0:d0:ca:35:
1b:9a:1d:2a:2c:f1:f4:65:b5:6b:b4:57:2e:53:9b:19:9e:13:
0f:f4:9a:2a:76:b1:bb:6e:69:a2:e2:98:0a:f5:89:cc:17:27:
72:b6:52:cb:82:7a:a4:34:79:8b:98:4e:2f:5e:fe:0a:e6:fe:
92:a7:69:ae:46:1b:bb:df:82:6e:d8:00:96:5a:f9:18:e6:7f:
ec:1b:fc:39:f3:38:3b:93:19:40:2d:65:75:a6:d9:52:54:2e:
0a:85:5a:7d:23:29:13:5e:e7:09:73:66:e5:a2:d2:25:4c:ce:
84:e7:1d:17:9b:d5:91:f4:68:8d:aa:d4:08:83:68:9e:bb:b2:
6f:5a:a6:d2:b1:53:bd:c9:f5:f7:72:16:b3:34:5c:6e:7c:3e:
64:0b:89:54:5a:1f:31:c9:23:97:f3:1f:7b:e3:3e:95:80:bc:
59:6b:11:64:68:42:9d:74:be:06:dd:94:7a:6e:a9:96:af:72:
d4:30:0f:82:20:a6:89:a6:dc:1d:7c:74:65:1c:54:e6:ab:97:
e9:02:c8:fc:f4:92:82:a9:a8:98:1f:e7:0e:01:f3:bc:30:e9:
72:30:1a:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZculgnLFjhKYKSwmjHPg/TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNzg0ZWJlMzVlNDFiNjEwYmUxNTQ0NzNiYzIxOWQwYWQy
NTI3OGYwHhcNMjUwNDIyMDkwMDM4WhcNMjUwNDIzMDkwMDM4WjAzMTEwLwYDVQQD
EyhjYmY3NGU1OGM5MDQzM2Y0NzIwODI5NmFlMjkwYmMyNGI3Mzk0MjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFggdAoO7VE+BVDIPbKgBWzOuN68
OClRxE7Z6wV4G+FxdLWbm9t+l8Kuteo075PzjLYrz5s1wNaXls105LQoYAYriGyA
0rpuqADJqy8xOLAM7opiQtq/FTahcKybBCAn4jWzkt8L4yhC7Rqm55DR1Zp2Uvby
03KURz5I30mf6X9DoE3QJw0/Bp3Vfe6lwoYzrgCotWd+/oou354ghPSX8z+PB6bh
Sf8n2GA5krZpdFxDyD/tl1h//yTe9Pbb34e1oHwY9GG1zrurI6RSDz191vn9QzWw
EfoVAEESkhadqqywauQmAL6Gd/rv1jPENjtfAlYXxXSR1GmgPm8kow9nkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMv3TljJBDP0cggpauKQvCS3OUI8MB8GA1UdIwQY
MBaAFA94Tr415BthC+FURzvCGdCtJSePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4Zjct
OTEyZTc4YzJmMmViLzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4ZjctOTEyZTc4YzJmMmVi
LzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbHPKwoJ
RKFR9q0RWscHtzrQhN40ZIx/x+6E92fIf6Dg0Mo1G5odKizx9GW1a7RXLlObGZ4T
D/SaKnaxu25pouKYCvWJzBcncrZSy4J6pDR5i5hOL17+Cub+kqdprkYbu9+CbtgA
llr5GOZ/7Bv8OfM4O5MZQC1ldabZUlQuCoVafSMpE17nCXNm5aLSJUzOhOcdF5vV
kfRojarUCINonruyb1qm0rFTvcn193IWszRcbnw+ZAuJVFofMckjl/Mfe+M+lYC8
WWsRZGhCnXS+Bt2Uem6plq9y1DAPgiCmiabcHXx0ZRxU5quX6QLI/PSSgqmomB/n
DgHzvDDpcjAaGw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 19:24:07 2025 by rpki-client