Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
File: RN9Py46lHhjSkIBcj1Dw30NA29U.mft (raw, json)
Hash identifier: MflgZgO2DsJpGcKXpS11SLbg2Lwp4PM+uGvL8cDxobE=
Subject key identifier: 20:E3:0B:F6:0A:3D:6F:3B:46:84:DA:85:86:94:E5:B4:CF:2C:92:1F
Authority key identifier: 44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
Certificate issuer: /CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Certificate serial: 01964DB5055AD3BEA087CB5D30355A3A5C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
Manifest number: 0355
Signing time: Sat 19 Apr 2025 11:00:30 +0000
Manifest this update: Sat 19 Apr 2025 11:00:30 +0000
Manifest next update: Sun 20 Apr 2025 11:00:30 +0000
Files and hashes: 1: Blmy2f8OWilx5iyKeJl19yxz130.roa (hash: hBJbqMLATjqE7T1aEx82BrgYKE+8rAT6ZSYbo8s5Glc=)
2: RN9Py46lHhjSkIBcj1Dw30NA29U.crl (hash: NMD2M9Bqt7RKqB9us3Q+a2QPTXRFeUmTIovKqLPSuPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b5:05:5a:d3:be:a0:87:cb:5d:30:35:5a:3a:5c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Validity
Not Before: Apr 19 11:00:30 2025 GMT
Not After : Apr 20 11:00:30 2025 GMT
Subject: CN=20e30bf60a3d6f3b4684da858694e5b4cf2c921f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:25:e7:bd:ad:ca:b9:42:a0:e0:b7:9d:2a:
46:54:74:5b:58:07:f4:ad:79:d1:c9:eb:7f:8d:a7:
60:28:a4:fe:9d:83:17:af:91:43:d6:2d:47:88:d4:
6d:3d:08:9e:63:fd:6a:79:08:14:e1:f2:e1:1f:6d:
c1:80:e2:0e:1c:3c:dc:00:03:29:4a:8c:3c:7e:4b:
de:d9:a6:69:f8:56:bc:ca:a8:f5:d6:fd:b4:3c:30:
9e:78:0f:c9:d4:46:c7:38:2a:f2:40:4f:97:e6:13:
8f:1d:ab:97:57:84:2d:12:cd:3c:ad:99:64:67:0c:
1d:bc:71:10:8b:ab:18:1b:80:de:a3:66:8e:6b:f1:
31:1f:7b:8b:d4:42:53:c4:2b:cb:d8:ed:f6:5d:21:
7d:14:75:03:61:4d:e8:2a:c4:c7:67:29:f6:e7:ba:
99:60:62:a0:8f:ea:54:a6:ac:f5:1e:2a:f7:21:97:
91:9a:0b:a4:02:68:90:8e:a2:39:15:af:41:46:0b:
75:d8:18:5a:a7:4c:32:67:e7:98:21:63:0f:b7:84:
38:15:1c:76:22:78:86:19:a6:23:71:2f:2d:bd:e4:
61:8c:f6:1f:95:4e:40:0c:75:25:1c:59:dc:cb:bc:
dd:ff:b1:42:6e:9e:c7:69:c9:4f:c5:37:28:82:2a:
85:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E3:0B:F6:0A:3D:6F:3B:46:84:DA:85:86:94:E5:B4:CF:2C:92:1F
X509v3 Authority Key Identifier:
keyid:44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a2:8d:d9:26:8f:b3:19:1d:c7:10:8e:f8:8b:29:b7:98:dd:
21:d0:0b:c1:06:b8:24:30:01:27:b9:e8:5f:92:c2:fe:1c:aa:
03:e1:33:b9:ad:b3:4e:44:c7:17:4d:4b:54:26:82:4f:04:12:
c4:9e:1e:cf:2f:d2:c5:ba:59:f7:df:d7:70:16:23:65:2b:cc:
f4:c7:0a:4a:8f:5e:83:5b:b7:5b:67:db:41:11:36:75:f9:55:
41:f4:7d:8a:c8:9f:97:e3:30:2c:d1:55:13:d7:6e:09:a4:d4:
5c:b7:66:d2:81:6c:b7:0c:2f:8a:c2:c6:da:ec:2b:42:db:89:
e5:60:9a:27:89:a1:5e:21:ac:05:d1:66:c5:ff:e0:f0:90:23:
13:4f:38:88:d2:78:26:ed:fb:84:49:a0:f3:a3:45:4d:b8:22:
ec:33:5a:cb:8d:34:97:6d:58:e0:d0:56:11:4c:b8:a1:67:a9:
2c:17:4c:b7:0e:82:ff:9f:a7:e2:6e:fb:35:36:d1:75:be:14:
1f:f7:99:b2:cb:c2:cb:4f:6d:af:01:1e:b7:a4:8d:37:2b:03:
f3:56:32:e9:0c:e3:1b:75:91:62:e7:d2:24:f0:9e:8a:d5:41:
68:2e:f4:72:9f:f5:db:b4:5b:85:96:71:f4:90:4f:90:08:5c:
38:40:60:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNtQVa076gh8tdMDVaOlw4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZGY0ZmNiOGVhNTFlMThkMjkwODA1YzhmNTBmMGRmNDM0
MGRiZDUwHhcNMjUwNDE5MTEwMDMwWhcNMjUwNDIwMTEwMDMwWjAzMTEwLwYDVQQD
EygyMGUzMGJmNjBhM2Q2ZjNiNDY4NGRhODU4Njk0ZTViNGNmMmM5MjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK8l572tyrlCoOC3nSpGVHRbWAf0
rXnRyet/jadgKKT+nYMXr5FD1i1HiNRtPQieY/1qeQgU4fLhH23BgOIOHDzcAAMp
Sow8fkve2aZp+Fa8yqj11v20PDCeeA/J1EbHOCryQE+X5hOPHauXV4QtEs08rZlk
ZwwdvHEQi6sYG4Deo2aOa/ExH3uL1EJTxCvL2O32XSF9FHUDYU3oKsTHZyn257qZ
YGKgj+pUpqz1Hir3IZeRmgukAmiQjqI5Fa9BRgt12Bhap0wyZ+eYIWMPt4Q4FRx2
IniGGaYjcS8tveRhjPYflU5ADHUlHFncy7zd/7FCbp7HaclPxTcogiqFYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDjC/YKPW87RoTahYaU5bTPLJIfMB8GA1UdIwQY
MBaAFETfT8uOpR4Y0pCAXI9Q8N9DQNvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk45UHk0NmxIaGpTa0lCY2oxRHczME5BMjlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83Y2MxODMtZWJhNS00NzQ3LThiMTAt
ZjM4Yzc0OWI2ZTM5LzEvUk45UHk0NmxIaGpTa0lCY2oxRHczME5BMjlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS83Y2MxODMtZWJhNS00NzQ3LThiMTAtZjM4Yzc0OWI2ZTM5
LzEvUk45UHk0NmxIaGpTa0lCY2oxRHczME5BMjlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkKKN2SaP
sxkdxxCO+Ispt5jdIdALwQa4JDABJ7noX5LC/hyqA+Ezua2zTkTHF01LVCaCTwQS
xJ4ezy/SxbpZ99/XcBYjZSvM9McKSo9eg1u3W2fbQRE2dflVQfR9isifl+MwLNFV
E9duCaTUXLdm0oFstwwvisLG2uwrQtuJ5WCaJ4mhXiGsBdFmxf/g8JAjE084iNJ4
Ju37hEmg86NFTbgi7DNay400l21Y4NBWEUy4oWepLBdMtw6C/5+n4m77NTbRdb4U
H/eZssvCy09trwEet6SNNysD81Yy6QzjG3WRYufSJPCeitVBaC70cp/127RbhZZx
9JBPkAhcOEBgBA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:13:27 2025 by rpki-client