Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
File: cWAmJ2eaSYC3DYreV48UGS-v65U.mft (raw, json)
Hash identifier: VzO0mOBZkO+ycCbxuOL032kp+1LmI2zhyeo0Ena1O48=
Subject key identifier: B9:BB:2F:15:40:89:18:84:04:F1:B2:8A:67:B8:44:50:93:B0:AB:5C
Authority key identifier: 71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
Certificate issuer: /CN=71602627679a4980b70d8ade578f14192fafeb95
Certificate serial: 01964C6BBA6EC448B2DA445A860E80F9D209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 05:00:50 +0000
Manifest this update: Sat 19 Apr 2025 05:00:50 +0000
Manifest next update: Sun 20 Apr 2025 05:00:50 +0000
Files and hashes: 1: 1StjY6ciJznhPyYxQBCtbtGwaQQ.roa (hash: KYR87feBQd9Q/2I+eempgJ/F1tZKbS1g203PDf9yV98=)
2: ZUdn9XmxmiY2yd0SC6JWA2hWACg.roa (hash: GVvErxNa6lMweOfM26d5UbHyagv3mNP8YwwVTBiOPVM=)
3: cWAmJ2eaSYC3DYreV48UGS-v65U.crl (hash: 24jeUQoqf3yO8j9RN7t2V8iu2rgeEMPvW81sk6OLjjI=)
4: m43cWo3KgEuK9Hc3g86LdUpWJLc.roa (hash: xJI2lb3t7JjEal+fMcBS4JFRrMKS832WVOggygXFByA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:ba:6e:c4:48:b2:da:44:5a:86:0e:80:f9:d2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71602627679a4980b70d8ade578f14192fafeb95
Validity
Not Before: Apr 19 05:00:50 2025 GMT
Not After : Apr 20 05:00:50 2025 GMT
Subject: CN=b9bb2f154089188404f1b28a67b8445093b0ab5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1a:09:39:68:70:e2:18:f1:f2:d4:2b:8d:ca:
80:1c:2a:ba:78:fc:22:3b:bb:c8:f6:69:a1:42:5e:
6a:97:6b:09:e3:dc:b0:cc:84:15:dc:15:89:ef:5e:
7b:02:e3:d2:3a:97:80:7a:81:d3:df:c0:5c:63:ed:
92:8a:7a:0f:b4:36:29:72:cd:6f:ca:48:c2:d1:38:
ef:ce:97:02:8d:f0:6e:25:1c:b9:73:05:d3:75:6c:
c1:f9:c2:bc:bf:56:e5:66:c1:9b:4f:7e:11:53:e4:
8b:0e:29:35:2c:bd:ce:d8:72:6e:d2:e7:02:41:13:
06:a9:a9:a0:5c:77:94:cd:9f:d9:90:cd:64:99:b3:
3c:28:16:5a:75:e3:54:21:f5:e2:19:01:4e:3c:b5:
db:bf:4e:ce:1a:e5:79:66:69:8a:77:f2:2c:6d:43:
65:9c:c9:2c:02:a4:26:8b:15:cd:09:b0:16:4e:99:
95:0e:d2:dd:eb:43:7c:f2:01:9b:c0:2e:cc:0e:21:
e0:c3:b1:bb:6d:3c:e3:72:c9:fb:f1:f9:04:70:d0:
ff:e6:1a:3c:a5:eb:b8:e8:f6:e7:d8:a7:c2:8e:57:
48:1a:a3:0c:95:13:58:1b:19:58:63:53:62:bb:63:
2b:5d:60:32:f7:92:b3:95:f5:a9:55:fc:a4:8f:eb:
cd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BB:2F:15:40:89:18:84:04:F1:B2:8A:67:B8:44:50:93:B0:AB:5C
X509v3 Authority Key Identifier:
keyid:71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:7e:a5:6f:a0:f2:0b:48:98:df:74:4b:03:f5:88:d9:43:4d:
50:01:09:af:b0:1d:1c:d3:ab:f9:f2:d3:f5:8a:ba:82:2a:45:
75:d9:67:49:82:f1:f5:4c:70:38:18:70:c1:b6:9e:6d:19:53:
5b:b0:66:84:36:68:19:49:17:3a:6b:8e:73:6d:4a:be:99:06:
5f:09:73:cf:72:8b:ad:f6:3c:31:51:7c:8b:31:17:d1:b7:04:
02:e5:95:86:1b:61:25:d3:f3:f7:15:64:92:ab:ac:e9:a7:17:
dd:50:5e:5e:b7:81:0e:e0:66:70:ea:38:fc:2c:d7:c5:5f:44:
e2:4c:b0:4a:9e:8e:25:b5:a1:c6:b4:e7:6a:d6:36:e1:cc:0c:
b9:f4:6f:4e:98:ed:fe:41:da:c8:3d:0e:76:15:51:82:46:55:
e3:74:b1:43:4b:d9:1d:57:9a:f0:b3:02:2c:3c:ae:b8:7c:4c:
e3:64:34:91:f8:11:ac:98:3a:d4:e9:27:68:16:17:f6:7e:76:
76:3a:d5:a9:71:b3:a2:f0:c1:0f:6b:f8:7a:80:d1:38:78:e5:
47:ba:76:81:38:cd:7e:08:db:e6:71:31:19:5f:31:66:83:d0:
88:80:a3:db:64:a0:3a:e8:c5:d9:2c:e5:50:56:9e:3f:90:58:
45:09:50:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMa7puxEiy2kRahg6A+dIJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNjAyNjI3Njc5YTQ5ODBiNzBkOGFkZTU3OGYxNDE5MmZh
ZmViOTUwHhcNMjUwNDE5MDUwMDUwWhcNMjUwNDIwMDUwMDUwWjAzMTEwLwYDVQQD
EyhiOWJiMmYxNTQwODkxODg0MDRmMWIyOGE2N2I4NDQ1MDkzYjBhYjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhoJOWhw4hjx8tQrjcqAHCq6ePwi
O7vI9mmhQl5ql2sJ49ywzIQV3BWJ7157AuPSOpeAeoHT38BcY+2SinoPtDYpcs1v
ykjC0TjvzpcCjfBuJRy5cwXTdWzB+cK8v1blZsGbT34RU+SLDik1LL3O2HJu0ucC
QRMGqamgXHeUzZ/ZkM1kmbM8KBZadeNUIfXiGQFOPLXbv07OGuV5ZmmKd/IsbUNl
nMksAqQmixXNCbAWTpmVDtLd60N88gGbwC7MDiHgw7G7bTzjcsn78fkEcND/5ho8
peu46Pbn2KfCjldIGqMMlRNYGxlYY1Niu2MrXWAy95KzlfWpVfykj+vN7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLm7LxVAiRiEBPGyime4RFCTsKtcMB8GA1UdIwQY
MBaAFHFgJidnmkmAtw2K3lePFBkvr+uVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1dBbUoyZWFTWUMzRFlyZVY0OFVHUy12NjVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yNmI0ZTItY2FhMC00OGEzLTgxMTct
N2Q1OTMwMzNkMDA1LzEvY1dBbUoyZWFTWUMzRFlyZVY0OFVHUy12NjVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8yNmI0ZTItY2FhMC00OGEzLTgxMTctN2Q1OTMwMzNkMDA1
LzEvY1dBbUoyZWFTWUMzRFlyZVY0OFVHUy12NjVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArn6lb6Dy
C0iY33RLA/WI2UNNUAEJr7AdHNOr+fLT9Yq6gipFddlnSYLx9UxwOBhwwbaebRlT
W7BmhDZoGUkXOmuOc21KvpkGXwlzz3KLrfY8MVF8izEX0bcEAuWVhhthJdPz9xVk
kqus6acX3VBeXreBDuBmcOo4/CzXxV9E4kywSp6OJbWhxrTnatY24cwMufRvTpjt
/kHayD0OdhVRgkZV43SxQ0vZHVea8LMCLDyuuHxM42Q0kfgRrJg61OknaBYX9n52
djrVqXGzovDBD2v4eoDROHjlR7p2gTjNfgjb5nExGV8xZoPQiICj22SgOujF2Szl
UFaeP5BYRQlQHQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:26:34 2025 by rpki-client