Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json)
Hash identifier: L8E6VX/RW9E9LdkkaidPTJQYR+X65jq8CjAy+c84UXE=
Subject key identifier: B3:58:53:5E:56:9A:A4:D3:95:C9:CE:DC:79:3F:CF:27:6B:FE:CE:FC
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 019643D62BB804226C05D8167D5F3B020612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
Manifest number: 099E
Signing time: Thu 17 Apr 2025 13:00:31 +0000
Manifest this update: Thu 17 Apr 2025 13:00:31 +0000
Manifest next update: Fri 18 Apr 2025 13:00:31 +0000
Files and hashes: 1: 5pbhFrbv6p0fxLITgiU8s5OQtVw.roa (hash: MoawBbuqETIT5X2tb8EXLXxGAQEcqFB39pjZprw8koc=)
2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: YyxScs0waMYXZr7xgCWPt1DFFdHpnlBDrkUsJN6xMoY=)
3: aBfkfMsI6RfN5EaoDQWlcn2H95I.roa (hash: kUHTcNhwAMf+AKKhL303auY/4FQ8RuznlrI+X0c8dok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:2b:b8:04:22:6c:05:d8:16:7d:5f:3b:02:06:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Apr 17 13:00:31 2025 GMT
Not After : Apr 18 13:00:31 2025 GMT
Subject: CN=b358535e569aa4d395c9cedc793fcf276bfecefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:29:4b:df:9d:fd:92:66:64:9f:a3:9d:50:a3:
2c:94:81:aa:41:1e:7c:3b:ee:5f:23:70:96:d4:7b:
d1:f6:e8:7d:79:51:49:f2:dc:79:b1:9b:8c:c9:fc:
8c:ca:82:d1:c0:11:0b:d6:75:95:94:c2:bc:54:2e:
01:47:da:01:d3:e1:89:75:e6:86:0d:f3:26:e5:75:
60:48:40:d0:4e:04:41:68:0a:f7:dc:44:af:e1:d9:
59:7a:09:b7:dd:7a:c8:4f:8a:d4:81:35:2b:19:ed:
f8:b4:d4:55:51:85:b9:82:9e:9b:89:4f:c7:6f:1a:
0b:f9:97:27:0a:84:a8:16:0d:a9:8b:f3:9c:d4:ac:
d4:63:5a:c0:71:7d:b5:07:17:3f:95:6b:9f:11:3f:
12:1c:71:99:0a:a4:42:08:54:3c:e6:bc:f2:7a:29:
cf:cf:58:36:52:00:40:78:11:7c:b4:e3:bb:b1:d6:
fd:24:a3:3f:1a:40:38:05:95:5c:fe:34:7a:86:19:
c1:00:7f:f2:7f:7d:e3:0f:c2:75:96:63:49:e0:3d:
20:e3:82:f8:86:1a:f0:72:52:97:eb:a7:04:78:11:
1d:be:e2:ed:cf:3d:f5:14:fd:a7:46:8e:f5:ff:84:
42:c1:5b:c9:87:a1:d8:69:47:70:4e:e6:6a:b8:3b:
87:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:58:53:5E:56:9A:A4:D3:95:C9:CE:DC:79:3F:CF:27:6B:FE:CE:FC
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:81:60:0c:ee:36:ad:83:f2:62:21:fb:b2:43:e4:7c:8c:3d:
d7:44:3c:8a:ab:32:88:18:cc:0d:aa:15:43:09:c2:9c:78:7c:
96:3d:95:fd:d6:6b:13:0d:41:d4:a0:2c:ef:61:3c:39:8a:15:
f2:5b:b4:2a:c0:a4:e9:14:96:c3:d0:96:13:e9:ee:d1:a0:90:
bf:e3:c9:0f:67:f0:6b:4a:87:cc:9e:5c:43:41:4a:9e:ee:2b:
19:75:d3:26:20:b9:91:49:dc:51:f6:89:8b:7b:9f:7b:f6:d5:
cb:f9:dc:de:1d:b1:c8:b7:1a:9f:f7:a7:8c:e8:00:fa:ef:2d:
05:ce:a6:d7:8e:b5:19:c3:55:9a:2d:d1:25:7b:d6:07:e2:8a:
49:33:b3:40:a5:5d:2f:90:65:04:c4:15:75:e5:d8:8d:46:5a:
52:b3:3b:c8:1c:1f:8b:2e:8d:72:e5:57:d4:94:d7:ac:cd:d8:
82:d8:40:e9:2a:67:17:31:af:89:4b:fd:50:1e:5f:d3:e4:b4:
63:8f:b2:1e:e2:87:e5:45:36:ef:67:66:37:a5:bc:f8:f3:fe:
d7:a1:8e:c4:5e:dd:af:5b:93:f6:ee:72:63:64:aa:8a:44:8d:
e8:4f:6c:f1:64:b8:1a:b0:bf:ed:d7:37:63:44:2a:59:4a:39:
fd:eb:cb:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZD1iu4BCJsBdgWfV87AgYSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZWExZWE4ODdkY2VmZWU2MTM2MTU1YjhiZDgzMzkyOTM3
YzE2NzEwHhcNMjUwNDE3MTMwMDMxWhcNMjUwNDE4MTMwMDMxWjAzMTEwLwYDVQQD
EyhiMzU4NTM1ZTU2OWFhNGQzOTVjOWNlZGM3OTNmY2YyNzZiZmVjZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SlL3539kmZkn6OdUKMslIGqQR58
O+5fI3CW1HvR9uh9eVFJ8tx5sZuMyfyMyoLRwBEL1nWVlMK8VC4BR9oB0+GJdeaG
DfMm5XVgSEDQTgRBaAr33ESv4dlZegm33XrIT4rUgTUrGe34tNRVUYW5gp6biU/H
bxoL+ZcnCoSoFg2pi/Oc1KzUY1rAcX21Bxc/lWufET8SHHGZCqRCCFQ85rzyeinP
z1g2UgBAeBF8tOO7sdb9JKM/GkA4BZVc/jR6hhnBAH/yf33jD8J1lmNJ4D0g44L4
hhrwclKX66cEeBEdvuLtzz31FP2nRo71/4RCwVvJh6HYaUdwTuZquDuHjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNYU15WmqTTlcnO3Hk/zydr/s78MB8GA1UdIwQY
MBaAFDzqHqiH3O/uYTYVW4vYM5KTfBZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgt
YjY0Y2FiNGJiZGZmLzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgtYjY0Y2FiNGJiZGZm
LzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtYFgDO42
rYPyYiH7skPkfIw910Q8iqsyiBjMDaoVQwnCnHh8lj2V/dZrEw1B1KAs72E8OYoV
8lu0KsCk6RSWw9CWE+nu0aCQv+PJD2fwa0qHzJ5cQ0FKnu4rGXXTJiC5kUncUfaJ
i3ufe/bVy/nc3h2xyLcan/enjOgA+u8tBc6m1461GcNVmi3RJXvWB+KKSTOzQKVd
L5BlBMQVdeXYjUZaUrM7yBwfiy6NcuVX1JTXrM3YgthA6SpnFzGviUv9UB5f0+S0
Y4+yHuKH5UU272dmN6W8+PP+16GOxF7dr1uT9u5yY2SqikSN6E9s8WS4GrC/7dc3
Y0QqWUo5/evLnQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:37:46 2025 by rpki-client