Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
File: u44vWsfL5iEX2keKwMAnrW2EPFY.mft (raw, json)
Hash identifier: 7UuoWHbMkIss6t8ywbWEYoiUgwj0AlnWpOuKd8f5riU=
Subject key identifier: 35:2F:65:2D:67:D5:D6:02:70:43:42:64:AF:72:F8:61:E3:61:E9:D5
Authority key identifier: BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
Certificate issuer: /CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Certificate serial: 01964857E49837844660BB9633DB87FFBF06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 10:00:41 +0000
Manifest this update: Fri 18 Apr 2025 10:00:41 +0000
Manifest next update: Sat 19 Apr 2025 10:00:41 +0000
Files and hashes: 1: PqHbplNO7TvCzyK8jCTMlpUuDgE.roa (hash: ZCBOLO9Ydb+4h8ApAHfbP8OIDjSPikSQfw2HwF7MQbw=)
2: u44vWsfL5iEX2keKwMAnrW2EPFY.crl (hash: k1jXIAo3ManLYZUZhX657gTZgvGdMgFHgpNPWjtqgiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:57:e4:98:37:84:46:60:bb:96:33:db:87:ff:bf:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Validity
Not Before: Apr 18 10:00:41 2025 GMT
Not After : Apr 19 10:00:41 2025 GMT
Subject: CN=352f652d67d5d60270434264af72f861e361e9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:de:9b:82:11:e9:61:c0:e1:c0:f4:66:d7:ca:
b2:3b:da:30:53:e8:6c:ec:b3:68:93:3d:59:a0:05:
cd:6a:0e:a9:ca:b8:91:5d:06:62:0d:d4:81:7b:c3:
45:95:a7:53:5b:c2:4d:b3:93:3e:ef:ea:1b:32:4d:
5a:a3:d7:fc:cb:65:17:b0:9f:a9:13:cf:9b:b7:3b:
98:57:d8:f2:0d:72:35:f8:33:d6:a0:98:40:b5:57:
95:8a:c1:68:1f:9b:60:a4:47:e4:a1:d0:b8:06:e6:
ee:28:27:a2:02:2d:b8:98:82:f3:d7:a0:ba:6f:a9:
d9:9f:c1:85:15:1f:51:6e:b5:49:9d:f6:7c:aa:a3:
47:40:d6:00:e9:7d:83:5c:21:86:76:9f:65:90:e4:
96:d2:57:55:72:2e:92:c5:3d:29:b7:43:96:78:fc:
bf:cf:53:2c:60:16:c7:25:51:62:d2:41:e6:b4:54:
2c:cd:84:96:2f:ca:d0:3c:3d:f6:4c:eb:12:b6:15:
61:73:0c:2d:f2:13:22:a0:82:03:e2:6f:c2:b4:ee:
49:8b:10:05:47:03:f2:01:86:71:86:af:1a:38:63:
92:bb:45:d6:69:65:2f:31:01:43:30:e5:d7:74:47:
67:ae:ab:5c:67:12:9f:48:ae:c8:4e:e3:44:93:d2:
b3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2F:65:2D:67:D5:D6:02:70:43:42:64:AF:72:F8:61:E3:61:E9:D5
X509v3 Authority Key Identifier:
keyid:BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:58:83:b7:6d:34:55:00:6e:97:f9:94:3f:0d:8b:fc:ff:d7:
33:7d:3e:b1:9a:54:d8:64:a4:f9:9c:39:72:47:70:c4:f3:d3:
61:26:f8:d5:cc:10:96:df:58:a6:8d:30:1c:bb:03:33:d2:70:
cc:5e:ce:c9:48:3a:76:bf:18:a1:1c:fd:b2:45:87:9c:8d:b7:
ed:a8:be:44:48:9e:f8:9f:f8:80:90:f3:95:d1:87:5d:29:78:
20:d3:d2:4e:41:60:1c:a1:81:44:fe:7c:56:05:d8:a5:93:80:
72:9b:68:7b:e5:fa:fb:c6:ad:eb:81:22:26:6c:01:ba:c3:cd:
97:f5:1e:83:3d:db:e0:16:c7:c3:ca:b6:63:7d:9a:e5:49:a8:
16:c9:ea:70:65:31:c6:fc:fc:4c:6c:6e:03:9b:33:fe:c7:74:
fe:b6:1d:04:b0:0e:34:57:df:f1:4d:03:81:55:74:3b:17:32:
36:fc:12:84:36:03:1d:e7:6c:cc:92:39:9a:b4:f9:f4:4e:86:
7b:c0:06:45:d6:47:51:6d:05:bf:d2:e7:db:4c:ff:d3:6c:dd:
e4:4e:9b:7c:bf:f7:c7:e6:43:e8:0d:94:2c:8f:e8:31:9d:94:
34:1f:77:34:21:78:d9:88:5a:75:25:d7:03:f0:6c:11:da:f6:
40:43:97:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZIV+SYN4RGYLuWM9uH/78GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiOGUyZjVhYzdjYmU2MjExN2RhNDc4YWMwYzAyN2FkNmQ4
NDNjNTYwHhcNMjUwNDE4MTAwMDQxWhcNMjUwNDE5MTAwMDQxWjAzMTEwLwYDVQQD
EygzNTJmNjUyZDY3ZDVkNjAyNzA0MzQyNjRhZjcyZjg2MWUzNjFlOWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld6bghHpYcDhwPRm18qyO9owU+hs
7LNokz1ZoAXNag6pyriRXQZiDdSBe8NFladTW8JNs5M+7+obMk1ao9f8y2UXsJ+p
E8+btzuYV9jyDXI1+DPWoJhAtVeVisFoH5tgpEfkodC4BubuKCeiAi24mILz16C6
b6nZn8GFFR9RbrVJnfZ8qqNHQNYA6X2DXCGGdp9lkOSW0ldVci6SxT0pt0OWePy/
z1MsYBbHJVFi0kHmtFQszYSWL8rQPD32TOsSthVhcwwt8hMioIID4m/CtO5JixAF
RwPyAYZxhq8aOGOSu0XWaWUvMQFDMOXXdEdnrqtcZxKfSK7ITuNEk9KznwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUvZS1n1dYCcENCZK9y+GHjYenVMB8GA1UdIwQY
MBaAFLuOL1rHy+YhF9pHisDAJ61thDxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kMjA4YTAtZTQzNi00ODk2LWJlZjIt
M2I5ZGIwNWQyMzg0LzEvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kMjA4YTAtZTQzNi00ODk2LWJlZjItM2I5ZGIwNWQyMzg0
LzEvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMViDt200
VQBul/mUPw2L/P/XM30+sZpU2GSk+Zw5ckdwxPPTYSb41cwQlt9Ypo0wHLsDM9Jw
zF7OyUg6dr8YoRz9skWHnI237ai+REie+J/4gJDzldGHXSl4INPSTkFgHKGBRP58
VgXYpZOAcptoe+X6+8at64EiJmwBusPNl/Uegz3b4BbHw8q2Y32a5UmoFsnqcGUx
xvz8TGxuA5sz/sd0/rYdBLAONFff8U0DgVV0OxcyNvwShDYDHedszJI5mrT59E6G
e8AGRdZHUW0Fv9Ln20z/02zd5E6bfL/3x+ZD6A2ULI/oMZ2UNB93NCF42YhadSXX
A/BsEdr2QEOXMg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 19:17:08 2025 by rpki-client