Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
File: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft (raw, json)
Hash identifier: XAHPDLEYYugf6vEhKFZGsh1i+svF7vTrB6OZOR+JiUc=
Subject key identifier: F0:C6:33:8C:54:70:57:88:25:B1:14:58:85:B0:EA:EA:A6:86:32:AA
Authority key identifier: 29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
Certificate issuer: /CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Certificate serial: 01960BD6AC8CDD3EE4651F6D2E278B923DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
Manifest number: 146C
Signing time: Sun 06 Apr 2025 16:02:20 +0000
Manifest this update: Sun 06 Apr 2025 16:02:20 +0000
Manifest next update: Mon 07 Apr 2025 16:02:20 +0000
Files and hashes: 1: 847VWHs-caMwvruiasasUJ9i7yk.roa (hash: cGKjnew3so38YN3EBXzPrvxanAQQogJHwvbCrW4djb4=)
2: Cm9tMI3yXmOZgFYnxXLEbKAgtl8.roa (hash: 3SDCzkNnUy1DY9PhPdmuMPgAHQuW7TwXQTd2pQmOgYY=)
3: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl (hash: e9198wHQ1q4Pl5mXUs91nWsuxtlkzkgqxoNQgtSLm1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0b:d6:ac:8c:dd:3e:e4:65:1f:6d:2e:27:8b:92:3d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Validity
Not Before: Apr 6 16:02:20 2025 GMT
Not After : Apr 7 16:02:20 2025 GMT
Subject: CN=f0c6338c5470578825b1145885b0eaeaa68632aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6b:bb:37:70:41:ab:cf:69:c0:af:de:c9:ad:
b6:00:b8:ee:fd:6f:b2:86:cc:e2:a2:46:dc:c9:47:
53:48:c2:0b:a3:61:b7:ca:1c:7a:e0:06:23:11:51:
b3:c4:d7:d7:67:c4:1a:e9:1b:0e:d4:48:33:55:42:
3a:37:b7:41:a9:af:ca:68:cf:5c:ab:5b:57:23:10:
4d:97:76:b9:5b:3a:f1:6e:c4:03:7d:c4:57:a2:70:
33:4c:2f:9f:d3:ba:83:47:ed:16:cf:2b:a0:8f:2a:
9a:da:20:d3:05:09:6e:af:be:3c:cb:70:10:fe:47:
62:90:e9:b2:11:6a:87:ca:6f:f3:b4:c8:29:a9:03:
62:a0:a2:10:a0:18:b3:f0:20:51:67:7d:09:38:f3:
89:85:59:fd:69:fa:f3:62:b2:5c:e8:5c:7a:2a:1d:
40:4a:fe:e3:8d:4a:67:b1:67:b6:29:ef:f1:65:2f:
65:7b:ce:44:5e:bd:3d:e5:9b:a7:c8:9e:e4:a4:ee:
f2:1c:f8:f5:07:36:61:94:2f:5b:15:d5:0e:2c:56:
c4:2b:f8:8b:a6:99:7b:5a:38:54:a3:00:35:45:7e:
94:fb:bc:06:93:96:10:2c:57:7f:34:02:dd:bf:a5:
d4:19:56:94:e4:ff:d9:65:52:cf:0c:be:c5:9f:bc:
d1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C6:33:8C:54:70:57:88:25:B1:14:58:85:B0:EA:EA:A6:86:32:AA
X509v3 Authority Key Identifier:
keyid:29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c7:94:02:46:a2:90:a1:2d:b7:e5:e0:a0:b6:bd:36:42:36:
c8:d7:66:a3:91:6e:b4:8d:9d:6d:c2:3e:4f:c8:a0:73:23:76:
3c:41:0e:36:01:26:ea:d9:2c:ae:41:41:24:3d:ae:07:2a:6a:
be:fe:ea:dd:50:63:78:fd:cd:e7:3f:bb:6e:9a:0f:b5:7d:52:
a6:5f:52:75:f2:62:92:9c:9c:fa:d8:2c:16:43:55:39:8f:41:
11:40:ae:9e:75:6d:48:ee:fa:11:ba:7e:cc:87:4c:ba:16:52:
39:80:70:5c:4e:18:be:45:79:d4:66:3b:78:9c:0a:cf:db:12:
2c:78:d8:5f:86:f8:b9:b6:18:b3:b9:81:92:91:76:42:76:79:
93:9b:81:1a:2f:ef:a5:5d:d4:8e:6f:1c:af:ff:e1:d4:d4:a1:
cd:b9:16:35:1c:06:27:69:85:53:57:a2:db:8a:b2:77:b1:9f:
47:71:a5:9b:48:9c:a5:72:28:18:af:75:70:b7:0c:d4:d8:68:
bc:52:7b:43:22:14:50:08:fa:a1:ae:8a:51:9e:cc:14:23:92:
9c:b5:1b:8a:5d:ff:7f:8a:2c:df:fc:fb:92:28:35:ce:6a:4f:
82:d4:98:2d:15:48:0a:fd:58:bb:b4:60:80:63:e0:70:90:f2:
d2:d2:b4:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYL1qyM3T7kZR9tLieLkj3UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZWRmMmE0ZjIwYWMwODIzNWM0MDE4MGRlNzRlYmMzOTM1
Y2ZjMjIwHhcNMjUwNDA2MTYwMjIwWhcNMjUwNDA3MTYwMjIwWjAzMTEwLwYDVQQD
EyhmMGM2MzM4YzU0NzA1Nzg4MjViMTE0NTg4NWIwZWFlYWE2ODYzMmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Wu7N3BBq89pwK/eya22ALju/W+y
hsziokbcyUdTSMILo2G3yhx64AYjEVGzxNfXZ8Qa6RsO1EgzVUI6N7dBqa/KaM9c
q1tXIxBNl3a5WzrxbsQDfcRXonAzTC+f07qDR+0Wzyugjyqa2iDTBQlur748y3AQ
/kdikOmyEWqHym/ztMgpqQNioKIQoBiz8CBRZ30JOPOJhVn9afrzYrJc6Fx6Kh1A
Sv7jjUpnsWe2Ke/xZS9le85EXr095ZunyJ7kpO7yHPj1BzZhlC9bFdUOLFbEK/iL
ppl7WjhUowA1RX6U+7wGk5YQLFd/NALdv6XUGVaU5P/ZZVLPDL7Fn7zRxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDGM4xUcFeIJbEUWIWw6uqmhjKqMB8GA1UdIwQY
MBaAFCnt8qTyCsCCNcQBgN5068OTXPwiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2UzeXBQSUt3SUkxeEFHQTNuVHJ3NU5jX0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84Y2IxZTYtZTVmOC00ZmEwLTk3ZmUt
OTI0YzI5Y2Y3N2M0LzEvS2UzeXBQSUt3SUkxeEFHQTNuVHJ3NU5jX0NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84Y2IxZTYtZTVmOC00ZmEwLTk3ZmUtOTI0YzI5Y2Y3N2M0
LzEvS2UzeXBQSUt3SUkxeEFHQTNuVHJ3NU5jX0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8eUAkai
kKEtt+XgoLa9NkI2yNdmo5FutI2dbcI+T8igcyN2PEEONgEm6tksrkFBJD2uBypq
vv7q3VBjeP3N5z+7bpoPtX1Spl9SdfJikpyc+tgsFkNVOY9BEUCunnVtSO76Ebp+
zIdMuhZSOYBwXE4YvkV51GY7eJwKz9sSLHjYX4b4ubYYs7mBkpF2QnZ5k5uBGi/v
pV3Ujm8cr//h1NShzbkWNRwGJ2mFU1ei24qyd7GfR3Glm0icpXIoGK91cLcM1Nho
vFJ7QyIUUAj6oa6KUZ7MFCOSnLUbil3/f4os3/z7kig1zmpPgtSYLRVICv1Yu7Rg
gGPgcJDy0tK03Q==
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:12:32 2025 by rpki-client