Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier: XWbt7XJ79ksXDjSRmWHc+LU7sdIK/CzamiZp+LHtmwU=
Subject key identifier: F4:DB:07:8D:CD:88:5C:19:93:F6:74:67:B9:75:9D:D2:12:43:6D:05
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 019632080FC7FEBF69930BF19FF1EB507EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number: 0DED
Signing time: Mon 14 Apr 2025 02:01:51 +0000
Manifest this update: Mon 14 Apr 2025 02:01:51 +0000
Manifest next update: Tue 15 Apr 2025 02:01:51 +0000
Files and hashes: 1: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: Z98UBQw92ptRaSW+MVO/WcsLM3heux8Px86OO5OO+2o=)
2: evdpU8RxaI_pbdRiidwVOCapui0.roa (hash: gmEXsktEnud6XxBSpR/JYtLPKpbESxZW8V98Ytskm+o=)
3: zC0DwQFXhSD9GmfEt7gqZels6ME.roa (hash: Cq4uPzMv6jZuo+s6z3yPpwudom0heKSg9U70MId82ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:32:08:0f:c7:fe:bf:69:93:0b:f1:9f:f1:eb:50:7e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Apr 14 02:01:51 2025 GMT
Not After : Apr 15 02:01:51 2025 GMT
Subject: CN=f4db078dcd885c1993f67467b9759dd212436d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:33:1a:87:46:e0:6b:cf:0d:b6:f2:40:7f:b4:
19:82:21:91:25:d4:25:88:b5:75:46:ec:1f:86:1d:
49:79:b6:3f:12:11:65:bd:19:9a:8d:2f:54:d2:6a:
29:53:bd:57:cc:50:63:c9:3e:81:49:52:2c:04:d1:
bc:cb:72:94:3a:87:d9:e5:3a:72:8b:cc:a1:db:3e:
0b:4a:b3:97:78:62:a9:00:5f:ae:47:b8:02:ab:6b:
98:27:1a:0b:66:09:12:e8:48:14:c3:c9:83:9c:1f:
47:c2:e4:e3:b3:bd:f4:d7:ea:cb:a9:2f:80:2b:7a:
4c:69:9b:07:24:f5:bf:db:9d:55:ce:89:56:06:8c:
a7:50:65:43:10:76:ce:4f:d1:04:de:8b:e2:40:f7:
2f:f6:24:f6:f8:c7:40:f4:74:6b:d9:69:71:87:27:
42:63:f9:10:58:da:e2:c8:47:74:4e:53:51:b1:38:
5a:1f:a8:65:fa:90:bd:82:a9:3d:70:aa:3c:c4:4b:
4f:60:e8:5a:7c:ce:81:c9:b5:1d:e1:74:d9:0b:8a:
5a:17:b1:a9:da:56:15:94:e6:1f:7c:cf:b4:2c:81:
0f:44:b6:d1:15:ae:92:10:83:eb:bf:3d:18:c2:15:
31:1d:24:45:af:cc:2e:6e:93:6b:86:e0:25:02:bf:
a0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DB:07:8D:CD:88:5C:19:93:F6:74:67:B9:75:9D:D2:12:43:6D:05
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2e:d1:60:4e:6d:e0:02:1c:88:f6:b0:39:ae:32:89:ef:19:
17:60:d0:33:6f:b1:1e:54:dc:4e:39:48:98:38:fc:ac:c6:36:
d2:a6:35:7d:e2:4d:e1:55:7d:39:a7:66:ca:54:ae:15:8b:05:
77:68:02:97:d7:6a:a6:24:a7:24:79:5f:36:19:86:20:b3:7e:
97:c2:2a:58:81:53:1b:1a:30:46:ed:4a:52:60:ac:e0:62:56:
24:f5:46:e7:d1:68:0a:27:1d:d5:6c:21:30:88:ea:1b:09:9f:
b1:f8:ed:80:f7:05:e1:ee:e7:ba:3f:c9:87:dd:4d:85:d4:8a:
06:98:a8:02:d7:f4:a6:a8:c3:58:1a:32:66:76:75:54:40:3a:
f3:e5:28:b5:3b:fa:b8:b8:db:04:b7:16:21:4a:26:f3:6a:cf:
87:22:da:9a:92:4a:98:38:7c:87:cd:27:f3:14:b7:54:77:38:
6e:d6:a7:b9:dc:76:31:40:d8:f5:aa:68:56:f5:c2:e7:a6:be:
72:5d:ca:b1:ee:6c:34:fa:c0:ac:2e:f6:8e:d5:8f:f4:ee:7f:
96:69:a7:51:1d:43:48:93:2c:ba:71:d7:0a:53:8b:de:c0:8d:
75:c1:6b:6b:45:95:63:05:ab:f7:1a:b1:b8:73:c7:60:be:f1:
87:aa:dd:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYyCA/H/r9pkwvxn/HrUH7dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MjZkOWIzYTc4NTQzYjY5NjQzMzVlZTE5NDFjYTI5NzFj
NTY5NGUwHhcNMjUwNDE0MDIwMTUxWhcNMjUwNDE1MDIwMTUxWjAzMTEwLwYDVQQD
EyhmNGRiMDc4ZGNkODg1YzE5OTNmNjc0NjdiOTc1OWRkMjEyNDM2ZDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jMah0bga88NtvJAf7QZgiGRJdQl
iLV1Ruwfhh1JebY/EhFlvRmajS9U0mopU71XzFBjyT6BSVIsBNG8y3KUOofZ5Tpy
i8yh2z4LSrOXeGKpAF+uR7gCq2uYJxoLZgkS6EgUw8mDnB9HwuTjs7301+rLqS+A
K3pMaZsHJPW/251VzolWBoynUGVDEHbOT9EE3oviQPcv9iT2+MdA9HRr2WlxhydC
Y/kQWNriyEd0TlNRsThaH6hl+pC9gqk9cKo8xEtPYOhafM6BybUd4XTZC4paF7Gp
2lYVlOYffM+0LIEPRLbRFa6SEIPrvz0YwhUxHSRFr8wubpNrhuAlAr+gswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTbB43NiFwZk/Z0Z7l1ndISQ20FMB8GA1UdIwQY
MBaAFEQm2bOnhUO2lkM17hlByilxxWlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iOGUzMjMtOTM0OS00NDQ5LWI5NTQt
MGRlNzk2YTRhMzMyLzEvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iOGUzMjMtOTM0OS00NDQ5LWI5NTQtMGRlNzk2YTRhMzMy
LzEvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhS7RYE5t
4AIciPawOa4yie8ZF2DQM2+xHlTcTjlImDj8rMY20qY1feJN4VV9OadmylSuFYsF
d2gCl9dqpiSnJHlfNhmGILN+l8IqWIFTGxowRu1KUmCs4GJWJPVG59FoCicd1Wwh
MIjqGwmfsfjtgPcF4e7nuj/Jh91NhdSKBpioAtf0pqjDWBoyZnZ1VEA68+UotTv6
uLjbBLcWIUom82rPhyLampJKmDh8h80n8xS3VHc4btanudx2MUDY9apoVvXC56a+
cl3Kse5sNPrArC72jtWP9O5/lmmnUR1DSJMsunHXClOL3sCNdcFra0WVYwWr9xqx
uHPHYL7xh6rdWQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 04:53:20 2025 by rpki-client