Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json)
Hash identifier: dLIq9IJQuAK6LegCn1Mn+WdLmHiUjaDIELxF9TlxGSk=
Subject key identifier: 56:7C:6B:FD:DC:C9:79:9A:29:65:AA:BE:2D:08:E8:0C:C2:27:2C:3B
Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Certificate serial: 01965613A9398D4790E7D73227D6CC828D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 02:00:51 +0000
Manifest this update: Mon 21 Apr 2025 02:00:51 +0000
Manifest next update: Tue 22 Apr 2025 02:00:51 +0000
Files and hashes: 1: Ef4jdp4ch3bGe_Ka3GRq8dFNRyA.roa (hash: 0HcHv8IPsRtMKEw7Kx2nplJJT6BUJZOb81lct/uUUeg=)
2: Lqe5vcwgWue09k7p7ctNg9AlXcM.roa (hash: YaDYxTi/SH2+EMKhFcDi7OA2pSDfUeTirPWPAhdJeo0=)
3: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: Pj7KmKNhPEHWXIAJAPVSe5584hdwg3GTjaajJz8vDtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:a9:39:8d:47:90:e7:d7:32:27:d6:cc:82:8d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Validity
Not Before: Apr 21 02:00:51 2025 GMT
Not After : Apr 22 02:00:51 2025 GMT
Subject: CN=567c6bfddcc9799a2965aabe2d08e80cc2272c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:be:d3:e6:2c:0e:b8:d6:32:8c:8d:c9:8a:65:
2c:ea:95:ea:79:b6:42:58:bf:8c:4a:46:23:91:71:
65:a8:88:b1:99:46:d0:4a:73:67:13:73:db:1a:38:
2b:44:f4:0f:b6:ba:b2:a1:40:27:01:6f:e9:76:34:
d3:88:b5:09:02:4a:3c:3c:e6:2b:00:90:06:a2:3b:
f5:86:c4:8a:3d:a3:07:12:d8:43:ab:aa:99:5b:f6:
5f:a5:b7:b8:23:1b:96:f9:71:d2:72:b4:5a:66:08:
93:52:69:74:cb:62:fe:78:81:ee:f9:b0:c4:a2:1b:
a9:46:fd:1b:3b:80:83:70:6a:3a:9a:1a:98:b8:78:
c8:88:05:25:50:01:18:5e:c2:45:9f:a8:c6:eb:44:
68:5b:82:a7:2e:e3:b2:2a:af:7a:3a:f1:c3:0f:ee:
95:57:9c:91:2c:4e:b2:93:b0:e4:52:f9:59:3e:3e:
2a:e6:c2:27:41:91:5d:8d:04:65:52:72:da:97:09:
d2:9f:f8:02:61:3a:15:9d:e9:29:f9:8a:df:eb:86:
e5:5c:43:e5:63:7e:28:e2:9c:7b:ca:f4:be:ce:0d:
f7:e2:f7:a4:70:b2:ad:30:29:ad:f0:32:87:18:4d:
e6:f7:4d:21:65:14:58:30:5b:76:ec:d8:33:1e:11:
94:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7C:6B:FD:DC:C9:79:9A:29:65:AA:BE:2D:08:E8:0C:C2:27:2C:3B
X509v3 Authority Key Identifier:
keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:33:b5:dc:09:08:b2:44:e8:09:c5:e0:25:4f:c7:13:6e:8a:
c1:e2:98:e7:72:9a:2b:b9:5c:7d:e8:0b:46:31:19:2d:36:29:
61:4b:ca:67:ea:02:71:02:03:e6:ea:1b:81:1d:c7:f1:2b:a7:
c9:5c:74:74:04:0c:c0:36:e1:4f:7f:d5:17:2e:27:41:84:e9:
3b:09:09:f9:b5:79:ca:1e:af:3a:e0:13:d7:4c:c0:2a:8d:f9:
6f:e6:e3:b8:f7:90:7e:24:13:ef:c2:4e:86:60:5a:cb:d3:cd:
f2:d9:75:f3:bc:3c:12:e7:fb:f2:a3:06:b6:e4:17:34:0a:e0:
f7:ca:9b:28:85:82:f2:d9:70:b6:64:b9:71:8f:a9:fb:f0:1f:
ed:bd:3d:3a:50:87:40:ca:47:ed:08:67:e7:1c:63:4d:c9:49:
c3:70:c7:99:0e:62:d2:13:97:1e:60:f5:71:d0:50:24:76:e7:
40:70:60:4b:d7:ff:93:1a:1f:7f:87:e6:25:32:36:4a:21:f2:
af:9b:b3:56:c5:ac:4a:5c:b6:82:74:89:b4:9e:00:f9:27:be:
79:27:ec:ba:4d:8b:71:40:f0:5e:48:03:80:4e:71:8b:19:0a:
14:db:c8:23:b2:45:04:33:63:f8:74:a8:95:f4:9c:b9:54:8d:
7e:73:32:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWE6k5jUeQ59cyJ9bMgo0iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YTQyZDI2MGQ1ZWNkYzJmYTJiMGI1ZGJmNjAzYjkwZDcx
NTQ0NGQwHhcNMjUwNDIxMDIwMDUxWhcNMjUwNDIyMDIwMDUxWjAzMTEwLwYDVQQD
Eyg1NjdjNmJmZGRjYzk3OTlhMjk2NWFhYmUyZDA4ZTgwY2MyMjcyYzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4L7T5iwOuNYyjI3JimUs6pXqebZC
WL+MSkYjkXFlqIixmUbQSnNnE3PbGjgrRPQPtrqyoUAnAW/pdjTTiLUJAko8POYr
AJAGojv1hsSKPaMHEthDq6qZW/Zfpbe4IxuW+XHScrRaZgiTUml0y2L+eIHu+bDE
ohupRv0bO4CDcGo6mhqYuHjIiAUlUAEYXsJFn6jG60RoW4KnLuOyKq96OvHDD+6V
V5yRLE6yk7DkUvlZPj4q5sInQZFdjQRlUnLalwnSn/gCYToVnekp+Yrf64blXEPl
Y34o4px7yvS+zg334vekcLKtMCmt8DKHGE3m900hZRRYMFt27NgzHhGUSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZ8a/3cyXmaKWWqvi0I6AzCJyw7MB8GA1UdIwQY
MBaAFKWkLSYNXs3C+isLXb9gO5DXFURNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jMzkyZDctMGE5OS00MWM5LWEyY2Qt
ZjBkMmI5NDNjYjUzLzEvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9jMzkyZDctMGE5OS00MWM5LWEyY2QtZjBkMmI5NDNjYjUz
LzEvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApjO13AkI
skToCcXgJU/HE26KweKY53KaK7lcfegLRjEZLTYpYUvKZ+oCcQID5uobgR3H8Sun
yVx0dAQMwDbhT3/VFy4nQYTpOwkJ+bV5yh6vOuAT10zAKo35b+bjuPeQfiQT78JO
hmBay9PN8tl187w8Euf78qMGtuQXNArg98qbKIWC8tlwtmS5cY+p+/Af7b09OlCH
QMpH7Qhn5xxjTclJw3DHmQ5i0hOXHmD1cdBQJHbnQHBgS9f/kxoff4fmJTI2SiHy
r5uzVsWsSly2gnSJtJ4A+Se+eSfsuk2LcUDwXkgDgE5xixkKFNvII7JFBDNj+HSo
lfScuVSNfnMyrg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:33:36 2025 by rpki-client