Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
File: rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft (raw, json)
Hash identifier: UWfMQUn1pY3+6xfVPmSHdRPzRBIkSdPNzpKS11R1AZ8=
Subject key identifier: 38:7A:9F:C0:68:B2:A8:A3:CF:AF:2C:E5:02:AE:6A:E4:D6:4D:AB:F6
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Certificate issuer: /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial: 019647B353914A9C92802518872AD50B1B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
Manifest number: 14FF
Signing time: Fri 18 Apr 2025 07:00:56 +0000
Manifest this update: Fri 18 Apr 2025 07:00:56 +0000
Manifest next update: Sat 19 Apr 2025 07:00:56 +0000
Files and hashes: 1: 47RTgndCr3WK9uvLA47Mf3Veeq0.roa (hash: nqkQXS//GUp6pq9hI3HV70pQJ3Mrf63Mr+wizeUmh6Y=)
2: AjQ1qmq1QAXjvAuMHhBzyxf3AQQ.roa (hash: PhWZ+RwWSScRWkGQiHT3k31EkR3n/BR9waZYYFuBjy8=)
3: BqxQqMXfVsv8J4WaLs72INfcI-w.roa (hash: E4uf1aplKzZlY/g2WLAMnV1cBOEsVJ+7b0auNGq9law=)
4: EbiER1YyYwAg31JRo_4MT9hutgE.roa (hash: 58aF5sG9ezc8MIrgsG64fLq6UpWN9k1MeWSXyTcyYrs=)
5: rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl (hash: Me2DxIohvToSqP24VhzvouBz9RbVLWvICN+3k5wHqvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:b3:53:91:4a:9c:92:80:25:18:87:2a:d5:0b:1b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
Validity
Not Before: Apr 18 07:00:56 2025 GMT
Not After : Apr 19 07:00:56 2025 GMT
Subject: CN=387a9fc068b2a8a3cfaf2ce502ae6ae4d64dabf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:ff:1b:48:c4:df:31:e0:7f:1b:c7:cc:89:
1c:19:cb:0d:53:b7:99:8d:10:db:51:96:ed:b5:65:
1a:d6:01:26:52:81:6e:e8:f2:ac:b4:35:33:3d:2d:
5e:03:d2:c3:16:89:03:82:5a:e3:7f:81:ce:24:22:
3d:60:1f:af:9b:f3:6a:71:6f:ee:d3:fa:b6:73:c9:
d3:85:c0:a9:28:46:c4:68:97:ee:2e:b1:a6:3c:f2:
8a:03:3f:18:00:1f:56:4b:54:9e:3a:ae:9b:cb:58:
0a:0a:51:95:6f:64:98:a8:75:09:5e:8a:02:98:9b:
c5:14:74:2b:78:7e:59:46:33:d7:7d:de:4b:98:c8:
c7:1f:5c:34:01:1d:4c:7c:11:fb:21:70:33:a9:65:
d6:b5:d4:93:3c:4f:89:7f:e3:b5:5e:c9:91:eb:1d:
14:cd:e3:93:d1:0b:e3:fb:3b:58:56:0f:ac:6c:2c:
e6:8e:41:1b:91:bb:12:c8:b3:f9:b0:6d:37:b6:6a:
5a:c0:51:36:f8:b5:ed:9c:54:a7:5c:d3:62:28:e6:
54:7b:4c:2f:4b:27:a2:f5:88:83:d2:35:c1:c2:2f:
cd:f6:80:16:99:dd:bf:25:63:68:1d:94:b2:ad:a1:
f6:f4:2b:b4:25:1f:72:25:05:20:5c:9e:a4:f4:4d:
e0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7A:9F:C0:68:B2:A8:A3:CF:AF:2C:E5:02:AE:6A:E4:D6:4D:AB:F6
X509v3 Authority Key Identifier:
keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a0:19:bd:b5:72:99:30:0c:42:da:7f:08:05:a0:48:c9:f9:
f9:e9:17:34:5a:6b:78:10:64:5e:84:77:c9:61:fe:26:19:b1:
3d:15:c9:0f:bb:8e:49:4c:d5:1e:95:9d:9a:95:c6:85:77:1f:
8b:b3:44:84:8d:e3:64:2d:2f:15:dc:bc:b7:43:c1:88:e5:4a:
af:d0:63:37:f0:21:95:ce:51:bc:64:3f:8c:76:80:14:ed:42:
cc:27:01:bc:57:bd:22:d1:30:ea:90:27:8f:f2:c3:bb:80:dd:
8e:b7:b3:94:88:9d:e1:7c:28:1b:73:2d:6a:99:58:64:3a:16:
bc:5b:98:93:58:dc:77:c8:99:73:4c:9c:1e:55:40:dd:56:f8:
0d:c8:6c:a8:d0:95:7d:93:46:bb:f6:89:f7:0d:50:21:4f:8d:
f2:a5:44:ea:a9:28:cf:36:0b:44:40:3f:b0:ac:f4:59:fe:6c:
fc:4c:90:66:21:8b:5c:c7:d1:e5:c5:8a:db:a2:5b:76:37:95:
2e:11:ae:58:36:a8:d3:65:4c:5b:4e:06:59:f9:74:1e:d3:b6:
ed:cf:a9:2d:60:ba:8b:51:c0:56:c5:c7:61:1f:a2:b4:46:7e:
89:cc:c6:1b:a6:69:f7:a9:6c:c2:5b:84:c5:56:11:ba:43:6e:
8c:e9:2f:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZHs1ORSpySgCUYhyrVCxsqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkODA2NzliOTZjYTMyMmJmYTg1NTAwY2FiMjA2YzZkNDc0
MTJlZGYwHhcNMjUwNDE4MDcwMDU2WhcNMjUwNDE5MDcwMDU2WjAzMTEwLwYDVQQD
EygzODdhOWZjMDY4YjJhOGEzY2ZhZjJjZTUwMmFlNmFlNGQ2NGRhYmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDD/G0jE3zHgfxvHzIkcGcsNU7eZ
jRDbUZbttWUa1gEmUoFu6PKstDUzPS1eA9LDFokDglrjf4HOJCI9YB+vm/NqcW/u
0/q2c8nThcCpKEbEaJfuLrGmPPKKAz8YAB9WS1SeOq6by1gKClGVb2SYqHUJXooC
mJvFFHQreH5ZRjPXfd5LmMjHH1w0AR1MfBH7IXAzqWXWtdSTPE+Jf+O1XsmR6x0U
zeOT0Qvj+ztYVg+sbCzmjkEbkbsSyLP5sG03tmpawFE2+LXtnFSnXNNiKOZUe0wv
Syei9YiD0jXBwi/N9oAWmd2/JWNoHZSyraH29Cu0JR9yJQUgXJ6k9E3gOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDh6n8Bosqijz68s5QKuauTWTav2MB8GA1UdIwQY
MBaAFK2AZ5uWyjIr+oVQDKsgbG1HQS7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcllCbm01YktNaXY2aFZBTXF5QnNiVWRCTHQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hMTM5OWEtZWE2Yi00YTA5LThiNDAt
OTBjMGJkZTA5ODY5LzEvcllCbm01YktNaXY2aFZBTXF5QnNiVWRCTHQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9hMTM5OWEtZWE2Yi00YTA5LThiNDAtOTBjMGJkZTA5ODY5
LzEvcllCbm01YktNaXY2aFZBTXF5QnNiVWRCTHQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAqAZvbVy
mTAMQtp/CAWgSMn5+ekXNFpreBBkXoR3yWH+JhmxPRXJD7uOSUzVHpWdmpXGhXcf
i7NEhI3jZC0vFdy8t0PBiOVKr9BjN/Ahlc5RvGQ/jHaAFO1CzCcBvFe9ItEw6pAn
j/LDu4DdjrezlIid4XwoG3MtaplYZDoWvFuYk1jcd8iZc0ycHlVA3Vb4DchsqNCV
fZNGu/aJ9w1QIU+N8qVE6qkozzYLREA/sKz0Wf5s/EyQZiGLXMfR5cWK26JbdjeV
LhGuWDao02VMW04GWfl0HtO27c+pLWC6i1HAVsXHYR+itEZ+iczGG6Zp96lswluE
xVYRukNujOkvCA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:39:10 2025 by rpki-client