Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
File: CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json)
Hash identifier: 2a2twVUhgMux3ZkIwK4XWWLRDZdXrxbxtme6bSoDHCk=
Subject key identifier: 1D:15:FC:73:68:E9:43:17:97:57:F6:2E:9D:D6:8B:9B:76:78:CB:66
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial: 019658A68DD1A1A41119748B36CEA29BAB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
Manifest number: F0
Signing time: Mon 21 Apr 2025 14:00:32 +0000
Manifest this update: Mon 21 Apr 2025 14:00:32 +0000
Manifest next update: Tue 22 Apr 2025 14:00:32 +0000
Files and hashes: 1: 3rwXWtFbCIuCgGU96PeqAGUhWU4.roa (hash: rp0bCqxBlPPCcVLUBh0MkWETtPWfiqbHwRVpOhMjnK4=)
2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: WlUix7eiQiw2v8BhbYmFkeXLL06zjR3ca0ahV6d3pvA=)
3: wmuRmPBv_IlkfBBV-hF7o6UUILQ.roa (hash: hs6pyaykF/zQtIhils9uIo2Funb7iBy2l/PAgFXmXMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:8d:d1:a1:a4:11:19:74:8b:36:ce:a2:9b:ab:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Validity
Not Before: Apr 21 14:00:32 2025 GMT
Not After : Apr 22 14:00:32 2025 GMT
Subject: CN=1d15fc7368e943179757f62e9dd68b9b7678cb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:0b:e3:d1:38:6d:2c:31:c1:0f:b4:20:d4:
79:45:5c:94:aa:ec:cc:4f:03:15:80:32:28:b8:fb:
bf:28:d8:8b:f3:9b:31:d9:dc:e3:0f:e4:dc:7e:fa:
58:81:37:cb:e3:c7:b9:b2:5e:fe:e9:f8:b5:3f:a6:
d4:7f:ae:77:a9:93:9a:bb:11:ea:34:45:48:90:36:
28:4d:0e:f0:d2:a8:91:50:d8:16:4b:5b:c6:39:f6:
28:a5:68:dc:19:a3:2d:50:a1:64:a4:ef:08:3d:31:
81:d3:ca:b2:60:7e:d4:1f:82:1b:55:22:1b:72:05:
62:03:56:24:10:73:fc:1e:5c:77:bc:82:15:8a:65:
03:a1:7d:04:c1:af:fc:b8:59:c0:b4:ba:58:2c:f1:
cf:7d:cb:b6:13:1f:23:22:b0:93:30:ec:d0:bd:65:
9b:04:3e:f6:af:b5:80:82:3b:fe:55:d4:a2:30:bd:
7b:17:63:f8:7c:6e:51:50:26:a1:d0:c9:a3:9f:43:
98:0f:b4:15:5c:f9:8e:b6:25:09:be:17:7b:78:4d:
33:8d:94:49:55:ca:fd:a0:d8:8d:c9:c6:24:b2:20:
dd:8d:71:8f:b4:6a:ef:eb:98:48:ae:fc:23:e2:f4:
74:24:65:0f:0c:7e:48:71:29:e7:d0:23:0e:e5:82:
19:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:15:FC:73:68:E9:43:17:97:57:F6:2E:9D:D6:8B:9B:76:78:CB:66
X509v3 Authority Key Identifier:
keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e4:c7:4d:e1:bc:3b:0a:82:9c:3b:07:26:be:65:58:3d:08:
a6:7f:89:56:18:88:93:bb:91:fa:ea:6b:46:75:ea:00:99:fe:
22:e4:d9:85:31:0a:2e:10:d7:38:4e:7a:ed:7c:1a:d7:17:b9:
e9:ca:0d:b4:a4:6a:c7:62:a5:a3:d4:73:85:3d:c0:d8:aa:3b:
68:0d:5d:c3:20:0d:ab:d5:0c:ab:ff:f8:95:7b:24:e3:19:48:
58:79:b1:d2:a6:c2:53:b5:51:56:02:2d:20:c1:2f:14:d1:31:
99:73:e1:1b:e8:2e:36:a2:eb:89:a2:ff:16:3a:9c:dc:f0:91:
a0:c7:b3:ec:38:96:ff:a2:9c:e0:1f:5e:d3:fb:f0:79:94:ec:
5c:4e:26:cb:ae:5c:35:74:8f:c4:5f:b5:4e:eb:b3:79:fe:8e:
0f:89:b8:fa:45:e6:86:eb:02:d6:1f:e2:d4:e5:94:6e:88:f1:
b0:35:e2:d8:20:ae:0b:c4:02:a4:42:f8:3e:a6:3f:d1:e7:ad:
1e:6d:9e:ef:ec:dd:1f:68:5c:cd:61:41:71:cc:80:66:b0:67:
46:24:18:c6:d4:b8:bd:51:9f:2c:5c:9e:22:1e:fb:8e:71:50:
b1:be:3d:08:ab:28:69:7f:44:2b:08:a9:a5:24:51:09:87:79:
65:83:19:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYpo3RoaQRGXSLNs6im6uBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MjEwMGYwYjE5OTFkODBhNDY0MjFkOWZlNTE0N2YyZDU1
YWM5MzAwHhcNMjUwNDIxMTQwMDMyWhcNMjUwNDIyMTQwMDMyWjAzMTEwLwYDVQQD
EygxZDE1ZmM3MzY4ZTk0MzE3OTc1N2Y2MmU5ZGQ2OGI5Yjc2NzhjYjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNYL49E4bSwxwQ+0INR5RVyUquzM
TwMVgDIouPu/KNiL85sx2dzjD+TcfvpYgTfL48e5sl7+6fi1P6bUf653qZOauxHq
NEVIkDYoTQ7w0qiRUNgWS1vGOfYopWjcGaMtUKFkpO8IPTGB08qyYH7UH4IbVSIb
cgViA1YkEHP8Hlx3vIIVimUDoX0Ewa/8uFnAtLpYLPHPfcu2Ex8jIrCTMOzQvWWb
BD72r7WAgjv+VdSiML17F2P4fG5RUCah0Mmjn0OYD7QVXPmOtiUJvhd7eE0zjZRJ
Vcr9oNiNycYksiDdjXGPtGrv65hIrvwj4vR0JGUPDH5IcSnn0CMO5YIZ4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0V/HNo6UMXl1f2Lp3Wi5t2eMtmMB8GA1UdIwQY
MBaAFAghAPCxmR2ApGQh2f5RR/LVWskwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQt
NDA5ODlkMGRmYzVjLzEvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQtNDA5ODlkMGRmYzVj
LzEvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuTHTeG8
OwqCnDsHJr5lWD0Ipn+JVhiIk7uR+uprRnXqAJn+IuTZhTEKLhDXOE567Xwa1xe5
6coNtKRqx2Klo9RzhT3A2Ko7aA1dwyANq9UMq//4lXsk4xlIWHmx0qbCU7VRVgIt
IMEvFNExmXPhG+guNqLriaL/Fjqc3PCRoMez7DiW/6Kc4B9e0/vweZTsXE4my65c
NXSPxF+1Tuuzef6OD4m4+kXmhusC1h/i1OWUbojxsDXi2CCuC8QCpEL4PqY/0eet
Hm2e7+zdH2hczWFBccyAZrBnRiQYxtS4vVGfLFyeIh77jnFQsb49CKsoaX9EKwip
pSRRCYd5ZYMZhg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:03:40 2025 by rpki-client