Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
File: P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft (raw, json)
Hash identifier: inudfM53eYQYQ18e+kekujR2rG2LmiV+JX2u5Ns7604=
Subject key identifier: 5B:6D:66:0E:A3:56:23:D3:53:67:9D:6E:F3:B9:FF:DA:C0:46:E1:55
Authority key identifier: 3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
Certificate issuer: /CN=3f46c351ee89c9f5558167530704885b8be46eaa
Certificate serial: 01963BAE8B01BED71C6B5A5A66C50091F3E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
Manifest number: 14F1
Signing time: Tue 15 Apr 2025 23:00:16 +0000
Manifest this update: Tue 15 Apr 2025 23:00:16 +0000
Manifest next update: Wed 16 Apr 2025 23:00:16 +0000
Files and hashes: 1: P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl (hash: BeF/kfNRMjzSHerZxS7hGvBdOxAylxRgk6pjMqNTwpA=)
2: QxahHBF5SSiTCKjSwe1FlEjpjhQ.roa (hash: d1pnjZFtEihgfo0iFcK4wvbFSZ9uzn9ZUOrv5mZKK8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:ae:8b:01:be:d7:1c:6b:5a:5a:66:c5:00:91:f3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f46c351ee89c9f5558167530704885b8be46eaa
Validity
Not Before: Apr 15 23:00:16 2025 GMT
Not After : Apr 16 23:00:16 2025 GMT
Subject: CN=5b6d660ea35623d353679d6ef3b9ffdac046e155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:51:ba:50:c2:36:5a:c8:03:79:ce:ee:95:
3e:05:dd:97:cb:78:15:bf:06:42:80:c8:35:9f:12:
4d:d1:a4:e6:9e:ed:1c:79:16:90:08:38:45:62:83:
50:90:da:e2:5b:2f:e1:25:b8:8d:9f:59:f2:78:7a:
2d:02:0e:56:f1:f1:c2:89:a7:8f:e4:7b:5a:8a:b4:
a9:b9:1d:77:1b:bf:7d:28:d7:6d:b5:8e:df:42:fd:
92:9d:59:ab:82:09:b8:e6:b5:98:1c:a9:c1:10:1c:
c8:0f:dc:fd:04:3c:ec:47:5c:9d:cd:61:98:01:08:
c4:d2:94:cd:90:4c:78:0f:0f:4b:49:d9:0d:cd:10:
7c:e2:9b:18:2c:3f:f0:f9:c6:c4:eb:f3:77:68:06:
32:39:03:69:f8:bb:d6:4c:90:b9:48:97:8d:dd:56:
ca:90:49:01:d5:a6:9a:38:da:ac:f0:0b:a0:e5:33:
26:98:54:ec:5b:7c:6f:6a:5d:41:b3:ce:eb:8a:f0:
87:5d:83:da:2a:36:91:71:fd:82:f4:33:77:8f:6e:
59:2d:d1:5e:5f:65:ba:99:5f:0e:82:d9:33:7b:4f:
ae:a7:4a:9e:02:93:f0:27:1c:bf:b5:72:87:dc:96:
f8:12:ad:3b:43:2f:f4:66:39:06:0a:38:0f:78:59:
61:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6D:66:0E:A3:56:23:D3:53:67:9D:6E:F3:B9:FF:DA:C0:46:E1:55
X509v3 Authority Key Identifier:
keyid:3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:97:5d:a9:9b:a1:3e:7f:bd:92:1c:b3:a6:d7:53:ea:20:e4:
00:3f:d8:86:e6:5c:95:26:0e:4d:21:7f:07:1a:11:8f:7d:41:
75:5d:88:f7:42:2e:96:2e:30:30:ef:c3:0a:82:5c:bc:28:a9:
84:cf:4b:3a:df:49:9f:f3:f1:18:6f:cd:bd:86:ec:5c:ac:98:
55:34:90:61:cb:45:8e:21:2c:f6:99:f8:81:a9:bb:bc:ef:c3:
59:0c:36:f4:68:71:a6:df:ec:04:87:88:d2:31:f3:2a:90:fb:
28:be:4e:40:82:be:4f:f8:41:a2:c3:b5:2e:a3:2c:c3:06:20:
45:72:e7:72:54:c5:2f:da:49:0b:2a:2c:1e:82:14:71:ec:f4:
30:5b:0d:4b:09:17:5b:56:23:8e:f4:14:c5:aa:31:83:95:fd:
11:15:dd:83:f3:16:d7:1f:1c:f9:12:2e:29:cf:86:3e:f4:27:
76:fe:f9:06:19:2c:7c:c9:58:cf:dd:de:bd:e1:f8:65:5a:cb:
8a:97:6c:0d:14:8d:35:d7:4e:db:8f:12:66:2f:59:ef:1a:4f:
8a:cc:02:2a:94:3a:41:f6:e3:5a:3e:89:a5:c8:19:8d:8c:ae:
a1:03:10:42:93:2e:e5:e9:e4:09:42:fd:06:f1:4d:50:c3:46:
2b:e4:5c:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY7rosBvtcca1paZsUAkfPmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNDZjMzUxZWU4OWM5ZjU1NTgxNjc1MzA3MDQ4ODViOGJl
NDZlYWEwHhcNMjUwNDE1MjMwMDE2WhcNMjUwNDE2MjMwMDE2WjAzMTEwLwYDVQQD
Eyg1YjZkNjYwZWEzNTYyM2QzNTM2NzlkNmVmM2I5ZmZkYWMwNDZlMTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjNRulDCNlrIA3nO7pU+Bd2Xy3gV
vwZCgMg1nxJN0aTmnu0ceRaQCDhFYoNQkNriWy/hJbiNn1nyeHotAg5W8fHCiaeP
5HtairSpuR13G799KNdttY7fQv2SnVmrggm45rWYHKnBEBzID9z9BDzsR1ydzWGY
AQjE0pTNkEx4Dw9LSdkNzRB84psYLD/w+cbE6/N3aAYyOQNp+LvWTJC5SJeN3VbK
kEkB1aaaONqs8Aug5TMmmFTsW3xval1Bs87rivCHXYPaKjaRcf2C9DN3j25ZLdFe
X2W6mV8Ogtkze0+up0qeApPwJxy/tXKH3Jb4Eq07Qy/0ZjkGCjgPeFlhkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFttZg6jViPTU2edbvO5/9rARuFVMB8GA1UdIwQY
MBaAFD9Gw1Huicn1VYFnUwcEiFuL5G6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDBiRFVlNkp5ZlZWZ1dkVEJ3U0lXNHZrYnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mYzdhZWUtMjMzYy00ZDY0LTkyOTMt
MDU5NzhhNWExZDY5LzEvUDBiRFVlNkp5ZlZWZ1dkVEJ3U0lXNHZrYnFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mYzdhZWUtMjMzYy00ZDY0LTkyOTMtMDU5NzhhNWExZDY5
LzEvUDBiRFVlNkp5ZlZWZ1dkVEJ3U0lXNHZrYnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJddqZuh
Pn+9khyzptdT6iDkAD/YhuZclSYOTSF/BxoRj31BdV2I90Iuli4wMO/DCoJcvCip
hM9LOt9Jn/PxGG/NvYbsXKyYVTSQYctFjiEs9pn4gam7vO/DWQw29Ghxpt/sBIeI
0jHzKpD7KL5OQIK+T/hBosO1LqMswwYgRXLnclTFL9pJCyosHoIUcez0MFsNSwkX
W1YjjvQUxaoxg5X9ERXdg/MW1x8c+RIuKc+GPvQndv75BhksfMlYz93eveH4ZVrL
ipdsDRSNNddO248SZi9Z7xpPiswCKpQ6QfbjWj6JpcgZjYyuoQMQQpMu5enkCUL9
BvFNUMNGK+RclA==
-----END CERTIFICATE-----
Generated at Wed Apr 16 07:48:17 2025 by rpki-client