Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
File: _INSXRQvv0uUs9FpRFNlxm3f3f0.mft (raw, json)
Hash identifier: QzSgyA8tKaAtIHWYOg5v5K2hwhU7IZZnW/FpzQIQ/cs=
Subject key identifier: 4D:DB:C6:B9:92:E8:89:CE:08:F0:FF:7E:BC:DA:AF:83:D3:C2:3A:96
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial: 0196452030F4DB13211A5CBE461FBCD218B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
Manifest number: 0AA4
Signing time: Thu 17 Apr 2025 19:00:59 +0000
Manifest this update: Thu 17 Apr 2025 19:00:59 +0000
Manifest next update: Fri 18 Apr 2025 19:00:59 +0000
Files and hashes: 1: 2HsIGyT4rIJuu6UrqRcR2fc9b3I.roa (hash: hUQqgn+fKEmkw/9ErWQL/8TgPXVZMyjAW7UPwj4OttA=)
2: _INSXRQvv0uUs9FpRFNlxm3f3f0.crl (hash: 4nBHeZxaJCLwqvgCd43jEosdgduKfli2NzrdDFEw+k4=)
3: dz5PrO-ksQipuN7JJpM04omvh6c.roa (hash: 81uIRfVVY3c1peJ8bScAsHXQKW9arfKTdSaUvSixwrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:20:30:f4:db:13:21:1a:5c:be:46:1f:bc:d2:18:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Validity
Not Before: Apr 17 19:00:59 2025 GMT
Not After : Apr 18 19:00:59 2025 GMT
Subject: CN=4ddbc6b992e889ce08f0ff7ebcdaaf83d3c23a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:dc:28:50:69:c6:ba:1a:24:a4:47:1c:b6:52:
ff:5e:c0:2e:3f:76:fc:84:de:4e:36:7e:7c:59:19:
c0:df:96:a0:c2:0d:99:3b:38:b9:11:35:b2:b5:f0:
e2:34:1b:32:f0:c5:ec:b6:f0:68:8b:8b:02:e5:c2:
19:a9:6b:b6:c7:df:0f:eb:53:3b:b4:72:8c:a6:85:
a6:02:4e:a1:c9:66:f5:64:1a:da:4b:44:0d:2f:23:
83:f8:cc:fa:4b:20:ce:f5:16:bc:dc:42:64:e2:62:
1f:56:ae:3b:41:dc:ab:27:57:4e:e9:3b:49:77:7c:
ba:31:c5:94:60:ef:b5:c3:8e:6e:e0:56:78:cd:54:
83:a3:bb:e1:0b:86:1f:c3:1c:a4:1e:aa:f8:ba:e5:
2e:4a:92:40:7f:77:92:d0:74:89:34:0b:4f:28:1b:
3e:28:de:1e:65:00:41:45:a5:90:1e:86:36:01:e5:
95:8a:50:c5:d3:90:e8:25:0f:93:71:d7:82:f2:06:
66:36:af:44:8d:bd:09:a6:85:7f:7f:95:9f:c7:e8:
5c:33:d1:04:eb:e3:3c:9b:35:8e:e0:d2:ea:54:a7:
b2:f0:1f:1a:d3:4b:cd:11:b1:ab:b2:f6:4c:71:1e:
ee:9c:40:f9:90:3d:d8:2d:89:97:2c:28:0c:5d:23:
68:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DB:C6:B9:92:E8:89:CE:08:F0:FF:7E:BC:DA:AF:83:D3:C2:3A:96
X509v3 Authority Key Identifier:
keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ef:0d:4f:8b:56:13:8b:26:68:0c:41:d4:6d:1c:1f:5c:31:
33:c6:d4:88:2c:44:2c:34:2b:06:00:c6:2d:5d:a1:c3:73:9b:
84:69:af:fd:77:0b:cb:28:61:eb:f2:29:16:0a:6d:1a:ca:8a:
63:5f:a2:8d:c2:cc:f8:b3:00:12:7d:21:0b:d8:db:f3:71:72:
cf:d6:48:6b:8b:28:1e:77:24:47:a9:f6:28:c3:4e:18:cc:36:
e4:5b:a7:4d:ef:36:d2:f7:20:40:f1:9c:69:52:12:a9:36:5b:
fa:79:0b:ad:29:a1:87:93:c9:58:1d:64:0b:2e:cb:fe:37:10:
cc:e8:0f:ad:9b:08:33:1a:45:95:93:9e:b5:05:a3:3e:f0:fc:
45:c6:9c:4c:e7:25:87:b9:da:9c:1d:4b:82:67:09:7b:29:cc:
e8:b2:86:e7:e0:cb:f3:5f:70:6f:20:d1:21:ab:93:ba:f3:42:
32:7a:0d:62:cb:41:84:7b:c6:73:fd:8c:91:96:0a:6b:b6:cc:
b4:db:0f:57:d0:ac:1e:43:05:63:dc:59:8f:42:3d:52:e8:3d:
bd:05:3c:c7:0d:09:48:83:ef:eb:6e:32:32:82:9e:dd:19:3c:
6d:17:e3:97:03:07:49:be:9e:09:e0:41:20:ef:73:37:61:cc:
8e:cb:30:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFIDD02xMhGly+Rh+80hi4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjODM1MjVkMTQyZmJmNGI5NGIzZDE2OTQ0NTM2NWM2NmRk
ZmRkZmQwHhcNMjUwNDE3MTkwMDU5WhcNMjUwNDE4MTkwMDU5WjAzMTEwLwYDVQQD
Eyg0ZGRiYzZiOTkyZTg4OWNlMDhmMGZmN2ViY2RhYWY4M2QzYzIzYTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69woUGnGuhokpEcctlL/XsAuP3b8
hN5ONn58WRnA35agwg2ZOzi5ETWytfDiNBsy8MXstvBoi4sC5cIZqWu2x98P61M7
tHKMpoWmAk6hyWb1ZBraS0QNLyOD+Mz6SyDO9Ra83EJk4mIfVq47QdyrJ1dO6TtJ
d3y6McWUYO+1w45u4FZ4zVSDo7vhC4YfwxykHqr4uuUuSpJAf3eS0HSJNAtPKBs+
KN4eZQBBRaWQHoY2AeWVilDF05DoJQ+TcdeC8gZmNq9Ejb0JpoV/f5Wfx+hcM9EE
6+M8mzWO4NLqVKey8B8a00vNEbGrsvZMcR7unED5kD3YLYmXLCgMXSNoAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3bxrmS6InOCPD/frzar4PTwjqWMB8GA1UdIwQY
MBaAFPyDUl0UL79LlLPRaURTZcZt3939MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0lOU1hSUXZ2MHVVczlGcFJGTmx4bTNmM2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84NTRlODYtNTFiYi00NThjLWEwMTQt
NjkyM2E3ZTYxYTZiLzEvX0lOU1hSUXZ2MHVVczlGcFJGTmx4bTNmM2YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC84NTRlODYtNTFiYi00NThjLWEwMTQtNjkyM2E3ZTYxYTZi
LzEvX0lOU1hSUXZ2MHVVczlGcFJGTmx4bTNmM2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABu8NT4tW
E4smaAxB1G0cH1wxM8bUiCxELDQrBgDGLV2hw3ObhGmv/XcLyyhh6/IpFgptGsqK
Y1+ijcLM+LMAEn0hC9jb83Fyz9ZIa4soHnckR6n2KMNOGMw25FunTe820vcgQPGc
aVISqTZb+nkLrSmhh5PJWB1kCy7L/jcQzOgPrZsIMxpFlZOetQWjPvD8RcacTOcl
h7nanB1LgmcJeynM6LKG5+DL819wbyDRIauTuvNCMnoNYstBhHvGc/2MkZYKa7bM
tNsPV9CsHkMFY9xZj0I9Uug9vQU8xw0JSIPv624yMoKe3Rk8bRfjlwMHSb6eCeBB
IO9zN2HMjsswNw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:51:50 2025 by rpki-client