Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
File: eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft (raw, json)
Hash identifier: xrLD1lgf0bHNWZsToSfDAk1h5/6dABKPKFH+r569mhE=
Subject key identifier: 88:85:E9:74:90:19:EE:84:1A:51:1C:46:FA:A6:7E:96:0D:8B:C0:E7
Authority key identifier: 78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA
Certificate issuer: /CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa
Certificate serial: 01965A94A3F69E513BFECBDF0CFA9C3D87E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
Manifest number: 1506
Signing time: Mon 21 Apr 2025 23:00:12 +0000
Manifest this update: Mon 21 Apr 2025 23:00:12 +0000
Manifest next update: Tue 22 Apr 2025 23:00:12 +0000
Files and hashes: 1: 1XOKZ2XklGPcq5QMqMVrBtsz3DI.roa (hash: uOLEsbZmCJPEZSYbgL/3UoBOworDcneFhX8ZOrNbRIs=)
2: eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl (hash: djA4R1GrvEBgtyp+mf7O2fRBl3KTNY4oKcmluPwRqrc=)
3: gRdA1lvZDwZ4CbwZHHGYk6zWOaI.roa (hash: WIrKKySjlipgbBStUixKdW9xZvtWQuX2bcDWYj9rmX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:94:a3:f6:9e:51:3b:fe:cb:df:0c:fa:9c:3d:87:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa
Validity
Not Before: Apr 21 23:00:12 2025 GMT
Not After : Apr 22 23:00:12 2025 GMT
Subject: CN=8885e9749019ee841a511c46faa67e960d8bc0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:10:b1:6d:7c:a3:d3:70:6c:7a:8a:5d:82:
d6:41:f1:46:9a:64:3c:31:bd:01:3d:5d:b2:02:ea:
02:31:20:ec:71:53:0a:69:a5:08:26:82:9b:5b:5c:
4b:fd:ed:d0:57:f7:a6:e2:5f:26:bb:e8:79:b3:18:
4f:86:4e:80:d7:04:e2:b3:5f:19:98:4f:b8:e3:9a:
3c:ba:8e:d3:36:a7:b1:44:e4:49:9f:5f:4c:3f:2e:
1d:3a:32:2e:5a:bf:1f:04:6f:c0:da:15:ea:ec:b0:
59:9d:9f:ae:10:dc:55:52:8b:1e:16:91:a3:c2:66:
01:2d:3b:03:5f:52:c1:b9:6c:d5:49:bf:b7:08:cd:
45:4c:aa:df:62:24:3c:8b:c9:c7:be:2f:30:99:cc:
3b:3c:24:c0:3c:81:01:72:62:20:98:4b:87:db:39:
0a:c7:d0:5a:6e:54:a5:5c:40:e4:43:9c:fa:e3:73:
53:36:d8:24:f1:20:b0:df:d5:fb:2f:31:9c:3a:e0:
c7:de:ef:e5:14:78:ff:38:7e:81:ed:ea:92:2e:78:
3c:00:9b:c3:55:59:0d:5b:92:57:12:8f:07:8d:e0:
48:2b:a4:9f:88:de:f9:6a:40:7c:52:79:fd:96:7f:
3f:82:bb:85:dd:75:19:c3:5b:26:5f:74:c1:b6:05:
11:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:85:E9:74:90:19:EE:84:1A:51:1C:46:FA:A6:7E:96:0D:8B:C0:E7
X509v3 Authority Key Identifier:
keyid:78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e8:0e:1a:4c:4a:24:0c:2e:32:ce:4c:1a:fa:f9:73:88:83:
e5:33:2f:07:97:fe:ea:92:ec:d2:e9:29:5c:7b:e2:e5:25:6b:
74:70:de:78:5e:6a:f3:69:be:de:ae:e6:7f:29:1a:22:94:65:
da:87:76:08:5e:64:bd:dc:c8:5f:fc:83:f9:12:a3:56:2c:8a:
93:6a:8b:98:13:31:38:6b:0c:0b:fa:25:cf:98:0a:a2:7d:ad:
de:b4:ab:20:c9:01:44:a2:6d:d7:7e:aa:33:c0:26:2b:8f:7b:
13:37:bd:33:2d:30:45:8d:fa:2a:50:0f:cf:1f:24:f1:3e:22:
8a:42:6a:8f:36:84:71:02:68:39:04:35:8f:6a:d0:62:be:ca:
ba:df:36:19:a9:a6:43:48:d6:5c:b3:83:31:d1:7c:cd:5d:23:
f5:57:71:f6:23:f3:a7:65:95:88:5d:ee:cf:ae:75:6f:53:3c:
b8:8d:6e:34:3c:b6:dd:b2:5f:5b:ed:da:92:98:72:26:73:d8:
a1:0d:c2:0f:72:2f:6a:db:f1:7d:8c:8b:cb:c8:6d:9c:2a:b3:
b6:81:8c:ef:45:be:ba:1c:42:dc:cf:96:fc:7e:99:d4:8a:aa:
60:02:ac:eb:44:be:47:c7:d2:fb:c1:99:1d:af:10:ee:27:36:
2e:6a:5c:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZalKP2nlE7/svfDPqcPYfmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZGMzYzZhYjRhZmJhODY0YmEwZDRmZGIwOWU2ZjBlYjA2
ZjQzZmEwHhcNMjUwNDIxMjMwMDEyWhcNMjUwNDIyMjMwMDEyWjAzMTEwLwYDVQQD
Eyg4ODg1ZTk3NDkwMTllZTg0MWE1MTFjNDZmYWE2N2U5NjBkOGJjMGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs34QsW18o9NwbHqKXYLWQfFGmmQ8
Mb0BPV2yAuoCMSDscVMKaaUIJoKbW1xL/e3QV/em4l8mu+h5sxhPhk6A1wTis18Z
mE+445o8uo7TNqexRORJn19MPy4dOjIuWr8fBG/A2hXq7LBZnZ+uENxVUoseFpGj
wmYBLTsDX1LBuWzVSb+3CM1FTKrfYiQ8i8nHvi8wmcw7PCTAPIEBcmIgmEuH2zkK
x9BablSlXEDkQ5z643NTNtgk8SCw39X7LzGcOuDH3u/lFHj/OH6B7eqSLng8AJvD
VVkNW5JXEo8HjeBIK6SfiN75akB8Unn9ln8/gruF3XUZw1smX3TBtgURmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIiF6XSQGe6EGlEcRvqmfpYNi8DnMB8GA1UdIwQY
MBaAFHjcPGq0r7qGS6DU/bCebw6wb0P6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU53OGFyU3Z1b1pMb05UOXNKNXZEckJ2UV9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81NGY2YTItMTBkMS00MTk1LTk1YmMt
OWVlNzY1ODNjNzFhLzEvZU53OGFyU3Z1b1pMb05UOXNKNXZEckJ2UV9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS81NGY2YTItMTBkMS00MTk1LTk1YmMtOWVlNzY1ODNjNzFh
LzEvZU53OGFyU3Z1b1pMb05UOXNKNXZEckJ2UV9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXegOGkxK
JAwuMs5MGvr5c4iD5TMvB5f+6pLs0ukpXHvi5SVrdHDeeF5q82m+3q7mfykaIpRl
2od2CF5kvdzIX/yD+RKjViyKk2qLmBMxOGsMC/olz5gKon2t3rSrIMkBRKJt136q
M8AmK497Eze9My0wRY36KlAPzx8k8T4iikJqjzaEcQJoOQQ1j2rQYr7Kut82Gamm
Q0jWXLODMdF8zV0j9Vdx9iPzp2WViF3uz651b1M8uI1uNDy23bJfW+3akphyJnPY
oQ3CD3IvatvxfYyLy8htnCqztoGM70W+uhxC3M+W/H6Z1IqqYAKs60S+R8fS+8GZ
Ha8Q7ic2Lmpcdg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 04:42:40 2025 by rpki-client