Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
File: rOuZdImZq44CGPfI29zFaY1mnTk.mft (raw, json)
Hash identifier: 9lacySEZyG3uf7kPlhUbwZou5tiurGK7Up6gIYNPLf8=
Subject key identifier: BC:70:CA:C9:F6:04:65:F1:64:C3:F6:ED:DB:DF:8C:BE:38:2D:64:44
Authority key identifier: AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
Certificate issuer: /CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Certificate serial: 019653B7B1F8C10A02C21B0D7342CCE1AEF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
Manifest number: 1501
Signing time: Sun 20 Apr 2025 15:01:09 +0000
Manifest this update: Sun 20 Apr 2025 15:01:09 +0000
Manifest next update: Mon 21 Apr 2025 15:01:09 +0000
Files and hashes: 1: AXdtgA9HD_eEgv2xOauCB5PRPTI.roa (hash: eE91r99J937Hp1PJua6WE3j9iIacTvevX68FK66M1mQ=)
2: rOuZdImZq44CGPfI29zFaY1mnTk.crl (hash: tdqKjwb1/YI99yaJg+/devJEPxzU6fh52437atn3vIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:b1:f8:c1:0a:02:c2:1b:0d:73:42:cc:e1:ae:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Validity
Not Before: Apr 20 15:01:09 2025 GMT
Not After : Apr 21 15:01:09 2025 GMT
Subject: CN=bc70cac9f60465f164c3f6eddbdf8cbe382d6444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:9e:c8:74:37:d9:03:11:27:2d:ef:ef:f0:
a0:e3:28:d2:ba:53:54:f8:7e:5f:6c:28:5c:8a:bc:
11:a2:ac:13:21:26:95:61:0b:0b:f2:c3:5f:00:e4:
5f:43:2b:25:f7:12:d2:19:70:2c:37:29:8c:d5:62:
77:62:a2:e0:f8:67:f6:6e:78:09:26:bd:f1:2f:64:
80:ce:6c:96:12:07:fc:4b:4e:f0:8c:69:a4:57:f3:
6c:98:40:0e:fe:56:53:20:81:c5:1c:0b:5b:f7:7a:
91:5c:08:a7:2c:36:af:ae:8c:51:ff:08:e4:c5:70:
61:c4:ea:d9:86:51:f0:43:41:b4:6d:0b:a7:50:a6:
f4:84:a3:1d:5e:12:7f:af:31:f6:6f:a7:59:b2:51:
4e:bb:17:ab:2d:0e:f0:97:50:1e:0a:14:d0:0e:c7:
0c:a8:8a:77:ec:6b:e7:6f:08:39:6f:3a:73:47:30:
be:8a:6b:73:93:0d:9c:0f:3b:fa:df:b6:d9:d6:39:
08:95:e7:43:18:56:cb:95:16:6f:c7:7b:f8:5a:21:
06:df:4e:3f:24:e8:aa:a0:80:50:3f:ae:4e:73:8a:
8d:5b:27:c8:7d:44:08:a9:86:0c:15:88:fb:79:a6:
4c:16:7a:6c:42:a6:54:ff:56:53:31:6e:96:94:f9:
cf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:70:CA:C9:F6:04:65:F1:64:C3:F6:ED:DB:DF:8C:BE:38:2D:64:44
X509v3 Authority Key Identifier:
keyid:AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:de:8b:6b:cc:64:65:23:3d:33:c2:04:b3:90:83:22:cc:aa:
37:d7:94:8e:b7:6e:52:e7:2f:3e:65:37:06:f2:de:b0:53:10:
cd:47:cd:21:f1:e6:34:d9:69:36:c1:af:85:b1:9a:2d:42:df:
c3:0a:16:6d:87:b4:04:1e:74:ef:d2:bd:1b:87:f4:60:39:f3:
a1:d3:43:67:81:66:06:2e:52:4b:d0:27:2b:14:36:92:f6:42:
c2:51:3b:44:7c:7e:cf:f6:a3:8e:ed:88:5e:27:18:00:f4:ec:
2b:dc:5a:c9:9d:1b:ea:21:db:be:7a:c3:db:c4:56:3e:9d:1e:
e5:55:8d:ad:de:7a:70:8b:bb:2f:93:74:7c:57:0f:40:0a:3a:
72:02:aa:c8:7f:64:b6:b8:e2:b4:13:67:e6:19:bc:35:50:a7:
f0:2b:90:ae:36:4d:27:df:a5:ec:f2:d6:f6:3a:73:ff:7b:0c:
6e:f1:91:20:44:62:39:93:35:ac:cd:a3:fa:fb:28:3f:84:f1:
5c:2b:1b:ce:59:49:e6:d5:7c:52:5c:1c:3c:4c:a1:e8:1a:6f:
ef:8e:52:82:f9:1e:d8:e3:46:27:85:35:b2:69:9f:43:e7:65:
78:1b:f0:85:a2:7b:57:fc:84:d1:0e:b9:a2:dd:cc:e2:16:ce:
72:c5:b5:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTt7H4wQoCwhsNc0LM4a7xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZWI5OTc0ODk5OWFiOGUwMjE4ZjdjOGRiZGNjNTY5OGQ2
NjlkMzkwHhcNMjUwNDIwMTUwMTA5WhcNMjUwNDIxMTUwMTA5WjAzMTEwLwYDVQQD
EyhiYzcwY2FjOWY2MDQ2NWYxNjRjM2Y2ZWRkYmRmOGNiZTM4MmQ2NDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgOeyHQ32QMRJy3v7/Cg4yjSulNU
+H5fbChcirwRoqwTISaVYQsL8sNfAORfQysl9xLSGXAsNymM1WJ3YqLg+Gf2bngJ
Jr3xL2SAzmyWEgf8S07wjGmkV/NsmEAO/lZTIIHFHAtb93qRXAinLDavroxR/wjk
xXBhxOrZhlHwQ0G0bQunUKb0hKMdXhJ/rzH2b6dZslFOuxerLQ7wl1AeChTQDscM
qIp37Gvnbwg5bzpzRzC+imtzkw2cDzv637bZ1jkIledDGFbLlRZvx3v4WiEG304/
JOiqoIBQP65Oc4qNWyfIfUQIqYYMFYj7eaZMFnpsQqZU/1ZTMW6WlPnP7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxwysn2BGXxZMP27dvfjL44LWREMB8GA1UdIwQY
MBaAFKzrmXSJmauOAhj3yNvcxWmNZp05MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck91WmRJbVpxNDRDR1BmSTI5ekZhWTFtblRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mNjAxMzQtNmQ2ZC00ZGMxLTkyYTkt
NjU5YWU4MjE5OTFjLzEvck91WmRJbVpxNDRDR1BmSTI5ekZhWTFtblRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mNjAxMzQtNmQ2ZC00ZGMxLTkyYTktNjU5YWU4MjE5OTFj
LzEvck91WmRJbVpxNDRDR1BmSTI5ekZhWTFtblRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAid6La8xk
ZSM9M8IEs5CDIsyqN9eUjrduUucvPmU3BvLesFMQzUfNIfHmNNlpNsGvhbGaLULf
wwoWbYe0BB5079K9G4f0YDnzodNDZ4FmBi5SS9AnKxQ2kvZCwlE7RHx+z/ajju2I
XicYAPTsK9xayZ0b6iHbvnrD28RWPp0e5VWNrd56cIu7L5N0fFcPQAo6cgKqyH9k
trjitBNn5hm8NVCn8CuQrjZNJ9+l7PLW9jpz/3sMbvGRIERiOZM1rM2j+vsoP4Tx
XCsbzllJ5tV8UlwcPEyh6Bpv745Sgvke2ONGJ4U1smmfQ+dleBvwhaJ7V/yE0Q65
ot3M4hbOcsW1ZQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:43:04 2025 by rpki-client