Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier: xBBHCvqyuHcOXJDHsHKlf0gcIimGWwncBX01PrDgW7Y=
Subject key identifier: 19:D0:90:13:2E:AC:A8:1E:FB:56:96:83:2A:45:6F:3F:8B:30:61:28
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 01964F6C292A40EFEC87E97C780D23C8DA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 19:00:10 +0000
Manifest this update: Sat 19 Apr 2025 19:00:10 +0000
Manifest next update: Sun 20 Apr 2025 19:00:10 +0000
Files and hashes: 1: mdzOjm97CLLzPCbjlPobKIT1pLw.roa (hash: t6RlQNOZ4r0YZ3Um/Nvgu1T4czU0EwLc7Ga8Lg+Wxu4=)
2: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: PES6UolTLS8MI9E66/T16mq2D1wdgNkGe0yqv8aGzKo=)
3: yHP9EGdLjDrqdAgK0gSgkfOYdDE.roa (hash: 9lzUExWqudI5IZaHPGACvDV+UoMVt4hmvKdyWsLEU8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:29:2a:40:ef:ec:87:e9:7c:78:0d:23:c8:da:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: Apr 19 19:00:10 2025 GMT
Not After : Apr 20 19:00:10 2025 GMT
Subject: CN=19d090132eaca81efb5696832a456f3f8b306128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:38:0b:4e:1f:a8:4f:a7:15:20:fa:7a:05:
f2:35:31:c8:ff:1d:6f:ee:16:84:86:1d:a2:c5:94:
df:89:a8:5c:a4:83:bd:b2:19:59:cb:e9:09:ef:a1:
61:01:29:92:67:8e:e3:f6:8a:a4:de:5e:ac:83:97:
22:2f:f7:93:8b:20:42:90:10:b7:c6:0b:99:a7:c5:
11:27:48:23:a4:ab:fc:8e:d4:1a:62:cd:e1:e0:d0:
92:ac:b5:2e:7f:ea:b8:c2:8f:ee:67:6f:b6:00:ac:
6f:90:3b:04:7e:5b:52:d3:02:21:e5:d8:16:e5:ca:
a9:01:32:3a:f0:24:d9:b6:a1:79:83:e9:38:be:1c:
6e:60:d0:fa:7e:80:e7:fd:b0:06:e6:da:98:bc:d5:
99:8d:68:a9:bf:4c:6a:cb:29:93:76:a2:09:92:51:
06:5e:0e:0f:5f:7f:d5:b3:fa:30:75:77:1b:5b:85:
e2:53:92:b2:a5:45:83:bd:6e:5f:ca:7e:df:18:e4:
86:d3:54:be:fe:8c:ea:15:b5:98:17:c7:70:6b:68:
88:30:30:93:54:0c:83:80:95:ed:a3:d6:5c:45:02:
bf:b5:96:d3:86:90:32:56:f9:71:46:22:8a:19:d3:
85:f7:52:8f:bc:5b:2d:7f:ce:f5:f2:5f:b7:ef:29:
1e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D0:90:13:2E:AC:A8:1E:FB:56:96:83:2A:45:6F:3F:8B:30:61:28
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:42:20:f2:53:2e:05:d7:0b:a6:c6:d7:4e:47:60:d1:c0:44:
e5:54:04:27:15:8b:ec:3e:61:df:54:c5:e7:9c:ca:d0:34:8c:
62:50:9a:89:18:90:64:b5:8b:07:d6:a2:ea:d7:be:79:98:5b:
de:bf:51:da:eb:c2:87:76:9b:e2:2d:36:7f:95:76:9d:52:68:
67:70:6f:e6:33:8e:0d:30:e9:dd:7f:7e:c0:75:cc:51:5e:75:
20:7e:c7:b8:96:64:b5:d6:e3:8b:96:15:cb:6c:86:54:db:29:
83:30:e6:37:df:f9:fa:4c:23:88:fb:0f:4f:82:43:74:ad:af:
60:20:e0:3c:f8:67:2d:ff:37:ad:42:b5:b6:d6:9b:47:61:5d:
f0:13:c3:60:4a:dd:96:b1:cd:50:a8:61:95:43:aa:63:f4:28:
4e:38:2f:6e:7d:90:5e:f5:4e:43:a9:a0:bf:82:b0:31:d4:64:
70:49:70:59:d7:61:6d:55:19:5f:5c:04:7e:e2:bb:b4:28:50:
1e:44:b3:2b:1f:e8:8b:cb:0d:ee:ab:78:55:c4:e2:38:4c:95:
e6:b9:4f:2a:81:1d:76:fa:76:23:4b:8c:80:da:49:e9:c4:4b:
e6:2c:8e:36:d2:e7:f1:6f:bf:38:cd:71:06:36:de:38:a8:9c:
f1:1f:ee:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbCkqQO/sh+l8eA0jyNpPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYmQyNmZlMjI5NWU0NjJiZTI2Nzg1MzNlZmE1MzFlMjNi
N2YxMDIwHhcNMjUwNDE5MTkwMDEwWhcNMjUwNDIwMTkwMDEwWjAzMTEwLwYDVQQD
EygxOWQwOTAxMzJlYWNhODFlZmI1Njk2ODMyYTQ1NmYzZjhiMzA2MTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwE4C04fqE+nFSD6egXyNTHI/x1v
7haEhh2ixZTfiahcpIO9shlZy+kJ76FhASmSZ47j9oqk3l6sg5ciL/eTiyBCkBC3
xguZp8URJ0gjpKv8jtQaYs3h4NCSrLUuf+q4wo/uZ2+2AKxvkDsEfltS0wIh5dgW
5cqpATI68CTZtqF5g+k4vhxuYND6foDn/bAG5tqYvNWZjWipv0xqyymTdqIJklEG
Xg4PX3/Vs/owdXcbW4XiU5KypUWDvW5fyn7fGOSG01S+/ozqFbWYF8dwa2iIMDCT
VAyDgJXto9ZcRQK/tZbThpAyVvlxRiKKGdOF91KPvFstf8718l+37yke2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnQkBMurKge+1aWgypFbz+LMGEoMB8GA1UdIwQY
MBaAFMO9Jv4ileRiviZ4Uz76Ux4jt/ECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85YzVhMDAtMGI1Zi00YTk1LTk4YTgt
OGJkOTc2OTEwZGJmLzEvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC85YzVhMDAtMGI1Zi00YTk1LTk4YTgtOGJkOTc2OTEwZGJm
LzEvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkIg8lMu
BdcLpsbXTkdg0cBE5VQEJxWL7D5h31TF55zK0DSMYlCaiRiQZLWLB9ai6te+eZhb
3r9R2uvCh3ab4i02f5V2nVJoZ3Bv5jOODTDp3X9+wHXMUV51IH7HuJZktdbji5YV
y2yGVNspgzDmN9/5+kwjiPsPT4JDdK2vYCDgPPhnLf83rUK1ttabR2Fd8BPDYErd
lrHNUKhhlUOqY/QoTjgvbn2QXvVOQ6mgv4KwMdRkcElwWddhbVUZX1wEfuK7tChQ
HkSzKx/oi8sN7qt4VcTiOEyV5rlPKoEddvp2I0uMgNpJ6cRL5iyONtLn8W+/OM1x
BjbeOKic8R/uZQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:11:09 2025 by rpki-client