Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
File: KE5esRLhOkJwPbs4e6V3oueTrDo.mft (raw, json)
Hash identifier: o6q33e6sSu5dd3Ka8xFSHsi9eDO/VOb7qJkO9QPezNc=
Subject key identifier: 15:77:8E:34:2E:EE:06:1A:02:07:2A:5F:80:95:1E:A7:98:64:84:C7
Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
Certificate issuer: /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Certificate serial: 01965793E9677B0ED76FC51811C43ACE1748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
Manifest number: 0AFE
Signing time: Mon 21 Apr 2025 09:00:33 +0000
Manifest this update: Mon 21 Apr 2025 09:00:33 +0000
Manifest next update: Tue 22 Apr 2025 09:00:33 +0000
Files and hashes: 1: 25RJ6ZVs0Rq2vgAnn5qDuc50gBc.roa (hash: E2CGstsnfAcGk1lBYwpyCPeNPt0F4yT/sEC2c5F9t8o=)
2: KE5esRLhOkJwPbs4e6V3oueTrDo.crl (hash: dEkZEQjmhObyx9vSMGuBYZSs4hNfledvJs+/DDwETHk=)
3: jjRAP4ezNIauFNs_aNj_HcTXDg0.roa (hash: o0gv44QEwsOJL94wmCAslkIjvRv25nKBwW1R2foY/Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:e9:67:7b:0e:d7:6f:c5:18:11:c4:3a:ce:17:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Validity
Not Before: Apr 21 09:00:33 2025 GMT
Not After : Apr 22 09:00:33 2025 GMT
Subject: CN=15778e342eee061a02072a5f80951ea7986484c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:22:33:ca:a5:e4:69:1c:0c:2b:5d:46:1b:
2c:98:2e:44:13:a0:05:74:09:93:0c:5e:a4:03:26:
d2:25:f9:1d:4d:a0:8f:e7:e9:f6:57:b7:ad:da:ae:
3d:c3:9d:a2:8c:f5:8d:fa:ae:61:6a:36:6d:9c:6d:
d4:6e:dc:fe:39:92:bc:b0:cf:0c:2d:d0:cc:c0:ee:
2b:55:db:20:23:8d:39:70:46:3b:dc:46:b6:49:d7:
42:58:82:7f:96:75:51:c8:5c:61:37:f3:58:d1:d2:
1c:3d:63:0f:52:dc:d4:b5:56:d2:a4:af:d2:f6:ec:
1c:2e:98:bf:49:53:aa:1a:cc:98:04:bc:5c:8a:b2:
84:dd:f9:c4:7c:a1:93:c7:01:d9:d6:59:3e:96:8d:
5b:98:53:12:98:e7:e6:6c:d6:ab:c8:33:b0:15:f2:
bc:ca:c5:10:ba:7a:ba:b2:a4:c6:66:c6:e1:d2:1e:
1e:4a:84:7e:3c:4f:e9:80:5b:11:f8:4a:08:31:b2:
0c:ef:df:59:f2:55:b0:78:af:33:c4:89:16:77:2c:
db:bd:2e:c0:f5:3a:26:4f:8a:5a:a4:90:21:cb:dc:
a7:7e:ce:01:28:ed:ab:44:68:c2:09:1a:86:7c:76:
1f:af:a1:ed:18:12:6e:46:d4:00:d4:52:e5:6e:20:
b4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:77:8E:34:2E:EE:06:1A:02:07:2A:5F:80:95:1E:A7:98:64:84:C7
X509v3 Authority Key Identifier:
keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:91:d3:17:6d:83:1a:fe:8d:a0:af:c6:e9:7b:ab:56:9d:fc:
71:24:ca:25:65:ee:c5:99:fb:fa:c0:11:3d:a5:50:da:85:60:
b4:b9:c3:0d:72:46:29:b9:68:4d:1e:d2:37:40:74:d0:36:e5:
44:9a:28:d6:ec:9b:c5:a7:a7:21:85:ba:81:d3:5d:40:3c:24:
c9:cd:93:4c:e0:27:ae:f2:96:54:d6:01:f0:e3:bc:28:45:6c:
85:0e:2e:7e:fe:83:45:90:f2:0f:0a:96:83:98:5b:62:dc:2c:
6c:2e:a2:48:d4:ef:4c:6b:c7:94:61:fb:3b:e9:d5:21:d7:5d:
dd:da:d4:d5:e8:03:3e:9a:9b:59:68:22:de:38:0e:33:63:5b:
b8:99:ca:0d:97:b2:21:3f:12:2d:b1:5e:69:df:13:95:55:64:
fb:67:70:02:d7:78:a3:6c:74:66:08:fa:02:54:0b:7f:29:eb:
11:45:ad:2c:57:01:68:c6:7e:6e:5e:e7:89:af:3e:65:0e:42:
45:ce:5c:64:99:f4:96:ef:a7:bc:35:73:5b:7d:8d:7d:14:c0:
56:7f:4f:40:97:41:84:b5:8a:50:c0:33:c2:1e:5a:2b:10:ba:
37:cf:28:08:76:5d:8b:1e:6f:69:1a:3b:d4:9d:73:69:8e:1b:
06:6e:4d:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXk+lnew7Xb8UYEcQ6zhdIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NGU1ZWIxMTJlMTNhNDI3MDNkYmIzODdiYTU3N2EyZTc5
M2FjM2EwHhcNMjUwNDIxMDkwMDMzWhcNMjUwNDIyMDkwMDMzWjAzMTEwLwYDVQQD
EygxNTc3OGUzNDJlZWUwNjFhMDIwNzJhNWY4MDk1MWVhNzk4NjQ4NGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbIiM8ql5GkcDCtdRhssmC5EE6AF
dAmTDF6kAybSJfkdTaCP5+n2V7et2q49w52ijPWN+q5hajZtnG3Ubtz+OZK8sM8M
LdDMwO4rVdsgI405cEY73Ea2SddCWIJ/lnVRyFxhN/NY0dIcPWMPUtzUtVbSpK/S
9uwcLpi/SVOqGsyYBLxcirKE3fnEfKGTxwHZ1lk+lo1bmFMSmOfmbNaryDOwFfK8
ysUQunq6sqTGZsbh0h4eSoR+PE/pgFsR+EoIMbIM799Z8lWweK8zxIkWdyzbvS7A
9TomT4papJAhy9ynfs4BKO2rRGjCCRqGfHYfr6HtGBJuRtQA1FLlbiC09wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBV3jjQu7gYaAgcqX4CVHqeYZITHMB8GA1UdIwQY
MBaAFChOXrES4TpCcD27OHuld6Lnk6w6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNmRlZjEtZjQyNS00OWE1LWFhYWYt
MDdjYmVkZGQ2NDE4LzEvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hNmRlZjEtZjQyNS00OWE1LWFhYWYtMDdjYmVkZGQ2NDE4
LzEvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5HTF22D
Gv6NoK/G6XurVp38cSTKJWXuxZn7+sARPaVQ2oVgtLnDDXJGKbloTR7SN0B00Dbl
RJoo1uybxaenIYW6gdNdQDwkyc2TTOAnrvKWVNYB8OO8KEVshQ4ufv6DRZDyDwqW
g5hbYtwsbC6iSNTvTGvHlGH7O+nVIddd3drU1egDPpqbWWgi3jgOM2NbuJnKDZey
IT8SLbFead8TlVVk+2dwAtd4o2x0Zgj6AlQLfynrEUWtLFcBaMZ+bl7nia8+ZQ5C
Rc5cZJn0lu+nvDVzW32NfRTAVn9PQJdBhLWKUMAzwh5aKxC6N88oCHZdix5vaRo7
1J1zaY4bBm5Niw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:43 2025 by rpki-client