Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier: pSjM3kCiRlWccEPeGYORY3R4KQGhkUsVGIWtaeUzf4o=
Subject key identifier: D9:A6:5F:71:4C:14:6F:A8:13:8B:2C:99:80:B5:BE:7E:D3:9C:70:20
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 01965B70D341AF08F42E360A7860F4103D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number: 05FF
Signing time: Tue 22 Apr 2025 03:00:42 +0000
Manifest this update: Tue 22 Apr 2025 03:00:42 +0000
Manifest next update: Wed 23 Apr 2025 03:00:42 +0000
Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: T0u60bRCLJEOWHndw5QuS6lr2MmDWDju/z+XdtqBV+E=)
2: Wl7dfPBMjzt7d3ARPHZzvBDvCz4.roa (hash: YXn3MdI9fbwK137bu2N/c5GjDCAVC9bePDhOy7NGC2E=)
3: ricnvXRyxBIr6uz7wJxhUxO5eB8.roa (hash: OF8ZMoVg6J5N7Pqa2nI+KUupYU9mKGD+TotlcQVJhhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:d3:41:af:08:f4:2e:36:0a:78:60:f4:10:3d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: Apr 22 03:00:42 2025 GMT
Not After : Apr 23 03:00:42 2025 GMT
Subject: CN=d9a65f714c146fa8138b2c9980b5be7ed39c7020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:30:ea:63:5b:e1:18:ee:bf:5c:d4:de:64:f8:
78:c1:93:0f:68:4c:ed:01:58:4d:05:34:46:68:22:
34:2e:b8:66:7b:09:29:e9:b1:4b:c6:e1:eb:a2:35:
33:48:f5:78:f3:84:fa:e8:9b:9b:75:09:58:a8:4d:
27:44:d8:cb:a0:3a:6a:5c:e0:7c:c5:bc:a3:eb:47:
76:26:54:6c:03:6e:db:09:54:45:23:4b:e7:fb:ff:
7f:a7:9f:c2:ab:cd:d7:59:fa:6d:56:8c:4e:4f:98:
23:a2:47:68:96:3c:0c:89:3b:00:41:52:ff:28:ad:
8d:b3:93:a1:09:d4:c3:41:35:76:9e:e8:5a:d0:45:
ad:9f:f4:99:8b:41:6e:95:5e:e3:e1:2d:a5:f4:6b:
d9:3b:d6:96:e4:49:1b:7d:ff:50:bc:f0:58:df:23:
02:d1:cd:ef:cb:ee:20:7b:b2:48:7c:9d:ef:49:7b:
1b:62:74:fd:d1:bc:cf:eb:72:d0:46:c1:11:49:d7:
23:16:2c:a5:30:84:ef:17:ba:3d:4a:14:b7:72:05:
10:fd:46:c6:7a:94:49:97:98:5c:ae:da:4d:cc:a9:
23:0a:72:c3:45:28:70:2a:a4:c2:fb:78:fb:ce:17:
8b:d5:8c:c3:8a:32:2a:6b:81:f6:ec:54:30:a6:2a:
f9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A6:5F:71:4C:14:6F:A8:13:8B:2C:99:80:B5:BE:7E:D3:9C:70:20
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e5:c5:d3:59:c7:8d:44:72:8d:a4:c3:17:f3:ff:53:80:04:
53:63:ac:c9:c2:04:8f:f0:05:19:48:dd:da:af:e4:c8:97:7b:
ed:ef:cd:f8:83:56:e4:36:b0:6c:09:f4:f0:81:b3:91:f5:07:
f7:a8:97:2d:f7:6d:08:ef:f0:66:21:b0:6a:05:5b:75:ab:44:
d8:b5:b1:9d:60:c6:55:64:bf:7c:fd:7a:69:17:f2:3d:93:d2:
7a:26:1a:4f:de:e9:28:20:3a:9e:0a:12:2b:c0:e7:b5:87:1e:
21:97:bc:bd:9f:0d:1f:c8:09:62:3b:11:d3:ee:3e:e4:69:9d:
7f:16:35:bb:be:e5:91:d0:cc:0b:f9:b4:49:ef:63:6a:87:82:
42:b8:0a:1a:c0:ba:f6:95:ae:58:a5:42:74:bf:85:09:2a:b3:
90:28:14:d4:ed:a7:ab:1f:40:ad:a0:76:24:a8:5c:cb:0e:d0:
5b:bf:9a:86:68:f6:d3:96:3f:83:ff:a7:b1:5d:53:2b:11:d4:
78:c9:e2:e5:31:93:1d:32:9c:81:d0:d1:41:32:a2:82:ca:d5:
1b:2e:55:a8:17:6d:5e:7d:dc:26:e1:44:d3:04:44:aa:97:49:
7e:4c:36:c4:06:3d:0e:6d:ba:c7:fd:46:5d:41:81:6b:a6:e3:
81:f5:8d:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbcNNBrwj0LjYKeGD0ED2dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2N2YxMjgzYjYzMGU1ODhjYjAzOWJhNjUyYjkwMjk5ZDcx
YThlNzgwHhcNMjUwNDIyMDMwMDQyWhcNMjUwNDIzMDMwMDQyWjAzMTEwLwYDVQQD
EyhkOWE2NWY3MTRjMTQ2ZmE4MTM4YjJjOTk4MGI1YmU3ZWQzOWM3MDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjDqY1vhGO6/XNTeZPh4wZMPaEzt
AVhNBTRGaCI0Lrhmewkp6bFLxuHrojUzSPV484T66JubdQlYqE0nRNjLoDpqXOB8
xbyj60d2JlRsA27bCVRFI0vn+/9/p5/Cq83XWfptVoxOT5gjokdoljwMiTsAQVL/
KK2Ns5OhCdTDQTV2nuha0EWtn/SZi0FulV7j4S2l9GvZO9aW5Ekbff9QvPBY3yMC
0c3vy+4ge7JIfJ3vSXsbYnT90bzP63LQRsERSdcjFiylMITvF7o9ShS3cgUQ/UbG
epRJl5hcrtpNzKkjCnLDRShwKqTC+3j7zheL1YzDijIqa4H27FQwpir5KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmmX3FMFG+oE4ssmYC1vn7TnHAgMB8GA1UdIwQY
MBaAFNZ/EoO2MOWIywObplK5ApnXGo54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYTg2MGMtMTAwNS00NDIzLTk1YmQt
MzA3OWQ1ODhhYTk5LzEvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yYTg2MGMtMTAwNS00NDIzLTk1YmQtMzA3OWQ1ODhhYTk5
LzEvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOXF01nH
jURyjaTDF/P/U4AEU2OsycIEj/AFGUjd2q/kyJd77e/N+INW5DawbAn08IGzkfUH
96iXLfdtCO/wZiGwagVbdatE2LWxnWDGVWS/fP16aRfyPZPSeiYaT97pKCA6ngoS
K8DntYceIZe8vZ8NH8gJYjsR0+4+5GmdfxY1u77lkdDMC/m0Se9jaoeCQrgKGsC6
9pWuWKVCdL+FCSqzkCgU1O2nqx9AraB2JKhcyw7QW7+ahmj205Y/g/+nsV1TKxHU
eMni5TGTHTKcgdDRQTKigsrVGy5VqBdtXn3cJuFE0wREqpdJfkw2xAY9Dm26x/1G
XUGBa6bjgfWNiQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 11:27:37 2025 by rpki-client