Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
File: ulS25fzKMIs23I8Wdgay1lmDnPE.mft (raw, json)
Hash identifier: AKuDMcnx9FUDMWEdL4b+Q6ZicFLCfhnPQxl2u9/2sV0=
Subject key identifier: 35:89:BF:AF:59:0A:02:9A:38:B3:DF:B4:50:B4:E8:15:C4:32:E9:8C
Authority key identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
Certificate issuer: /CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Certificate serial: 019658DDA8ECC3BB49CD10C7E9F79598E996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
Manifest number: 1505
Signing time: Mon 21 Apr 2025 15:00:43 +0000
Manifest this update: Mon 21 Apr 2025 15:00:43 +0000
Manifest next update: Tue 22 Apr 2025 15:00:43 +0000
Files and hashes: 1: A_rVLwz6loZEjMXnXd5R_NOTkp4.roa (hash: 8+JgFivo4KszmuGxxyWfRxvtdrWwzQi25zyDQNYA07U=)
2: k1_vQBbHzbDSZOjVFYSurblTDtM.roa (hash: dvuNRuNyVcQXmg6ppjboIbvrEfj7c0W4N1dzZe23qr0=)
3: ulS25fzKMIs23I8Wdgay1lmDnPE.crl (hash: 9hkgYes78PcgbBb7XC8jvearko+K08d3iZeVZui0PZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:a8:ec:c3:bb:49:cd:10:c7:e9:f7:95:98:e9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Validity
Not Before: Apr 21 15:00:43 2025 GMT
Not After : Apr 22 15:00:43 2025 GMT
Subject: CN=3589bfaf590a029a38b3dfb450b4e815c432e98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e5:47:aa:02:01:16:f5:a9:8e:43:05:58:e8:
6a:41:a7:a0:1a:29:b3:13:a2:45:9b:55:93:52:34:
ee:c5:00:3d:59:31:dc:23:96:6f:ea:88:f0:05:5b:
c5:71:82:fc:97:08:a6:e4:3a:99:00:60:cd:db:21:
c2:76:5a:43:bc:11:a2:6a:6a:1a:98:af:12:15:22:
17:7d:89:a6:1f:43:88:0a:52:47:76:f1:b4:43:25:
e5:80:3f:9d:ba:d5:87:39:0a:99:8a:8c:f4:bb:c9:
6b:15:b4:e9:1d:cd:98:0f:b5:5f:76:3e:9b:f4:90:
a5:b6:92:68:73:ac:aa:ae:2b:fe:9c:e6:16:0f:3c:
72:4e:4d:21:e4:17:7f:7b:8f:92:4f:24:c3:dc:35:
2f:99:16:20:ce:49:7b:5e:42:02:ed:c7:73:d4:a2:
2c:12:fe:09:41:2f:a5:d7:23:85:bb:c3:8e:d0:4f:
16:78:5f:6b:8c:b6:b8:d7:0e:05:ba:b1:75:de:aa:
96:c0:86:41:bb:51:70:30:8f:e9:33:15:dd:c7:56:
c1:36:d1:5b:65:7f:97:e0:5e:8b:1c:7d:85:96:56:
d6:b1:28:ff:84:7c:ad:45:3d:3b:af:6a:84:86:b3:
ea:cb:dc:ea:38:ad:37:fb:c2:c0:d1:99:cc:fa:73:
39:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:89:BF:AF:59:0A:02:9A:38:B3:DF:B4:50:B4:E8:15:C4:32:E9:8C
X509v3 Authority Key Identifier:
keyid:BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d2:62:ac:2d:c8:07:2f:0e:a7:2e:d3:ed:cc:a8:17:d5:8d:
90:4d:9c:bc:01:fb:3a:cf:b0:f4:0b:e2:b2:08:63:a8:3a:77:
2b:f8:18:46:3c:70:61:ec:19:a6:9d:da:2c:bc:d5:18:b2:a8:
79:22:d1:6e:22:e0:6b:a2:c0:99:13:15:63:ed:7b:1a:54:9a:
bb:65:b7:56:26:e8:ec:28:ff:3c:be:ce:ae:61:7c:ea:7c:da:
fb:42:bf:f6:8e:6a:16:55:f8:fb:3e:0b:6f:90:78:f8:89:8e:
d9:82:30:d7:0d:00:71:e2:d0:18:ec:9d:b0:b4:97:a8:5b:f5:
64:df:eb:04:0c:b1:69:90:9b:82:0e:23:c4:76:5f:7b:32:ad:
53:f9:87:92:6f:75:2b:ff:a2:34:be:cb:d5:6f:53:4e:28:46:
e1:ca:51:96:3d:8c:8c:34:6b:c9:0e:0e:c4:c7:60:40:07:00:
cc:2f:7c:f9:a3:c7:59:2d:5b:b5:c1:f8:af:a6:71:70:a9:39:
62:32:e7:96:23:2c:87:5d:3e:33:f5:3b:83:c9:a4:90:5c:d0:
7d:b9:52:59:f1:8f:7d:62:cf:16:df:6e:ca:d4:6a:a9:9b:a7:
10:62:ec:64:be:a1:4a:36:24:e6:5e:62:30:e0:ca:29:cb:fd:
8b:7d:78:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZY3ajsw7tJzRDH6feVmOmWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNTRiNmU1ZmNjYTMwOGIzNmRjOGYxNjc2MDZiMmQ2NTk4
MzljZjEwHhcNMjUwNDIxMTUwMDQzWhcNMjUwNDIyMTUwMDQzWjAzMTEwLwYDVQQD
EygzNTg5YmZhZjU5MGEwMjlhMzhiM2RmYjQ1MGI0ZTgxNWM0MzJlOThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOVHqgIBFvWpjkMFWOhqQaegGimz
E6JFm1WTUjTuxQA9WTHcI5Zv6ojwBVvFcYL8lwim5DqZAGDN2yHCdlpDvBGiamoa
mK8SFSIXfYmmH0OIClJHdvG0QyXlgD+dutWHOQqZioz0u8lrFbTpHc2YD7Vfdj6b
9JCltpJoc6yqriv+nOYWDzxyTk0h5Bd/e4+STyTD3DUvmRYgzkl7XkIC7cdz1KIs
Ev4JQS+l1yOFu8OO0E8WeF9rjLa41w4FurF13qqWwIZBu1FwMI/pMxXdx1bBNtFb
ZX+X4F6LHH2FllbWsSj/hHytRT07r2qEhrPqy9zqOK03+8LA0ZnM+nM5qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWJv69ZCgKaOLPftFC06BXEMumMMB8GA1UdIwQY
MBaAFLpUtuX8yjCLNtyPFnYGstZZg5zxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWxTMjVmektNSXMyM0k4V2RnYXkxbG1EblBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi83OGIxOTAtOGEwMi00Y2I4LWI0ODQt
NTI2ZjdjYzUyOWI3LzEvdWxTMjVmektNSXMyM0k4V2RnYXkxbG1EblBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi83OGIxOTAtOGEwMi00Y2I4LWI0ODQtNTI2ZjdjYzUyOWI3
LzEvdWxTMjVmektNSXMyM0k4V2RnYXkxbG1EblBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9JirC3I
By8Opy7T7cyoF9WNkE2cvAH7Os+w9AvisghjqDp3K/gYRjxwYewZpp3aLLzVGLKo
eSLRbiLga6LAmRMVY+17GlSau2W3Vibo7Cj/PL7OrmF86nza+0K/9o5qFlX4+z4L
b5B4+ImO2YIw1w0AceLQGOydsLSXqFv1ZN/rBAyxaZCbgg4jxHZfezKtU/mHkm91
K/+iNL7L1W9TTihG4cpRlj2MjDRryQ4OxMdgQAcAzC98+aPHWS1btcH4r6ZxcKk5
YjLnliMsh10+M/U7g8mkkFzQfblSWfGPfWLPFt9uytRqqZunEGLsZL6hSjYk5l5i
MODKKcv9i314pA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 21:15:21 2025 by rpki-client