Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
File: mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft (raw, json)
Hash identifier: AoLmSEnptzFpfJiN/7ceDZKZc2w2Un4NNxOM8zyUD5A=
Subject key identifier: F8:94:D2:B3:A3:87:DB:1E:A5:EC:62:0A:A4:D1:B5:DD:E2:7B:6A:78
Authority key identifier: 9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
Certificate issuer: /CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Certificate serial: 0196482144AD9A75A01702709BF2610437A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
Manifest number: 1239
Signing time: Fri 18 Apr 2025 09:01:01 +0000
Manifest this update: Fri 18 Apr 2025 09:01:01 +0000
Manifest next update: Sat 19 Apr 2025 09:01:01 +0000
Files and hashes: 1: 34VAKZ3gTB0K6y5Jn98OpVnf6K0.roa (hash: 0+PPWp0o1/rwBJiAmqaqRlxFY24T5j6RDdie2DfGC7Q=)
2: CqJnQHuWTrr1JOb1x2qlCn7qYBQ.roa (hash: raq5ehc6BfIUJsoK2h14SXHgtvt48xPVADOcv/2fuZ8=)
3: mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl (hash: IAg1DW9OwDGrKhIZqrzUF0zZi2mG8TAmMuVirmVfB2U=)
4: n5tnQjmPsSAa7e0U_BISzqIEQuY.roa (hash: MzEMfBEyS0reuH82ojDXQdP0KgBQQ3sK4Mxn6oyxx3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:21:44:ad:9a:75:a0:17:02:70:9b:f2:61:04:37:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Validity
Not Before: Apr 18 09:01:01 2025 GMT
Not After : Apr 19 09:01:01 2025 GMT
Subject: CN=f894d2b3a387db1ea5ec620aa4d1b5dde27b6a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:01:25:87:30:b3:70:61:93:1f:00:0e:44:
87:6b:50:5e:ed:1a:97:df:8e:81:df:28:d6:78:dd:
bb:02:23:76:73:5e:6d:0d:3e:01:b4:c8:88:12:c2:
fe:de:ec:b4:bb:54:68:74:6f:ef:3f:3e:8c:4f:9e:
65:0e:b6:2e:b4:02:39:72:e3:69:5d:45:a9:b1:59:
a6:bb:d7:8e:f6:8a:72:eb:87:60:fe:1b:46:ff:da:
d2:c1:cf:d6:d3:63:a1:bf:fc:61:2d:73:2a:55:2d:
3f:35:7c:9f:23:ec:83:c8:e1:0a:d0:ed:66:13:97:
45:9e:a1:ca:77:b2:7a:76:1d:23:da:a6:f4:61:81:
da:77:94:7b:cb:a4:2c:5f:64:7b:dc:86:86:74:b5:
cc:e3:55:c7:37:c2:83:de:cc:a0:38:c5:ce:17:77:
47:0e:3f:21:95:90:8a:59:1e:af:28:4d:64:87:38:
62:8d:d2:ec:3d:7f:f5:a1:ab:2b:24:1d:d3:79:57:
92:6d:05:ea:19:65:44:e9:1c:73:7e:59:8d:be:4c:
d4:45:c6:78:e8:e7:c5:8f:de:60:3b:f2:e0:d1:49:
d5:02:02:07:35:d1:18:f5:fa:d9:90:25:9c:9e:5c:
26:39:68:68:85:a1:81:aa:78:15:72:6a:2a:f6:db:
da:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:94:D2:B3:A3:87:DB:1E:A5:EC:62:0A:A4:D1:B5:DD:E2:7B:6A:78
X509v3 Authority Key Identifier:
keyid:9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:41:5c:0a:6d:ac:bd:24:f7:3e:df:86:24:a0:8e:f5:07:0b:
cf:18:cb:96:9f:bf:5f:85:95:9b:c3:df:51:1f:21:13:0e:36:
67:40:fe:9f:81:d5:0c:e3:78:30:44:b1:29:ff:24:9d:3a:a2:
6b:f3:87:a3:13:65:68:1c:b5:75:c0:e4:98:57:c9:08:02:8a:
a1:e5:52:20:50:c4:1b:8d:00:99:9b:81:6c:fb:85:a5:b1:fd:
42:29:4c:81:73:cb:0b:ce:60:64:0d:40:ea:ee:9e:5e:ca:a2:
39:ce:2f:8e:9d:64:fe:ff:e9:c1:3a:1f:d4:ab:02:9f:ae:46:
77:de:36:22:26:41:60:3e:3a:03:87:d6:8a:4f:61:4f:57:3e:
12:37:7d:52:9b:49:00:5f:8d:d9:00:07:59:f9:a6:df:6f:93:
5b:84:f6:84:85:56:04:64:00:95:a3:53:97:0c:fd:28:49:4a:
e2:34:cd:73:c7:56:65:a3:91:4e:57:ef:63:2d:b6:80:94:5c:
39:7a:c4:d1:04:20:d1:ab:48:33:28:11:6c:67:6e:84:97:00:
94:ae:6c:69:2b:45:d5:a6:4a:0b:81:0d:42:ae:29:e9:17:37:
bb:66:76:f5:da:2d:b2:53:88:36:0a:4c:c2:b8:62:8e:bf:21:
86:39:73:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZIIUStmnWgFwJwm/JhBDehMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhN2VkZWFjMGM2YzIwZWE0OWQ0OTI5OTBlNDg1ODU0MWQx
OTBmZjEwHhcNMjUwNDE4MDkwMTAxWhcNMjUwNDE5MDkwMTAxWjAzMTEwLwYDVQQD
EyhmODk0ZDJiM2EzODdkYjFlYTVlYzYyMGFhNGQxYjVkZGUyN2I2YTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNQBJYcws3Bhkx8ADkSHa1Be7RqX
346B3yjWeN27AiN2c15tDT4BtMiIEsL+3uy0u1RodG/vPz6MT55lDrYutAI5cuNp
XUWpsVmmu9eO9opy64dg/htG/9rSwc/W02Ohv/xhLXMqVS0/NXyfI+yDyOEK0O1m
E5dFnqHKd7J6dh0j2qb0YYHad5R7y6QsX2R73IaGdLXM41XHN8KD3sygOMXOF3dH
Dj8hlZCKWR6vKE1khzhijdLsPX/1oasrJB3TeVeSbQXqGWVE6RxzflmNvkzURcZ4
6OfFj95gO/Lg0UnVAgIHNdEY9frZkCWcnlwmOWhohaGBqngVcmoq9tva5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiU0rOjh9sepexiCqTRtd3ie2p4MB8GA1UdIwQY
MBaAFJp+3qwMbCDqSdSSmQ5IWFQdGQ/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW43ZXJBeHNJT3BKMUpLWkRraFlWQjBaRF9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81YThlMDQtZGQwNy00MzVhLWIxYmYt
YWRlZGNhYTNkMjZlLzEvbW43ZXJBeHNJT3BKMUpLWkRraFlWQjBaRF9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My81YThlMDQtZGQwNy00MzVhLWIxYmYtYWRlZGNhYTNkMjZl
LzEvbW43ZXJBeHNJT3BKMUpLWkRraFlWQjBaRF9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0FcCm2s
vST3Pt+GJKCO9QcLzxjLlp+/X4WVm8PfUR8hEw42Z0D+n4HVDON4MESxKf8knTqi
a/OHoxNlaBy1dcDkmFfJCAKKoeVSIFDEG40AmZuBbPuFpbH9QilMgXPLC85gZA1A
6u6eXsqiOc4vjp1k/v/pwTof1KsCn65Gd942IiZBYD46A4fWik9hT1c+Ejd9UptJ
AF+N2QAHWfmm32+TW4T2hIVWBGQAlaNTlwz9KElK4jTNc8dWZaORTlfvYy22gJRc
OXrE0QQg0atIMygRbGduhJcAlK5saStF1aZKC4ENQq4p6Rc3u2Z29dotslOINgpM
wrhijr8hhjlzvw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 14:56:10 2025 by rpki-client