Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
File: RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft (raw, json)
Hash identifier: 7Ll4tRooFjW+hpocUu54KCsVTBq0NybwCY6WOhiCl0M=
Subject key identifier: 38:DB:5E:B7:FF:B0:0D:AE:D2:29:A6:C7:09:8A:E2:4F:4D:98:CA:5C
Authority key identifier: 44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
Certificate issuer: /CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Certificate serial: 01965C8389444828AC7FA8AC7C6DCD7F3F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
Manifest number: 1211
Signing time: Tue 22 Apr 2025 08:00:46 +0000
Manifest this update: Tue 22 Apr 2025 08:00:46 +0000
Manifest next update: Wed 23 Apr 2025 08:00:46 +0000
Files and hashes: 1: 7IOpXXsSdgZOXKMUMqGRoYqSO7Y.roa (hash: eWhYbG4w7zhq0NpzbdSAGZQzXbPmck0Kggk9IJsP8fM=)
2: 8McigDSjzbaDusYUdfACWlAEraE.roa (hash: 8SiJAwZ4dMuVXUj8DbNfpd2t9t4+7zlehuNbJBAbbw4=)
3: RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl (hash: jQ3AMPinyWTznjAVkK1q8fgiAJHDFgmMfFkAWBRixOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:83:89:44:48:28:ac:7f:a8:ac:7c:6d:cd:7f:3f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Validity
Not Before: Apr 22 08:00:46 2025 GMT
Not After : Apr 23 08:00:46 2025 GMT
Subject: CN=38db5eb7ffb00daed229a6c7098ae24f4d98ca5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:54:f2:69:32:dc:99:34:37:22:94:66:b2:f7:
91:43:77:d0:8c:58:d3:eb:f2:f7:f4:13:2a:61:9a:
11:cd:94:5e:13:c4:ca:39:24:7c:67:a1:61:b2:cd:
94:0b:6e:50:7a:d2:99:eb:20:50:bf:f1:2b:7b:a7:
ae:dd:63:53:19:0b:27:ba:a9:7c:57:8a:42:14:17:
c4:31:b3:02:1c:6d:b7:97:43:41:26:64:05:f2:9f:
89:98:b4:2c:74:fe:dd:0f:46:ea:fb:cf:6a:44:77:
90:b4:c3:e7:a3:a0:cb:4d:d8:52:95:0e:2e:61:af:
75:e6:ea:71:6a:67:83:84:00:f4:9c:cc:07:7a:fe:
04:3b:38:d0:93:99:92:c1:98:fe:eb:33:2b:e1:0a:
9e:2b:95:cd:ce:64:6d:fa:f3:f4:5c:a6:eb:26:ed:
21:1f:73:c3:3e:c7:41:56:00:ef:aa:e3:4b:36:13:
ef:5e:e2:19:e3:71:c5:d2:ee:6c:29:c2:14:6f:53:
ef:bb:be:bd:d6:78:b2:76:ce:21:cd:68:66:68:6c:
99:d1:a5:de:f8:00:19:50:c5:cc:11:a7:dd:49:cb:
dd:79:2b:e1:e7:73:a4:b9:4d:0e:8a:87:fd:74:2b:
6c:19:d6:a7:14:ac:64:48:6f:5e:48:ad:b5:20:b2:
f0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DB:5E:B7:FF:B0:0D:AE:D2:29:A6:C7:09:8A:E2:4F:4D:98:CA:5C
X509v3 Authority Key Identifier:
keyid:44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2e:99:34:a2:46:e7:0d:7d:7e:25:d3:cd:c0:5d:db:c9:fa:
80:a7:9d:41:d1:ef:a8:75:d9:4b:4a:d1:c5:cf:4b:0f:bf:8a:
17:26:c3:03:c5:91:02:db:65:95:8a:a2:d9:cb:cb:1d:36:ad:
60:ee:ed:f7:af:00:7f:c0:51:25:a9:a8:b4:f8:ea:8f:ea:a0:
6a:97:50:15:c6:3f:df:82:28:30:54:c2:3e:a7:25:bd:d7:32:
9c:1a:36:9a:70:5f:a8:ab:0e:07:a6:2e:a6:7f:6e:ed:fb:5a:
a2:ed:09:6d:47:43:4a:63:9b:72:ad:2b:38:3b:e0:1a:a7:34:
c8:da:5c:33:17:39:2b:51:3e:c4:f9:00:3b:d2:ce:c7:17:69:
a5:17:6d:77:92:13:b0:27:1d:d4:53:ad:db:aa:73:c7:e3:62:
00:ef:cb:22:9f:ed:3f:bf:c3:aa:2d:20:41:97:d7:6f:cd:8e:
14:10:7e:a5:31:e3:e6:bf:61:41:52:c5:ce:83:69:54:b5:88:
6e:a4:02:29:ba:95:fb:50:6e:85:d9:f0:be:95:15:66:44:77:
3b:42:f3:51:ac:27:f5:7a:db:6f:9e:2c:5d:bf:d3:31:6d:19:
06:c2:21:2e:67:47:6d:84:47:43:07:85:74:6e:cd:25:97:8f:
8e:c8:05:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZcg4lESCisf6isfG3Nfz9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0Zjg4NTIyMGYxNzE5ZjU4MzdjYjVhMzZmYTYyZjNmNTM3
ZThlM2YwHhcNMjUwNDIyMDgwMDQ2WhcNMjUwNDIzMDgwMDQ2WjAzMTEwLwYDVQQD
EygzOGRiNWViN2ZmYjAwZGFlZDIyOWE2YzcwOThhZTI0ZjRkOThjYTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFTyaTLcmTQ3IpRmsveRQ3fQjFjT
6/L39BMqYZoRzZReE8TKOSR8Z6Fhss2UC25QetKZ6yBQv/Ere6eu3WNTGQsnuql8
V4pCFBfEMbMCHG23l0NBJmQF8p+JmLQsdP7dD0bq+89qRHeQtMPno6DLTdhSlQ4u
Ya915upxameDhAD0nMwHev4EOzjQk5mSwZj+6zMr4QqeK5XNzmRt+vP0XKbrJu0h
H3PDPsdBVgDvquNLNhPvXuIZ43HF0u5sKcIUb1Pvu7691niyds4hzWhmaGyZ0aXe
+AAZUMXMEafdScvdeSvh53OkuU0Oiof9dCtsGdanFKxkSG9eSK21ILLwHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjbXrf/sA2u0immxwmK4k9NmMpcMB8GA1UdIwQY
MBaAFET4hSIPFxn1g3y1o2+mLz9Tfo4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlBpRklnOFhHZldEZkxXamI2WXZQMU4tamo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iYWIxOTQtNWUyNC00ZWFkLThmNDkt
MzdlZDk5MTQzYWFlLzEvUlBpRklnOFhHZldEZkxXamI2WXZQMU4tamo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9iYWIxOTQtNWUyNC00ZWFkLThmNDktMzdlZDk5MTQzYWFl
LzEvUlBpRklnOFhHZldEZkxXamI2WXZQMU4tamo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHy6ZNKJG
5w19fiXTzcBd28n6gKedQdHvqHXZS0rRxc9LD7+KFybDA8WRAttllYqi2cvLHTat
YO7t968Af8BRJamotPjqj+qgapdQFcY/34IoMFTCPqclvdcynBo2mnBfqKsOB6Yu
pn9u7ftaou0JbUdDSmObcq0rODvgGqc0yNpcMxc5K1E+xPkAO9LOxxdppRdtd5IT
sCcd1FOt26pzx+NiAO/LIp/tP7/Dqi0gQZfXb82OFBB+pTHj5r9hQVLFzoNpVLWI
bqQCKbqV+1BuhdnwvpUVZkR3O0LzUawn9Xrbb54sXb/TMW0ZBsIhLmdHbYRHQweF
dG7NJZePjsgFGQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 16:39:05 2025 by rpki-client