Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
File: p0NjdfsDInVrVdr_ZOJl73LA2lI.mft (raw, json)
Hash identifier: OLGCNy+zy63UJI5/301iwRRX/lJt5WzzUA6IFzB0zj4=
Subject key identifier: 45:99:33:03:32:44:76:88:B4:FF:EA:8E:9C:B0:1F:8F:27:B8:FF:A1
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial: 019661E0D6B052A5F6657971BAC3AFFC864A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
Manifest number: 150D
Signing time: Wed 23 Apr 2025 09:00:46 +0000
Manifest this update: Wed 23 Apr 2025 09:00:46 +0000
Manifest next update: Thu 24 Apr 2025 09:00:46 +0000
Files and hashes: 1: 4x6rjkazNCLflUWUlsTwU4cxca8.roa (hash: ow7cUKut6886qX9EXf4fCgAMPFDIEd+yoCgqSPSsnlI=)
2: 7h9PVYRfpJWQVe6p_fUNqkMIVJM.roa (hash: 0F7e9cMMXcDHwo+/3DX5egozFHFiaYZUkpRfNYs9hic=)
3: p0NjdfsDInVrVdr_ZOJl73LA2lI.crl (hash: WFxhfT3T1g+zQpRkNDxhdIpXy5UcqjQmzGCoeXCKQKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:e0:d6:b0:52:a5:f6:65:79:71:ba:c3:af:fc:86:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
Validity
Not Before: Apr 23 09:00:46 2025 GMT
Not After : Apr 24 09:00:46 2025 GMT
Subject: CN=4599330332447688b4ffea8e9cb01f8f27b8ffa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d1:68:d7:a8:1d:ed:05:69:cb:b1:2c:67:70:
e8:a1:8b:06:2c:a0:d0:05:f5:fd:83:86:65:cd:47:
96:09:81:5f:10:10:f1:e2:b2:fb:41:f2:b3:f1:72:
bb:f3:7e:12:dd:87:ca:72:83:cb:73:31:92:3e:53:
05:d4:65:9b:0e:64:99:de:4f:2f:7e:54:e8:70:6a:
09:2a:ac:32:63:e7:0c:a2:3f:fc:31:6f:90:29:57:
ba:d7:e6:0d:30:1a:e0:59:3c:db:cf:5f:ca:36:ba:
cc:45:30:a2:2e:f5:a0:ca:03:9e:f4:cb:9c:4f:74:
38:55:5b:ae:37:55:99:e3:f0:ce:7f:b4:d1:20:f4:
cb:35:90:a9:6b:be:80:a2:40:4e:a4:34:c9:df:2b:
4e:66:81:39:1f:f4:06:f0:ff:a5:79:2a:7b:b3:a6:
ae:5a:79:8d:e4:25:55:16:b8:e2:71:da:e7:03:3e:
cc:3d:ec:09:eb:ae:27:20:cc:f5:b1:12:d0:13:0f:
1c:df:6a:1d:02:4e:5d:4a:36:e9:3c:70:f5:f8:33:
c8:8b:22:ef:2d:66:8b:46:44:25:14:9d:a6:e0:da:
be:22:b3:c9:1b:f6:40:f7:d8:47:ec:82:6f:84:1e:
78:43:b9:3d:f0:fd:f8:a0:57:c3:11:b5:78:00:41:
2b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:99:33:03:32:44:76:88:B4:FF:EA:8E:9C:B0:1F:8F:27:B8:FF:A1
X509v3 Authority Key Identifier:
keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:69:3f:c3:46:74:ea:8e:72:3b:81:1e:20:ac:04:9f:7e:cf:
51:3d:ef:c2:17:9c:81:f0:46:73:2b:30:e7:44:40:25:3e:41:
5f:1b:9d:d8:ec:42:43:fb:bf:2e:07:a1:49:7b:06:da:1a:b1:
ab:bc:54:2f:e4:48:c4:1d:7f:9f:d3:91:1c:e9:98:23:56:64:
ac:4d:b3:83:9f:a2:9f:64:b1:41:ad:84:86:b1:ed:62:76:76:
5a:ff:01:58:a3:cc:f8:3d:5a:f4:56:07:56:bf:d5:9b:ad:0e:
41:10:b5:30:9d:41:ef:ba:63:5d:51:9d:37:26:cb:b0:05:e6:
5d:3a:cd:7d:7c:5b:43:f6:3e:69:67:8b:c0:64:c4:ab:f6:20:
d4:14:75:b4:00:e3:6b:60:b7:61:78:33:a2:b8:8c:ff:76:77:
26:9c:61:aa:ae:b8:91:38:d8:77:e2:b1:71:91:61:43:a3:b9:
18:4b:f2:37:6a:45:f4:66:df:f4:63:60:21:82:b7:ab:0a:64:
0e:a2:66:74:c5:4f:f8:a2:8d:30:9b:d6:0b:0c:d0:ce:0c:15:
f4:de:d4:ce:e6:6e:a8:4b:5a:8a:18:8b:94:25:44:09:70:ac:
7b:2a:9b:f8:88:34:f2:20:76:46:bf:6e:b9:a6:cb:78:1e:7f:
9a:06:02:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZh4NawUqX2ZXlxusOv/IZKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NDM2Mzc1ZmIwMzIyNzU2YjU1ZGFmZjY0ZTI2NWVmNzJj
MGRhNTIwHhcNMjUwNDIzMDkwMDQ2WhcNMjUwNDI0MDkwMDQ2WjAzMTEwLwYDVQQD
Eyg0NTk5MzMwMzMyNDQ3Njg4YjRmZmVhOGU5Y2IwMWY4ZjI3YjhmZmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dFo16gd7QVpy7EsZ3DooYsGLKDQ
BfX9g4ZlzUeWCYFfEBDx4rL7QfKz8XK7834S3YfKcoPLczGSPlMF1GWbDmSZ3k8v
flTocGoJKqwyY+cMoj/8MW+QKVe61+YNMBrgWTzbz1/KNrrMRTCiLvWgygOe9Muc
T3Q4VVuuN1WZ4/DOf7TRIPTLNZCpa76AokBOpDTJ3ytOZoE5H/QG8P+leSp7s6au
WnmN5CVVFrjicdrnAz7MPewJ664nIMz1sRLQEw8c32odAk5dSjbpPHD1+DPIiyLv
LWaLRkQlFJ2m4Nq+IrPJG/ZA99hH7IJvhB54Q7k98P34oFfDEbV4AEEreQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWZMwMyRHaItP/qjpywH48nuP+hMB8GA1UdIwQY
MBaAFKdDY3X7AyJ1a1Xa/2TiZe9ywNpSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDBOamRmc0RJblZyVmRyX1pPSmw3M0xBMmxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lNWUzZmEtOTllZS00NWNmLWJkOWEt
MGU2YzFmZTlkMDE1LzEvcDBOamRmc0RJblZyVmRyX1pPSmw3M0xBMmxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9lNWUzZmEtOTllZS00NWNmLWJkOWEtMGU2YzFmZTlkMDE1
LzEvcDBOamRmc0RJblZyVmRyX1pPSmw3M0xBMmxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2k/w0Z0
6o5yO4EeIKwEn37PUT3vwhecgfBGcysw50RAJT5BXxud2OxCQ/u/LgehSXsG2hqx
q7xUL+RIxB1/n9ORHOmYI1ZkrE2zg5+in2SxQa2EhrHtYnZ2Wv8BWKPM+D1a9FYH
Vr/Vm60OQRC1MJ1B77pjXVGdNybLsAXmXTrNfXxbQ/Y+aWeLwGTEq/Yg1BR1tADj
a2C3YXgzoriM/3Z3Jpxhqq64kTjYd+KxcZFhQ6O5GEvyN2pF9Gbf9GNgIYK3qwpk
DqJmdMVP+KKNMJvWCwzQzgwV9N7UzuZuqEtaihiLlCVECXCseyqb+Ig08iB2Rr9u
uabLeB5/mgYC5Q==
-----END CERTIFICATE-----
Generated at Wed Apr 23 16:02:13 2025 by rpki-client