Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
File: pvh89KFbnngiRVs6qK8LXtOimfc.mft (raw, json)
Hash identifier: vGCyl7MEyGSp5iCxKzVESwLRIy8PWJYMTdjUZ8WECVU=
Subject key identifier: CF:81:50:CB:6F:8B:C4:9C:D5:35:8B:BF:4E:7F:89:E4:E7:24:36:DF
Authority key identifier: A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7
Certificate issuer: /CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
Certificate serial: 0196545C80263B88FC9998D3F488D4D92228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
Manifest number: 1504
Signing time: Sun 20 Apr 2025 18:01:10 +0000
Manifest this update: Sun 20 Apr 2025 18:01:10 +0000
Manifest next update: Mon 21 Apr 2025 18:01:10 +0000
Files and hashes: 1: A0AYtzxUnj18_WVT-ZtPo3VQOok.roa (hash: Ky9GG0Y6/3CRG+EZa6gdZtX+mEutz5bg1CsKFSgBHBU=)
2: YoFLZelk0KvVc2c4StbzyHcrvm0.roa (hash: 1/qU4jnzCv1Ym4GrpqvgYqQAdtCVCWo1utnZCleM9zs=)
3: pvh89KFbnngiRVs6qK8LXtOimfc.crl (hash: Lpiwi2UHDF34iZo7bKiKLELmHWt7AhibmtpouFjLuOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:80:26:3b:88:fc:99:98:d3:f4:88:d4:d9:22:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
Validity
Not Before: Apr 20 18:01:10 2025 GMT
Not After : Apr 21 18:01:10 2025 GMT
Subject: CN=cf8150cb6f8bc49cd5358bbf4e7f89e4e72436df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:66:fe:07:70:ce:20:01:bb:27:44:44:fe:
fd:86:db:87:1c:79:51:21:6d:41:ad:57:19:13:17:
b5:b9:60:ee:2f:48:4c:2f:8f:b0:78:fd:8c:5c:32:
28:1b:27:5a:fd:11:13:a3:38:df:88:82:38:ff:ff:
1c:ed:74:db:77:c0:a1:24:c8:35:a2:a9:99:9b:df:
cc:52:73:04:33:c6:17:bc:27:93:7d:84:f6:a7:a1:
9a:bc:77:02:cb:2f:17:fa:f4:9d:0e:59:19:9d:1c:
d1:48:ad:b0:56:a6:75:01:7e:a1:18:84:be:a9:0a:
93:63:a0:48:ec:44:e1:f8:7f:0f:09:85:bf:ed:d2:
59:1b:c7:37:e8:9d:11:c1:67:52:c9:7d:85:b6:a2:
06:65:bc:b1:cf:f5:f8:9b:be:b3:9b:76:03:89:65:
a5:31:1d:86:fc:eb:c4:36:a9:b3:ce:fc:8b:21:8d:
9f:cc:09:6d:bc:71:82:39:45:8b:f6:77:4d:77:0f:
c9:80:89:c6:74:8e:d8:21:81:b7:d3:84:8b:3d:e3:
28:ea:3a:24:d0:a1:b1:26:54:54:19:b0:1b:15:68:
46:04:e9:88:9e:6f:b7:51:1d:c0:98:6a:85:6b:4f:
6c:db:3c:72:6b:46:a4:3d:ad:4c:86:21:f8:50:35:
58:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:81:50:CB:6F:8B:C4:9C:D5:35:8B:BF:4E:7F:89:E4:E7:24:36:DF
X509v3 Authority Key Identifier:
keyid:A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6c:d9:f1:23:12:ae:ee:bc:d1:78:3c:ac:d4:6e:70:a1:90:
00:02:83:41:d1:7f:a9:39:aa:a8:8b:ad:d2:70:38:a7:f0:a2:
ee:d3:00:3e:8d:6d:f7:18:67:dd:f8:e8:78:48:fe:6b:89:7d:
32:5f:b0:2a:e8:0d:a9:95:4a:67:c1:ec:93:25:92:b8:2b:8c:
0a:d9:10:c2:7a:01:98:23:ff:2f:7e:0d:de:0d:43:9b:1c:be:
05:26:e5:2b:09:22:94:ce:96:cf:fe:4e:de:99:8f:0e:ce:4c:
0f:c7:60:aa:9e:e4:29:93:4b:f1:72:28:d8:3b:e8:5f:7d:c9:
42:95:2c:a6:8e:71:3a:77:c3:b9:19:3c:2a:c6:00:01:ef:f1:
7f:b3:6f:40:36:32:5a:40:9f:3f:4c:8f:8a:2a:a7:29:dc:8c:
b1:d6:df:9e:c1:e8:8b:eb:bc:d0:01:33:5d:f5:f4:8e:18:1f:
ee:46:a7:fd:f8:81:7e:40:a7:47:cc:78:37:7f:96:42:c3:15:
88:cb:5a:b0:ee:b5:f6:b2:0b:12:36:1f:30:75:7e:72:06:c9:
e3:be:b5:5a:f5:b9:5a:7d:83:8c:80:16:e7:24:bf:69:09:a0:
a9:49:16:38:84:8b:54:d0:2f:27:dd:9f:8e:9f:78:8b:2a:04:
88:92:ae:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUXIAmO4j8mZjT9IjU2SIoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2Zjg3Y2Y0YTE1YjllNzgyMjQ1NWIzYWE4YWYwYjVlZDNh
Mjk5ZjcwHhcNMjUwNDIwMTgwMTEwWhcNMjUwNDIxMTgwMTEwWjAzMTEwLwYDVQQD
EyhjZjgxNTBjYjZmOGJjNDljZDUzNThiYmY0ZTdmODllNGU3MjQzNmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8Jm/gdwziABuydERP79htuHHHlR
IW1BrVcZExe1uWDuL0hML4+weP2MXDIoGyda/RETozjfiII4//8c7XTbd8ChJMg1
oqmZm9/MUnMEM8YXvCeTfYT2p6GavHcCyy8X+vSdDlkZnRzRSK2wVqZ1AX6hGIS+
qQqTY6BI7ETh+H8PCYW/7dJZG8c36J0RwWdSyX2FtqIGZbyxz/X4m76zm3YDiWWl
MR2G/OvENqmzzvyLIY2fzAltvHGCOUWL9ndNdw/JgInGdI7YIYG304SLPeMo6jok
0KGxJlRUGbAbFWhGBOmInm+3UR3AmGqFa09s2zxya0akPa1MhiH4UDVYjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+BUMtvi8Sc1TWLv05/ieTnJDbfMB8GA1UdIwQY
MBaAFKb4fPShW554IkVbOqivC17Topn3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHZoODlLRmJubmdpUlZzNnFLOExYdE9pbWZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yODliMWQtMDhkZC00ZDUzLWIxMmQt
N2Q0MDI4YTFiZjU5LzEvcHZoODlLRmJubmdpUlZzNnFLOExYdE9pbWZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8yODliMWQtMDhkZC00ZDUzLWIxMmQtN2Q0MDI4YTFiZjU5
LzEvcHZoODlLRmJubmdpUlZzNnFLOExYdE9pbWZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWzZ8SMS
ru680Xg8rNRucKGQAAKDQdF/qTmqqIut0nA4p/Ci7tMAPo1t9xhn3fjoeEj+a4l9
Ml+wKugNqZVKZ8HskyWSuCuMCtkQwnoBmCP/L34N3g1Dmxy+BSblKwkilM6Wz/5O
3pmPDs5MD8dgqp7kKZNL8XIo2DvoX33JQpUspo5xOnfDuRk8KsYAAe/xf7NvQDYy
WkCfP0yPiiqnKdyMsdbfnsHoi+u80AEzXfX0jhgf7kan/fiBfkCnR8x4N3+WQsMV
iMtasO619rILEjYfMHV+cgbJ4761WvW5Wn2DjIAW5yS/aQmgqUkWOISLVNAvJ92f
jp94iyoEiJKubw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:11:08 2025 by rpki-client