Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
File: Rq9sozU0uFMLnyFOyOqT3SW9H88.mft (raw, json)
Hash identifier: xtLeT+TFekFmHVMhSTltOwLRtW6Mh8kZIgYD6uV3LwE=
Subject key identifier: 28:8A:1F:D5:3B:CD:B2:F9:4B:90:1A:5D:11:57:27:46:15:9D:AD:93
Authority key identifier: 46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
Certificate issuer: /CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Certificate serial: 019644E8CA376892D20DD354D5A97B7DA347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
Manifest number: 0AA0
Signing time: Thu 17 Apr 2025 18:00:28 +0000
Manifest this update: Thu 17 Apr 2025 18:00:28 +0000
Manifest next update: Fri 18 Apr 2025 18:00:28 +0000
Files and hashes: 1: 1-DjrG4WtOf5mfvjc_0ex1qmM7_0.roa (hash: hnXFvQKmTthNRY+MRdmK+ICiF4IvzT+rwNQnD35oyyk=)
2: Rq9sozU0uFMLnyFOyOqT3SW9H88.crl (hash: 7ZqNGftnQ2ssekzcWunXB3YVsf38On8+4+rZXZMP+Gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e8:ca:37:68:92:d2:0d:d3:54:d5:a9:7b:7d:a3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Validity
Not Before: Apr 17 18:00:28 2025 GMT
Not After : Apr 18 18:00:28 2025 GMT
Subject: CN=288a1fd53bcdb2f94b901a5d11572746159dad93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:21:65:56:ea:24:e7:e6:60:0a:7b:f0:d7:51:
78:90:01:76:86:9e:e7:d2:5d:3b:29:2f:dc:22:43:
27:a2:1f:e8:55:27:05:80:59:cb:25:25:02:10:50:
73:de:18:5e:ce:31:c6:ed:b7:13:a7:c7:77:8f:5e:
db:43:84:cb:ca:df:04:b0:3f:8e:a8:0c:bb:d4:b2:
53:de:e5:de:33:a0:fd:47:a3:c9:f8:56:ed:b8:09:
9d:55:cb:91:4f:9e:a8:ff:bc:e2:b7:d7:ee:8b:ef:
b1:2f:5c:b3:5d:83:61:df:8c:eb:2e:5d:2b:96:84:
ad:31:1c:a3:80:61:9d:99:db:15:32:07:b4:a3:70:
a0:4c:7e:e1:76:3e:35:79:86:55:a9:3a:88:cd:ce:
e2:d5:20:ea:75:a3:38:7f:32:23:73:dd:63:11:b3:
64:23:3b:6a:88:4e:a4:76:26:12:f5:06:9c:49:b8:
c4:63:e2:28:7d:60:14:5c:71:6b:79:87:0d:35:43:
98:12:b1:1a:d5:0f:8b:d0:47:0c:b3:91:6f:ab:ce:
ac:d1:1a:7e:55:e2:f3:1c:77:ea:73:34:97:8a:d4:
e0:1b:8c:b1:01:69:8c:32:f1:84:ce:f6:82:68:44:
b0:ff:f2:fc:74:cb:b5:df:14:98:bd:f9:1d:d4:1f:
cf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8A:1F:D5:3B:CD:B2:F9:4B:90:1A:5D:11:57:27:46:15:9D:AD:93
X509v3 Authority Key Identifier:
keyid:46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d9:de:51:2f:cc:8d:fb:f4:8b:65:67:65:8d:fa:13:99:4f:
6f:b7:60:0d:51:e6:3f:ff:dd:2b:1b:b7:78:99:70:b6:ac:b0:
0b:e1:ac:9f:26:40:26:e2:2f:3f:90:a1:e8:5a:f5:32:53:55:
94:15:57:82:57:95:45:b8:b8:94:a1:d8:0e:16:31:43:40:24:
20:1b:7c:c4:d7:dd:16:b5:ad:21:56:d8:2e:4c:4c:50:37:7f:
44:4f:58:bc:90:e1:61:78:37:7f:5a:0a:a4:4c:e2:36:7b:87:
89:c4:f2:71:cc:92:86:e6:ff:b0:1c:5d:11:9f:2f:d8:72:26:
22:09:ae:f1:cc:da:ce:62:58:3d:73:f4:46:46:86:c0:5a:a2:
6c:cf:71:6b:79:e7:5e:9c:b0:c4:ef:26:54:bb:f1:0b:1a:d1:
0b:92:00:52:49:6d:ea:6e:6c:e7:eb:73:af:18:3a:63:4a:f2:
d7:3c:36:19:c7:60:36:07:60:cd:f5:1d:80:47:b4:ec:f6:44:
3d:c1:3e:c5:04:6b:7d:80:5c:f1:bf:c4:93:d7:ce:70:cb:1e:
ec:66:e8:33:86:47:ec:78:b7:4d:4b:f7:b5:bd:a2:a6:2d:6c:
68:27:0f:b4:5d:f4:da:18:80:4f:79:86:1b:ab:5f:8d:81:20:
19:18:c7:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZE6Mo3aJLSDdNU1al7faNHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YWY2Y2EzMzUzNGI4NTMwYjlmMjE0ZWM4ZWE5M2RkMjVi
ZDFmY2YwHhcNMjUwNDE3MTgwMDI4WhcNMjUwNDE4MTgwMDI4WjAzMTEwLwYDVQQD
EygyODhhMWZkNTNiY2RiMmY5NGI5MDFhNWQxMTU3Mjc0NjE1OWRhZDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniFlVuok5+ZgCnvw11F4kAF2hp7n
0l07KS/cIkMnoh/oVScFgFnLJSUCEFBz3hhezjHG7bcTp8d3j17bQ4TLyt8EsD+O
qAy71LJT3uXeM6D9R6PJ+FbtuAmdVcuRT56o/7zit9fui++xL1yzXYNh34zrLl0r
loStMRyjgGGdmdsVMge0o3CgTH7hdj41eYZVqTqIzc7i1SDqdaM4fzIjc91jEbNk
IztqiE6kdiYS9QacSbjEY+IofWAUXHFreYcNNUOYErEa1Q+L0EcMs5Fvq86s0Rp+
VeLzHHfqczSXitTgG4yxAWmMMvGEzvaCaESw//L8dMu13xSYvfkd1B/PlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiKH9U7zbL5S5AaXRFXJ0YVna2TMB8GA1UdIwQY
MBaAFEavbKM1NLhTC58hTsjqk90lvR/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnE5c296VTB1Rk1MbnlGT3lPcVQzU1c5SDg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84ZTgwYWYtMmQ2NC00Nzg0LTgxMTUt
YzVjZWZkOThmNjIxLzEvUnE5c296VTB1Rk1MbnlGT3lPcVQzU1c5SDg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS84ZTgwYWYtMmQ2NC00Nzg0LTgxMTUtYzVjZWZkOThmNjIx
LzEvUnE5c296VTB1Rk1MbnlGT3lPcVQzU1c5SDg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINneUS/M
jfv0i2VnZY36E5lPb7dgDVHmP//dKxu3eJlwtqywC+GsnyZAJuIvP5Ch6Fr1MlNV
lBVXgleVRbi4lKHYDhYxQ0AkIBt8xNfdFrWtIVbYLkxMUDd/RE9YvJDhYXg3f1oK
pEziNnuHicTyccyShub/sBxdEZ8v2HImIgmu8czazmJYPXP0RkaGwFqibM9xa3nn
XpywxO8mVLvxCxrRC5IAUklt6m5s5+tzrxg6Y0ry1zw2GcdgNgdgzfUdgEe07PZE
PcE+xQRrfYBc8b/Ek9fOcMse7GboM4ZH7Hi3TUv3tb2ipi1saCcPtF302hiAT3mG
G6tfjYEgGRjHwg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 02:00:33 2025 by rpki-client