Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
File: cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft (raw, json)
Hash identifier: HR77iDDGgofzoPbz8bta4paawPCNKmYnWWIx7EM0jDI=
Subject key identifier: 81:E9:A9:27:77:7B:26:12:08:CE:65:55:09:8B:B7:AE:AF:8A:9B:72
Authority key identifier: 70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
Certificate issuer: /CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Certificate serial: 0195903D4ED7C9AA453F977A45B7F3F4C9AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
Manifest number: 1499
Signing time: Thu 13 Mar 2025 16:01:31 +0000
Manifest this update: Thu 13 Mar 2025 16:01:31 +0000
Manifest next update: Fri 14 Mar 2025 16:01:31 +0000
Files and hashes: 1: cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl (hash: gIGcWgDdpAN0Zks5as7lrN1zMBXOxNJ0dONzzteWzSc=)
2: iXldcpMNtu5kim9vQXhjht5Ha_0.roa (hash: OZZlPHrzKaaexsTtY7l0u4aOhC15J2UaGXg/fHHU/6k=)
3: o3Ruly6xo3HjQfyltbyyXFgE2AY.roa (hash: 83gTacIwQrempq02V5LTV8DoLs2npW478Kw0EoVa9VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:4e:d7:c9:aa:45:3f:97:7a:45:b7:f3:f4:c9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Validity
Not Before: Mar 13 16:01:31 2025 GMT
Not After : Mar 14 16:01:31 2025 GMT
Subject: CN=81e9a927777b261208ce6555098bb7aeaf8a9b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ff:03:42:1d:97:20:06:38:6e:ad:61:51:04:
ab:2a:51:ee:a7:17:35:a2:e1:3c:25:e5:0b:11:90:
14:56:70:a0:a0:c9:c7:5d:de:fc:ca:a2:9f:7e:02:
a4:71:8c:f2:6f:65:fb:45:b5:c4:bd:f3:c5:ca:0e:
e2:38:df:82:01:20:0d:dd:f3:39:4f:d9:6c:12:35:
a8:e3:9a:15:ed:e8:4b:49:76:54:4a:c4:cd:9f:45:
31:40:2e:5c:ed:3a:98:7d:fc:ad:e6:7b:8b:ab:8c:
35:8a:0e:1a:ea:4d:be:df:e1:32:20:f7:35:e2:1c:
6d:f6:0d:7d:a4:7e:64:39:8b:bd:c3:70:e8:79:b7:
06:0e:56:e0:58:30:45:1f:86:f8:7a:34:4e:7f:34:
67:88:0c:2a:c9:b8:56:ba:bb:58:8d:d5:02:06:ac:
f5:da:1f:2a:08:b1:2c:aa:4c:66:b0:d9:65:93:c4:
2f:20:b0:c2:a4:3f:88:e3:c7:67:58:93:5e:df:31:
55:a4:81:cc:98:77:c0:36:d1:30:ea:c2:75:05:fb:
83:77:04:83:6d:e4:0f:9d:49:50:30:c1:73:51:e1:
c3:08:57:3f:6a:a2:cb:5b:17:44:f3:dd:e9:a9:1b:
5c:ad:7c:31:b4:5c:8b:db:fd:a7:56:2f:24:1b:8e:
6a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E9:A9:27:77:7B:26:12:08:CE:65:55:09:8B:B7:AE:AF:8A:9B:72
X509v3 Authority Key Identifier:
keyid:70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:41:93:dc:26:3e:f3:f7:e6:f3:15:88:14:2e:25:c6:ad:b2:
0f:59:49:2a:0a:aa:24:8e:0c:f7:57:37:a5:6c:39:06:2e:af:
73:76:8f:18:d9:7e:c0:99:9f:88:0a:77:52:8d:fa:25:82:a9:
35:99:bc:87:ee:02:8c:64:67:0a:80:a8:3b:e0:88:2d:6f:82:
a7:14:47:cc:94:29:de:74:e9:8e:ba:d7:73:fb:81:f4:08:f3:
eb:05:a2:67:23:62:6b:71:93:96:2f:c6:31:ab:d0:f6:84:34:
39:c7:69:56:18:15:b8:ff:a9:d5:9e:7a:8a:be:f9:8b:4e:30:
09:ec:73:ea:7d:c5:54:12:22:f5:49:b4:de:6e:a3:3f:47:ad:
7b:a9:db:6a:b0:3f:6f:82:da:71:fe:7e:8b:25:9d:32:7f:a3:
97:34:2c:ad:0d:9f:13:c9:3a:ba:56:26:00:fa:43:c3:ae:b2:
1d:0e:42:16:e2:72:49:fa:7d:59:2c:f6:ae:aa:b1:7d:99:90:
c9:2d:07:70:5c:a0:85:89:a8:04:25:02:7d:2e:ab:54:69:15:
d9:bd:84:20:c4:00:e3:e8:35:27:20:f7:70:93:d5:8f:ae:18:
25:6e:81:63:c4:dd:0d:ac:04:0a:f1:bc:61:32:a3:bd:fd:37:
9c:9a:1c:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWQPU7XyapFP5d6Rbfz9MmvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMGMwMzA5MzBhOWQyZTRkYTg4ZDgxODUyYTQ0YzNmNzhi
ZmI0NDAwHhcNMjUwMzEzMTYwMTMxWhcNMjUwMzE0MTYwMTMxWjAzMTEwLwYDVQQD
Eyg4MWU5YTkyNzc3N2IyNjEyMDhjZTY1NTUwOThiYjdhZWFmOGE5YjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/8DQh2XIAY4bq1hUQSrKlHupxc1
ouE8JeULEZAUVnCgoMnHXd78yqKffgKkcYzyb2X7RbXEvfPFyg7iON+CASAN3fM5
T9lsEjWo45oV7ehLSXZUSsTNn0UxQC5c7TqYffyt5nuLq4w1ig4a6k2+3+EyIPc1
4hxt9g19pH5kOYu9w3DoebcGDlbgWDBFH4b4ejROfzRniAwqybhWurtYjdUCBqz1
2h8qCLEsqkxmsNllk8QvILDCpD+I48dnWJNe3zFVpIHMmHfANtEw6sJ1BfuDdwSD
beQPnUlQMMFzUeHDCFc/aqLLWxdE893pqRtcrXwxtFyL2/2nVi8kG45qMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHpqSd3eyYSCM5lVQmLt66viptyMB8GA1UdIwQY
MBaAFHAMAwkwqdLk2ojYGFKkTD94v7RAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0F3RENUQ3AwdVRhaU5nWVVxUk1QM2lfdEVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8wNjhjYjktNmNiYS00NTNkLTg1OGEt
YzViYmY5NWY4NTg0LzEvY0F3RENUQ3AwdVRhaU5nWVVxUk1QM2lfdEVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8wNjhjYjktNmNiYS00NTNkLTg1OGEtYzViYmY5NWY4NTg0
LzEvY0F3RENUQ3AwdVRhaU5nWVVxUk1QM2lfdEVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEGT3CY+
8/fm8xWIFC4lxq2yD1lJKgqqJI4M91c3pWw5Bi6vc3aPGNl+wJmfiAp3Uo36JYKp
NZm8h+4CjGRnCoCoO+CILW+CpxRHzJQp3nTpjrrXc/uB9Ajz6wWiZyNia3GTli/G
MavQ9oQ0OcdpVhgVuP+p1Z56ir75i04wCexz6n3FVBIi9Um03m6jP0ete6nbarA/
b4Lacf5+iyWdMn+jlzQsrQ2fE8k6ulYmAPpDw66yHQ5CFuJySfp9WSz2rqqxfZmQ
yS0HcFyghYmoBCUCfS6rVGkV2b2EIMQA4+g1JyD3cJPVj64YJW6BY8TdDawECvG8
YTKjvf03nJocLA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:35:57 2025 by rpki-client