Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
File: 0As3tvS0RWReaZOpxexghJJCXw4.mft (raw, json)
Hash identifier: AjbT2idvVkvjHpuGCep7HIKSUFZ2JkkQEnAXaJTjavA=
Subject key identifier: B1:57:9B:DE:30:99:12:DB:22:01:A7:44:E2:2E:90:B9:D6:1B:92:6E
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 0196155DD0E7523ECD320B705EF33A725CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
Manifest number: 087E
Signing time: Tue 08 Apr 2025 12:26:31 +0000
Manifest this update: Tue 08 Apr 2025 12:26:31 +0000
Manifest next update: Wed 09 Apr 2025 12:26:31 +0000
Files and hashes: 1: 0As3tvS0RWReaZOpxexghJJCXw4.crl (hash: tUQXSbrv9d6xVUX8G677FgUP+0BHDttXeNDGbC/4kUE=)
2: 6bHyeOEehy6z9J4cC74z4dwZNZM.roa (hash: 7kMISVfjOHaOb0aCdvVe/tfRxRtprtZa+5IWqp1XpCc=)
3: 6eoj3HW_5TpgQ42VV6W-eRXWJRY.roa (hash: Xh4eenBYRtemEIOmT0DFdL/CXzx7ji9eMIWiGg2yj/0=)
4: Bt-AqMlv5AGS23NSAHAOENpSz_w.roa (hash: Om38jAdn/FiagKwN0JD11FdBcj5g/guHfAWt957SB1c=)
5: CGr5yHNr-XI-4CHW-sZzCvIid9Q.roa (hash: 5ONFhg1QF43WPksHVSGaT4R+hEeMibeNW7Yj6pnVbKM=)
6: Eey_cZJG1JzbE89yJ5-3WKAQnps.roa (hash: Sd/BEYaeo7DwAgjKLvAs+URaNM8tk1wO8kSwFI5eaf8=)
7: G6xf-2_9WqQfQEDF7v7pcNM6cBg.roa (hash: hCbc2HcFchj9v9WZR4JcZ3aDEye7Ter5KkTxwI9k97k=)
8: xMV0bTTXomTVa8xc0iCn0sD7g_Q.roa (hash: 43WOZICTIxPYcL8p7aD3gmAQjRkX3uJE7dpL5l+yfxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 12:26:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:5d:d0:e7:52:3e:cd:32:0b:70:5e:f3:3a:72:5c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Apr 8 12:26:31 2025 GMT
Not After : Apr 9 12:26:31 2025 GMT
Subject: CN=b1579bde309912db2201a744e22e90b9d61b926e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:87:35:2b:4c:f8:51:92:6a:5a:34:85:90:97:
79:4d:9b:5b:0d:41:d6:44:c8:77:22:15:b9:4d:e1:
95:4c:47:37:61:e2:12:68:30:b4:ab:bf:2d:0c:fd:
49:8f:ef:62:8f:a8:14:68:19:ea:ae:57:2e:82:6a:
d2:51:15:09:7a:96:02:75:fa:e5:b0:b8:ba:b3:e7:
14:9f:58:a9:19:9d:fd:57:3e:29:a2:32:63:61:72:
c7:92:8f:90:2c:3a:64:0f:8e:7a:a7:9d:6c:33:f2:
60:02:8b:f4:3f:02:89:e1:92:da:f1:ad:e7:66:f3:
90:65:86:67:4a:87:03:5d:e3:cd:d7:cf:45:96:57:
cc:2e:a4:37:22:bf:a1:c5:01:4b:cb:5d:95:6a:05:
4d:9a:65:09:0b:68:45:f6:4a:b6:9a:5d:c5:e5:be:
89:71:c1:a0:40:62:8e:6f:06:8f:77:cd:0b:15:02:
d8:f6:f2:0d:dc:bf:64:1d:e8:4b:35:10:d9:fd:a6:
d9:d9:b9:74:7d:e5:ee:66:d9:d5:e0:8a:de:55:59:
9a:ad:ce:5f:88:fc:b0:00:95:7a:29:bc:97:ba:b2:
d5:53:e4:99:c0:9d:f2:d4:0d:ef:88:26:8c:cf:59:
df:5f:63:5b:ae:09:2d:50:82:8b:9a:7e:36:58:15:
22:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:57:9B:DE:30:99:12:DB:22:01:A7:44:E2:2E:90:B9:D6:1B:92:6E
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ef:3c:17:55:d8:46:aa:e4:bc:2d:c4:0d:95:e8:8d:4f:b3:
00:df:a7:66:13:6c:1f:ae:a3:f6:79:3b:99:e8:7c:fa:95:c0:
ab:16:89:bd:30:d9:a3:f9:bd:cd:e0:eb:80:db:fa:ba:ed:56:
93:40:ad:ee:e8:a2:02:e0:db:68:33:8f:69:c5:b3:b0:cb:81:
24:46:ab:81:d8:66:f6:59:4c:97:7d:2d:4d:68:4b:75:94:42:
c2:22:70:53:ac:3f:a2:46:54:46:99:55:ea:4c:42:80:fe:4c:
1a:f6:a2:09:45:c4:55:3c:d5:43:5f:69:f9:fd:f4:ef:d3:36:
5c:da:62:2b:20:42:16:4d:71:8b:32:94:3f:e5:90:95:61:b4:
d7:6a:c1:0b:b9:e3:4c:f5:c8:3c:68:76:86:68:a6:33:f6:db:
d7:19:09:9c:13:a7:90:81:1c:c4:b7:5d:02:5c:f1:bd:3c:31:
02:9b:cd:a5:09:c2:7f:a5:5a:38:a1:b7:7a:a0:1d:21:a4:b6:
5a:76:b6:21:d3:04:dd:b4:09:ac:04:14:8d:8c:40:31:fc:e5:
25:46:6b:47:ae:06:57:94:ad:d3:36:9d:2f:df:5a:b0:d4:47:
8d:53:42:b8:a0:55:aa:bb:7a:77:45:d9:ab:b1:04:41:91:52:
71:0e:20:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYVXdDnUj7NMgtwXvM6clzCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMGIzN2I2ZjRiNDQ1NjQ1ZTY5OTNhOWM1ZWM2MDg0OTI0
MjVmMGUwHhcNMjUwNDA4MTIyNjMxWhcNMjUwNDA5MTIyNjMxWjAzMTEwLwYDVQQD
EyhiMTU3OWJkZTMwOTkxMmRiMjIwMWE3NDRlMjJlOTBiOWQ2MWI5MjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ic1K0z4UZJqWjSFkJd5TZtbDUHW
RMh3IhW5TeGVTEc3YeISaDC0q78tDP1Jj+9ij6gUaBnqrlcugmrSURUJepYCdfrl
sLi6s+cUn1ipGZ39Vz4pojJjYXLHko+QLDpkD456p51sM/JgAov0PwKJ4ZLa8a3n
ZvOQZYZnSocDXePN189FllfMLqQ3Ir+hxQFLy12VagVNmmUJC2hF9kq2ml3F5b6J
ccGgQGKObwaPd80LFQLY9vIN3L9kHehLNRDZ/abZ2bl0feXuZtnV4IreVVmarc5f
iPywAJV6KbyXurLVU+SZwJ3y1A3viCaMz1nfX2NbrgktUIKLmn42WBUi0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFXm94wmRLbIgGnROIukLnWG5JuMB8GA1UdIwQY
MBaAFNALN7b0tEVkXmmTqcXsYISSQl8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEt
N2RiNjg2OGQ4NDc0LzEvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEtN2RiNjg2OGQ4NDc0
LzEvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJu88F1XY
RqrkvC3EDZXojU+zAN+nZhNsH66j9nk7meh8+pXAqxaJvTDZo/m9zeDrgNv6uu1W
k0Ct7uiiAuDbaDOPacWzsMuBJEargdhm9llMl30tTWhLdZRCwiJwU6w/okZURplV
6kxCgP5MGvaiCUXEVTzVQ19p+f3079M2XNpiKyBCFk1xizKUP+WQlWG012rBC7nj
TPXIPGh2hmimM/bb1xkJnBOnkIEcxLddAlzxvTwxApvNpQnCf6VaOKG3eqAdIaS2
Wna2IdME3bQJrAQUjYxAMfzlJUZrR64GV5St0zadL99asNRHjVNCuKBVqrt6d0XZ
q7EEQZFScQ4gwg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 19:03:27 2025 by rpki-client