Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
File: rPsCQyaIZ0JgxtASpZfXC81RScQ.mft (raw, json)
Hash identifier: hoH5chIfcyMTvLQKPtFUavTs7xjjvGafvl8rzuo3fsc=
Subject key identifier: 11:38:F9:58:99:B3:B7:D0:3B:08:7C:9F:C4:31:7F:80:C0:9E:8B:B1
Authority key identifier: AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
Certificate issuer: /CN=acfb02432688674260c6d012a597d70bcd5149c4
Certificate serial: 01964AB4185A5FF241A507FDBAE10C766711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
Manifest number: 14FB
Signing time: Fri 18 Apr 2025 21:00:38 +0000
Manifest this update: Fri 18 Apr 2025 21:00:38 +0000
Manifest next update: Sat 19 Apr 2025 21:00:38 +0000
Files and hashes: 1: A88LbPdx-8cfYkVb8yLzaoaOIc8.roa (hash: vbrcMRJHvTfymU9cXgb/J1eu18qmF5+dFVWeyuuyCEU=)
2: rPsCQyaIZ0JgxtASpZfXC81RScQ.crl (hash: +8aOwnJO7mqLsrgbqi4yaWPbgUSK7cC2p/KmT7VdKBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b4:18:5a:5f:f2:41:a5:07:fd:ba:e1:0c:76:67:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acfb02432688674260c6d012a597d70bcd5149c4
Validity
Not Before: Apr 18 21:00:38 2025 GMT
Not After : Apr 19 21:00:38 2025 GMT
Subject: CN=1138f95899b3b7d03b087c9fc4317f80c09e8bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:c4:cd:f3:68:de:a2:76:20:ab:c9:d9:32:
f3:e3:d6:2d:4c:c7:af:65:5a:c2:b5:a0:81:74:1f:
90:1b:e8:95:f8:7b:8d:f1:8f:a4:f9:50:ba:08:93:
1f:31:18:d5:80:e6:5a:d4:57:45:0f:fe:19:1b:ce:
8d:c6:e7:24:f6:14:dc:5f:a9:5e:5d:04:71:99:ad:
54:63:4d:9d:64:49:4b:8f:69:e8:f4:c1:f3:45:4c:
e3:14:52:dd:32:b2:4d:d0:dd:d6:48:53:d6:04:32:
d5:cc:f1:d8:16:65:80:ce:ba:8c:41:1a:12:96:6a:
48:d2:b2:40:61:8b:b3:de:4a:6e:16:11:63:9b:4d:
ab:55:ec:a7:e3:8a:be:d2:78:b7:1b:f8:a4:f1:8b:
8b:ac:66:d3:55:79:56:a3:09:39:ba:ac:7f:78:d4:
63:9b:ec:f2:de:31:49:bd:e4:69:93:51:be:51:28:
89:00:c3:ef:69:79:0b:76:55:5c:a0:b4:57:fd:cb:
6e:73:90:24:1a:2f:49:a9:c4:69:87:75:ab:6f:b5:
c5:52:61:de:39:82:ff:27:a5:62:aa:d7:7a:b5:e4:
65:ee:02:21:fc:3a:a9:3b:81:a1:d0:79:9a:c0:22:
08:00:61:0e:22:e8:29:3d:de:df:ff:20:73:fa:ed:
da:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:38:F9:58:99:B3:B7:D0:3B:08:7C:9F:C4:31:7F:80:C0:9E:8B:B1
X509v3 Authority Key Identifier:
keyid:AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:56:a8:eb:54:ad:95:04:3b:9e:22:89:a4:93:a9:46:60:45:
61:bb:fd:eb:49:91:4b:63:36:bb:5f:d8:a4:22:40:ee:97:6c:
f9:df:ca:d9:9a:65:ce:35:9f:66:5e:50:d4:21:b7:2d:26:8a:
16:b7:27:82:33:76:33:79:1c:3d:db:14:3c:bf:19:7c:a1:61:
00:26:0b:cc:70:49:f6:59:3f:1f:4a:4e:c8:d8:20:c3:fa:59:
60:d5:fb:a1:a2:e3:c3:e5:f7:9a:4c:33:83:71:d1:2f:03:99:
4f:09:e9:86:c1:44:09:05:8d:20:d4:5c:67:7b:e2:e4:b0:cf:
f8:a4:93:95:d9:7b:6c:79:92:c0:b8:94:32:b5:ec:ff:4c:f5:
fa:0d:78:30:84:3d:d6:03:7f:4e:67:27:d8:d2:50:11:47:c7:
77:30:c1:38:b7:2f:f6:1f:5f:fa:9d:95:22:88:66:90:b1:11:
37:9a:a1:72:c4:94:ca:d4:fa:c5:74:a4:7a:95:db:0b:61:19:
cb:aa:76:f4:68:38:09:65:07:f5:f2:cb:c2:b0:e2:10:30:f5:
7c:fd:22:84:4e:5e:10:39:02:0a:27:d4:d1:de:93:b4:63:96:
d7:3f:e1:c3:5d:1f:2b:a8:11:56:6c:71:e4:15:a6:97:41:91:
e5:ab:1a:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKtBhaX/JBpQf9uuEMdmcRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZmIwMjQzMjY4ODY3NDI2MGM2ZDAxMmE1OTdkNzBiY2Q1
MTQ5YzQwHhcNMjUwNDE4MjEwMDM4WhcNMjUwNDE5MjEwMDM4WjAzMTEwLwYDVQQD
EygxMTM4Zjk1ODk5YjNiN2QwM2IwODdjOWZjNDMxN2Y4MGMwOWU4YmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNrEzfNo3qJ2IKvJ2TLz49YtTMev
ZVrCtaCBdB+QG+iV+HuN8Y+k+VC6CJMfMRjVgOZa1FdFD/4ZG86Nxuck9hTcX6le
XQRxma1UY02dZElLj2no9MHzRUzjFFLdMrJN0N3WSFPWBDLVzPHYFmWAzrqMQRoS
lmpI0rJAYYuz3kpuFhFjm02rVeyn44q+0ni3G/ik8YuLrGbTVXlWowk5uqx/eNRj
m+zy3jFJveRpk1G+USiJAMPvaXkLdlVcoLRX/ctuc5AkGi9JqcRph3Wrb7XFUmHe
OYL/J6Viqtd6teRl7gIh/DqpO4Gh0HmawCIIAGEOIugpPd7f/yBz+u3aMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBE4+ViZs7fQOwh8n8Qxf4DAnouxMB8GA1UdIwQY
MBaAFKz7AkMmiGdCYMbQEqWX1wvNUUnEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclBzQ1F5YUlaMEpneHRBU3BaZlhDODFSU2NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hNDE3OTQtZDYxOS00Yzc0LTgyNGQt
MzFkNzAxMGE3MjU2LzEvclBzQ1F5YUlaMEpneHRBU3BaZlhDODFSU2NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9hNDE3OTQtZDYxOS00Yzc0LTgyNGQtMzFkNzAxMGE3MjU2
LzEvclBzQ1F5YUlaMEpneHRBU3BaZlhDODFSU2NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFao61St
lQQ7niKJpJOpRmBFYbv960mRS2M2u1/YpCJA7pds+d/K2ZplzjWfZl5Q1CG3LSaK
FrcngjN2M3kcPdsUPL8ZfKFhACYLzHBJ9lk/H0pOyNggw/pZYNX7oaLjw+X3mkwz
g3HRLwOZTwnphsFECQWNINRcZ3vi5LDP+KSTldl7bHmSwLiUMrXs/0z1+g14MIQ9
1gN/Tmcn2NJQEUfHdzDBOLcv9h9f+p2VIohmkLERN5qhcsSUytT6xXSkepXbC2EZ
y6p29Gg4CWUH9fLLwrDiEDD1fP0ihE5eEDkCCifU0d6TtGOW1z/hw10fK6gRVmxx
5BWml0GR5asaWg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 01:28:49 2025 by rpki-client