Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
File: isRzGj7jlC0ljQZjVwuJTo4akjM.mft (raw, json)
Hash identifier: Gzkd8Gn2rlbjMt/1y8/RZxbcn/QCEJ4YG7qv2AptDaY=
Subject key identifier: E5:8A:88:3A:C4:C8:9F:96:56:A8:1B:BE:0C:66:18:61:09:0B:CB:7F
Authority key identifier: 8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
Certificate issuer: /CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Certificate serial: 01960C0C79C6A8D8DCD29A74652CC9783185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
Manifest number: 0802
Signing time: Sun 06 Apr 2025 17:01:06 +0000
Manifest this update: Sun 06 Apr 2025 17:01:06 +0000
Manifest next update: Mon 07 Apr 2025 17:01:06 +0000
Files and hashes: 1: HdoRWbIURzhfnaDDK7ySYFVN2ik.roa (hash: HVbpXptfvhv4ApWMw5QWNQjQp3Pw35JC0KFrZynPEas=)
2: isRzGj7jlC0ljQZjVwuJTo4akjM.crl (hash: 0lM5Wb7yGIDhbV5zeBzupRt4HcJ2P18ha7W+/Es+DY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0c:0c:79:c6:a8:d8:dc:d2:9a:74:65:2c:c9:78:31:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Validity
Not Before: Apr 6 17:01:06 2025 GMT
Not After : Apr 7 17:01:06 2025 GMT
Subject: CN=e58a883ac4c89f9656a81bbe0c661861090bcb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:60:80:9c:b5:2f:fc:cc:25:5d:e0:ae:cf:dd:
10:d9:df:ba:db:7a:2d:c8:d5:f7:d0:5e:af:c5:b4:
fb:29:d2:39:e7:7e:8b:b6:ff:ea:b9:40:7f:e1:a6:
2d:1c:c4:f8:1c:d8:91:28:65:5e:92:2f:8b:23:96:
58:a4:f9:37:4a:7b:e7:9e:9c:3a:bd:dd:17:d5:06:
d2:17:12:51:5a:c5:d1:16:e1:91:46:9d:0f:41:04:
c3:e2:25:07:f8:50:d7:51:e3:85:64:7e:69:87:27:
c1:e2:6b:81:41:c8:6c:26:76:30:86:4a:bf:a8:aa:
f3:86:a2:64:f0:a0:80:d4:62:ee:fc:a7:c7:c6:e0:
05:1f:0e:4b:47:db:9a:35:7e:e9:fa:b3:46:a4:0c:
e6:1a:5a:5f:4a:75:43:aa:6a:1d:e0:72:a5:51:e9:
da:b7:62:f5:04:34:1f:66:f1:74:f2:d6:f6:ae:35:
95:ad:2b:44:73:34:73:bc:4e:33:97:58:01:6c:d8:
6b:85:2d:74:ab:12:3f:f7:cf:44:9b:62:f4:0d:32:
c8:37:40:ac:dd:57:87:47:9f:d0:66:27:0d:f9:03:
12:fd:b1:b3:c7:d0:93:0d:0a:f3:46:e2:99:54:de:
21:09:95:21:7b:d4:85:a1:39:84:1c:4a:da:66:4f:
39:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8A:88:3A:C4:C8:9F:96:56:A8:1B:BE:0C:66:18:61:09:0B:CB:7F
X509v3 Authority Key Identifier:
keyid:8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c4:ab:35:77:51:a8:9b:f2:db:cd:32:47:5e:b7:f8:31:70:
8f:7e:2d:58:fe:9f:3c:30:e3:35:e6:a9:36:73:a8:87:85:6e:
8c:95:a0:0e:de:36:3e:ec:84:c3:a0:d3:ba:f5:4f:22:d3:6c:
20:5e:20:88:53:04:a8:6c:3a:46:15:cb:86:17:4f:94:a2:8f:
11:74:6d:32:4b:06:56:29:fb:41:df:ab:c0:18:89:7f:cd:f2:
a0:85:04:f8:cd:0e:f3:ad:80:ac:d8:18:b4:d6:20:99:16:73:
d1:f7:e9:c2:5b:9a:b2:ee:fc:07:87:68:ff:4c:0b:f5:c4:33:
99:8d:59:d2:d7:96:b5:39:2a:c4:ff:33:5e:d8:f7:40:77:f2:
84:9c:ef:57:03:2f:ef:b2:5d:20:99:ce:52:71:38:87:1d:be:
c3:75:02:17:fc:0a:5a:71:14:b1:b1:af:bd:f1:86:fd:1b:1c:
b5:0d:b1:bd:47:76:60:71:89:1f:10:94:7c:76:8e:61:91:b4:
55:b3:fa:78:a2:c6:3e:4f:3b:ea:13:58:92:c6:cc:81:a5:62:
50:a2:72:39:a4:92:1f:2d:4f:44:fd:a9:56:0d:dc:e5:2d:52:
31:95:11:22:12:48:50:74:7e:23:82:a5:52:88:37:ce:6e:dd:
fe:f2:36:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYMDHnGqNjc0pp0ZSzJeDGFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYzQ3MzFhM2VlMzk0MmQyNThkMDY2MzU3MGI4OTRlOGUx
YTkyMzMwHhcNMjUwNDA2MTcwMTA2WhcNMjUwNDA3MTcwMTA2WjAzMTEwLwYDVQQD
EyhlNThhODgzYWM0Yzg5Zjk2NTZhODFiYmUwYzY2MTg2MTA5MGJjYjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGCAnLUv/MwlXeCuz90Q2d+623ot
yNX30F6vxbT7KdI5536Ltv/quUB/4aYtHMT4HNiRKGVeki+LI5ZYpPk3Snvnnpw6
vd0X1QbSFxJRWsXRFuGRRp0PQQTD4iUH+FDXUeOFZH5phyfB4muBQchsJnYwhkq/
qKrzhqJk8KCA1GLu/KfHxuAFHw5LR9uaNX7p+rNGpAzmGlpfSnVDqmod4HKlUena
t2L1BDQfZvF08tb2rjWVrStEczRzvE4zl1gBbNhrhS10qxI/989Em2L0DTLIN0Cs
3VeHR5/QZicN+QMS/bGzx9CTDQrzRuKZVN4hCZUhe9SFoTmEHEraZk85PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWKiDrEyJ+WVqgbvgxmGGEJC8t/MB8GA1UdIwQY
MBaAFIrEcxo+45QtJY0GY1cLiU6OGpIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgt
NWFkZmUzMGZmZGE1LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgtNWFkZmUzMGZmZGE1
LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHMSrNXdR
qJvy280yR163+DFwj34tWP6fPDDjNeapNnOoh4VujJWgDt42PuyEw6DTuvVPItNs
IF4giFMEqGw6RhXLhhdPlKKPEXRtMksGVin7Qd+rwBiJf83yoIUE+M0O862ArNgY
tNYgmRZz0ffpwluasu78B4do/0wL9cQzmY1Z0teWtTkqxP8zXtj3QHfyhJzvVwMv
77JdIJnOUnE4hx2+w3UCF/wKWnEUsbGvvfGG/RsctQ2xvUd2YHGJHxCUfHaOYZG0
VbP6eKLGPk876hNYksbMgaViUKJyOaSSHy1PRP2pVg3c5S1SMZURIhJIUHR+I4Kl
Uog3zm7d/vI2aQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:26:56 2025 by rpki-client