Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
File: p-cKBbmGOc165X_rGkCzZ-ycQ60.mft (raw, json)
Hash identifier: GhYvpWHrPC2tFoQf4YXRMh930sY046Rg+pa7gL2VAVw=
Subject key identifier: 55:4D:04:23:E7:8B:5E:7C:B9:92:1A:AD:9D:FE:43:B6:98:6C:9A:4E
Authority key identifier: A7:E7:0A:05:B9:86:39:CD:7A:E5:7F:EB:1A:40:B3:67:EC:9C:43:AD
Certificate issuer: /CN=a7e70a05b98639cd7ae57feb1a40b367ec9c43ad
Certificate serial: 01958CCECE2C7CD47973CAFD94A518183CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
Manifest number: 08DA
Signing time: Thu 13 Mar 2025 00:01:58 +0000
Manifest this update: Thu 13 Mar 2025 00:01:58 +0000
Manifest next update: Fri 14 Mar 2025 00:01:58 +0000
Files and hashes: 1: fbHkL-NwzOez_gqY2PAh-dqPCjE.roa (hash: Q4MsLL7SIokgLjLmWwHX1Dj+xIpsxjtJ9IG++E0gJUc=)
2: p-cKBbmGOc165X_rGkCzZ-ycQ60.crl (hash: SchUSwVhDEDPZShFi4ijKR8NXftEM5HnGSdGyhzC4Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:ce:2c:7c:d4:79:73:ca:fd:94:a5:18:18:3c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e70a05b98639cd7ae57feb1a40b367ec9c43ad
Validity
Not Before: Mar 13 00:01:58 2025 GMT
Not After : Mar 14 00:01:58 2025 GMT
Subject: CN=554d0423e78b5e7cb9921aad9dfe43b6986c9a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:21:a6:df:10:d5:c5:8a:84:88:e0:b8:20:
01:15:11:77:a2:ab:11:f2:c3:48:b4:08:8a:34:32:
1d:51:69:ca:a3:b0:9e:4f:18:b9:96:17:60:5e:40:
9d:c6:87:1d:0c:37:c3:fd:d5:38:55:79:2a:35:84:
b6:e1:85:96:0e:80:01:81:e8:c4:5e:b1:24:5b:1c:
76:dd:18:b8:96:a2:e7:5f:e1:03:58:f0:9f:3e:a4:
fc:a8:ec:50:7a:c2:2a:92:b4:20:ae:6f:e2:55:10:
69:88:2a:32:c7:9b:33:e4:2f:4c:41:c0:47:41:ab:
a0:2c:11:47:f8:85:52:7b:c8:02:89:bb:1a:e4:32:
ae:8b:7c:f5:7d:02:ed:c8:64:90:14:75:7c:1a:e6:
4b:4e:5b:30:db:16:fe:c9:30:26:63:92:1c:aa:33:
a5:74:a7:4b:71:18:e2:3a:bf:64:94:29:17:55:f2:
50:0f:be:13:6e:a1:de:af:73:48:14:d2:a6:a5:f2:
d3:b9:05:e3:e8:cf:ea:73:c6:79:24:b7:51:27:24:
4c:46:46:18:9d:52:f2:ea:02:6e:c3:88:ad:94:c4:
56:0c:33:f6:e6:89:a4:83:e3:97:e2:5d:8e:65:c7:
2e:72:87:f3:16:bc:86:a0:96:ec:05:9a:80:eb:01:
19:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4D:04:23:E7:8B:5E:7C:B9:92:1A:AD:9D:FE:43:B6:98:6C:9A:4E
X509v3 Authority Key Identifier:
keyid:A7:E7:0A:05:B9:86:39:CD:7A:E5:7F:EB:1A:40:B3:67:EC:9C:43:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:fe:47:a6:68:e3:f2:79:82:4e:27:af:59:26:9e:55:0c:b3:
36:1e:cc:a1:b8:ed:de:e6:b2:e4:d2:77:0d:5d:fd:9f:9e:c7:
4e:a6:c4:a3:dd:e5:be:ed:60:d2:b4:4e:2e:ec:af:0a:bb:8b:
fa:c3:77:9d:59:8d:d0:5e:9c:3a:ab:91:87:1b:0b:9b:6d:cd:
7d:c3:e3:56:ae:6a:e3:cb:fa:0b:cd:68:44:dc:ef:4b:b6:9b:
65:aa:c1:d8:9a:06:65:87:e1:56:5e:92:3d:ab:16:0f:a9:76:
64:48:cc:84:ff:09:40:7b:40:f3:6e:28:6d:38:d2:a8:59:f3:
1c:ff:f0:75:2c:43:34:c7:87:f2:5d:5a:fb:c3:85:43:40:a8:
97:5d:59:a3:35:77:2a:9d:c2:7b:6a:32:20:05:ab:71:be:ee:
27:10:e2:01:c9:46:34:9b:0a:a2:42:1a:97:8b:48:42:20:62:
09:99:dd:70:2c:b1:24:95:ee:ac:68:74:d5:92:c3:ad:3b:9d:
74:9c:7b:1a:20:f0:f8:91:1a:8b:8b:42:3c:1d:1d:5c:33:d6:
da:43:b4:5e:ed:90:2c:6f:3e:38:d0:ae:1a:58:6a:50:77:41:
31:24:89:57:5a:05:b8:cf:8b:7d:07:38:b8:22:85:88:79:f0:
b7:fc:11:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMzs4sfNR5c8r9lKUYGDzfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZTcwYTA1Yjk4NjM5Y2Q3YWU1N2ZlYjFhNDBiMzY3ZWM5
YzQzYWQwHhcNMjUwMzEzMDAwMTU4WhcNMjUwMzE0MDAwMTU4WjAzMTEwLwYDVQQD
Eyg1NTRkMDQyM2U3OGI1ZTdjYjk5MjFhYWQ5ZGZlNDNiNjk4NmM5YTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtMhpt8Q1cWKhIjguCABFRF3oqsR
8sNItAiKNDIdUWnKo7CeTxi5lhdgXkCdxocdDDfD/dU4VXkqNYS24YWWDoABgejE
XrEkWxx23Ri4lqLnX+EDWPCfPqT8qOxQesIqkrQgrm/iVRBpiCoyx5sz5C9MQcBH
QaugLBFH+IVSe8gCibsa5DKui3z1fQLtyGSQFHV8GuZLTlsw2xb+yTAmY5IcqjOl
dKdLcRjiOr9klCkXVfJQD74TbqHer3NIFNKmpfLTuQXj6M/qc8Z5JLdRJyRMRkYY
nVLy6gJuw4itlMRWDDP25omkg+OX4l2OZccucofzFryGoJbsBZqA6wEZ2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVNBCPni158uZIarZ3+Q7aYbJpOMB8GA1UdIwQY
MBaAFKfnCgW5hjnNeuV/6xpAs2fsnEOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcC1jS0JibUdPYzE2NVhfckdrQ3paLXljUTYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xMjAyZTItMGI1NC00MmVlLTkzM2Et
MmIxZGM5OTJlY2EyLzEvcC1jS0JibUdPYzE2NVhfckdrQ3paLXljUTYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8xMjAyZTItMGI1NC00MmVlLTkzM2EtMmIxZGM5OTJlY2Ey
LzEvcC1jS0JibUdPYzE2NVhfckdrQ3paLXljUTYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdf5Hpmjj
8nmCTievWSaeVQyzNh7Mobjt3uay5NJ3DV39n57HTqbEo93lvu1g0rROLuyvCruL
+sN3nVmN0F6cOquRhxsLm23NfcPjVq5q48v6C81oRNzvS7abZarB2JoGZYfhVl6S
PasWD6l2ZEjMhP8JQHtA824obTjSqFnzHP/wdSxDNMeH8l1a+8OFQ0Col11ZozV3
Kp3Ce2oyIAWrcb7uJxDiAclGNJsKokIal4tIQiBiCZndcCyxJJXurGh01ZLDrTud
dJx7GiDw+JEai4tCPB0dXDPW2kO0Xu2QLG8+ONCuGlhqUHdBMSSJV1oFuM+LfQc4
uCKFiHnwt/wRBQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:43 2025 by rpki-client