Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
File: p6dweK84e0jXCBDrFgTfCt4Rj9o.mft (raw, json)
Hash identifier: p/O/qop1z9Co6oN0I0p5IGWb379FutulAwDDVD6zc64=
Subject key identifier: DA:AC:A2:39:51:03:5D:B5:2D:9F:4A:15:36:A6:A7:1A:B4:DA:D7:B9
Authority key identifier: A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA
Certificate issuer: /CN=a7a77078af387b48d70810eb1604df0ade118fda
Certificate serial: 01958C290A26E0CAFB22B8F470C498D6BFA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
Manifest number: 10D6
Signing time: Wed 12 Mar 2025 21:00:54 +0000
Manifest this update: Wed 12 Mar 2025 21:00:54 +0000
Manifest next update: Thu 13 Mar 2025 21:00:54 +0000
Files and hashes: 1: 9xMeWe1NRlriC37gII2JZoSHiUQ.roa (hash: v9S3o8GCSV8SJhwMOSoO5rVmagcl/wlT4/BQbEi4mBI=)
2: p6dweK84e0jXCBDrFgTfCt4Rj9o.crl (hash: 7YgEcc7y8aZBwX6tjcrxXbDIncI38REe1sH75G+bAoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:0a:26:e0:ca:fb:22:b8:f4:70:c4:98:d6:bf:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a77078af387b48d70810eb1604df0ade118fda
Validity
Not Before: Mar 12 21:00:54 2025 GMT
Not After : Mar 13 21:00:54 2025 GMT
Subject: CN=daaca23951035db52d9f4a1536a6a71ab4dad7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7c:2e:11:90:50:98:7f:dc:45:f3:b3:ec:bd:
5d:53:cc:ee:d7:de:e8:6c:ad:ca:d4:7f:3f:cc:b5:
8b:e2:5a:f4:9a:a5:9d:96:67:72:3c:1e:46:e9:26:
72:51:f7:44:b4:25:fb:b5:57:21:78:0d:c5:4c:57:
15:f6:26:be:be:77:db:ac:e3:44:cd:33:12:26:47:
0f:2a:a5:61:26:53:a2:61:13:51:81:df:98:45:3f:
ad:4f:91:07:e2:84:06:50:9f:bf:5b:a6:05:68:a5:
d4:6a:41:67:42:8f:f1:e2:01:fb:d5:e0:51:e5:8b:
2c:fa:0a:3c:db:29:c9:ee:50:1d:b7:a9:91:c7:07:
69:df:ba:da:3b:20:17:de:d2:70:15:74:cd:c2:a1:
4e:87:83:e3:ff:88:03:f2:8b:b4:d5:94:34:0e:ba:
e0:d2:85:96:18:70:78:f2:de:30:e9:f7:ff:b2:ff:
05:5a:3b:2f:49:e7:8e:06:9c:ce:d8:50:7d:c6:16:
b6:62:40:38:07:6c:ca:bb:ab:e8:39:8e:f2:09:94:
9a:16:8a:68:da:19:a9:7c:ad:88:0f:13:ee:da:d3:
ab:07:64:f9:1b:5b:f8:44:51:59:e7:f2:86:f7:01:
3a:11:13:e6:8d:32:67:b0:c9:c8:62:64:f7:c1:8c:
f3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AC:A2:39:51:03:5D:B5:2D:9F:4A:15:36:A6:A7:1A:B4:DA:D7:B9
X509v3 Authority Key Identifier:
keyid:A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:22:a3:81:3e:65:d6:3c:90:4d:52:4a:77:86:83:1b:96:41:
91:13:e1:21:81:06:bb:67:b8:74:27:6b:4b:92:e4:da:24:f5:
6a:ec:7b:1d:d7:cb:d8:eb:05:97:31:00:cc:11:ba:6e:a7:ad:
cd:31:d9:f3:cf:aa:57:ee:6b:86:2a:9f:a8:86:ea:20:c1:7f:
3a:76:8e:3b:c3:ca:71:84:76:2c:62:aa:34:93:c6:10:fa:b3:
f3:97:5d:d7:42:cb:05:86:c3:0e:18:dc:fe:35:e1:9b:bc:87:
ab:40:b6:65:70:91:90:fd:03:b4:c7:e7:71:42:54:4d:b7:d2:
6a:8b:f4:90:2e:12:0c:64:a2:e7:da:1f:98:1d:a0:5f:e7:31:
58:a6:54:58:99:1e:ef:85:3f:4c:ec:48:2e:0e:15:0a:89:b1:
36:10:90:3f:e8:1e:d1:fa:45:38:ce:99:ab:94:49:1f:4d:fe:
77:04:09:cc:d6:08:e4:f9:39:f0:c0:04:c5:b0:a3:7d:0b:68:
cf:23:23:c8:ca:cb:fa:70:cd:15:8e:69:2e:95:36:ee:0c:a3:
ea:42:5a:b0:d9:81:91:15:70:a9:ac:f8:99:93:a9:ce:bf:75:
8c:36:9a:e5:0e:de:ad:69:d5:d9:21:74:be:17:74:81:df:7b:
e5:02:61:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMKQom4Mr7Irj0cMSY1r+pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YTc3MDc4YWYzODdiNDhkNzA4MTBlYjE2MDRkZjBhZGUx
MThmZGEwHhcNMjUwMzEyMjEwMDU0WhcNMjUwMzEzMjEwMDU0WjAzMTEwLwYDVQQD
EyhkYWFjYTIzOTUxMDM1ZGI1MmQ5ZjRhMTUzNmE2YTcxYWI0ZGFkN2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHwuEZBQmH/cRfOz7L1dU8zu197o
bK3K1H8/zLWL4lr0mqWdlmdyPB5G6SZyUfdEtCX7tVcheA3FTFcV9ia+vnfbrONE
zTMSJkcPKqVhJlOiYRNRgd+YRT+tT5EH4oQGUJ+/W6YFaKXUakFnQo/x4gH71eBR
5Yss+go82ynJ7lAdt6mRxwdp37raOyAX3tJwFXTNwqFOh4Pj/4gD8ou01ZQ0Drrg
0oWWGHB48t4w6ff/sv8FWjsvSeeOBpzO2FB9xha2YkA4B2zKu6voOY7yCZSaFopo
2hmpfK2IDxPu2tOrB2T5G1v4RFFZ5/KG9wE6ERPmjTJnsMnIYmT3wYzzuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqsojlRA121LZ9KFTampxq02te5MB8GA1UdIwQY
MBaAFKencHivOHtI1wgQ6xYE3wreEY/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDZkd2VLODRlMGpYQ0JEckZnVGZDdDRSajlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wMjFmNmItNmZkMC00MzY1LTkyZjct
NGRlNDdiODA0NDBhLzEvcDZkd2VLODRlMGpYQ0JEckZnVGZDdDRSajlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8wMjFmNmItNmZkMC00MzY1LTkyZjctNGRlNDdiODA0NDBh
LzEvcDZkd2VLODRlMGpYQ0JEckZnVGZDdDRSajlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATSKjgT5l
1jyQTVJKd4aDG5ZBkRPhIYEGu2e4dCdrS5Lk2iT1aux7HdfL2OsFlzEAzBG6bqet
zTHZ88+qV+5rhiqfqIbqIMF/OnaOO8PKcYR2LGKqNJPGEPqz85dd10LLBYbDDhjc
/jXhm7yHq0C2ZXCRkP0DtMfncUJUTbfSaov0kC4SDGSi59ofmB2gX+cxWKZUWJke
74U/TOxILg4VComxNhCQP+ge0fpFOM6Zq5RJH03+dwQJzNYI5Pk58MAExbCjfQto
zyMjyMrL+nDNFY5pLpU27gyj6kJasNmBkRVwqaz4mZOpzr91jDaa5Q7erWnV2SF0
vhd0gd975QJhKg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:30 2025 by rpki-client