Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
File: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft (raw, json)
Hash identifier: 8E4ZUpcgbu8q4HDC/2Bl/9CEVVARHldWHQ7gv2JE/jA=
Subject key identifier: 83:BF:35:CA:09:1B:4B:A8:BC:0F:F4:5A:A2:39:C1:85:55:F9:DA:3D
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial: 01964C6BEA8D211AD92EA8DA53CB0E5908D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
Manifest number: 0E23
Signing time: Sat 19 Apr 2025 05:01:02 +0000
Manifest this update: Sat 19 Apr 2025 05:01:02 +0000
Manifest next update: Sun 20 Apr 2025 05:01:02 +0000
Files and hashes: 1: GyhAtf15yZqMprvOSAG-mSzNZTU.roa (hash: jfVjDUAXNOWRUx2duW7NqVNPhOHvwJFkEOJDlRjLf1c=)
2: Jn9LNrC4wIy3yIlbSkthFN9Albs.roa (hash: 6lIOMorBJKMVKOZBPqKcGfElc6xi+Wc/c9B3Sn6wFrA=)
3: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl (hash: nZ8i5GgXAwsmPbXFL5mZNS6AJyVe5QGwAfRm4earD5I=)
4: Y2_bnui3NBLO8jQirmiUuAzGyRw.roa (hash: Sj4Gp5iophRPrZcWhz+iS2BZX0tuH2ZNqq3e2/zFjig=)
5: ntrt1qLEp7JFw_l17Dbev4liPcY.roa (hash: 5lVCUBQu1df/S1FQOKl/MyF/XxoO3ZxscsaY8Q1dPLk=)
6: vfMCWDXHqUhfE9pCWjy3UIK3sYE.roa (hash: cZ4cjZLkxHd/pGP9SjokJ4j+E/I+MNHdDpithj4CeCo=)
7: zaxDDa76odJm9ePdrwAGeOqRpTk.roa (hash: LPUFtmetdpPIYathbUV2AsqucuRhOg7pKFky/Ou4leU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:ea:8d:21:1a:d9:2e:a8:da:53:cb:0e:59:08:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Validity
Not Before: Apr 19 05:01:02 2025 GMT
Not After : Apr 20 05:01:02 2025 GMT
Subject: CN=83bf35ca091b4ba8bc0ff45aa239c18555f9da3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:38:58:0e:b1:dd:0e:15:ee:d0:05:c7:44:2a:
56:28:7c:b7:9f:e6:cf:58:f9:45:e8:72:23:fe:64:
ba:b8:6e:6f:84:8d:3b:c1:c1:4f:82:f3:d2:ff:b4:
1f:2c:62:63:68:76:5a:b5:d5:25:81:72:8d:fc:1a:
6c:b3:54:c8:cd:4d:ab:aa:fc:32:cc:53:a3:84:ae:
e6:f2:6e:65:9e:32:38:d4:dc:07:a1:ca:87:e3:d1:
d7:79:de:d6:82:3a:89:3e:06:2a:14:c4:99:2b:5e:
a9:02:0f:a0:44:c2:52:d9:e5:42:e8:81:84:7c:30:
f7:77:84:63:c2:5c:60:c1:43:93:ef:d9:59:27:16:
0b:d9:83:8e:c2:38:73:4c:d4:e6:56:78:c7:c3:bc:
c5:2d:0f:eb:b1:39:ba:23:c4:8f:87:a6:54:38:b6:
37:eb:9e:ef:46:8f:23:aa:cb:43:ea:e9:95:8f:c7:
b8:09:47:ad:91:5d:5e:63:f4:84:50:66:a0:5a:34:
89:e8:7b:d3:fa:0a:3f:ca:fd:d5:49:6a:df:79:27:
82:34:b0:81:e8:1c:f2:6b:e8:d9:d1:cf:86:88:cd:
8f:33:a6:e6:d7:70:39:6e:86:99:72:64:b6:7c:b9:
ba:73:76:11:50:92:83:ea:55:20:3f:95:53:27:c3:
d6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BF:35:CA:09:1B:4B:A8:BC:0F:F4:5A:A2:39:C1:85:55:F9:DA:3D
X509v3 Authority Key Identifier:
keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ce:14:07:14:39:48:05:23:6d:53:14:cd:56:9d:ba:87:77:
9c:c6:3b:82:e5:90:48:17:e3:97:ad:31:eb:35:47:ab:f3:68:
38:4b:e0:f9:9c:b0:79:7d:f0:b1:a7:f6:33:95:b1:6b:75:58:
d6:ba:61:10:45:c8:b0:9a:b7:fb:e1:eb:77:bf:65:39:0b:eb:
ae:ed:52:7a:de:0b:f8:3a:67:4a:bc:00:cf:71:1f:9b:f0:36:
0b:54:8a:a7:c3:49:14:5c:fa:e0:0a:e0:39:a2:5e:bb:e2:67:
a3:fd:99:a8:95:63:03:51:25:ed:c3:06:0b:e1:09:6c:92:21:
c2:ef:c9:5a:01:23:56:7b:01:25:eb:f6:18:f7:0d:d8:4c:04:
ae:0d:93:a4:e5:61:e8:f5:17:85:a2:63:fb:cd:07:09:61:f7:
dd:a5:19:53:87:71:a8:ac:8d:82:75:e1:0d:17:d6:cd:2f:7a:
48:b1:2a:02:0f:bf:6e:ff:a2:a0:7b:00:df:9c:af:85:35:46:
8f:9e:28:4d:22:27:d7:cd:77:cd:b1:0c:d6:43:36:57:1b:d9:
a6:f9:5d:73:85:06:d0:e5:00:99:64:f5:33:91:bb:4a:82:d1:
d5:27:46:ff:3d:2e:52:10:72:2b:e2:11:ed:65:67:a5:7b:bb:
5b:3e:fa:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMa+qNIRrZLqjaU8sOWQjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NzAyMWRjZGY0NGI2YWZkZDM4MTA1NDdjNTVhNzliZDFh
OWZhM2IwHhcNMjUwNDE5MDUwMTAyWhcNMjUwNDIwMDUwMTAyWjAzMTEwLwYDVQQD
Eyg4M2JmMzVjYTA5MWI0YmE4YmMwZmY0NWFhMjM5YzE4NTU1ZjlkYTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ThYDrHdDhXu0AXHRCpWKHy3n+bP
WPlF6HIj/mS6uG5vhI07wcFPgvPS/7QfLGJjaHZatdUlgXKN/Bpss1TIzU2rqvwy
zFOjhK7m8m5lnjI41NwHocqH49HXed7WgjqJPgYqFMSZK16pAg+gRMJS2eVC6IGE
fDD3d4RjwlxgwUOT79lZJxYL2YOOwjhzTNTmVnjHw7zFLQ/rsTm6I8SPh6ZUOLY3
657vRo8jqstD6umVj8e4CUetkV1eY/SEUGagWjSJ6HvT+go/yv3VSWrfeSeCNLCB
6Bzya+jZ0c+GiM2PM6bm13A5boaZcmS2fLm6c3YRUJKD6lUgP5VTJ8PWxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIO/NcoJG0uovA/0WqI5wYVV+do9MB8GA1UdIwQY
MBaAFFdwIdzfRLav3TgQVHxVp5vRqfo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQt
YzkwN2FlMWMyMTFlLzEvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQtYzkwN2FlMWMyMTFl
LzEvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj84UBxQ5
SAUjbVMUzVaduod3nMY7guWQSBfjl60x6zVHq/NoOEvg+ZyweX3wsaf2M5Wxa3VY
1rphEEXIsJq3++Hrd79lOQvrru1Set4L+DpnSrwAz3Efm/A2C1SKp8NJFFz64Arg
OaJeu+Jno/2ZqJVjA1El7cMGC+EJbJIhwu/JWgEjVnsBJev2GPcN2EwErg2TpOVh
6PUXhaJj+80HCWH33aUZU4dxqKyNgnXhDRfWzS96SLEqAg+/bv+ioHsA35yvhTVG
j54oTSIn1813zbEM1kM2VxvZpvldc4UG0OUAmWT1M5G7SoLR1SdG/z0uUhByK+IR
7WVnpXu7Wz76cg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:16:52 2025 by rpki-client