Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
File: dF5kPQIextIbR1rkYN3tz35rP2Y.mft (raw, json)
Hash identifier: IozfW4I5sDxG9CIv65RFCqBCSo5yiwfVfGEtnh9d2FQ=
Subject key identifier: CB:E3:65:38:0A:AA:58:67:93:0F:05:1F:5D:B7:7E:98:D3:76:29:23
Authority key identifier: 74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66
Certificate issuer: /CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66
Certificate serial: 0196515BDED48F21A7D7F3FB2F4889FA29A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
Manifest number: 04CD
Signing time: Sun 20 Apr 2025 04:01:37 +0000
Manifest this update: Sun 20 Apr 2025 04:01:37 +0000
Manifest next update: Mon 21 Apr 2025 04:01:37 +0000
Files and hashes: 1: dF5kPQIextIbR1rkYN3tz35rP2Y.crl (hash: rHXuJtSSwpr4CtlRxHeWG7wtlDBFkq34IAZ/wIbQ+Ug=)
2: nqx9W3CT9LMiI-_qYVZ2zzABCM4.roa (hash: +L2mXS+fLf5z/UHFl8eJlZqBjyyNEu9DFCCZwu03Oh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:de:d4:8f:21:a7:d7:f3:fb:2f:48:89:fa:29:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66
Validity
Not Before: Apr 20 04:01:37 2025 GMT
Not After : Apr 21 04:01:37 2025 GMT
Subject: CN=cbe365380aaa5867930f051f5db77e98d3762923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:29:28:be:63:87:03:78:12:c8:82:bd:2b:ba:
ae:ac:ec:ea:0e:55:09:a2:f6:d8:79:04:b8:d7:5f:
e1:22:c4:e8:db:1d:95:d9:be:b3:57:02:fd:55:b6:
f8:6f:48:a9:e6:62:42:e6:e9:2a:0d:5a:dd:42:64:
69:88:43:57:0f:60:6b:12:db:e9:1f:4f:d3:61:16:
4e:fc:b4:f0:a0:d1:74:8f:ee:f4:08:c5:64:15:a9:
af:c9:52:b2:9f:78:57:66:ac:e1:62:b1:76:42:27:
5b:cf:47:73:53:5f:87:b8:32:cf:27:71:28:a5:2d:
c9:a3:30:8f:56:92:48:af:41:98:6e:b0:46:07:a2:
6d:e3:44:0a:4f:eb:b6:11:9a:cb:d5:1d:35:2c:8b:
3e:cb:18:ca:dc:65:36:45:ff:4b:07:5f:e4:9d:8f:
2e:9c:7f:f5:e2:10:d4:da:a0:3a:41:6a:29:b7:72:
28:8f:81:80:df:5c:aa:5d:87:a7:33:48:95:fc:39:
62:6f:00:f9:ea:12:c5:bd:18:84:19:a0:59:f1:39:
66:47:9f:87:4e:1a:ab:1f:f5:ca:a7:75:64:f3:71:
33:5d:e4:a7:2b:55:a6:fb:a3:ae:8b:65:d0:b1:bb:
33:1d:62:8d:25:13:84:b4:4a:25:a8:6b:ae:f5:e1:
0e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E3:65:38:0A:AA:58:67:93:0F:05:1F:5D:B7:7E:98:D3:76:29:23
X509v3 Authority Key Identifier:
keyid:74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:1f:24:d2:54:e7:09:cc:d5:9c:4a:42:00:87:f0:86:39:76:
f3:8b:7c:ec:45:f8:6d:9e:d5:da:d4:ba:e1:95:1e:cd:04:70:
83:88:56:28:d1:f3:c0:70:21:7c:57:58:88:31:45:f3:0c:f2:
6f:8a:dd:e5:c3:7d:c2:e4:39:ee:db:8e:4e:a3:c8:e9:51:7d:
21:e0:e6:da:a8:82:60:31:3b:a7:15:5c:f5:34:f0:9c:98:37:
8c:2c:97:8e:44:85:ae:1e:65:8f:be:13:58:c5:cb:7e:3e:bc:
90:7a:61:0a:a1:5c:35:a5:07:0a:c2:3b:96:4c:8d:8c:89:70:
f0:ca:68:4b:75:ab:e5:2e:5e:74:eb:fa:76:5b:f4:2d:5a:dd:
c1:72:f2:1a:26:68:7d:c0:72:39:bb:32:39:b3:7b:25:76:28:
1c:52:89:2f:05:80:4e:f9:39:c1:88:af:e6:a8:f9:4c:d0:c9:
31:23:e7:07:f5:0b:35:a6:10:81:a5:82:33:ca:a5:6b:e0:cf:
a3:29:09:2f:63:4e:2a:71:b7:fb:2b:54:ee:75:4a:90:14:81:
c4:fd:01:1b:95:c5:37:a6:13:d6:18:f8:e9:ea:f7:2c:e8:22:
05:29:2a:ae:7a:6b:f9:d2:3c:51:f6:2a:5d:db:23:91:45:fd:
25:82:6d:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRW97UjyGn1/P7L0iJ+imgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NWU2NDNkMDIxZWM2ZDIxYjQ3NWFlNDYwZGRlZGNmN2U2
YjNmNjYwHhcNMjUwNDIwMDQwMTM3WhcNMjUwNDIxMDQwMTM3WjAzMTEwLwYDVQQD
EyhjYmUzNjUzODBhYWE1ODY3OTMwZjA1MWY1ZGI3N2U5OGQzNzYyOTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSkovmOHA3gSyIK9K7qurOzqDlUJ
ovbYeQS411/hIsTo2x2V2b6zVwL9Vbb4b0ip5mJC5ukqDVrdQmRpiENXD2BrEtvp
H0/TYRZO/LTwoNF0j+70CMVkFamvyVKyn3hXZqzhYrF2Qidbz0dzU1+HuDLPJ3Eo
pS3JozCPVpJIr0GYbrBGB6Jt40QKT+u2EZrL1R01LIs+yxjK3GU2Rf9LB1/knY8u
nH/14hDU2qA6QWopt3Ioj4GA31yqXYenM0iV/DlibwD56hLFvRiEGaBZ8TlmR5+H
ThqrH/XKp3Vk83EzXeSnK1Wm+6Oui2XQsbszHWKNJROEtEolqGuu9eEOFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvjZTgKqlhnkw8FH123fpjTdikjMB8GA1UdIwQY
MBaAFHReZD0CHsbSG0da5GDd7c9+az9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEY1a1BRSWV4dEliUjFya1lOM3R6MzVyUDJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi80ZGE1ZDUtMzE1Mi00ZjU0LWEwYTkt
YTk1YWVmOWM5MWQ5LzEvZEY1a1BRSWV4dEliUjFya1lOM3R6MzVyUDJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi80ZGE1ZDUtMzE1Mi00ZjU0LWEwYTktYTk1YWVmOWM5MWQ5
LzEvZEY1a1BRSWV4dEliUjFya1lOM3R6MzVyUDJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuB8k0lTn
CczVnEpCAIfwhjl284t87EX4bZ7V2tS64ZUezQRwg4hWKNHzwHAhfFdYiDFF8wzy
b4rd5cN9wuQ57tuOTqPI6VF9IeDm2qiCYDE7pxVc9TTwnJg3jCyXjkSFrh5lj74T
WMXLfj68kHphCqFcNaUHCsI7lkyNjIlw8MpoS3Wr5S5edOv6dlv0LVrdwXLyGiZo
fcByObsyObN7JXYoHFKJLwWATvk5wYiv5qj5TNDJMSPnB/ULNaYQgaWCM8qla+DP
oykJL2NOKnG3+ytU7nVKkBSBxP0BG5XFN6YT1hj46er3LOgiBSkqrnpr+dI8UfYq
XdsjkUX9JYJtmA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:17:29 2025 by rpki-client