Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
File: x43nqz8ef8G8o1IOrP4OGn5qVf4.mft (raw, json)
Hash identifier: KuyYeSKdepa6yMWDeyLDzn2L9EecQPkzj6Bbr7X5dSk=
Subject key identifier: 77:9C:5D:99:A3:A2:67:E9:02:58:55:C8:D2:CE:28:1E:AE:E1:AE:63
Authority key identifier: C7:8D:E7:AB:3F:1E:7F:C1:BC:A3:52:0E:AC:FE:0E:1A:7E:6A:55:FE
Certificate issuer: /CN=c78de7ab3f1e7fc1bca3520eacfe0e1a7e6a55fe
Certificate serial: 01958CCEB90EC8577D7E3546B9332606DD16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
Manifest number: 1495
Signing time: Thu 13 Mar 2025 00:01:52 +0000
Manifest this update: Thu 13 Mar 2025 00:01:52 +0000
Manifest next update: Fri 14 Mar 2025 00:01:52 +0000
Files and hashes: 1: g8YwGSQJtphdygepP_zngeWXvFU.roa (hash: MN0YFZEniJxqcHz8F+CefbhmwKUatb2Z2T+SIRMCHgk=)
2: x43nqz8ef8G8o1IOrP4OGn5qVf4.crl (hash: nuJjwjUOqMIFzYuXvLjg9CnumArrSLZnQ+TIo9+WTFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:b9:0e:c8:57:7d:7e:35:46:b9:33:26:06:dd:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c78de7ab3f1e7fc1bca3520eacfe0e1a7e6a55fe
Validity
Not Before: Mar 13 00:01:52 2025 GMT
Not After : Mar 14 00:01:52 2025 GMT
Subject: CN=779c5d99a3a267e9025855c8d2ce281eaee1ae63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:04:8c:ad:55:52:61:05:3e:38:f4:5e:11:
2d:67:db:9a:66:47:65:12:4c:4d:52:c0:8c:c6:57:
eb:d3:4e:76:74:69:83:ea:ec:09:d1:80:ab:ea:79:
7a:df:79:eb:f1:e1:ef:6a:68:33:1f:54:fc:38:7d:
36:a7:3a:5e:80:d4:0d:1c:77:24:8d:f8:ca:de:31:
7d:45:4a:9a:0e:ff:4b:ff:ef:1a:d6:66:ed:d8:02:
78:bf:9d:5a:32:d3:e1:89:1b:21:91:99:d7:2b:8a:
92:bd:c4:95:97:bc:39:3b:5b:1f:4d:f4:ea:b2:8d:
5f:70:92:03:e5:b1:51:b8:90:25:ae:44:83:5f:a2:
38:7f:06:b2:6f:cb:16:e1:dd:b6:64:78:09:d3:b6:
97:d8:c9:ec:3f:d8:4e:9c:b0:61:12:dc:d1:a0:83:
dc:8a:94:68:6e:53:c4:52:b1:55:9b:64:95:a2:a2:
32:e4:fd:47:5e:3f:c9:69:d4:ec:62:18:94:61:d3:
39:d1:45:3c:a1:93:3c:62:63:e9:15:de:f8:35:c7:
bb:86:45:29:b0:fc:66:be:23:a9:7a:e8:33:42:57:
b4:3d:1f:d1:c5:bc:39:66:ed:23:1a:bd:97:d5:e6:
c5:d9:fe:ab:ae:a8:73:f6:77:27:9e:c3:7a:39:0f:
29:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9C:5D:99:A3:A2:67:E9:02:58:55:C8:D2:CE:28:1E:AE:E1:AE:63
X509v3 Authority Key Identifier:
keyid:C7:8D:E7:AB:3F:1E:7F:C1:BC:A3:52:0E:AC:FE:0E:1A:7E:6A:55:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c9:84:b6:3f:dd:28:35:6b:d4:e7:53:30:ca:74:63:51:a4:
4d:c3:04:49:4a:a2:db:77:c4:36:6e:23:35:f5:19:5e:84:5a:
9d:ac:48:12:53:14:8d:e6:03:7c:8d:cf:d5:a5:8b:e7:a7:a9:
af:ff:77:f6:ca:c3:0a:bf:e6:26:1d:ed:6d:5f:ba:82:f4:ac:
e3:c4:a5:75:02:78:10:e9:b7:b8:c4:c9:f2:d1:bd:93:62:2b:
05:1b:da:55:4f:66:8b:81:44:8a:a7:5a:15:a8:13:d9:7a:66:
e0:6f:3b:91:7e:aa:03:88:c3:ac:14:f2:da:96:73:bc:c2:9a:
61:30:6a:0a:0a:0e:69:28:97:90:4c:b0:74:4c:bd:4a:91:d5:
fe:07:1b:15:eb:45:08:f9:d9:e6:60:49:e4:1f:57:ad:34:be:
0d:33:66:d6:4b:3a:b9:30:55:48:70:46:a9:6e:07:c3:a5:17:
d0:2c:3a:36:dd:0b:39:33:d9:57:ee:84:98:d7:a2:aa:a3:bd:
2b:ed:2f:32:ae:3e:ee:ef:c0:38:c2:01:70:63:4c:0d:69:b9:
24:19:dc:81:e0:f1:52:35:e3:0e:ba:f1:f4:cd:8f:5b:e5:ff:
4a:09:8a:09:a5:a5:cc:b9:50:76:75:4f:4c:2f:07:ed:2e:86:
ee:f1:e8:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMzrkOyFd9fjVGuTMmBt0WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3OGRlN2FiM2YxZTdmYzFiY2EzNTIwZWFjZmUwZTFhN2U2
YTU1ZmUwHhcNMjUwMzEzMDAwMTUyWhcNMjUwMzE0MDAwMTUyWjAzMTEwLwYDVQQD
Eyg3NzljNWQ5OWEzYTI2N2U5MDI1ODU1YzhkMmNlMjgxZWFlZTFhZTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4oEjK1VUmEFPjj0XhEtZ9uaZkdl
EkxNUsCMxlfr0052dGmD6uwJ0YCr6nl633nr8eHvamgzH1T8OH02pzpegNQNHHck
jfjK3jF9RUqaDv9L/+8a1mbt2AJ4v51aMtPhiRshkZnXK4qSvcSVl7w5O1sfTfTq
so1fcJID5bFRuJAlrkSDX6I4fwayb8sW4d22ZHgJ07aX2MnsP9hOnLBhEtzRoIPc
ipRoblPEUrFVm2SVoqIy5P1HXj/JadTsYhiUYdM50UU8oZM8YmPpFd74Nce7hkUp
sPxmviOpeugzQle0PR/Rxbw5Zu0jGr2X1ebF2f6rrqhz9ncnnsN6OQ8pFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHecXZmjomfpAlhVyNLOKB6u4a5jMB8GA1UdIwQY
MBaAFMeN56s/Hn/BvKNSDqz+Dhp+alX+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDQzbnF6OGVmOEc4bzFJT3JQNE9HbjVxVmY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zNTMzMzgtOWVmYi00MGJkLTk4YTkt
YTdiZjllNTBhZjBiLzEveDQzbnF6OGVmOEc4bzFJT3JQNE9HbjVxVmY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8zNTMzMzgtOWVmYi00MGJkLTk4YTktYTdiZjllNTBhZjBi
LzEveDQzbnF6OGVmOEc4bzFJT3JQNE9HbjVxVmY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZsmEtj/d
KDVr1OdTMMp0Y1GkTcMESUqi23fENm4jNfUZXoRanaxIElMUjeYDfI3P1aWL56ep
r/939srDCr/mJh3tbV+6gvSs48SldQJ4EOm3uMTJ8tG9k2IrBRvaVU9mi4FEiqda
FagT2Xpm4G87kX6qA4jDrBTy2pZzvMKaYTBqCgoOaSiXkEywdEy9SpHV/gcbFetF
CPnZ5mBJ5B9XrTS+DTNm1ks6uTBVSHBGqW4Hw6UX0Cw6Nt0LOTPZV+6EmNeiqqO9
K+0vMq4+7u/AOMIBcGNMDWm5JBncgeDxUjXjDrrx9M2PW+X/SgmKCaWlzLlQdnVP
TC8H7S6G7vHoNQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:56 2025 by rpki-client