Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
File: _m1KNjQMPa2HoDkh0PiP9lFiiXo.mft (raw, json)
Hash identifier: imvJRPwZPf2Hv11goZuR9Mz9wpWxP3HnWbwMlM97CG0=
Subject key identifier: 57:DC:2A:EB:07:C4:33:76:36:A8:F1:52:FA:B2:11:7A:87:1C:C7:87
Authority key identifier: FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
Certificate issuer: /CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Certificate serial: 01958BF2304DE2D8A64E996FE38AA15800A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
Manifest number: 095C
Signing time: Wed 12 Mar 2025 20:00:59 +0000
Manifest this update: Wed 12 Mar 2025 20:00:59 +0000
Manifest next update: Thu 13 Mar 2025 20:00:59 +0000
Files and hashes: 1: _m1KNjQMPa2HoDkh0PiP9lFiiXo.crl (hash: BUOjuiWS1yWWoDd5SpVBxqalRaPKEjfcYpw+Sf4kMGA=)
2: fNjIviZE-rak2nx-LNx6AaZmje8.roa (hash: OJD0Sen5B4Pm8+7K0PKLwNWQlIZiuvKDQ8wOO8ai7W8=)
3: vtbeMLgEiJIMz5_yaCwan-k-_x8.roa (hash: aUmr6KPHOpH3nBu3CynTnd8kH0I7Kbxq4Ukon/iSThY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:30:4d:e2:d8:a6:4e:99:6f:e3:8a:a1:58:00:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Validity
Not Before: Mar 12 20:00:59 2025 GMT
Not After : Mar 13 20:00:59 2025 GMT
Subject: CN=57dc2aeb07c4337636a8f152fab2117a871cc787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:c4:a7:b1:65:7d:8c:88:84:35:a9:c8:81:
55:26:70:2d:28:22:2a:da:24:1c:93:7d:1f:69:bd:
3b:fa:35:d6:ae:1b:4f:5c:db:f5:df:43:5a:8e:60:
f8:6f:ba:61:39:dd:93:40:e2:df:4f:bf:34:d0:15:
02:3a:b3:54:57:00:f0:f5:a4:99:bd:69:75:de:a7:
f5:5f:87:95:66:02:62:b6:a3:76:cb:9a:d5:4f:bb:
3b:ad:31:61:15:86:d7:b1:16:9c:05:b9:84:b6:f6:
4d:67:a3:0e:dd:60:b9:89:26:98:6c:8a:4a:b6:4f:
59:ea:02:43:56:48:13:f7:03:9f:db:6b:b0:b1:79:
34:c0:b1:79:93:75:ff:52:27:0f:47:7b:8e:5f:b6:
e8:17:44:ad:61:64:bf:bb:18:1c:37:23:6c:b5:88:
12:1c:c9:f0:f2:af:cd:d2:35:be:11:61:d1:f5:99:
82:7a:1e:35:27:69:0f:64:18:0c:37:70:b0:31:ba:
82:27:95:b4:63:c0:c1:f0:86:0b:36:d4:6d:3c:eb:
83:ce:7f:72:8f:f3:74:b2:a8:10:62:51:f5:00:3b:
65:a3:ab:d6:c9:1e:d0:d6:03:5d:d1:12:09:47:ae:
09:9e:c2:5c:3f:d4:06:0b:b1:73:5a:b2:aa:c3:79:
fb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DC:2A:EB:07:C4:33:76:36:A8:F1:52:FA:B2:11:7A:87:1C:C7:87
X509v3 Authority Key Identifier:
keyid:FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:32:c0:ea:86:6b:f9:61:83:b0:84:20:ef:bb:fe:b0:42:a5:
73:ca:88:99:5c:90:36:63:9b:c0:69:ba:22:aa:fe:32:43:2b:
cb:0f:56:1c:9a:e7:10:96:bb:ee:af:cf:ac:58:2d:2c:00:ac:
81:8d:26:ea:f7:23:d3:68:28:80:6a:65:0f:ce:b7:f1:e6:55:
3e:52:69:5c:d6:02:50:9c:be:8c:b1:d1:08:d5:97:b1:54:82:
a1:fe:2b:cd:eb:ac:9b:ea:5e:48:4d:60:02:8a:53:3a:70:80:
13:44:b4:9f:bf:6c:1f:b1:06:be:02:71:c5:07:4f:94:8e:95:
7c:ee:16:54:11:90:13:4e:c6:8c:b2:c4:0c:47:94:6b:33:f0:
01:61:1c:a9:c8:25:9c:fd:22:55:ac:15:d8:13:30:a1:a8:86:
ba:ce:76:53:24:65:dc:d0:ab:a3:ed:6d:d2:1a:67:64:b5:14:
21:4f:d0:0a:27:f0:1a:5f:6f:25:60:04:ce:be:9e:7c:4f:d4:
9d:e3:13:bb:14:ea:d0:ea:c0:2e:d3:3a:11:2f:c8:35:4e:ea:
f7:ce:cd:1f:a3:cf:99:f9:a8:9d:10:06:76:4c:63:0b:e5:7f:
62:3a:33:16:70:b7:31:1d:e5:a9:68:c1:77:f6:ce:13:3b:77:
33:27:0e:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWL8jBN4timTplv44qhWACgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNmQ0YTM2MzQwYzNkYWQ4N2EwMzkyMWQwZjg4ZmY2NTE2
Mjg5N2EwHhcNMjUwMzEyMjAwMDU5WhcNMjUwMzEzMjAwMDU5WjAzMTEwLwYDVQQD
Eyg1N2RjMmFlYjA3YzQzMzc2MzZhOGYxNTJmYWIyMTE3YTg3MWNjNzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+rEp7FlfYyIhDWpyIFVJnAtKCIq
2iQck30fab07+jXWrhtPXNv130NajmD4b7phOd2TQOLfT7800BUCOrNUVwDw9aSZ
vWl13qf1X4eVZgJitqN2y5rVT7s7rTFhFYbXsRacBbmEtvZNZ6MO3WC5iSaYbIpK
tk9Z6gJDVkgT9wOf22uwsXk0wLF5k3X/UicPR3uOX7boF0StYWS/uxgcNyNstYgS
HMnw8q/N0jW+EWHR9ZmCeh41J2kPZBgMN3CwMbqCJ5W0Y8DB8IYLNtRtPOuDzn9y
j/N0sqgQYlH1ADtlo6vWyR7Q1gNd0RIJR64JnsJcP9QGC7FzWrKqw3n7VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfcKusHxDN2NqjxUvqyEXqHHMeHMB8GA1UdIwQY
MBaAFP5tSjY0DD2th6A5IdD4j/ZRYol6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX20xS05qUU1QYTJIb0RraDBQaVA5bEZpaVhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzA0OTAtZmNhZS00OGVjLTkyNDkt
YmViYTc1NGFkZDU3LzEvX20xS05qUU1QYTJIb0RraDBQaVA5bEZpaVhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzA0OTAtZmNhZS00OGVjLTkyNDktYmViYTc1NGFkZDU3
LzEvX20xS05qUU1QYTJIb0RraDBQaVA5bEZpaVhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjLA6oZr
+WGDsIQg77v+sEKlc8qImVyQNmObwGm6Iqr+MkMryw9WHJrnEJa77q/PrFgtLACs
gY0m6vcj02gogGplD8638eZVPlJpXNYCUJy+jLHRCNWXsVSCof4rzeusm+peSE1g
AopTOnCAE0S0n79sH7EGvgJxxQdPlI6VfO4WVBGQE07GjLLEDEeUazPwAWEcqcgl
nP0iVawV2BMwoaiGus52UyRl3NCro+1t0hpnZLUUIU/QCifwGl9vJWAEzr6efE/U
neMTuxTq0OrALtM6ES/INU7q987NH6PPmfmonRAGdkxjC+V/YjozFnC3MR3lqWjB
d/bOEzt3MycO4A==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:55 2025 by rpki-client