Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
File: 0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json)
Hash identifier: s0WblNxxZzfbAdYoOao1YI6twzHLAH8qvMp5faFQwVw=
Subject key identifier: E0:67:DB:59:20:AE:F1:BB:CD:22:75:A6:54:48:03:65:0F:85:05:F8
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial: 0196406740427678BB5946A7A145FAC876D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
Manifest number: 14F6
Signing time: Wed 16 Apr 2025 21:00:30 +0000
Manifest this update: Wed 16 Apr 2025 21:00:30 +0000
Manifest next update: Thu 17 Apr 2025 21:00:30 +0000
Files and hashes: 1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: fzeI16UFo0XOZ7pw/71U9aq6jE9+sTprwjAd5OeCfwk=)
2: LRASGK8bnjRh3Rbn6PQN7XK5vQs.roa (hash: y9RCkFYDGvkx4ChSuu0Pj7rsJUtgKx4KvbaPWMrtBdc=)
3: Ol6cakySox8hAM1UTPadAKzEir0.roa (hash: lTSqqQlvMmfJ0PFsajUlICgmTmejaL+5zgVSVupMTUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:40:42:76:78:bb:59:46:a7:a1:45:fa:c8:76:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Validity
Not Before: Apr 16 21:00:30 2025 GMT
Not After : Apr 17 21:00:30 2025 GMT
Subject: CN=e067db5920aef1bbcd2275a6544803650f8505f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:80:98:11:3c:df:78:9f:9a:35:d4:59:f1:
ec:90:b7:88:fe:3c:97:dc:de:48:dc:8c:ac:c6:93:
86:0c:10:27:5e:c3:3a:a2:0f:7a:73:9f:fd:9f:03:
80:9e:59:93:1d:2e:32:c6:f5:70:27:b9:22:57:5b:
74:bc:45:f7:d9:16:55:40:6b:21:ce:dc:2d:2e:48:
43:31:d6:08:ca:ee:2b:42:e9:f5:be:98:f0:e3:0c:
b6:af:16:83:18:44:28:82:89:bf:6f:c8:fa:c5:7e:
2f:12:7a:79:90:8f:61:92:68:05:29:28:a0:12:1d:
9a:64:63:a8:50:64:4c:ce:79:b2:9c:9c:de:b0:41:
f8:bc:a1:ac:d6:47:ea:c3:7a:63:9e:34:87:2c:77:
a0:d9:8e:7f:59:e9:da:8e:e7:67:29:34:04:44:94:
37:b5:43:b0:9f:6f:46:1b:4f:b5:95:9f:9f:8e:ed:
a5:dc:a0:d8:c5:5a:8a:90:82:68:e6:6c:96:88:3b:
ed:35:d4:09:d8:ab:60:8b:72:2e:d1:89:c4:72:a5:
ba:0f:07:0b:57:29:1f:d6:af:1d:3d:d1:1e:8d:1a:
90:2a:4d:7f:c0:3d:7b:59:ea:58:10:06:af:ef:67:
f2:31:e1:75:1d:4c:2a:72:dd:46:dd:eb:74:9d:34:
ae:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:67:DB:59:20:AE:F1:BB:CD:22:75:A6:54:48:03:65:0F:85:05:F8
X509v3 Authority Key Identifier:
keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6b:70:40:34:7b:8c:cd:b2:63:1c:f0:48:92:10:d7:04:6d:
af:96:7e:5c:90:be:7a:97:66:b8:06:3e:1d:9b:d8:47:b6:eb:
a2:fc:3e:1d:67:29:5d:42:6a:ff:05:e5:93:72:01:ad:82:74:
a6:68:8d:54:0e:21:44:a3:34:8a:95:09:08:ff:ec:d0:45:62:
e0:33:3d:34:37:66:80:cf:72:c1:6b:a6:97:03:9c:b7:24:b4:
5b:ba:cc:a3:b8:a1:c8:05:93:dd:64:41:c6:d4:47:24:24:f8:
2c:5d:97:58:ac:cd:0a:b5:2d:78:dd:05:c5:bb:44:91:b7:36:
0b:0f:1c:6f:ac:82:20:45:96:9b:c5:e7:ae:b5:be:6f:fb:a5:
3a:50:ac:1c:cf:3a:88:81:a2:97:da:0d:b3:54:9f:2d:c2:b7:
f0:16:94:15:53:91:a7:b0:fc:4f:62:a1:b1:86:99:9e:c4:24:
01:3b:51:35:2a:3f:14:ef:d5:26:f2:5f:a1:f1:1c:63:c9:40:
3a:7a:b6:72:40:9e:51:e6:3a:e3:88:df:ca:92:f6:6c:18:95:
59:6f:5e:5a:26:fe:f1:1c:cc:16:ad:3b:42:66:3c:8a:5e:66:
e2:76:ef:a8:6c:7a:f6:58:7b:4b:6e:5d:a8:34:ea:8e:0c:0a:
67:a1:bc:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZAZ0BCdni7WUanoUX6yHbYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZmEyYTcwMDAzODgwZDc1NjE2MTJhM2MwYTEyNjAyY2Uz
NTQxYTQwHhcNMjUwNDE2MjEwMDMwWhcNMjUwNDE3MjEwMDMwWjAzMTEwLwYDVQQD
EyhlMDY3ZGI1OTIwYWVmMWJiY2QyMjc1YTY1NDQ4MDM2NTBmODUwNWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh+AmBE833ifmjXUWfHskLeI/jyX
3N5I3IysxpOGDBAnXsM6og96c5/9nwOAnlmTHS4yxvVwJ7kiV1t0vEX32RZVQGsh
ztwtLkhDMdYIyu4rQun1vpjw4wy2rxaDGEQogom/b8j6xX4vEnp5kI9hkmgFKSig
Eh2aZGOoUGRMznmynJzesEH4vKGs1kfqw3pjnjSHLHeg2Y5/WenajudnKTQERJQ3
tUOwn29GG0+1lZ+fju2l3KDYxVqKkIJo5myWiDvtNdQJ2Ktgi3Iu0YnEcqW6DwcL
Vykf1q8dPdEejRqQKk1/wD17WepYEAav72fyMeF1HUwqct1G3et0nTSu0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBn21kgrvG7zSJ1plRIA2UPhQX4MB8GA1UdIwQY
MBaAFNL6KnAAOIDXVhYSo8ChJgLONUGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHZvcWNBQTRnTmRXRmhLandLRW1BczQxUWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iMjA3ZDEtOGI3Yi00ZTI3LTgzNzAt
YTc5NjUwMWU3N2ExLzEvMHZvcWNBQTRnTmRXRmhLandLRW1BczQxUWFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9iMjA3ZDEtOGI3Yi00ZTI3LTgzNzAtYTc5NjUwMWU3N2Ex
LzEvMHZvcWNBQTRnTmRXRmhLandLRW1BczQxUWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGtwQDR7
jM2yYxzwSJIQ1wRtr5Z+XJC+epdmuAY+HZvYR7brovw+HWcpXUJq/wXlk3IBrYJ0
pmiNVA4hRKM0ipUJCP/s0EVi4DM9NDdmgM9ywWumlwOctyS0W7rMo7ihyAWT3WRB
xtRHJCT4LF2XWKzNCrUteN0FxbtEkbc2Cw8cb6yCIEWWm8XnrrW+b/ulOlCsHM86
iIGil9oNs1SfLcK38BaUFVORp7D8T2KhsYaZnsQkATtRNSo/FO/VJvJfofEcY8lA
Onq2ckCeUeY644jfypL2bBiVWW9eWib+8RzMFq07QmY8il5m4nbvqGx69lh7S25d
qDTqjgwKZ6G8fA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:34:32 2025 by rpki-client