Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
File: x-ur14baE4BWVbG1UB_cv0M7x40.mft (raw, json)
Hash identifier: 7zKb/e7ot5eqwmapGdURo1bSe/IufjOwBBBtmHINaxs=
Subject key identifier: 24:D6:A1:78:C4:CC:FE:4A:78:8E:E3:65:8B:31:6F:E9:E9:34:16:D7
Authority key identifier: C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
Certificate issuer: /CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Certificate serial: 0196523677040C27BA31DB3840DDC5EBEB67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
Manifest number: 0C82
Signing time: Sun 20 Apr 2025 08:00:23 +0000
Manifest this update: Sun 20 Apr 2025 08:00:23 +0000
Manifest next update: Mon 21 Apr 2025 08:00:23 +0000
Files and hashes: 1: DwNEa67GeVfXPcLrWPlMm4OLjVo.roa (hash: 3gEhvhLUNasIQ2pRn7FSbquTzSKI+z6q4epOcxacj1o=)
2: elJTMVmgnWj44OPlL-6xmFMzLhQ.roa (hash: GWf5WI3kD5bsPfeiOoXwWgNYLd20Fx5ww7PTXcPPcr4=)
3: x-ur14baE4BWVbG1UB_cv0M7x40.crl (hash: 0S8UCriOOD1NzPD8bSooanWzEloQXPIV1Ie8lQ/ZwOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:77:04:0c:27:ba:31:db:38:40:dd:c5:eb:eb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Validity
Not Before: Apr 20 08:00:23 2025 GMT
Not After : Apr 21 08:00:23 2025 GMT
Subject: CN=24d6a178c4ccfe4a788ee3658b316fe9e93416d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:ba:6f:cf:ae:3d:b6:b4:31:94:64:1d:ee:
fe:61:54:31:21:9b:85:4e:20:55:8e:5c:30:92:69:
48:27:e4:e3:c9:40:95:0a:43:a9:52:cd:19:bb:1d:
e2:60:81:5d:a2:e5:3c:1e:14:0b:d0:a9:85:4e:ea:
22:bd:60:c9:78:d3:55:d7:ab:e0:4c:c7:a9:8a:0b:
7f:87:ae:9a:1f:82:96:46:42:22:16:bf:97:97:a7:
f1:4a:25:52:c7:73:b8:d2:ea:16:16:54:72:f8:4f:
11:70:4b:0a:3c:54:05:25:3a:0f:8b:f7:bd:b6:8d:
04:1f:24:b0:32:9e:21:14:70:35:ef:66:a6:72:9c:
21:81:8a:b6:ea:71:91:9f:5b:e5:df:fa:52:2c:01:
62:18:a7:d4:16:f1:0d:e2:ab:2d:90:0c:ad:fa:6f:
7c:14:aa:33:a9:bd:ce:cb:71:96:e0:f9:b4:6c:28:
50:e8:d2:fc:07:6b:b1:cf:db:2c:b7:5e:0b:e6:d2:
c5:00:f5:e9:e7:53:a2:2b:88:7d:5b:6c:33:39:a8:
74:62:a3:dc:6e:b1:17:7b:19:74:91:7a:d2:64:f4:
62:67:fd:29:20:32:0b:ad:7c:6e:16:7b:68:e7:87:
19:7b:58:89:c5:53:a9:9d:6e:50:53:27:b5:12:9a:
b6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D6:A1:78:C4:CC:FE:4A:78:8E:E3:65:8B:31:6F:E9:E9:34:16:D7
X509v3 Authority Key Identifier:
keyid:C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:89:ae:a7:f1:a4:b5:41:06:72:40:73:12:f5:be:48:2f:6f:
96:37:5f:a2:b6:58:a1:75:f1:09:54:80:a4:49:a8:dd:94:9e:
d9:de:4f:01:31:1c:ca:60:59:95:27:bf:ba:06:f5:0e:8b:5d:
2f:81:cf:9e:c5:f6:58:08:1d:f0:5f:e6:91:2f:58:ee:2a:22:
fb:d8:42:e4:97:91:30:ea:80:b4:c1:c9:34:46:9b:50:e2:df:
e0:89:12:41:6d:dc:9f:24:e2:bc:0b:6e:1c:56:e4:b5:d0:4a:
50:a9:63:15:e8:7c:d9:f2:06:dc:99:de:13:76:14:ae:b1:8f:
4f:54:2f:74:fa:2c:66:9b:09:ab:44:f4:5f:36:8a:58:90:84:
55:94:f7:d1:50:4e:a2:47:17:48:a6:e4:c8:28:c3:12:5d:04:
59:6e:2e:96:66:3d:71:00:c8:c1:6b:d2:3a:d0:7b:63:24:02:
ba:e2:2b:c0:ab:ee:08:f2:e1:7c:c9:d1:0e:54:8d:8c:c8:11:
0b:65:c9:0a:2a:ff:71:c4:3f:c7:df:26:d3:23:21:de:f2:f0:
ba:a0:09:5e:4d:5a:2f:c6:99:38:49:4e:69:37:c2:e9:5c:8f:
b9:49:f2:f0:42:f5:b9:c3:cd:89:95:a9:48:3a:ad:2c:0d:9b:
12:a0:86:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSNncEDCe6Mds4QN3F6+tnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZWJhYmQ3ODZkYTEzODA1NjU1YjFiNTUwMWZkY2JmNDMz
YmM3OGQwHhcNMjUwNDIwMDgwMDIzWhcNMjUwNDIxMDgwMDIzWjAzMTEwLwYDVQQD
EygyNGQ2YTE3OGM0Y2NmZTRhNzg4ZWUzNjU4YjMxNmZlOWU5MzQxNmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdG6b8+uPba0MZRkHe7+YVQxIZuF
TiBVjlwwkmlIJ+TjyUCVCkOpUs0Zux3iYIFdouU8HhQL0KmFTuoivWDJeNNV16vg
TMepigt/h66aH4KWRkIiFr+Xl6fxSiVSx3O40uoWFlRy+E8RcEsKPFQFJToPi/e9
to0EHySwMp4hFHA172amcpwhgYq26nGRn1vl3/pSLAFiGKfUFvEN4qstkAyt+m98
FKozqb3Oy3GW4Pm0bChQ6NL8B2uxz9sst14L5tLFAPXp51OiK4h9W2wzOah0YqPc
brEXexl0kXrSZPRiZ/0pIDILrXxuFnto54cZe1iJxVOpnW5QUye1Epq2/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTWoXjEzP5KeI7jZYsxb+npNBbXMB8GA1UdIwQY
MBaAFMfrq9eG2hOAVlWxtVAf3L9DO8eNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveC11cjE0YmFFNEJXVmJHMVVCX2N2ME03eDQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jMDY0YTUtZDdhOS00ZTZmLThmZDgt
MGRjZDAzZGMwODk3LzEveC11cjE0YmFFNEJXVmJHMVVCX2N2ME03eDQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9jMDY0YTUtZDdhOS00ZTZmLThmZDgtMGRjZDAzZGMwODk3
LzEveC11cjE0YmFFNEJXVmJHMVVCX2N2ME03eDQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYmup/Gk
tUEGckBzEvW+SC9vljdforZYoXXxCVSApEmo3ZSe2d5PATEcymBZlSe/ugb1Dotd
L4HPnsX2WAgd8F/mkS9Y7ioi+9hC5JeRMOqAtMHJNEabUOLf4IkSQW3cnyTivAtu
HFbktdBKUKljFeh82fIG3JneE3YUrrGPT1QvdPosZpsJq0T0XzaKWJCEVZT30VBO
okcXSKbkyCjDEl0EWW4ulmY9cQDIwWvSOtB7YyQCuuIrwKvuCPLhfMnRDlSNjMgR
C2XJCir/ccQ/x98m0yMh3vLwuqAJXk1aL8aZOElOaTfC6VyPuUny8EL1ucPNiZWp
SDqtLA2bEqCGvA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:37 2025 by rpki-client