Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
File: IwNA0n5LJPkSSXcyLts2lC4tFgw.mft (raw, json)
Hash identifier: LRO0VoZOBgypMEORFMocZc9uegzl6DfCu5d0U+pPEJw=
Subject key identifier: E1:C8:22:81:66:5E:B9:E4:77:F0:53:E0:CE:4B:20:E5:57:A8:CD:44
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial: 019611A0D3165C44C563F5B1E534FC267ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
Manifest number: 14DE
Signing time: Mon 07 Apr 2025 19:01:14 +0000
Manifest this update: Mon 07 Apr 2025 19:01:14 +0000
Manifest next update: Tue 08 Apr 2025 19:01:14 +0000
Files and hashes: 1: 8BE15BYRjJfhZasQiCcSRq-1rvE.roa (hash: owl3mrEo7nmudL7UJFk7qfjK5dtTSEPpdF0yRa2bSts=)
2: 8pfPZSOu9OxWh0zIohg91aPGe8w.roa (hash: c5LZlJIp5DIk0u0EVUZdwpG29wBKxdLqbOnohSJsuL0=)
3: IwNA0n5LJPkSSXcyLts2lC4tFgw.crl (hash: AQnVDCqSkKYUOiVTikCH8XyYEaCLCqVkwBK8aKZrLZQ=)
4: W5_MS3jBPdXrXt2CXzKVEDSySg4.roa (hash: 5kr0YkXkQlloL0Dx58yHdS9CGeVUoXp4B0GMVprtw4I=)
5: YZdW1FTou_f-R0pbpF5XZ4Tx3hg.roa (hash: zlg3+gSw7tZCxS27EU5I1VhaiNCdA3Z7IiLzIapPksE=)
6: j5QKeuGXTRBwPGjQWWnfRFS80gs.roa (hash: Z4Hp9oqaE6vPUIIGvGUpRfdgDDW4cmfUljTJCbGbKQk=)
7: nAr5TcbaRaUgvGs6GhoEMZYw2k4.roa (hash: PsVErZ9iC+yU1AQTc2kN6DO2ltE02bbxJGF/AxC6Z9Q=)
8: qH4AOngGgCDKos4oiBE8L48PaSU.roa (hash: wAl3jqMD73juUqzGb6OKFl9PHSoZSU+evXbe0KXVLu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a0:d3:16:5c:44:c5:63:f5:b1:e5:34:fc:26:7e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
Validity
Not Before: Apr 7 19:01:14 2025 GMT
Not After : Apr 8 19:01:14 2025 GMT
Subject: CN=e1c82281665eb9e477f053e0ce4b20e557a8cd44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d0:39:ef:65:6c:8e:d2:f5:4f:6c:59:4b:be:
8e:97:9d:d8:fc:bc:d4:60:1f:bb:c0:05:42:00:4b:
90:de:a4:66:5a:c2:99:88:6c:94:4c:59:ee:14:fa:
85:37:4d:f4:bd:38:d9:f5:31:b5:a9:9c:d0:7a:54:
f8:07:aa:e8:c2:c1:75:b1:d1:f4:e2:d1:c1:04:68:
f7:18:9b:c2:9f:bb:4f:2d:27:99:0b:27:5c:7a:d8:
3d:9b:79:fe:67:bc:f4:33:3e:eb:7d:f9:50:9b:26:
85:2d:0c:dd:97:ba:88:77:a7:b2:2e:b8:08:a1:47:
0b:51:15:5d:a5:3c:d1:80:af:d0:02:56:b9:2e:66:
48:58:50:90:5d:7a:b6:cd:b5:a5:94:23:cd:c3:50:
e2:76:bc:00:c8:a8:16:72:35:0e:b6:da:c0:4e:ab:
76:d9:49:6b:04:63:99:49:8b:52:46:eb:9f:c5:3c:
9c:eb:50:dc:62:e6:e6:13:6c:55:b8:d7:4a:81:96:
c9:19:a1:b5:e7:6d:87:62:c7:41:07:ac:69:c5:77:
51:b3:a7:c2:9f:fc:44:0c:51:5b:dc:58:f4:1e:46:
b0:8c:79:2b:52:df:08:0e:bf:8f:c3:16:74:40:6c:
10:a0:ec:c7:d0:b4:b9:f4:ad:63:03:ee:6e:96:eb:
b3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C8:22:81:66:5E:B9:E4:77:F0:53:E0:CE:4B:20:E5:57:A8:CD:44
X509v3 Authority Key Identifier:
keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:92:39:81:ea:22:39:3c:33:7a:d6:ea:ec:f2:50:20:e3:e9:
49:c5:fb:78:22:37:15:2d:d4:0c:cf:40:a0:f1:9a:66:c6:7c:
4a:12:65:c0:51:0f:e2:5b:c2:f4:47:6e:de:19:48:c5:ec:76:
d1:f5:76:d6:09:26:64:3e:23:f1:6a:6d:3a:c5:65:b1:aa:e1:
47:a8:4d:24:db:18:2a:3d:9f:f6:7e:72:28:ae:f7:63:c8:c9:
4c:e2:e9:4e:97:ec:b2:3f:26:e7:86:11:67:0b:ec:1e:48:81:
4f:3b:ee:be:f4:47:74:47:c2:66:13:eb:15:89:a9:b8:4c:d6:
a4:87:84:fa:c4:4a:31:a5:f6:86:e2:2a:65:52:4a:9d:79:14:
36:1d:0a:17:4a:df:dc:7d:5a:84:7f:d3:ff:b8:62:26:e6:35:
4f:00:63:56:5f:45:e7:83:fe:71:75:77:0e:d4:8c:65:bf:1f:
98:63:cb:bb:00:cc:bb:16:60:f8:8a:b1:bd:e8:e5:92:b7:cd:
4a:35:50:16:ea:de:c6:9b:23:96:63:90:b6:e6:41:5d:a7:01:
13:03:30:97:71:03:8b:e5:5e:d4:62:64:0d:f9:be:8d:e3:3f:
9a:c4:6f:9c:70:46:4e:b5:ea:5d:de:77:37:aa:a7:d8:dc:5f:
ae:85:9e:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYRoNMWXETFY/Wx5TT8Jn7ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMDM0MGQyN2U0YjI0ZjkxMjQ5NzczMjJlZGIzNjk0MmUy
ZDE2MGMwHhcNMjUwNDA3MTkwMTE0WhcNMjUwNDA4MTkwMTE0WjAzMTEwLwYDVQQD
EyhlMWM4MjI4MTY2NWViOWU0NzdmMDUzZTBjZTRiMjBlNTU3YThjZDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tA572VsjtL1T2xZS76Ol53Y/LzU
YB+7wAVCAEuQ3qRmWsKZiGyUTFnuFPqFN030vTjZ9TG1qZzQelT4B6rowsF1sdH0
4tHBBGj3GJvCn7tPLSeZCydcetg9m3n+Z7z0Mz7rfflQmyaFLQzdl7qId6eyLrgI
oUcLURVdpTzRgK/QAla5LmZIWFCQXXq2zbWllCPNw1DidrwAyKgWcjUOttrATqt2
2UlrBGOZSYtSRuufxTyc61DcYubmE2xVuNdKgZbJGaG1522HYsdBB6xpxXdRs6fC
n/xEDFFb3Fj0HkawjHkrUt8IDr+PwxZ0QGwQoOzH0LS59K1jA+5uluuzdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHIIoFmXrnkd/BT4M5LIOVXqM1EMB8GA1UdIwQY
MBaAFCMDQNJ+SyT5Ekl3Mi7bNpQuLRYMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAt
YjU3MDkwN2I1OWViLzEvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAtYjU3MDkwN2I1OWVi
LzEvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpI5geoi
OTwzetbq7PJQIOPpScX7eCI3FS3UDM9AoPGaZsZ8ShJlwFEP4lvC9Edu3hlIxex2
0fV21gkmZD4j8WptOsVlsarhR6hNJNsYKj2f9n5yKK73Y8jJTOLpTpfssj8m54YR
ZwvsHkiBTzvuvvRHdEfCZhPrFYmpuEzWpIeE+sRKMaX2huIqZVJKnXkUNh0KF0rf
3H1ahH/T/7hiJuY1TwBjVl9F54P+cXV3DtSMZb8fmGPLuwDMuxZg+IqxvejlkrfN
SjVQFurexpsjlmOQtuZBXacBEwMwl3EDi+Ve1GJkDfm+jeM/msRvnHBGTrXqXd53
N6qn2NxfroWePw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:26 2025 by rpki-client