Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
File: md1vCIIq4LpQVFQkVpI_r5BA9dA.mft (raw, json)
Hash identifier: 4AsFjydB6vhcMpovfGpKIRifIUQ+LxlIHIflSbcovZA=
Subject key identifier: E7:E6:E5:3E:A7:9C:BA:E6:E9:45:09:21:79:CF:1F:E6:4B:8B:0D:7B
Authority key identifier: 99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
Certificate issuer: /CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Certificate serial: 01964857FDF10401552E86C3FF5EF8E7E6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
Manifest number: 0EE2
Signing time: Fri 18 Apr 2025 10:00:48 +0000
Manifest this update: Fri 18 Apr 2025 10:00:48 +0000
Manifest next update: Sat 19 Apr 2025 10:00:48 +0000
Files and hashes: 1: NUWfScDSH56OaOCaPfBblPu0Ydg.roa (hash: a4F0KmJ+v3pAeFAh9qDTsIqvwa1PoPI9PowXceZRGfg=)
2: md1vCIIq4LpQVFQkVpI_r5BA9dA.crl (hash: Aou/gQ309y3zmzUZPz2jO8bAsYJyIdGw+3cD8SKQm3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:57:fd:f1:04:01:55:2e:86:c3:ff:5e:f8:e7:e6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Validity
Not Before: Apr 18 10:00:48 2025 GMT
Not After : Apr 19 10:00:48 2025 GMT
Subject: CN=e7e6e53ea79cbae6e945092179cf1fe64b8b0d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:99:69:f1:a0:e5:9b:57:c2:0f:a5:31:40:fa:
58:61:45:93:00:b7:67:7b:06:9a:35:ca:52:0c:87:
60:4b:34:7b:98:0d:c6:83:67:92:73:9a:c8:57:36:
31:61:09:58:be:27:ee:75:05:55:81:56:19:1d:1b:
07:35:81:89:ea:7c:98:32:b2:fb:dc:a7:48:18:d6:
ab:69:4c:92:f2:c7:55:25:4f:64:d1:db:9c:45:2c:
b4:5f:97:c0:09:4b:fa:c9:a5:5a:90:39:fd:08:dd:
d6:23:98:d6:a7:bf:16:1c:55:0d:3c:57:57:e3:ba:
4e:ff:a3:0a:f5:8b:dc:80:8b:59:8f:e7:06:86:f6:
9b:07:27:9c:09:95:40:ed:f9:f8:55:d4:63:ad:58:
0d:cb:9c:28:a6:97:04:07:1f:86:63:7f:10:0f:6a:
81:8d:62:2f:c1:ce:3e:37:92:8f:40:92:0d:66:24:
bd:d1:ec:b5:c2:ea:34:72:d5:2b:82:e4:fe:e8:81:
47:99:b0:ff:ed:e6:4f:88:d3:34:7b:f7:15:30:6d:
78:ef:21:e2:00:c9:31:f8:63:64:4f:83:db:6a:4e:
b0:6c:76:60:54:36:07:7a:97:a1:03:42:fe:a6:00:
04:85:1f:07:72:5f:c3:57:a6:0f:73:ab:2c:fa:f5:
3e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E6:E5:3E:A7:9C:BA:E6:E9:45:09:21:79:CF:1F:E6:4B:8B:0D:7B
X509v3 Authority Key Identifier:
keyid:99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c3:69:f0:1b:a3:e6:7a:0b:6a:55:12:42:63:13:51:a5:8d:
14:ff:b1:8a:7a:8f:00:c8:ff:a5:b9:3e:0a:71:d9:0c:0e:5a:
14:9e:e5:52:f4:b3:81:39:2b:bf:22:ce:66:d7:b5:7e:1f:02:
a1:0a:50:dd:2e:90:5a:15:25:da:b7:5f:e0:6c:21:f3:81:51:
a5:a2:6b:b7:83:bd:ef:27:68:92:b4:3e:60:d7:49:5a:36:32:
ec:4d:94:21:f7:5c:1e:6f:9b:11:e9:ac:ac:79:2a:1a:d0:42:
0c:06:10:a4:31:fc:8f:fc:5f:c2:3d:d0:e4:37:8f:6d:fa:2a:
2b:a2:06:88:f1:8c:5e:0e:fb:b4:f1:c4:81:9b:67:83:75:a4:
45:30:f8:7d:50:85:36:c3:97:a3:e4:3d:77:74:43:29:7f:dd:
4f:81:62:96:a8:87:28:53:c4:ba:9c:8e:4c:f5:7e:26:0d:0f:
3e:30:2f:ab:b9:29:8c:93:10:bd:58:b2:d0:88:5a:ff:cc:26:
d2:21:66:8b:be:e6:ad:d8:0b:4a:74:5a:40:ab:b1:7f:70:e1:
7d:ef:d6:a9:71:09:fc:e5:55:9b:5e:54:23:60:e4:19:ab:4c:
64:36:8b:f1:52:17:72:13:bb:66:13:68:2b:91:fe:40:09:ed:
52:b1:4d:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZIV/3xBAFVLobD/1745+beMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZGQ2ZjA4ODIyYWUwYmE1MDU0NTQyNDU2OTIzZmFmOTA0
MGY1ZDAwHhcNMjUwNDE4MTAwMDQ4WhcNMjUwNDE5MTAwMDQ4WjAzMTEwLwYDVQQD
EyhlN2U2ZTUzZWE3OWNiYWU2ZTk0NTA5MjE3OWNmMWZlNjRiOGIwZDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05lp8aDlm1fCD6UxQPpYYUWTALdn
ewaaNcpSDIdgSzR7mA3Gg2eSc5rIVzYxYQlYvifudQVVgVYZHRsHNYGJ6nyYMrL7
3KdIGNaraUyS8sdVJU9k0ducRSy0X5fACUv6yaVakDn9CN3WI5jWp78WHFUNPFdX
47pO/6MK9YvcgItZj+cGhvabByecCZVA7fn4VdRjrVgNy5woppcEBx+GY38QD2qB
jWIvwc4+N5KPQJINZiS90ey1wuo0ctUrguT+6IFHmbD/7eZPiNM0e/cVMG147yHi
AMkx+GNkT4Pbak6wbHZgVDYHepehA0L+pgAEhR8Hcl/DV6YPc6ss+vU+jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfm5T6nnLrm6UUJIXnPH+ZLiw17MB8GA1UdIwQY
MBaAFJndbwiCKuC6UFRUJFaSP6+QQPXQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWQxdkNJSXE0THBRVkZRa1ZwSV9yNUJBOWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9jZWMyYTktMzAxMy00MmI0LTk0ODMt
YTcyYzQwNGYyNmZkLzEvbWQxdkNJSXE0THBRVkZRa1ZwSV9yNUJBOWRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9jZWMyYTktMzAxMy00MmI0LTk0ODMtYTcyYzQwNGYyNmZk
LzEvbWQxdkNJSXE0THBRVkZRa1ZwSV9yNUJBOWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMNp8Buj
5noLalUSQmMTUaWNFP+xinqPAMj/pbk+CnHZDA5aFJ7lUvSzgTkrvyLOZte1fh8C
oQpQ3S6QWhUl2rdf4Gwh84FRpaJrt4O97ydokrQ+YNdJWjYy7E2UIfdcHm+bEems
rHkqGtBCDAYQpDH8j/xfwj3Q5DePbfoqK6IGiPGMXg77tPHEgZtng3WkRTD4fVCF
NsOXo+Q9d3RDKX/dT4FilqiHKFPEupyOTPV+Jg0PPjAvq7kpjJMQvViy0Iha/8wm
0iFmi77mrdgLSnRaQKuxf3Dhfe/WqXEJ/OVVm15UI2DkGatMZDaL8VIXchO7ZhNo
K5H+QAntUrFNrw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 15:55:54 2025 by rpki-client