Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
File: 48hcN60lJ0xxLCRHPgeK3Ocywd0.mft (raw, json)
Hash identifier: mqzJyxB2xfnjWX8sfPHIYWjqAPb8CtVSqsAX2UJvH9k=
Subject key identifier: 59:DF:67:8E:1F:B0:CA:DD:30:28:FE:10:DB:D7:63:82:BB:3F:7F:78
Authority key identifier: E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
Certificate issuer: /CN=e3c85c37ad25274c712c24473e078adce732c1dd
Certificate serial: 01963EE69A25695937CB4AB8F3734CC16086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
Manifest number: 14F1
Signing time: Wed 16 Apr 2025 14:00:22 +0000
Manifest this update: Wed 16 Apr 2025 14:00:22 +0000
Manifest next update: Thu 17 Apr 2025 14:00:22 +0000
Files and hashes: 1: 48hcN60lJ0xxLCRHPgeK3Ocywd0.crl (hash: msnlE3PPKwFbt11AasXWGN68+112+s+MphOSPTsMRGo=)
2: hJ5sZUOMGApiiMH37Q-gblMKBjo.roa (hash: +30CmnrceOA2bqCeJhU0G7gVLpkPsWKM6KjpzenYbWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e6:9a:25:69:59:37:cb:4a:b8:f3:73:4c:c1:60:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3c85c37ad25274c712c24473e078adce732c1dd
Validity
Not Before: Apr 16 14:00:22 2025 GMT
Not After : Apr 17 14:00:22 2025 GMT
Subject: CN=59df678e1fb0cadd3028fe10dbd76382bb3f7f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f3:63:77:72:b3:aa:99:97:0a:0d:58:52:20:
bd:a6:71:a5:11:89:c5:7c:f2:0e:a1:01:7d:30:7a:
f1:3b:80:73:6e:cd:20:61:2f:f5:2f:9a:c0:81:cb:
ed:b9:87:a6:ea:f8:76:f4:ab:ea:ba:37:f5:30:7f:
c3:a2:f1:a3:fa:c4:fa:0a:79:6b:0a:d0:b0:5b:50:
1c:5a:38:fc:f2:a3:b9:cb:0b:40:1b:78:f6:2d:f6:
3f:86:ef:f9:0a:d9:59:1a:6b:55:22:86:28:a4:9f:
56:7d:a1:f5:de:b4:8a:cd:48:00:6a:20:0d:94:58:
a7:d5:a0:ec:0f:5c:d5:41:39:96:e2:0f:4a:ef:6b:
cb:a8:49:11:45:e9:63:cd:37:3d:04:22:e4:56:1d:
a1:cf:d5:16:81:bf:af:f0:65:86:07:fb:66:57:c4:
9d:1f:63:ea:9d:97:47:04:33:85:e2:bc:dd:13:89:
d9:b6:04:46:74:ed:d3:d8:05:52:6c:d5:f3:9f:ec:
69:46:e8:18:a0:2b:ba:cf:f6:39:57:d9:14:f7:56:
56:b4:47:74:12:53:0a:38:6c:bb:14:5a:3b:7d:03:
7b:41:66:dc:58:6b:b1:5d:d2:63:61:e0:10:c3:3a:
5d:5f:1e:5a:42:c4:17:dc:a6:75:a2:2d:8e:9f:26:
4f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DF:67:8E:1F:B0:CA:DD:30:28:FE:10:DB:D7:63:82:BB:3F:7F:78
X509v3 Authority Key Identifier:
keyid:E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f4:fd:8d:55:61:0a:8a:59:14:98:1f:fe:1f:40:38:90:a2:
1f:f8:3f:93:83:3f:a1:af:2f:2b:9b:51:d5:bd:8f:64:ac:9f:
7f:6e:4c:7d:c8:19:1e:1f:9b:95:01:9b:1f:25:d0:58:3d:b8:
f3:73:98:f3:0b:47:25:e3:c9:40:b7:53:49:20:9f:f2:a3:f0:
6c:31:09:07:43:fc:79:04:5a:f2:8e:1c:fa:0d:c2:19:3a:5e:
a9:6b:a0:a3:61:1a:05:65:97:5e:84:da:d2:1b:75:70:17:d4:
cb:df:97:eb:be:69:1e:b9:65:db:86:0e:b7:cd:ac:5d:c3:62:
1b:ec:6c:55:c1:f4:af:1f:9b:47:88:32:f4:52:5e:d9:8e:42:
fc:26:8a:50:bb:46:d4:19:a1:60:80:48:02:de:4f:09:4c:b0:
74:a0:cb:f0:f1:47:5d:b3:75:31:4b:ac:76:61:b9:22:f8:05:
6c:67:de:99:ca:82:0a:62:d2:06:7e:0e:1c:51:ba:d7:60:41:
fb:00:04:77:28:46:7f:9c:0f:73:b0:99:e6:98:b3:96:a8:a1:
c5:84:ac:69:c3:df:fe:f9:ce:81:93:c8:b4:d4:b5:fb:a3:33:
77:3d:22:b5:05:81:67:fb:aa:02:ea:a7:be:66:09:a5:80:09:
e1:b6:8a:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY+5polaVk3y0q483NMwWCGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYzg1YzM3YWQyNTI3NGM3MTJjMjQ0NzNlMDc4YWRjZTcz
MmMxZGQwHhcNMjUwNDE2MTQwMDIyWhcNMjUwNDE3MTQwMDIyWjAzMTEwLwYDVQQD
Eyg1OWRmNjc4ZTFmYjBjYWRkMzAyOGZlMTBkYmQ3NjM4MmJiM2Y3Zjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/Njd3KzqpmXCg1YUiC9pnGlEYnF
fPIOoQF9MHrxO4Bzbs0gYS/1L5rAgcvtuYem6vh29Kvqujf1MH/DovGj+sT6Cnlr
CtCwW1AcWjj88qO5ywtAG3j2LfY/hu/5CtlZGmtVIoYopJ9WfaH13rSKzUgAaiAN
lFin1aDsD1zVQTmW4g9K72vLqEkRReljzTc9BCLkVh2hz9UWgb+v8GWGB/tmV8Sd
H2PqnZdHBDOF4rzdE4nZtgRGdO3T2AVSbNXzn+xpRugYoCu6z/Y5V9kU91ZWtEd0
ElMKOGy7FFo7fQN7QWbcWGuxXdJjYeAQwzpdXx5aQsQX3KZ1oi2OnyZPgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnfZ44fsMrdMCj+ENvXY4K7P394MB8GA1UdIwQY
MBaAFOPIXDetJSdMcSwkRz4HitznMsHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDhoY042MGxKMHh4TENSSFBnZUszT2N5d2QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jNjc1NmEtMWJjMC00OTM4LTgwMTUt
ZGNlM2ZhM2ZiYWU5LzEvNDhoY042MGxKMHh4TENSSFBnZUszT2N5d2QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9jNjc1NmEtMWJjMC00OTM4LTgwMTUtZGNlM2ZhM2ZiYWU5
LzEvNDhoY042MGxKMHh4TENSSFBnZUszT2N5d2QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPT9jVVh
CopZFJgf/h9AOJCiH/g/k4M/oa8vK5tR1b2PZKyff25MfcgZHh+blQGbHyXQWD24
83OY8wtHJePJQLdTSSCf8qPwbDEJB0P8eQRa8o4c+g3CGTpeqWugo2EaBWWXXoTa
0ht1cBfUy9+X675pHrll24YOt82sXcNiG+xsVcH0rx+bR4gy9FJe2Y5C/CaKULtG
1BmhYIBIAt5PCUywdKDL8PFHXbN1MUusdmG5IvgFbGfemcqCCmLSBn4OHFG612BB
+wAEdyhGf5wPc7CZ5pizlqihxYSsacPf/vnOgZPItNS1+6Mzdz0itQWBZ/uqAuqn
vmYJpYAJ4baKAA==
-----END CERTIFICATE-----
Generated at Wed Apr 16 18:44:54 2025 by rpki-client