Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
File: exi86iJ6TqxhtTALME3u8UaU3JE.mft (raw, json)
Hash identifier: Th/7sPICUd5D4qzL9xFDVoR+rWXHeUZqkMAB6v21njs=
Subject key identifier: DA:06:4C:CD:61:01:A3:8C:89:50:59:F2:E4:4F:1B:6C:1B:E9:79:A9
Authority key identifier: 7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91
Certificate issuer: /CN=7b18bcea227a4eac61b5300b304deef14694dc91
Certificate serial: 01964DEBA398D13B41AE6CB5AECE69DD4DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
Manifest number: 0A46
Signing time: Sat 19 Apr 2025 12:00:10 +0000
Manifest this update: Sat 19 Apr 2025 12:00:10 +0000
Manifest next update: Sun 20 Apr 2025 12:00:10 +0000
Files and hashes: 1: exi86iJ6TqxhtTALME3u8UaU3JE.crl (hash: pisam2icQPwodKVcqWQXYJQBLwKdXDPG6tV6SVqKcDY=)
2: lQ20cZ9OUrcSqb6gIxN40wQjpAk.roa (hash: WgCV5F0Lo1vsx71+iRrim7ywAzohxnYAfe2pxSvyfPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:eb:a3:98:d1:3b:41:ae:6c:b5:ae:ce:69:dd:4d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b18bcea227a4eac61b5300b304deef14694dc91
Validity
Not Before: Apr 19 12:00:10 2025 GMT
Not After : Apr 20 12:00:10 2025 GMT
Subject: CN=da064ccd6101a38c895059f2e44f1b6c1be979a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:16:7a:8a:5b:78:a3:3d:8a:7a:5c:4c:a1:41:
ff:87:a9:25:2c:32:36:f7:15:77:a5:90:a0:3b:f4:
08:aa:60:1f:e8:db:74:a0:e9:bb:fc:5f:4b:4d:1e:
61:b0:00:d4:8b:83:2c:58:84:8f:f1:18:7f:1e:a6:
ef:f2:a1:35:f3:dd:93:11:50:e1:ab:d4:f1:f7:26:
f0:b3:fa:0a:e1:ef:c7:95:a0:13:e7:58:71:47:be:
6e:3d:6e:63:f3:d8:1c:8f:f1:c9:ad:51:cd:b9:43:
54:65:eb:f9:8a:f6:74:f1:5c:35:2d:f7:1e:fb:9e:
51:42:7c:18:7b:16:ce:d0:c2:04:cb:b2:26:8e:b1:
43:c1:e6:e0:bf:ec:37:07:45:bd:85:c6:1a:3f:dd:
df:98:87:86:bb:5b:fe:83:94:ca:d4:7c:d8:7f:4b:
fb:11:b9:f0:06:15:43:fb:e2:fa:c5:d6:ec:af:e4:
36:1e:2e:fa:6b:cc:4b:15:33:f7:c2:2f:3d:1e:aa:
17:31:a2:03:16:81:ba:7f:e0:3f:55:2b:19:d9:cf:
b1:0e:6e:9e:99:6b:dd:29:9f:b9:d1:45:19:04:31:
5f:e2:84:f7:1c:00:87:6c:b0:6c:12:c9:aa:e9:4f:
b7:3d:3d:5d:a5:23:49:c1:ac:9a:36:97:4d:52:5f:
44:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:06:4C:CD:61:01:A3:8C:89:50:59:F2:E4:4F:1B:6C:1B:E9:79:A9
X509v3 Authority Key Identifier:
keyid:7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:cc:32:c3:89:b1:1c:9f:2d:e5:18:9c:c3:61:05:96:b1:5f:
1d:c0:ba:f4:bd:8b:4e:ea:b1:0b:cf:4e:af:ad:6c:bf:78:b1:
af:3d:39:f0:7d:24:37:8d:14:ae:b4:d9:97:25:c5:f4:c8:58:
36:ae:49:e3:64:d5:eb:ed:ca:71:68:82:f6:80:46:62:56:2b:
c6:4c:d9:d5:5f:81:06:ba:61:95:5e:a1:5c:85:5b:91:60:02:
42:7b:88:a0:1e:ec:d7:b0:19:1a:84:66:7e:df:69:11:4e:1f:
18:13:d4:41:cc:0c:6c:23:84:82:f2:6d:98:c7:a4:88:a7:24:
61:45:cc:3d:9f:1c:64:c4:44:f3:51:1a:7c:6e:a4:2e:93:15:
d0:99:62:0d:96:35:ca:47:0d:46:36:86:a8:c6:24:81:43:fd:
df:e1:2c:59:5c:f8:64:a2:0c:a4:6b:88:89:c0:5a:a9:5a:44:
b1:38:24:1b:09:e3:e6:b7:7e:1c:75:0b:f0:7d:2b:92:a6:99:
8e:2e:7e:f6:c3:26:7c:4d:84:12:65:71:e5:81:78:fb:fa:14:
26:23:44:85:59:17:8e:94:79:ec:c9:e0:da:a0:cd:19:30:27:
a6:49:6c:b0:0b:da:ac:6e:c9:09:ef:87:3b:ff:c8:c2:73:57:
2c:05:cb:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZN66OY0TtBrmy1rs5p3U3UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMThiY2VhMjI3YTRlYWM2MWI1MzAwYjMwNGRlZWYxNDY5
NGRjOTEwHhcNMjUwNDE5MTIwMDEwWhcNMjUwNDIwMTIwMDEwWjAzMTEwLwYDVQQD
EyhkYTA2NGNjZDYxMDFhMzhjODk1MDU5ZjJlNDRmMWI2YzFiZTk3OWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhZ6ilt4oz2KelxMoUH/h6klLDI2
9xV3pZCgO/QIqmAf6Nt0oOm7/F9LTR5hsADUi4MsWISP8Rh/Hqbv8qE1892TEVDh
q9Tx9ybws/oK4e/HlaAT51hxR75uPW5j89gcj/HJrVHNuUNUZev5ivZ08Vw1Lfce
+55RQnwYexbO0MIEy7ImjrFDwebgv+w3B0W9hcYaP93fmIeGu1v+g5TK1HzYf0v7
EbnwBhVD++L6xdbsr+Q2Hi76a8xLFTP3wi89HqoXMaIDFoG6f+A/VSsZ2c+xDm6e
mWvdKZ+50UUZBDFf4oT3HACHbLBsEsmq6U+3PT1dpSNJwayaNpdNUl9E9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoGTM1hAaOMiVBZ8uRPG2wb6XmpMB8GA1UdIwQY
MBaAFHsYvOoiek6sYbUwCzBN7vFGlNyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXhpODZpSjZUcXhodFRBTE1FM3U4VWFVM0pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9kYWMwNzItMGYxZC00NDliLWIzMGIt
MDliMTlkMjU1MjU0LzEvZXhpODZpSjZUcXhodFRBTE1FM3U4VWFVM0pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9kYWMwNzItMGYxZC00NDliLWIzMGItMDliMTlkMjU1MjU0
LzEvZXhpODZpSjZUcXhodFRBTE1FM3U4VWFVM0pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcswyw4mx
HJ8t5Ricw2EFlrFfHcC69L2LTuqxC89Or61sv3ixrz058H0kN40UrrTZlyXF9MhY
Nq5J42TV6+3KcWiC9oBGYlYrxkzZ1V+BBrphlV6hXIVbkWACQnuIoB7s17AZGoRm
ft9pEU4fGBPUQcwMbCOEgvJtmMekiKckYUXMPZ8cZMRE81EafG6kLpMV0JliDZY1
ykcNRjaGqMYkgUP93+EsWVz4ZKIMpGuIicBaqVpEsTgkGwnj5rd+HHUL8H0rkqaZ
ji5+9sMmfE2EEmVx5YF4+/oUJiNEhVkXjpR57Mng2qDNGTAnpklssAvarG7JCe+H
O//IwnNXLAXLOg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:48:29 2025 by rpki-client