Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
File: rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft (raw, json)
Hash identifier: 0TdJ2272Ib3C56lYNeunkMtokMFZcpYEW1OOS2Avlxc=
Subject key identifier: 40:6E:61:BF:25:D3:A7:7A:4E:37:D4:4A:24:5D:10:AE:D6:A9:2C:68
Authority key identifier: AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
Certificate issuer: /CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
Certificate serial: 0196624E45DD151CB92D1FD6B20DD40C08CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
Manifest number: 1505
Signing time: Wed 23 Apr 2025 11:00:18 +0000
Manifest this update: Wed 23 Apr 2025 11:00:18 +0000
Manifest next update: Thu 24 Apr 2025 11:00:18 +0000
Files and hashes: 1: 7oGA-c6QRj7wEtUqcKNVQeiPaKA.roa (hash: MiRDhCNZZYXqTOB7AxjOweIsafby8dLcnJ/tR0Eay+E=)
2: rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl (hash: VGzg79uRaj+7gSDIYU8eYwYU+WvTfKKZZ5btAT4e/cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:62:4e:45:dd:15:1c:b9:2d:1f:d6:b2:0d:d4:0c:08:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
Validity
Not Before: Apr 23 11:00:18 2025 GMT
Not After : Apr 24 11:00:18 2025 GMT
Subject: CN=406e61bf25d3a77a4e37d44a245d10aed6a92c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8d:c2:11:00:85:67:f6:43:d1:65:fd:2e:e5:
a2:e2:e1:45:f0:1b:38:93:87:5f:73:bc:de:d7:fc:
4a:bf:ca:0d:54:9d:6a:ce:5e:b2:27:42:ab:23:d9:
b6:14:f9:be:e6:a0:5d:db:2b:4f:ce:c3:e6:ed:4b:
ba:63:74:ba:0c:fc:94:11:6a:d1:5d:53:ac:04:66:
6f:35:0a:0b:e5:9d:e7:2e:7c:ea:ac:86:fd:e1:50:
50:f3:94:8f:10:ad:e5:aa:49:a3:1c:f1:ae:52:89:
e0:d7:7f:70:81:c9:6a:41:80:2e:ad:5b:41:91:ef:
0d:a1:0f:d8:5a:77:90:e6:8d:f3:84:d3:6f:39:8d:
13:f8:b5:89:ac:1e:ff:90:78:92:26:d0:07:2d:4f:
36:58:e5:92:c9:e1:82:89:80:9f:fe:7a:2c:98:45:
a2:62:3e:6f:95:af:24:79:55:f6:92:00:e7:b3:12:
7a:01:22:b1:ba:6c:83:71:11:4e:b5:ea:8f:f5:06:
94:ed:02:65:d3:3c:47:fe:ca:30:54:bc:88:aa:a4:
3a:e5:60:66:47:9c:a2:46:4d:90:24:da:eb:0b:dc:
2a:67:bc:22:92:5e:91:32:54:0b:58:22:28:71:8c:
a6:09:b2:25:a9:64:f2:46:e3:ef:fb:e1:80:2a:6c:
3b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6E:61:BF:25:D3:A7:7A:4E:37:D4:4A:24:5D:10:AE:D6:A9:2C:68
X509v3 Authority Key Identifier:
keyid:AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ea:42:96:b1:89:6c:4d:94:da:e1:74:1c:04:4e:0a:d1:23:
75:5f:f1:0e:9a:53:81:61:99:5e:fa:fc:ba:bb:5f:94:46:3c:
6e:41:c2:93:9e:86:ee:3d:fd:6a:24:71:4e:21:85:d5:a5:c0:
45:f3:14:7a:8a:29:db:7d:ab:79:a6:46:7d:11:bb:c0:7b:7a:
41:fb:14:0a:f6:f4:6f:d6:c6:14:95:01:0a:fd:ef:e8:af:00:
22:44:1d:bb:52:9a:f6:ac:a8:04:51:33:cd:96:81:0d:3a:f9:
64:ee:92:ed:a0:7f:47:a4:f7:1a:ae:5d:c6:2f:16:12:90:c5:
c3:de:50:91:4a:47:bd:60:f4:d0:d4:ec:94:43:20:98:3f:50:
4d:bc:da:5c:b9:cd:e3:4a:de:78:dc:6f:80:c9:72:64:aa:46:
98:2f:fd:cf:b5:ea:8c:82:a7:e0:a0:2a:ed:5f:16:28:bf:fa:
46:09:91:bd:c7:21:b0:76:43:dc:a4:66:48:cf:c5:c5:2f:70:
8d:f7:bc:f6:fd:a9:38:6c:86:84:55:25:a8:1d:43:cd:5b:d9:
88:b2:22:cd:d9:be:be:1b:c9:9a:25:25:b2:ab:7f:b6:f0:fe:
30:19:f9:19:32:2f:e7:cf:3a:84:a3:61:22:47:2e:fe:48:22:
23:84:7c:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZiTkXdFRy5LR/Wsg3UDAjNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNGYzMTU3NTk5YjY2ZjI4Y2JjNWEyZWVkMzZmYmEyM2Yw
M2QyY2UwHhcNMjUwNDIzMTEwMDE4WhcNMjUwNDI0MTEwMDE4WjAzMTEwLwYDVQQD
Eyg0MDZlNjFiZjI1ZDNhNzdhNGUzN2Q0NGEyNDVkMTBhZWQ2YTkyYzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3I3CEQCFZ/ZD0WX9LuWi4uFF8Bs4
k4dfc7ze1/xKv8oNVJ1qzl6yJ0KrI9m2FPm+5qBd2ytPzsPm7Uu6Y3S6DPyUEWrR
XVOsBGZvNQoL5Z3nLnzqrIb94VBQ85SPEK3lqkmjHPGuUong139wgclqQYAurVtB
ke8NoQ/YWneQ5o3zhNNvOY0T+LWJrB7/kHiSJtAHLU82WOWSyeGCiYCf/nosmEWi
Yj5vla8keVX2kgDnsxJ6ASKxumyDcRFOteqP9QaU7QJl0zxH/sowVLyIqqQ65WBm
R5yiRk2QJNrrC9wqZ7wikl6RMlQLWCIocYymCbIlqWTyRuPv++GAKmw7iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBuYb8l06d6TjfUSiRdEK7WqSxoMB8GA1UdIwQY
MBaAFKxPMVdZm2byjLxaLu02+6I/A9LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckU4eFYxbWJadktNdkZvdTdUYjdvajhEMHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xMTQ4OGQtYzY2YS00MDA2LThmNjIt
MjUwOTgwZTc1YmRmLzEvckU4eFYxbWJadktNdkZvdTdUYjdvajhEMHM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8xMTQ4OGQtYzY2YS00MDA2LThmNjItMjUwOTgwZTc1YmRm
LzEvckU4eFYxbWJadktNdkZvdTdUYjdvajhEMHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+pClrGJ
bE2U2uF0HAROCtEjdV/xDppTgWGZXvr8urtflEY8bkHCk56G7j39aiRxTiGF1aXA
RfMUeoop232reaZGfRG7wHt6QfsUCvb0b9bGFJUBCv3v6K8AIkQdu1Ka9qyoBFEz
zZaBDTr5ZO6S7aB/R6T3Gq5dxi8WEpDFw95QkUpHvWD00NTslEMgmD9QTbzaXLnN
40reeNxvgMlyZKpGmC/9z7XqjIKn4KAq7V8WKL/6RgmRvcchsHZD3KRmSM/FxS9w
jfe89v2pOGyGhFUlqB1DzVvZiLIizdm+vhvJmiUlsqt/tvD+MBn5GTIv5886hKNh
Ikcu/kgiI4R8jQ==
-----END CERTIFICATE-----
Generated at Wed Apr 23 13:47:52 2025 by rpki-client