Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
File: RMDyoqVgB-TEXMxx59oJKGEwWyA.mft (raw, json)
Hash identifier: ATud4g4SfChgKJXG4l6S4Jc0YZgkrDS3ic6J/0EWtM4=
Subject key identifier: BB:22:2C:26:18:4A:F9:4C:78:57:3D:C3:E3:E6:E1:7C:1F:7B:76:4D
Authority key identifier: 44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
Certificate issuer: /CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Certificate serial: 019644B1E36A65206AE82DAB236F1E50A445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
Manifest number: 14F6
Signing time: Thu 17 Apr 2025 17:00:30 +0000
Manifest this update: Thu 17 Apr 2025 17:00:30 +0000
Manifest next update: Fri 18 Apr 2025 17:00:30 +0000
Files and hashes: 1: JKZSaEq-32SHY-bAWiWwoCf7Nj0.roa (hash: yG2sh1v4s77ObqidFtWCzFl8F2FhijHzBj04Ij6JtCg=)
2: RMDyoqVgB-TEXMxx59oJKGEwWyA.crl (hash: JoJ7iiQNHbd47FQmSaY8fcvVi2dRjswC53RvbIhGTpY=)
3: j-Ifej8p6sYfHH1KeQ_QH-keweY.roa (hash: iVB6o7qwOuA1Lj9sG4cTIYUNVhckFRweng10RlAwHI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b1:e3:6a:65:20:6a:e8:2d:ab:23:6f:1e:50:a4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Validity
Not Before: Apr 17 17:00:30 2025 GMT
Not After : Apr 18 17:00:30 2025 GMT
Subject: CN=bb222c26184af94c78573dc3e3e6e17c1f7b764d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:11:4d:3a:4d:95:38:a2:9c:b7:20:96:11:ad:
73:72:69:31:6f:0b:c9:7e:a2:80:14:ff:4c:49:35:
af:bd:9c:06:9b:5a:f0:1d:5c:7f:63:29:bd:71:48:
35:35:6d:3a:a7:b1:36:90:b8:98:6a:73:b7:25:bc:
b3:3f:01:4f:f9:96:92:63:d9:93:45:03:39:3c:93:
82:01:1f:bd:33:9a:4a:1f:4d:80:6c:16:5c:ef:34:
6a:46:4d:34:16:a0:0b:84:ae:44:15:8f:79:a7:3d:
57:8b:5c:1b:0d:67:39:ec:5d:96:18:e3:3b:19:a7:
e6:55:35:c8:76:29:d7:48:80:3e:1e:cb:8c:b3:1f:
60:98:e0:80:95:91:76:eb:34:4a:01:9d:99:4c:b7:
da:9a:78:40:89:0c:f0:9d:a8:79:77:e3:b9:f5:dd:
98:78:64:c0:90:fd:13:a9:66:03:20:c2:89:4d:6e:
af:f4:d9:0f:78:e6:f2:1d:eb:57:9b:a7:19:01:3d:
ab:db:6e:a8:6f:2f:4d:65:09:03:5b:f5:7c:19:40:
78:69:83:a8:99:2a:3b:2f:4e:c1:f6:28:32:17:3a:
a3:42:91:31:30:3b:fa:d1:46:bd:6f:9f:55:2a:11:
a8:ed:c5:07:f3:03:af:f6:4e:ff:1d:f8:ca:1f:9a:
42:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:22:2C:26:18:4A:F9:4C:78:57:3D:C3:E3:E6:E1:7C:1F:7B:76:4D
X509v3 Authority Key Identifier:
keyid:44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:84:46:95:9a:9a:d0:f7:ad:5f:2d:4a:ad:3f:05:f1:64:d2:
00:d3:d8:e9:5a:9b:f1:64:9d:39:fb:e8:2d:5a:d3:dc:5f:e2:
3e:75:20:91:ec:58:84:a9:56:fc:1f:4c:9b:18:fd:a9:25:6e:
e3:35:e6:5d:01:99:20:9e:6f:30:16:69:03:b5:39:99:21:62:
75:59:48:d5:de:7c:15:f0:e6:f1:8c:20:31:2f:02:61:fa:fa:
76:1d:bb:4a:90:98:93:26:ba:7d:3a:36:ed:16:bb:8e:0a:4c:
b9:59:44:3a:15:9c:80:7f:fb:fb:a1:bf:21:ac:c1:b1:27:19:
66:db:b0:b7:01:ad:45:0c:2a:79:6a:f0:88:59:12:22:b9:85:
44:bf:99:fa:bb:c5:54:4f:f1:c0:50:48:cf:3f:ee:8a:42:ee:
d8:f1:bc:14:37:d5:56:cb:36:02:d3:a3:47:ac:1e:03:a9:93:
ee:8d:9d:73:7c:d2:f5:67:4d:71:25:44:6e:71:f4:18:de:a2:
5a:d4:7e:13:71:62:7f:73:ef:4c:21:a5:b8:30:da:19:b6:c2:
c1:bd:a5:2a:97:5a:e6:4a:6d:35:92:8e:d0:45:36:00:68:b8:
4b:86:f2:0a:89:98:14:69:d5:a8:f6:f7:0b:d3:4b:4b:cc:67:
90:26:36:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEseNqZSBq6C2rI28eUKRFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YzBmMmEyYTU2MDA3ZTRjNDVjY2M3MWU3ZGEwOTI4NjEz
MDViMjAwHhcNMjUwNDE3MTcwMDMwWhcNMjUwNDE4MTcwMDMwWjAzMTEwLwYDVQQD
EyhiYjIyMmMyNjE4NGFmOTRjNzg1NzNkYzNlM2U2ZTE3YzFmN2I3NjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRFNOk2VOKKctyCWEa1zcmkxbwvJ
fqKAFP9MSTWvvZwGm1rwHVx/Yym9cUg1NW06p7E2kLiYanO3JbyzPwFP+ZaSY9mT
RQM5PJOCAR+9M5pKH02AbBZc7zRqRk00FqALhK5EFY95pz1Xi1wbDWc57F2WGOM7
GafmVTXIdinXSIA+HsuMsx9gmOCAlZF26zRKAZ2ZTLfamnhAiQzwnah5d+O59d2Y
eGTAkP0TqWYDIMKJTW6v9NkPeObyHetXm6cZAT2r226oby9NZQkDW/V8GUB4aYOo
mSo7L07B9igyFzqjQpExMDv60Ua9b59VKhGo7cUH8wOv9k7/HfjKH5pCzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsiLCYYSvlMeFc9w+Pm4Xwfe3ZNMB8GA1UdIwQY
MBaAFETA8qKlYAfkxFzMcefaCShhMFsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk1EeW9xVmdCLVRFWE14eDU5b0pLR0V3V3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9iODA1OGUtNGViYS00Y2M0LThjMWQt
OWM4NGYyZmRkOGYwLzEvUk1EeW9xVmdCLVRFWE14eDU5b0pLR0V3V3lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9iODA1OGUtNGViYS00Y2M0LThjMWQtOWM4NGYyZmRkOGYw
LzEvUk1EeW9xVmdCLVRFWE14eDU5b0pLR0V3V3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYRGlZqa
0PetXy1KrT8F8WTSANPY6Vqb8WSdOfvoLVrT3F/iPnUgkexYhKlW/B9Mmxj9qSVu
4zXmXQGZIJ5vMBZpA7U5mSFidVlI1d58FfDm8YwgMS8CYfr6dh27SpCYkya6fTo2
7Ra7jgpMuVlEOhWcgH/7+6G/IazBsScZZtuwtwGtRQwqeWrwiFkSIrmFRL+Z+rvF
VE/xwFBIzz/uikLu2PG8FDfVVss2AtOjR6weA6mT7o2dc3zS9WdNcSVEbnH0GN6i
WtR+E3Fif3PvTCGluDDaGbbCwb2lKpda5kptNZKO0EU2AGi4S4byComYFGnVqPb3
C9NLS8xnkCY2bg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:42:12 2025 by rpki-client