Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json)
Hash identifier: AuJKpqjY9P4wTm9n+IDlPJp31D9yOC/hMS9t9MoPoZc=
Subject key identifier: FB:CB:01:9A:16:53:2C:85:E1:16:F8:6D:5D:86:E8:B6:B4:2A:D7:A1
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 01963F8B3955524683D664FCABDADBD6146C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
Manifest number: 1503
Signing time: Wed 16 Apr 2025 17:00:10 +0000
Manifest this update: Wed 16 Apr 2025 17:00:10 +0000
Manifest next update: Thu 17 Apr 2025 17:00:10 +0000
Files and hashes: 1: BnZ18m27JG41iStc-0bf7RUhMqc.roa (hash: 506prusX3qMZHHvl16GjdziNik+Zaiptx5uE6D2elAc=)
2: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: 85OgtRNL8dzGZUVq7lajp65nbnMHRtpy6IQOGUIKVNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:39:55:52:46:83:d6:64:fc:ab:da:db:d6:14:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: Apr 16 17:00:10 2025 GMT
Not After : Apr 17 17:00:10 2025 GMT
Subject: CN=fbcb019a16532c85e116f86d5d86e8b6b42ad7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:37:3a:8f:e6:15:12:bb:8f:3a:d9:55:40:79:
98:37:8e:fd:4a:2c:b7:75:cb:e1:ae:4f:58:47:4e:
bc:78:73:57:75:1c:57:0d:e4:b6:57:41:ec:13:0b:
f9:75:e8:62:42:8c:3f:55:a6:d2:b4:6e:cc:58:2e:
6e:e6:74:0b:5f:8d:86:92:a4:18:1c:22:85:30:85:
8c:0d:fb:40:7d:13:e4:1c:0e:7c:d5:d5:b9:4b:5f:
bb:0b:33:9d:76:47:7c:31:e9:1c:e0:dc:a5:3c:bd:
7b:13:7f:59:53:5c:0a:26:e2:d3:eb:0c:27:b6:e8:
3d:5e:b1:3a:65:b7:de:f5:a8:d1:af:48:30:e8:04:
99:91:ff:23:16:c8:f6:71:eb:49:ed:40:94:47:74:
24:b6:39:fd:0f:11:7d:2c:3d:7b:ec:d1:ca:42:96:
3d:2c:89:8f:b2:0f:33:81:56:a8:2b:d0:42:fb:ab:
4a:ac:82:84:0f:c1:b7:d7:7a:90:8d:6c:18:fe:01:
0f:6c:a1:0c:2c:89:1f:bc:c7:ed:ed:91:86:11:42:
01:70:ce:ab:c3:67:de:5e:60:85:2c:1d:65:5b:fd:
aa:ad:6d:40:fc:3d:88:37:64:21:44:77:4d:9a:b8:
4c:a7:b2:2c:81:aa:bd:42:a0:93:42:7c:a4:35:4c:
ca:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CB:01:9A:16:53:2C:85:E1:16:F8:6D:5D:86:E8:B6:B4:2A:D7:A1
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:20:8a:0d:4e:85:ce:81:64:d1:1b:e0:32:b1:85:68:7d:2b:
8a:4a:2d:2e:f6:a5:22:21:d3:a7:ce:cf:44:ba:8c:cb:d6:df:
eb:71:46:88:a7:30:ae:2b:ab:59:85:2d:1e:c0:d9:d0:d7:67:
26:29:38:45:b7:0b:55:2d:92:53:9b:5b:7c:35:f6:23:f2:ba:
5a:ef:93:21:d9:d7:3f:9e:f9:8a:0c:6c:b8:05:b8:e4:a4:65:
28:75:49:97:b2:4c:4c:e0:d8:79:2a:7a:3e:af:84:6d:34:59:
3c:f4:22:82:4b:42:2a:10:bb:5b:1e:69:94:43:19:42:68:13:
78:90:02:a0:5b:84:47:e8:cd:cb:14:46:c1:4b:6f:ac:5c:ec:
98:85:f4:d6:6a:65:7e:51:70:16:1c:54:b2:a2:ee:64:cc:31:
52:29:c0:d6:da:45:95:ee:ce:ec:83:b1:a8:90:38:b0:29:38:
01:af:78:c4:f0:2c:5f:4e:f1:fb:5c:bb:4a:32:67:75:ca:fb:
94:5a:94:12:24:f8:13:ee:cc:b8:eb:ef:e6:ba:97:37:cc:7f:
28:1b:43:2b:a4:08:e0:5d:76:48:bd:4a:7a:b1:42:d8:95:c9:
d2:50:5c:40:75:5d:62:87:25:08:8c:57:50:a7:1d:ee:52:2a:
cf:f0:2e:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/izlVUkaD1mT8q9rb1hRsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOWQ4NjA5NmE0OTExMGNmOWJmNjcwMjQwYjUxOTMxNWI2
NmFiY2IwHhcNMjUwNDE2MTcwMDEwWhcNMjUwNDE3MTcwMDEwWjAzMTEwLwYDVQQD
EyhmYmNiMDE5YTE2NTMyYzg1ZTExNmY4NmQ1ZDg2ZThiNmI0MmFkN2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Dc6j+YVEruPOtlVQHmYN479Siy3
dcvhrk9YR068eHNXdRxXDeS2V0HsEwv5dehiQow/VabStG7MWC5u5nQLX42GkqQY
HCKFMIWMDftAfRPkHA581dW5S1+7CzOddkd8Mekc4NylPL17E39ZU1wKJuLT6wwn
tug9XrE6Zbfe9ajRr0gw6ASZkf8jFsj2cetJ7UCUR3Qktjn9DxF9LD177NHKQpY9
LImPsg8zgVaoK9BC+6tKrIKED8G313qQjWwY/gEPbKEMLIkfvMft7ZGGEUIBcM6r
w2feXmCFLB1lW/2qrW1A/D2IN2QhRHdNmrhMp7Isgaq9QqCTQnykNUzKxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvLAZoWUyyF4Rb4bV2G6La0KtehMB8GA1UdIwQY
MBaAFAudhglqSREM+b9nAkC1GTFbZqvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xZTFhOTctZjI3Ni00YTUxLWIxYjUt
OGMxMDkwOWE0ODVjLzEvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8xZTFhOTctZjI3Ni00YTUxLWIxYjUtOGMxMDkwOWE0ODVj
LzEvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSCKDU6F
zoFk0RvgMrGFaH0rikotLvalIiHTp87PRLqMy9bf63FGiKcwriurWYUtHsDZ0Ndn
Jik4RbcLVS2SU5tbfDX2I/K6Wu+TIdnXP575igxsuAW45KRlKHVJl7JMTODYeSp6
Pq+EbTRZPPQigktCKhC7Wx5plEMZQmgTeJACoFuER+jNyxRGwUtvrFzsmIX01mpl
flFwFhxUsqLuZMwxUinA1tpFle7O7IOxqJA4sCk4Aa94xPAsX07x+1y7SjJndcr7
lFqUEiT4E+7MuOvv5rqXN8x/KBtDK6QI4F12SL1KerFC2JXJ0lBcQHVdYoclCIxX
UKcd7lIqz/Auag==
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:18:58 2025 by rpki-client