Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
File: i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json)
Hash identifier: UdOCxoCmwCNMKfEgThXuGOEysF/um+qTtrGfHnY6deU=
Subject key identifier: BB:20:98:48:71:FE:08:D6:FA:3C:C8:53:D5:31:1B:C4:67:12:76:10
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Certificate issuer: /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial: 019652A4C928308E2BF3B1F29604DCAB48F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 10:00:52 +0000
Manifest this update: Sun 20 Apr 2025 10:00:52 +0000
Manifest next update: Mon 21 Apr 2025 10:00:52 +0000
Files and hashes: 1: CXV5h4NnxextID8ps-zs1B6iIxg.roa (hash: H0fWCwenw+LaQh1zQTvHX9xYl9ZHHPd/qzueTxfRIcY=)
2: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: dFm7KKpRV6p6GZfKPNyB6tCNIvgoFHCedIi9Hog7qks=)
3: uXuzZdEmcXhnurqd_jWF8YOUHrw.roa (hash: 0tKKSAqCxTZYYBM2R7eXZ3g3GCiHz3+8Vn0Oldh70rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:c9:28:30:8e:2b:f3:b1:f2:96:04:dc:ab:48:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Validity
Not Before: Apr 20 10:00:52 2025 GMT
Not After : Apr 21 10:00:52 2025 GMT
Subject: CN=bb20984871fe08d6fa3cc853d5311bc467127610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:ed:cb:17:d2:f2:5b:aa:03:36:01:2c:3a:
b4:9c:7a:a8:e5:3d:56:7f:31:75:a1:18:01:d0:cb:
57:1c:96:e4:f4:a2:7f:57:91:cf:4c:dc:e6:47:19:
10:44:63:45:29:52:96:2e:db:e5:d9:d7:87:e1:8c:
b2:46:97:91:b7:25:c6:16:20:c1:21:1a:6c:25:30:
15:2f:fe:08:56:a4:93:cd:76:ae:50:c8:a2:4b:1d:
cb:94:3b:4a:c5:fc:19:f8:2b:74:27:c2:af:7c:a9:
d4:de:3a:da:7b:ba:12:77:e6:11:90:75:e2:eb:61:
99:2c:bc:11:5f:01:47:a5:1c:6a:0b:37:b0:a9:04:
7e:9d:e5:80:fd:1f:02:3d:4e:4d:3a:54:63:32:87:
e6:19:d8:b0:92:eb:de:ab:b5:b9:87:3a:b8:63:32:
bd:7f:e6:16:3b:f8:0c:63:02:71:a7:98:e0:7e:84:
02:06:00:e7:ed:c0:40:7b:b2:1e:d3:b2:db:9a:e4:
fa:de:1e:5c:ed:eb:73:58:d8:5a:b2:f4:9f:78:83:
d4:9c:10:06:a1:13:bb:60:fc:3c:22:a1:80:e4:10:
44:ea:8b:cf:28:f1:b2:59:ad:69:38:04:4a:ea:66:
49:35:bc:6f:31:5f:e1:60:6b:c7:70:b5:0c:81:5f:
0b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:20:98:48:71:FE:08:D6:FA:3C:C8:53:D5:31:1B:C4:67:12:76:10
X509v3 Authority Key Identifier:
keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:45:16:55:ee:0f:bd:ba:06:0a:63:0a:c6:5e:dd:ca:15:76:
f7:05:40:11:f7:f6:92:d9:e2:1e:11:fa:9d:24:86:8f:c5:ba:
cd:04:57:71:be:bc:a5:06:50:f4:ea:38:25:f6:df:88:a9:ab:
f3:aa:3d:88:f8:0c:76:fd:de:7a:b1:03:90:ec:52:62:9a:2b:
23:ac:60:8f:6b:34:62:5b:23:32:4d:ee:c7:9b:7a:87:7d:bf:
9f:29:26:b9:bf:d0:a7:d7:1c:d1:07:6f:7a:72:93:79:76:b5:
0b:75:73:50:01:2c:e6:85:3b:8e:c1:32:cb:40:05:d4:9c:b9:
7c:25:d7:fe:48:d3:1b:36:f9:c4:8c:02:b7:65:cd:7f:fa:b7:
0d:88:10:a8:bf:c8:dc:54:53:73:cf:82:73:17:b8:58:c0:17:
81:df:8f:43:71:e7:ec:4f:86:c3:e5:85:97:32:65:95:e3:a0:
eb:f7:ff:1c:84:bd:82:de:67:ea:f2:86:86:0f:cf:f3:8f:97:
e3:2d:63:77:4d:44:c7:70:27:1d:4e:76:7f:d8:0b:6f:d4:26:
58:c3:cf:0c:38:d9:66:75:b4:dc:0a:7e:49:fc:c1:34:9d:d9:
41:a0:16:92:72:86:bd:10:f1:c6:bf:0a:02:9b:da:cb:45:51:
29:03:fa:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSpMkoMI4r87HylgTcq0jyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGVhMmQ0YWIxMzgwZjBhM2I3ZmU3ZDRmYTc4MjhlMWM5
NDM1NTgwHhcNMjUwNDIwMTAwMDUyWhcNMjUwNDIxMTAwMDUyWjAzMTEwLwYDVQQD
EyhiYjIwOTg0ODcxZmUwOGQ2ZmEzY2M4NTNkNTMxMWJjNDY3MTI3NjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLTtyxfS8luqAzYBLDq0nHqo5T1W
fzF1oRgB0MtXHJbk9KJ/V5HPTNzmRxkQRGNFKVKWLtvl2deH4YyyRpeRtyXGFiDB
IRpsJTAVL/4IVqSTzXauUMiiSx3LlDtKxfwZ+Ct0J8KvfKnU3jrae7oSd+YRkHXi
62GZLLwRXwFHpRxqCzewqQR+neWA/R8CPU5NOlRjMofmGdiwkuveq7W5hzq4YzK9
f+YWO/gMYwJxp5jgfoQCBgDn7cBAe7Ie07LbmuT63h5c7etzWNhasvSfeIPUnBAG
oRO7YPw8IqGA5BBE6ovPKPGyWa1pOARK6mZJNbxvMV/hYGvHcLUMgV8LEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsgmEhx/gjW+jzIU9UxG8RnEnYQMB8GA1UdIwQY
MBaAFIveotSrE4Dwo7f+fU+ngo4clDVYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTk2aTFLc1RnUENqdF81OVQ2ZUNqaHlVTlZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jNjdkOTAtZDMwNC00ODFiLThhNjQt
MWUzMjZkZWJhNGQwLzEvaTk2aTFLc1RnUENqdF81OVQ2ZUNqaHlVTlZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9jNjdkOTAtZDMwNC00ODFiLThhNjQtMWUzMjZkZWJhNGQw
LzEvaTk2aTFLc1RnUENqdF81OVQ2ZUNqaHlVTlZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0UWVe4P
vboGCmMKxl7dyhV29wVAEff2ktniHhH6nSSGj8W6zQRXcb68pQZQ9Oo4JfbfiKmr
86o9iPgMdv3eerEDkOxSYporI6xgj2s0YlsjMk3ux5t6h32/nykmub/Qp9cc0Qdv
enKTeXa1C3VzUAEs5oU7jsEyy0AF1Jy5fCXX/kjTGzb5xIwCt2XNf/q3DYgQqL/I
3FRTc8+Ccxe4WMAXgd+PQ3Hn7E+Gw+WFlzJlleOg6/f/HIS9gt5n6vKGhg/P84+X
4y1jd01Ex3AnHU52f9gLb9QmWMPPDDjZZnW03Ap+SfzBNJ3ZQaAWknKGvRDxxr8K
Apvay0VRKQP64w==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:14:31 2025 by rpki-client