Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
File: d8jZS9834PkAzWqMQizbFNl860Y.mft (raw, json)
Hash identifier: cSuEQDRTmv1pr2VeH4/Y4QjsxViCEyHT8iO+AvAUjFE=
Subject key identifier: CE:91:C9:6C:7D:7C:EA:2B:B7:F5:0F:E3:1D:2C:82:3E:85:BA:37:B2
Authority key identifier: 77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
Certificate issuer: /CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Certificate serial: 01965191BD3FE96F867B6F1DE3F4C4C14321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
Manifest number: 81
Signing time: Sun 20 Apr 2025 05:00:27 +0000
Manifest this update: Sun 20 Apr 2025 05:00:27 +0000
Manifest next update: Mon 21 Apr 2025 05:00:27 +0000
Files and hashes: 1: YhU5HITXmEzEZK077V2NUQi5G0E.roa (hash: hsmvHe6gnKNA2Q3OE6zeLGrGjvqCoU3tN+crhtSom4Y=)
2: d8jZS9834PkAzWqMQizbFNl860Y.crl (hash: cZAkn1jr8U35VXdby1+cfraum4RwiP1yTIacRJUc7h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:bd:3f:e9:6f:86:7b:6f:1d:e3:f4:c4:c1:43:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Validity
Not Before: Apr 20 05:00:27 2025 GMT
Not After : Apr 21 05:00:27 2025 GMT
Subject: CN=ce91c96c7d7cea2bb7f50fe31d2c823e85ba37b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1c:d7:8c:3f:52:8f:d6:a4:85:b6:a9:7e:f2:
17:fd:f3:85:c8:8c:5d:2c:2f:b0:28:e9:18:e0:32:
c9:7d:2a:b7:17:ce:eb:64:16:b3:51:e2:70:e4:ef:
52:37:a9:c2:ca:e3:8f:fa:12:fe:9a:2b:7a:ff:a6:
46:51:e9:98:c9:15:ec:6d:36:16:f0:8c:38:e7:b4:
86:a7:de:db:91:7f:2d:bb:de:f0:5a:09:ed:2c:0a:
98:c2:1c:c6:c6:16:48:b0:57:39:1d:ef:49:3a:d0:
a1:a2:9a:ba:5d:78:b3:d5:51:76:3b:07:61:6b:bc:
5a:b7:a8:94:5b:3e:2e:d4:95:39:88:ea:1f:fe:c4:
c0:de:d5:20:54:2a:d0:46:91:f7:85:34:f8:9c:86:
b0:34:c7:b7:6e:a0:d2:36:ab:a4:f1:2e:03:a0:66:
f7:d5:04:15:ab:d6:f9:03:37:dd:83:ff:15:91:74:
fb:e0:4e:81:b8:21:65:d9:be:19:f3:a8:dc:4c:f4:
b9:75:46:de:15:d6:33:a9:9c:5c:97:89:0b:5e:d1:
53:03:61:95:69:88:a1:84:42:0c:9f:dd:e5:38:42:
22:ce:fd:07:f2:a6:d3:ab:64:02:51:ed:ab:6a:02:
20:00:f5:a7:dd:c4:83:fa:2e:74:41:9b:b0:88:77:
ca:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:91:C9:6C:7D:7C:EA:2B:B7:F5:0F:E3:1D:2C:82:3E:85:BA:37:B2
X509v3 Authority Key Identifier:
keyid:77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f2:81:b8:84:18:59:b4:0b:6f:bd:34:f5:95:62:8c:ef:66:
40:8e:88:4e:03:59:d2:3c:0a:8c:d5:21:e7:51:fe:b7:9b:1d:
01:71:5a:6a:05:22:14:4a:8a:bc:a2:26:f1:30:95:a8:30:21:
f4:21:1c:39:c6:c3:2a:93:10:1b:65:38:d7:75:fa:91:ae:16:
13:1e:a1:30:4b:86:5f:4a:80:ad:35:d3:3d:1c:07:24:35:fb:
e7:f1:47:f9:1e:1d:dc:a8:41:ca:89:05:ed:aa:14:1a:93:85:
d0:c4:98:d1:23:0c:97:aa:54:8d:2f:14:77:31:9e:fd:74:1e:
ec:4a:af:44:ab:e4:80:bb:92:99:d6:6f:76:af:f2:33:25:bc:
76:0f:ae:95:57:14:23:f1:8b:f0:13:59:f5:29:7d:69:41:09:
20:0c:4e:7c:9d:cc:16:15:42:d5:0a:a6:a3:09:46:88:c6:8d:
8b:c2:77:71:f0:47:c4:a5:a5:a0:5e:a4:c7:44:ce:31:8e:bb:
c7:06:5a:6f:e4:d7:06:f8:aa:4e:8b:ea:ef:c6:2b:66:87:6f:
99:3a:83:e5:b4:90:90:f5:59:b9:9c:1a:7a:e8:2e:79:0e:db:
f0:51:f1:30:55:db:70:3e:d2:fb:d4:d0:23:7f:f0:b8:c9:3c:
7b:0e:26:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRkb0/6W+Ge28d4/TEwUMhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzhkOTRiZGYzN2UwZjkwMGNkNmE4YzQyMmNkYjE0ZDk3
Y2ViNDYwHhcNMjUwNDIwMDUwMDI3WhcNMjUwNDIxMDUwMDI3WjAzMTEwLwYDVQQD
EyhjZTkxYzk2YzdkN2NlYTJiYjdmNTBmZTMxZDJjODIzZTg1YmEzN2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhzXjD9Sj9akhbapfvIX/fOFyIxd
LC+wKOkY4DLJfSq3F87rZBazUeJw5O9SN6nCyuOP+hL+mit6/6ZGUemYyRXsbTYW
8Iw457SGp97bkX8tu97wWgntLAqYwhzGxhZIsFc5He9JOtChopq6XXiz1VF2Owdh
a7xat6iUWz4u1JU5iOof/sTA3tUgVCrQRpH3hTT4nIawNMe3bqDSNquk8S4DoGb3
1QQVq9b5Azfdg/8VkXT74E6BuCFl2b4Z86jcTPS5dUbeFdYzqZxcl4kLXtFTA2GV
aYihhEIMn93lOEIizv0H8qbTq2QCUe2ragIgAPWn3cSD+i50QZuwiHfKpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6RyWx9fOort/UP4x0sgj6FujeyMB8GA1UdIwQY
MBaAFHfI2UvfN+D5AM1qjEIs2xTZfOtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhqWlM5ODM0UGtBeldxTVFpemJGTmw4NjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82Y2U1M2MtNzY3MC00N2E3LTgxYWUt
NTRjMGFlNjE3NmQ0LzEvZDhqWlM5ODM0UGtBeldxTVFpemJGTmw4NjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy82Y2U1M2MtNzY3MC00N2E3LTgxYWUtNTRjMGFlNjE3NmQ0
LzEvZDhqWlM5ODM0UGtBeldxTVFpemJGTmw4NjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfKBuIQY
WbQLb7009ZVijO9mQI6ITgNZ0jwKjNUh51H+t5sdAXFaagUiFEqKvKIm8TCVqDAh
9CEcOcbDKpMQG2U413X6ka4WEx6hMEuGX0qArTXTPRwHJDX75/FH+R4d3KhByokF
7aoUGpOF0MSY0SMMl6pUjS8UdzGe/XQe7EqvRKvkgLuSmdZvdq/yMyW8dg+ulVcU
I/GL8BNZ9Sl9aUEJIAxOfJ3MFhVC1QqmowlGiMaNi8J3cfBHxKWloF6kx0TOMY67
xwZab+TXBviqTovq78YrZodvmTqD5bSQkPVZuZwaeugueQ7b8FHxMFXbcD7S+9TQ
I3/wuMk8ew4mGg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:19 2025 by rpki-client