Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
File: 0rERWbctQBXthntCt4Q4Hl2VWo8.mft (raw, json)
Hash identifier: KrSA2WiF84oQigyqksCNjzdRhSLGcyCbZ5xZXF17BsU=
Subject key identifier: 67:A8:7C:75:42:46:30:70:7C:34:EF:0B:22:C8:85:1F:12:E7:06:B6
Authority key identifier: D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
Certificate issuer: /CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Certificate serial: 01964E599C1F806FE008EB53D6D28768032B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 14:00:17 +0000
Manifest this update: Sat 19 Apr 2025 14:00:17 +0000
Manifest next update: Sun 20 Apr 2025 14:00:17 +0000
Files and hashes: 1: 0rERWbctQBXthntCt4Q4Hl2VWo8.crl (hash: n62HBlIYobTLqbCavYm/3YLuNVsnX01YZs+eZbOHCD4=)
2: cl3GADBIa5-t9wHD_fNk8JDv5PM.roa (hash: H9R6zlOL/gViduYKRIYyM+avR4L6nr/tioY61On5qcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:59:9c:1f:80:6f:e0:08:eb:53:d6:d2:87:68:03:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Validity
Not Before: Apr 19 14:00:17 2025 GMT
Not After : Apr 20 14:00:17 2025 GMT
Subject: CN=67a87c75424630707c34ef0b22c8851f12e706b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:02:b5:f9:5f:dc:45:84:06:4e:cf:4c:7e:ae:
86:67:4e:d3:d2:cc:f3:71:d6:27:cf:4a:d6:b1:43:
9e:80:c6:1e:d0:4d:59:ac:90:f0:34:d8:71:b9:1a:
68:b8:a9:e6:9f:44:6a:08:6b:82:18:11:d7:1c:4f:
45:5c:81:ae:61:29:36:ca:b8:e5:20:46:99:d2:5d:
18:f8:29:af:78:cf:db:67:fc:3f:ca:6e:93:3e:25:
b0:bb:42:c2:f6:3e:a0:01:21:fd:67:e8:93:72:e2:
7a:41:99:34:d2:10:3d:7c:4f:4d:fd:c8:eb:27:41:
2a:3a:ea:db:15:09:f7:d5:5d:f6:9e:38:d7:09:ba:
ac:3d:81:10:c1:e2:f5:2e:c1:53:c0:14:d3:05:41:
c4:e3:a1:e3:a5:93:47:9d:75:df:0c:b0:85:47:f6:
1b:b8:87:be:f8:07:b8:21:a4:00:b5:37:eb:34:fd:
9c:ce:30:a4:ec:40:40:7b:55:ea:01:07:d4:6c:ff:
95:39:4d:c8:63:09:81:d7:05:16:f8:10:14:7b:96:
cb:68:91:c0:1f:5e:93:b7:e1:53:33:a5:02:34:99:
73:da:04:da:46:7a:12:90:ba:a4:94:4c:97:90:cc:
13:47:7a:0f:9f:e2:5e:4c:fa:ca:5f:e8:e0:3a:d7:
29:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A8:7C:75:42:46:30:70:7C:34:EF:0B:22:C8:85:1F:12:E7:06:B6
X509v3 Authority Key Identifier:
keyid:D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:90:d3:fb:14:9f:5a:32:fb:a1:c7:df:0f:93:12:6b:28:1a:
c4:ab:29:df:49:3d:2c:62:64:e8:b1:9c:0e:32:11:a9:14:d1:
d0:07:60:3e:f8:12:f7:eb:fa:fc:cd:c2:28:db:07:82:d3:4b:
ad:5d:24:b9:ca:4f:41:6a:92:ef:92:ea:de:32:73:ba:85:80:
33:ec:3d:cf:c4:11:3c:87:7b:90:d0:3c:51:8a:f4:e1:64:83:
2c:c4:00:4e:e8:a8:e6:f0:b4:cc:50:45:1c:12:67:08:34:a8:
3a:6e:41:91:fb:cf:21:d6:6c:8d:8a:50:a9:dc:96:e4:77:52:
73:86:66:ce:19:2e:04:b3:f1:fb:4f:7f:02:96:c3:21:73:2c:
12:64:75:fb:2f:50:75:e2:f2:e5:6e:01:dd:7b:d7:21:ca:3c:
be:44:65:da:f8:c4:88:da:23:51:12:bb:d0:47:67:f3:20:11:
ac:5e:10:ec:ce:cd:66:e0:b3:49:b5:37:22:04:22:f8:c5:e4:
4f:39:c1:04:43:67:27:c4:bb:3e:54:e2:c4:1d:b8:0b:00:3c:
98:30:c9:ba:54:c9:b2:35:d4:46:a5:07:a8:b4:34:4c:d3:0e:
54:cc:50:95:f6:ac:5d:e9:3d:57:89:d5:37:1a:d5:cd:39:ee:
81:45:7f:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOWZwfgG/gCOtT1tKHaAMrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYjExMTU5YjcyZDQwMTVlZDg2N2I0MmI3ODQzODFlNWQ5
NTVhOGYwHhcNMjUwNDE5MTQwMDE3WhcNMjUwNDIwMTQwMDE3WjAzMTEwLwYDVQQD
Eyg2N2E4N2M3NTQyNDYzMDcwN2MzNGVmMGIyMmM4ODUxZjEyZTcwNmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwK1+V/cRYQGTs9Mfq6GZ07T0szz
cdYnz0rWsUOegMYe0E1ZrJDwNNhxuRpouKnmn0RqCGuCGBHXHE9FXIGuYSk2yrjl
IEaZ0l0Y+CmveM/bZ/w/ym6TPiWwu0LC9j6gASH9Z+iTcuJ6QZk00hA9fE9N/cjr
J0EqOurbFQn31V32njjXCbqsPYEQweL1LsFTwBTTBUHE46HjpZNHnXXfDLCFR/Yb
uIe++Ae4IaQAtTfrNP2czjCk7EBAe1XqAQfUbP+VOU3IYwmB1wUW+BAUe5bLaJHA
H16Tt+FTM6UCNJlz2gTaRnoSkLqklEyXkMwTR3oPn+JeTPrKX+jgOtcpQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeofHVCRjBwfDTvCyLIhR8S5wa2MB8GA1UdIwQY
MBaAFNKxEVm3LUAV7YZ7QreEOB5dlVqPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHJFUldiY3RRQlh0aG50Q3Q0UTRIbDJWV284LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85YzA5MWItZjg3OS00M2Y3LTkwMjAt
ZjViOTQ5NTljOWY3LzEvMHJFUldiY3RRQlh0aG50Q3Q0UTRIbDJWV284Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85YzA5MWItZjg3OS00M2Y3LTkwMjAtZjViOTQ5NTljOWY3
LzEvMHJFUldiY3RRQlh0aG50Q3Q0UTRIbDJWV284LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5DT+xSf
WjL7ocffD5MSaygaxKsp30k9LGJk6LGcDjIRqRTR0AdgPvgS9+v6/M3CKNsHgtNL
rV0kucpPQWqS75Lq3jJzuoWAM+w9z8QRPId7kNA8UYr04WSDLMQATuio5vC0zFBF
HBJnCDSoOm5BkfvPIdZsjYpQqdyW5HdSc4ZmzhkuBLPx+09/ApbDIXMsEmR1+y9Q
deLy5W4B3XvXIco8vkRl2vjEiNojURK70Edn8yARrF4Q7M7NZuCzSbU3IgQi+MXk
TznBBENnJ8S7PlTixB24CwA8mDDJulTJsjXURqUHqLQ0TNMOVMxQlfasXek9V4nV
NxrVzTnugUV/0g==
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:00:15 2025 by rpki-client