Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
File: rF6twAMoUCNv7nVutY-_BeExa14.mft (raw, json)
Hash identifier: KKj57lt7BeyMCqCeGR5pIduOHIgt8UFldf6jGEeqyWM=
Subject key identifier: 47:4A:9E:69:5D:2C:DA:B0:7D:E3:11:35:88:C9:02:44:A9:A1:F8:7C
Authority key identifier: AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E
Certificate issuer: /CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
Certificate serial: 019644B2322148687B37F5B72D98C779D5B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
Manifest number: 14F9
Signing time: Thu 17 Apr 2025 17:00:51 +0000
Manifest this update: Thu 17 Apr 2025 17:00:51 +0000
Manifest next update: Fri 18 Apr 2025 17:00:51 +0000
Files and hashes: 1: 6DiQrdbcJOqBfsf9QDEXeVd2izY.roa (hash: 31oYv9nrHSwIdd+Bdi1r8AvslvZ9845lRIm+bAJz/OQ=)
2: rF6twAMoUCNv7nVutY-_BeExa14.crl (hash: PVV9AasflL85FletgGbOqqDB/nxhuFMpylstxYm74h8=)
3: vgAzovenVoSsD0vS8yfVFQ_iX5s.roa (hash: aSEm6wkVsveq0EzZjvN/ovL0lIBGsYGZzYlJEOjMlhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:32:21:48:68:7b:37:f5:b7:2d:98:c7:79:d5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
Validity
Not Before: Apr 17 17:00:51 2025 GMT
Not After : Apr 18 17:00:51 2025 GMT
Subject: CN=474a9e695d2cdab07de3113588c90244a9a1f87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a9:2a:aa:50:95:c4:c0:41:ee:e8:c7:cc:86:
ef:29:7a:42:b5:e0:41:ab:bd:49:d7:80:22:e9:fc:
7b:d9:68:20:18:df:42:6e:13:bc:97:4f:15:b7:37:
59:b3:22:32:12:82:52:24:ce:85:83:bd:2c:1d:cb:
4f:03:44:86:f8:0e:55:d7:88:03:36:02:c0:20:96:
95:7e:46:80:20:c6:fd:e8:4f:10:6f:6a:78:21:64:
39:a2:02:c6:a0:1f:e1:54:c0:7b:82:c8:28:5e:96:
5e:cb:06:98:80:6f:7c:fd:4c:c5:79:db:fd:ad:f1:
8a:8d:8e:0d:a0:82:74:64:81:bb:a1:d0:5d:ac:71:
e7:b9:38:04:c9:11:0a:ae:7d:25:8d:a2:07:54:cb:
96:6e:8f:2e:cc:e9:2d:1c:0b:6d:c6:31:d3:ea:45:
b7:e5:f2:fe:c5:06:2a:38:12:ee:f5:89:db:4b:34:
dc:8b:8e:64:14:5f:a8:ab:35:a1:0a:c9:94:58:b3:
0f:5d:6d:34:d4:54:ad:3b:2d:e8:a9:12:4d:11:d4:
cb:ef:fa:32:19:db:04:cb:65:d2:a1:ac:76:10:11:
0d:c8:79:40:0c:29:c6:93:1d:4d:81:66:1c:6e:e7:
92:9c:4c:10:4c:c5:f1:3a:17:0d:e7:90:b5:b5:c5:
00:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4A:9E:69:5D:2C:DA:B0:7D:E3:11:35:88:C9:02:44:A9:A1:F8:7C
X509v3 Authority Key Identifier:
keyid:AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:fe:9c:60:7a:e2:30:f1:e0:e3:39:7b:f0:42:8d:d8:f2:c6:
f7:1c:07:85:cd:fd:8d:3a:e8:3d:8c:e8:8f:fb:b9:f0:89:f1:
df:19:fd:4e:2d:7d:27:f1:d4:91:df:f3:d7:b5:9c:08:2e:df:
69:cc:71:2b:d3:f3:68:a3:7a:b5:5b:72:f4:4f:75:54:65:3b:
8b:04:e8:b3:d6:02:2f:a3:ab:b5:74:73:17:a4:ec:c0:5b:eb:
46:bc:ff:8d:c3:5d:10:37:2a:a5:75:17:23:92:52:66:6a:e7:
d9:76:85:b9:32:fa:15:1e:aa:f9:5c:aa:7d:ec:63:65:3a:6c:
76:19:f5:27:a1:93:06:bf:df:bf:ba:03:08:48:8f:18:30:42:
61:71:27:1e:2f:16:a7:4d:20:5f:4b:10:10:d1:27:de:45:ca:
cd:3e:da:59:e5:79:48:e4:15:74:78:ae:c9:f5:16:97:17:87:
3b:9a:6c:29:b7:36:6a:fe:a7:ae:19:8b:2f:14:0d:58:37:a9:
7f:5d:fb:8a:17:04:49:64:aa:5a:0f:e4:73:0b:a7:3f:d4:8c:
7f:82:4e:73:f8:31:df:b3:17:83:9f:17:d9:9d:56:6b:e0:10:
b8:65:6b:3d:b8:32:e4:70:1f:f8:31:77:fd:1f:48:c6:67:9f:
cb:54:70:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEsjIhSGh7N/W3LZjHedWxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNWVhZGMwMDMyODUwMjM2ZmVlNzU2ZWI1OGZiZjA1ZTEz
MTZiNWUwHhcNMjUwNDE3MTcwMDUxWhcNMjUwNDE4MTcwMDUxWjAzMTEwLwYDVQQD
Eyg0NzRhOWU2OTVkMmNkYWIwN2RlMzExMzU4OGM5MDI0NGE5YTFmODdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36kqqlCVxMBB7ujHzIbvKXpCteBB
q71J14Ai6fx72WggGN9CbhO8l08VtzdZsyIyEoJSJM6Fg70sHctPA0SG+A5V14gD
NgLAIJaVfkaAIMb96E8Qb2p4IWQ5ogLGoB/hVMB7gsgoXpZeywaYgG98/UzFedv9
rfGKjY4NoIJ0ZIG7odBdrHHnuTgEyREKrn0ljaIHVMuWbo8uzOktHAttxjHT6kW3
5fL+xQYqOBLu9YnbSzTci45kFF+oqzWhCsmUWLMPXW001FStOy3oqRJNEdTL7/oy
GdsEy2XSoax2EBENyHlADCnGkx1NgWYcbueSnEwQTMXxOhcN55C1tcUAQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdKnmldLNqwfeMRNYjJAkSpofh8MB8GA1UdIwQY
MBaAFKxercADKFAjb+51brWPvwXhMWteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckY2dHdBTW9VQ052N25WdXRZLV9CZUV4YTE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81Mjk3NWYtZmViMi00MzNiLWIyZGMt
YzIzOGNlNDgxN2RiLzEvckY2dHdBTW9VQ052N25WdXRZLV9CZUV4YTE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi81Mjk3NWYtZmViMi00MzNiLWIyZGMtYzIzOGNlNDgxN2Ri
LzEvckY2dHdBTW9VQ052N25WdXRZLV9CZUV4YTE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIv6cYHri
MPHg4zl78EKN2PLG9xwHhc39jTroPYzoj/u58Inx3xn9Ti19J/HUkd/z17WcCC7f
acxxK9PzaKN6tVty9E91VGU7iwTos9YCL6OrtXRzF6TswFvrRrz/jcNdEDcqpXUX
I5JSZmrn2XaFuTL6FR6q+VyqfexjZTpsdhn1J6GTBr/fv7oDCEiPGDBCYXEnHi8W
p00gX0sQENEn3kXKzT7aWeV5SOQVdHiuyfUWlxeHO5psKbc2av6nrhmLLxQNWDep
f137ihcESWSqWg/kcwunP9SMf4JOc/gx37MXg58X2Z1Wa+AQuGVrPbgy5HAf+DF3
/R9Ixmefy1Rwvg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:30:33 2025 by rpki-client