Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
File: iXj_XaszxC2mX-Thq_vKTq-90qo.mft (raw, json)
Hash identifier: RTA5X+wet3Dftkyhk8WwWCYOT7A3Kz3vss9uttzYQpo=
Subject key identifier: 2E:84:AF:98:F9:8F:E8:64:EB:81:FF:06:F3:99:DB:6C:90:72:EF:0C
Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Certificate issuer: /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Certificate serial: 019652A4ED761E685DACD9FFAF8476567C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
Manifest number: 10A5
Signing time: Sun 20 Apr 2025 10:01:02 +0000
Manifest this update: Sun 20 Apr 2025 10:01:02 +0000
Manifest next update: Mon 21 Apr 2025 10:01:02 +0000
Files and hashes: 1: 5-1oK7ZffFqStfo7QWXqKcGuZfk.roa (hash: ae86GvhPxW1Ea0shedYB3VtmcIvsIfxJLLLA1E/5h/A=)
2: e4U8yl2fAVY2sT3p5fbr_erY7oA.roa (hash: 2KHYehyUkqT72mAQaz7HDc/red7uQn+krX6/aXcIZtE=)
3: iXj_XaszxC2mX-Thq_vKTq-90qo.crl (hash: kHMEzme4/gXIknvuOu9OV+plqIO7x38lgn3OGyfkD+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:ed:76:1e:68:5d:ac:d9:ff:af:84:76:56:7c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Validity
Not Before: Apr 20 10:01:02 2025 GMT
Not After : Apr 21 10:01:02 2025 GMT
Subject: CN=2e84af98f98fe864eb81ff06f399db6c9072ef0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:19:b0:9a:87:fd:0a:f1:d5:82:83:0c:56:8a:
3e:a8:f4:27:4e:7f:73:17:f9:f4:6c:09:d1:22:40:
4b:98:53:c3:c5:1c:04:8e:5f:04:91:db:da:9b:a9:
33:a1:fa:c7:48:62:05:fb:40:a3:d4:a2:5a:53:90:
73:51:bf:eb:93:f8:cb:fa:b8:42:6b:04:f3:2e:ca:
5a:a8:ab:a0:db:41:cb:7a:ba:27:aa:9b:61:f7:b2:
c3:48:98:29:2c:7b:b1:ff:59:77:66:dd:e3:bf:aa:
25:1e:1a:1d:8f:ae:d7:63:3c:e1:27:03:41:e1:85:
81:d9:67:33:84:1f:70:ca:71:8a:80:84:b7:e6:ec:
a5:37:c1:5a:70:7c:ca:f4:07:89:bb:77:dd:5a:39:
ec:69:f9:45:aa:9c:0e:77:2f:ef:4c:6a:87:41:82:
a3:43:3b:f3:6a:33:77:25:91:0d:38:19:63:fc:d4:
6f:e8:81:e4:db:fd:9b:27:3a:1c:a6:af:72:f9:4e:
ad:96:98:80:3c:31:5f:67:26:71:cf:a2:1b:b0:8f:
4f:cf:39:67:5c:a3:be:c8:9d:7d:a8:c3:38:e0:63:
5b:85:5a:cd:9d:da:32:cc:8b:0a:18:43:40:b6:58:
fb:e0:49:5e:11:21:ea:46:77:8f:79:3f:4f:1b:1f:
a8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:84:AF:98:F9:8F:E8:64:EB:81:FF:06:F3:99:DB:6C:90:72:EF:0C
X509v3 Authority Key Identifier:
keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c9:75:2a:dc:f7:50:d4:ab:9b:21:f4:d4:60:10:46:e2:d4:
09:6f:c5:ca:d6:7e:63:59:46:3c:c8:78:7c:47:5b:fc:1a:86:
3d:ca:cf:8e:b1:49:af:10:c0:14:99:7c:62:7c:ad:67:6e:0b:
c3:dd:82:dd:44:04:62:f4:6a:38:2f:14:b9:cd:f0:69:cf:9f:
05:9a:9b:4d:91:04:8c:ba:96:e9:bb:a7:b7:ca:ea:fb:e6:64:
73:48:a3:93:24:37:13:5d:c6:2a:df:f0:d3:96:08:fd:b4:8a:
e0:f5:22:a2:e2:4e:c9:40:a2:ff:f7:e8:49:27:43:91:aa:73:
1a:0a:26:f7:86:19:c5:6c:17:55:9e:cf:f6:13:7c:fc:e4:21:
3f:f7:b1:62:00:15:37:21:93:01:83:cf:30:75:77:e6:84:1c:
03:38:a4:9a:e7:19:b1:d5:a0:f8:dd:c7:4d:c4:70:13:6c:41:
45:19:1b:2a:b7:17:6a:04:95:d7:4c:c0:9b:54:e7:40:fb:29:
80:9c:4c:14:58:6d:ce:7f:10:c0:12:13:2f:f6:4e:a0:e0:30:
83:43:92:e3:f2:59:6b:82:48:1c:13:68:b5:b8:59:5f:a8:55:
c1:d1:07:77:ba:3d:27:19:15:fb:26:39:bc:86:58:d0:26:9e:
d0:fd:b4:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSpO12HmhdrNn/r4R2VnxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NzhmZjVkYWIzM2M0MmRhNjVmZTRlMWFiZmJjYTRlYWZi
ZGQyYWEwHhcNMjUwNDIwMTAwMTAyWhcNMjUwNDIxMTAwMTAyWjAzMTEwLwYDVQQD
EygyZTg0YWY5OGY5OGZlODY0ZWI4MWZmMDZmMzk5ZGI2YzkwNzJlZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9hmwmof9CvHVgoMMVoo+qPQnTn9z
F/n0bAnRIkBLmFPDxRwEjl8Ekdvam6kzofrHSGIF+0Cj1KJaU5BzUb/rk/jL+rhC
awTzLspaqKug20HLeronqpth97LDSJgpLHux/1l3Zt3jv6olHhodj67XYzzhJwNB
4YWB2WczhB9wynGKgIS35uylN8FacHzK9AeJu3fdWjnsaflFqpwOdy/vTGqHQYKj
QzvzajN3JZENOBlj/NRv6IHk2/2bJzocpq9y+U6tlpiAPDFfZyZxz6IbsI9Pzzln
XKO+yJ19qMM44GNbhVrNndoyzIsKGENAtlj74EleESHqRnePeT9PGx+oLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6Er5j5j+hk64H/BvOZ22yQcu8MMB8GA1UdIwQY
MBaAFIl4/12rM8Qtpl/k4av7yk6vvdKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVhqX1hhc3p4QzJtWC1UaHFfdktUcS05MHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yZTgzNDctZDljNy00ZTUxLTliMTQt
ZDAyZDk2YzM2Y2EzLzEvaVhqX1hhc3p4QzJtWC1UaHFfdktUcS05MHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yZTgzNDctZDljNy00ZTUxLTliMTQtZDAyZDk2YzM2Y2Ez
LzEvaVhqX1hhc3p4QzJtWC1UaHFfdktUcS05MHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcl1Ktz3
UNSrmyH01GAQRuLUCW/FytZ+Y1lGPMh4fEdb/BqGPcrPjrFJrxDAFJl8YnytZ24L
w92C3UQEYvRqOC8Uuc3wac+fBZqbTZEEjLqW6bunt8rq++Zkc0ijkyQ3E13GKt/w
05YI/bSK4PUiouJOyUCi//foSSdDkapzGgom94YZxWwXVZ7P9hN8/OQhP/exYgAV
NyGTAYPPMHV35oQcAzikmucZsdWg+N3HTcRwE2xBRRkbKrcXagSV10zAm1TnQPsp
gJxMFFhtzn8QwBITL/ZOoOAwg0OS4/JZa4JIHBNotbhZX6hVwdEHd7o9JxkV+yY5
vIZY0Cae0P20nw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:10 2025 by rpki-client