Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
File: In6Vgaaaz4EZMg4TeYV6UTvSONs.mft (raw, json)
Hash identifier: RWLnpyVt7iPLeXuXdtYoH148a08lI76nB003cZfoSO4=
Subject key identifier: 14:79:5A:2F:E5:86:D8:AE:8D:F0:1F:31:A1:B7:EC:39:74:CC:F0:9C
Authority key identifier: 22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB
Certificate issuer: /CN=227e9581a69acf8119320e1379857a513bd238db
Certificate serial: 019649D846B14EA6270FAEFDBE9E1B32F9D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 17:00:32 +0000
Manifest this update: Fri 18 Apr 2025 17:00:32 +0000
Manifest next update: Sat 19 Apr 2025 17:00:32 +0000
Files and hashes: 1: In6Vgaaaz4EZMg4TeYV6UTvSONs.crl (hash: vfmnu9gw1ZAOgdUg15OkOBAVzWQooOq+ibC6Lj204ow=)
2: zDiyPljIfQJSHZqDPkKU2sChvrg.roa (hash: y+GAtv4wxCnxVitUPOmEF1JPji3zVCOq+ijeYGfAYfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:46:b1:4e:a6:27:0f:ae:fd:be:9e:1b:32:f9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=227e9581a69acf8119320e1379857a513bd238db
Validity
Not Before: Apr 18 17:00:32 2025 GMT
Not After : Apr 19 17:00:32 2025 GMT
Subject: CN=14795a2fe586d8ae8df01f31a1b7ec3974ccf09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6f:ab:5a:32:e4:1b:aa:72:d9:b1:c5:ff:89:
01:f0:b2:0d:36:6f:49:a8:eb:4e:51:6a:f8:14:06:
2b:4a:3a:2a:77:fb:49:96:a5:09:98:71:5c:5a:2b:
42:2a:d9:3b:aa:1a:19:f4:98:14:c2:51:47:78:2a:
25:72:6d:0a:b6:fd:29:76:ca:4c:b1:a9:07:38:76:
d3:58:0b:52:db:f0:8b:a6:9c:f2:17:3b:af:09:6c:
7d:f7:59:df:33:34:4f:2b:23:e9:82:45:d2:20:b5:
60:d9:49:84:d1:e4:e7:4f:cc:41:f3:c2:7d:62:c3:
8c:4e:d2:db:8c:80:ae:a7:80:12:9d:44:4f:59:4e:
a4:ce:cb:7e:aa:ac:92:cd:6d:5b:cf:1e:a1:3c:0a:
33:b2:f4:37:d5:ca:1f:e7:0c:55:b6:db:c4:d8:eb:
0d:90:9f:2c:71:d6:80:10:0a:7d:99:aa:0d:d6:c3:
c5:a7:00:96:b8:ee:6e:5f:4d:62:51:7b:cf:a5:91:
0e:33:73:4c:c9:d0:50:45:63:08:10:a8:b2:03:8f:
3e:75:4a:d1:3e:ea:31:e6:c0:4b:cb:5e:8d:08:a8:
c4:0a:2a:54:0b:6e:9c:3f:ca:3f:66:f3:90:c3:81:
79:11:df:66:89:07:f0:9e:e4:d3:6f:09:5d:19:55:
90:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:79:5A:2F:E5:86:D8:AE:8D:F0:1F:31:A1:B7:EC:39:74:CC:F0:9C
X509v3 Authority Key Identifier:
keyid:22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:31:3e:07:18:25:d3:8f:1f:0f:93:97:da:cc:80:62:b8:b5:
5b:6b:2d:e0:d2:aa:e4:01:de:28:c8:f8:bf:4a:b8:f9:d6:72:
de:d1:2d:1e:3e:04:15:95:86:e5:e2:4a:01:82:11:ab:b5:76:
fc:2c:80:e5:08:db:ec:91:67:a1:70:cb:c7:f5:a0:30:09:c9:
bc:33:c0:c6:81:9c:7b:6f:2e:16:50:af:01:ef:7a:02:ab:87:
f2:ea:08:75:f7:0d:bb:35:ec:2f:be:d2:96:31:8c:ea:37:35:
32:fd:cb:b3:22:42:c6:08:12:6a:27:b6:ed:17:bb:3d:52:14:
35:12:8a:61:d2:cb:48:94:ae:72:eb:f8:33:b7:f4:88:76:42:
65:47:7a:40:6e:b5:ca:b6:1a:a3:1a:af:2d:f2:a2:da:61:90:
47:02:af:28:a1:74:b1:13:05:1c:a4:d8:a3:c2:04:74:bb:31:
91:90:13:81:fd:ba:f1:e0:17:74:e6:76:df:e4:58:21:29:dd:
54:c7:55:5f:c7:d3:78:a6:8f:88:a9:3e:a4:6b:fd:e4:4b:3e:
15:23:b0:4d:d8:43:3d:70:9c:15:40:ab:82:ec:47:54:a4:81:
ba:fe:87:67:17:50:e5:3c:2e:e4:69:49:05:28:44:30:41:96:
b2:ed:fa:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZJ2EaxTqYnD679vp4bMvnRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyN2U5NTgxYTY5YWNmODExOTMyMGUxMzc5ODU3YTUxM2Jk
MjM4ZGIwHhcNMjUwNDE4MTcwMDMyWhcNMjUwNDE5MTcwMDMyWjAzMTEwLwYDVQQD
EygxNDc5NWEyZmU1ODZkOGFlOGRmMDFmMzFhMWI3ZWMzOTc0Y2NmMDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG+rWjLkG6py2bHF/4kB8LINNm9J
qOtOUWr4FAYrSjoqd/tJlqUJmHFcWitCKtk7qhoZ9JgUwlFHeColcm0Ktv0pdspM
sakHOHbTWAtS2/CLppzyFzuvCWx991nfMzRPKyPpgkXSILVg2UmE0eTnT8xB88J9
YsOMTtLbjICup4ASnURPWU6kzst+qqySzW1bzx6hPAozsvQ31cof5wxVttvE2OsN
kJ8scdaAEAp9maoN1sPFpwCWuO5uX01iUXvPpZEOM3NMydBQRWMIEKiyA48+dUrR
Puox5sBLy16NCKjECipUC26cP8o/ZvOQw4F5Ed9miQfwnuTTbwldGVWQVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBR5Wi/lhtiujfAfMaG37Dl0zPCcMB8GA1UdIwQY
MBaAFCJ+lYGmms+BGTIOE3mFelE70jjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSW42VmdhYWF6NEVaTWc0VGVZVjZVVHZTT05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yYjgzYTEtNzQ4ZC00ZjU1LThiM2It
ZDlkZjQ1ZGJiYWRmLzEvSW42VmdhYWF6NEVaTWc0VGVZVjZVVHZTT05zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8yYjgzYTEtNzQ4ZC00ZjU1LThiM2ItZDlkZjQ1ZGJiYWRm
LzEvSW42VmdhYWF6NEVaTWc0VGVZVjZVVHZTT05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjE+Bxgl
048fD5OX2syAYri1W2st4NKq5AHeKMj4v0q4+dZy3tEtHj4EFZWG5eJKAYIRq7V2
/CyA5Qjb7JFnoXDLx/WgMAnJvDPAxoGce28uFlCvAe96AquH8uoIdfcNuzXsL77S
ljGM6jc1Mv3LsyJCxggSaie27Re7PVIUNRKKYdLLSJSucuv4M7f0iHZCZUd6QG61
yrYaoxqvLfKi2mGQRwKvKKF0sRMFHKTYo8IEdLsxkZATgf268eAXdOZ23+RYISnd
VMdVX8fTeKaPiKk+pGv95Es+FSOwTdhDPXCcFUCrguxHVKSBuv6HZxdQ5Twu5GlJ
BShEMEGWsu369A==
-----END CERTIFICATE-----
Generated at Fri Apr 18 20:11:26 2025 by rpki-client