Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
File: RjadxdpeTnDHNbI1cE2evFglk0k.mft (raw, json)
Hash identifier: /dYP/8RWZXWiJElbqzgTUTzlwHkOY2/dwsyJvXRgl+o=
Subject key identifier: 5A:8A:5A:81:90:A3:83:AA:0F:4D:4C:A2:9D:69:CA:13:DF:55:BE:C5
Authority key identifier: 46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
Certificate issuer: /CN=46369dc5da5e4e70c735b235704d9ebc58259349
Certificate serial: 0196293BA402E43F182EA49C34C038F9EB27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
Manifest number: 143E
Signing time: Sat 12 Apr 2025 09:01:36 +0000
Manifest this update: Sat 12 Apr 2025 09:01:36 +0000
Manifest next update: Sun 13 Apr 2025 09:01:36 +0000
Files and hashes: 1: 3yPa4BQmuQtptzt1inGpjbsFSZE.roa (hash: HLxtGU596QkfMOxVWmb+kQTalFdGbEcgND/sUsANLeo=)
2: RjadxdpeTnDHNbI1cE2evFglk0k.crl (hash: q1CKds1x6QzSu9m6sNGnUyl3t9NUVKnFM2gwWIuPvuI=)
3: ixKyOCrozUgfgF7gZjbgd74b7D8.roa (hash: 3ZudSa89cqvRuz+AlsHNzxSkAK3mpz40E5GR+nCuQeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 09:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:3b:a4:02:e4:3f:18:2e:a4:9c:34:c0:38:f9:eb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46369dc5da5e4e70c735b235704d9ebc58259349
Validity
Not Before: Apr 12 09:01:36 2025 GMT
Not After : Apr 13 09:01:36 2025 GMT
Subject: CN=5a8a5a8190a383aa0f4d4ca29d69ca13df55bec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f6:20:69:fa:1f:34:75:a9:d5:49:93:bb:61:
c9:a7:80:c0:ce:29:d7:c7:7d:f5:c7:b7:f1:b4:d8:
cc:fd:45:27:70:2c:17:8f:ce:45:17:2c:a4:22:45:
a0:ca:e8:94:d4:cc:75:71:9a:fc:ae:f0:aa:1b:b8:
b3:a6:0c:cb:9c:4b:d0:70:bf:f1:f0:8b:fb:f1:d2:
81:8d:20:18:78:12:a7:4a:10:d0:96:3f:12:46:6e:
13:d2:95:fb:6b:75:48:25:e8:2e:b9:ec:06:f4:65:
a3:63:19:b5:f1:16:d1:12:17:ea:9a:d2:f4:a8:b3:
04:78:31:cd:02:bd:6a:e7:e8:b6:e4:9b:9e:4f:a9:
fd:52:cf:0c:e8:3c:a9:53:38:02:eb:01:ac:f1:b0:
15:cf:7f:cd:11:b1:29:ea:e0:6e:3d:58:c4:3b:3d:
bf:53:22:1f:08:f1:7a:fa:fa:5b:ef:b5:0c:b1:25:
91:ed:74:a9:ea:6d:90:03:97:88:09:d7:df:47:7b:
ce:1e:d6:d4:2d:2f:6b:26:0f:9a:f3:5e:a3:30:a0:
f5:a6:c1:17:d7:5a:d0:cf:64:0d:92:b4:6a:30:7d:
b2:e9:59:73:3d:cc:75:b9:2b:c0:a8:23:22:5f:4f:
e8:8a:ed:e4:f5:20:83:29:5a:3f:0e:dc:75:e7:af:
fb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8A:5A:81:90:A3:83:AA:0F:4D:4C:A2:9D:69:CA:13:DF:55:BE:C5
X509v3 Authority Key Identifier:
keyid:46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f2:cb:ae:da:47:16:d5:6e:a7:2a:33:7e:6c:7e:86:c0:a1:
99:9a:63:65:2e:dc:a0:7b:7d:82:41:75:fb:b2:80:0f:41:39:
10:11:2e:71:d9:44:f2:69:57:96:66:a3:ba:c2:d5:88:c6:aa:
51:cf:76:0f:22:46:59:41:05:52:7c:20:a5:40:47:b4:59:d2:
17:2c:41:bd:33:49:b5:14:92:d3:9b:a3:80:f2:da:dc:4f:c3:
cc:21:2a:f2:4c:97:58:a7:6a:b7:3a:06:78:9d:64:c2:1f:6d:
33:38:9d:2e:a2:1e:1d:9e:ac:41:e2:79:8d:1f:f6:e5:7c:0f:
07:2d:f1:b2:45:25:58:31:24:cc:fd:62:59:a4:81:10:8e:6d:
86:e8:c1:b2:c6:cb:2c:55:b8:47:ed:44:8d:75:c7:af:9c:f1:
32:f5:39:61:93:ec:3d:54:4f:30:22:f4:5e:e2:20:8a:f4:ed:
39:de:ad:13:d0:c7:64:d1:d0:b9:77:90:23:ca:e4:c6:42:65:
6b:65:87:ec:2d:65:43:c4:7e:83:40:c5:6f:9e:05:f4:8d:cd:
8e:b6:4c:78:4a:19:85:d5:40:84:62:4f:c7:92:ae:5d:01:79:
11:ae:7c:48:2a:2b:13:8d:0f:67:42:8b:74:ee:66:14:20:2e:
c7:f7:06:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYpO6QC5D8YLqScNMA4+esnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MzY5ZGM1ZGE1ZTRlNzBjNzM1YjIzNTcwNGQ5ZWJjNTgy
NTkzNDkwHhcNMjUwNDEyMDkwMTM2WhcNMjUwNDEzMDkwMTM2WjAzMTEwLwYDVQQD
Eyg1YThhNWE4MTkwYTM4M2FhMGY0ZDRjYTI5ZDY5Y2ExM2RmNTViZWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/YgafofNHWp1UmTu2HJp4DAzinX
x331x7fxtNjM/UUncCwXj85FFyykIkWgyuiU1Mx1cZr8rvCqG7izpgzLnEvQcL/x
8Iv78dKBjSAYeBKnShDQlj8SRm4T0pX7a3VIJeguuewG9GWjYxm18RbREhfqmtL0
qLMEeDHNAr1q5+i25JueT6n9Us8M6DypUzgC6wGs8bAVz3/NEbEp6uBuPVjEOz2/
UyIfCPF6+vpb77UMsSWR7XSp6m2QA5eICdffR3vOHtbULS9rJg+a816jMKD1psEX
11rQz2QNkrRqMH2y6VlzPcx1uSvAqCMiX0/oiu3k9SCDKVo/Dtx156/7JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqKWoGQo4OqD01Mop1pyhPfVb7FMB8GA1UdIwQY
MBaAFEY2ncXaXk5wxzWyNXBNnrxYJZNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmphZHhkcGVUbkRITmJJMWNFMmV2RmdsazBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mZTY5YjItMGFiYi00ZTU1LThiMzgt
YTkxNjM0ZDJhODA4LzEvUmphZHhkcGVUbkRITmJJMWNFMmV2RmdsazBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9mZTY5YjItMGFiYi00ZTU1LThiMzgtYTkxNjM0ZDJhODA4
LzEvUmphZHhkcGVUbkRITmJJMWNFMmV2RmdsazBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/LLrtpH
FtVupyozfmx+hsChmZpjZS7coHt9gkF1+7KAD0E5EBEucdlE8mlXlmajusLViMaq
Uc92DyJGWUEFUnwgpUBHtFnSFyxBvTNJtRSS05ujgPLa3E/DzCEq8kyXWKdqtzoG
eJ1kwh9tMzidLqIeHZ6sQeJ5jR/25XwPBy3xskUlWDEkzP1iWaSBEI5thujBssbL
LFW4R+1EjXXHr5zxMvU5YZPsPVRPMCL0XuIgivTtOd6tE9DHZNHQuXeQI8rkxkJl
a2WH7C1lQ8R+g0DFb54F9I3NjrZMeEoZhdVAhGJPx5KuXQF5Ea58SCorE40PZ0KL
dO5mFCAux/cGvw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 20:23:48 2025 by rpki-client