Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
File: cTm2kHj5bKuvcYo5u1hniurBzMI.mft (raw, json)
Hash identifier: rJU5nn58Kbu6e81ymxwY8zPHIlIQutuAEHW4+x/Dzx8=
Subject key identifier: B4:90:3B:5C:DD:82:8B:29:8A:2D:63:86:77:1E:77:50:0A:83:6E:DD
Authority key identifier: 71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2
Certificate issuer: /CN=7139b69078f96cabaf718a39bb58678aeac1ccc2
Certificate serial: 019652364DAC57D2F14552E7AA39D2CE64FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
Manifest number: 0EF7
Signing time: Sun 20 Apr 2025 08:00:12 +0000
Manifest this update: Sun 20 Apr 2025 08:00:12 +0000
Manifest next update: Mon 21 Apr 2025 08:00:12 +0000
Files and hashes: 1: PYsPgn9EIHR5AYha-d_1rxDJZs0.roa (hash: QRdgsHwd+qGrv8yp41/SIFOyI0EFbmqDBRqqwNJuLIY=)
2: cTm2kHj5bKuvcYo5u1hniurBzMI.crl (hash: +DfP/ZmLrJE9vLiabmZNFrFnXIW/NSy16TiiOu73q8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:4d:ac:57:d2:f1:45:52:e7:aa:39:d2:ce:64:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139b69078f96cabaf718a39bb58678aeac1ccc2
Validity
Not Before: Apr 20 08:00:12 2025 GMT
Not After : Apr 21 08:00:12 2025 GMT
Subject: CN=b4903b5cdd828b298a2d6386771e77500a836edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:eb:48:38:45:f5:3a:05:94:06:9e:33:75:
9f:e5:8b:fe:b0:54:c8:a2:79:c5:37:33:f1:d4:6a:
ce:4b:95:60:38:a3:a8:9b:97:c9:8b:5b:d2:9b:3d:
fa:f4:2d:cc:f7:06:e8:da:e9:ab:d4:02:b5:0b:10:
6c:fe:fd:2e:f7:63:c4:9a:c8:23:aa:c9:a7:a7:d2:
67:46:dc:db:92:35:2e:8d:51:8d:06:e1:5b:fe:a1:
32:26:3f:a7:1b:fe:29:fc:84:ea:a4:35:3f:87:7e:
48:bb:4e:4b:fc:0a:08:c9:3f:3d:b6:01:92:fb:dd:
95:b8:07:7d:73:f5:b6:8f:14:3b:e9:96:6f:97:5e:
e1:b6:b8:11:ff:6c:40:10:5b:d2:36:c6:27:e6:73:
64:63:b9:4c:0c:b9:4f:af:d1:15:11:0d:f8:3b:8d:
14:86:39:ca:b1:89:e9:a3:7a:2f:e2:eb:2b:72:ae:
b5:ff:85:a2:95:e9:f1:da:62:40:aa:17:1f:87:8e:
61:ea:bd:fc:24:f6:16:d9:42:0e:da:d6:49:97:f9:
b4:54:e1:fb:57:c1:da:90:a4:df:d9:67:14:43:ba:
f5:69:1c:ab:78:e8:52:62:cd:9d:ef:81:ae:bb:a3:
7a:b8:ed:4f:39:01:fc:b1:93:f3:e7:b8:09:df:47:
b2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:90:3B:5C:DD:82:8B:29:8A:2D:63:86:77:1E:77:50:0A:83:6E:DD
X509v3 Authority Key Identifier:
keyid:71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:04:70:d8:92:ff:87:54:b0:78:ee:68:78:99:41:73:92:f9:
d8:27:ef:13:9c:3c:a8:4f:30:9d:04:0b:41:b6:a5:b6:88:60:
d8:01:5a:4d:a9:95:39:f7:67:e2:47:54:2b:39:26:4b:bc:ce:
91:9b:39:07:27:d6:4c:37:8a:e7:8c:1c:d0:0e:2e:2b:f8:36:
9d:d1:45:22:a3:5f:15:2b:f4:2f:76:fd:fa:d7:92:23:a5:d5:
19:a1:77:dc:85:04:ce:3a:85:78:61:e4:d1:0a:8f:3d:11:6b:
e1:14:be:54:1f:a0:c7:6d:f7:27:18:8e:eb:96:8d:f7:c1:e8:
84:1f:9f:49:e9:ae:db:8e:8f:25:78:1e:79:4a:fc:25:ee:13:
43:a9:6c:5e:46:2f:59:99:00:40:f3:4b:cc:d7:d7:f0:16:0d:
ac:3d:84:1e:fb:27:4e:95:b9:f4:ac:08:bf:cc:06:ad:2a:af:
7c:2b:18:85:77:e7:89:3b:19:44:7d:55:df:91:cc:6d:dc:5b:
f1:fb:1e:35:20:2c:1f:a3:f6:0e:da:1e:5a:67:66:d2:3a:d5:
30:26:e4:e8:4c:1b:2d:03:6c:2a:b4:16:20:34:bc:87:b2:7f:
09:0d:8d:e5:c5:b5:c2:93:26:6d:db:69:77:47:f0:af:ae:4b:
07:b8:1e:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSNk2sV9LxRVLnqjnSzmT/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMzliNjkwNzhmOTZjYWJhZjcxOGEzOWJiNTg2NzhhZWFj
MWNjYzIwHhcNMjUwNDIwMDgwMDEyWhcNMjUwNDIxMDgwMDEyWjAzMTEwLwYDVQQD
EyhiNDkwM2I1Y2RkODI4YjI5OGEyZDYzODY3NzFlNzc1MDBhODM2ZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjjrSDhF9ToFlAaeM3Wf5Yv+sFTI
onnFNzPx1GrOS5VgOKOom5fJi1vSmz369C3M9wbo2umr1AK1CxBs/v0u92PEmsgj
qsmnp9JnRtzbkjUujVGNBuFb/qEyJj+nG/4p/ITqpDU/h35Iu05L/AoIyT89tgGS
+92VuAd9c/W2jxQ76ZZvl17htrgR/2xAEFvSNsYn5nNkY7lMDLlPr9EVEQ34O40U
hjnKsYnpo3ov4usrcq61/4Wilenx2mJAqhcfh45h6r38JPYW2UIO2tZJl/m0VOH7
V8HakKTf2WcUQ7r1aRyreOhSYs2d74Guu6N6uO1POQH8sZPz57gJ30ey4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSQO1zdgospii1jhnced1AKg27dMB8GA1UdIwQY
MBaAFHE5tpB4+Wyrr3GKObtYZ4rqwczCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1RtMmtIajViS3V2Y1lvNXUxaG5pdXJCek1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jYWIxNDktZDU2Ny00OGZjLWFjOWIt
MjBiMDI0YzZmYzJmLzEvY1RtMmtIajViS3V2Y1lvNXUxaG5pdXJCek1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9jYWIxNDktZDU2Ny00OGZjLWFjOWItMjBiMDI0YzZmYzJm
LzEvY1RtMmtIajViS3V2Y1lvNXUxaG5pdXJCek1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwRw2JL/
h1SweO5oeJlBc5L52CfvE5w8qE8wnQQLQbaltohg2AFaTamVOfdn4kdUKzkmS7zO
kZs5ByfWTDeK54wc0A4uK/g2ndFFIqNfFSv0L3b9+teSI6XVGaF33IUEzjqFeGHk
0QqPPRFr4RS+VB+gx233JxiO65aN98HohB+fSemu246PJXgeeUr8Je4TQ6lsXkYv
WZkAQPNLzNfX8BYNrD2EHvsnTpW59KwIv8wGrSqvfCsYhXfniTsZRH1V35HMbdxb
8fseNSAsH6P2DtoeWmdm0jrVMCbk6EwbLQNsKrQWIDS8h7J/CQ2N5cW1wpMmbdtp
d0fwr65LB7geAg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:30 2025 by rpki-client