Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
File: rmjJUYwq1UwKy4IUaMhuRboWHBg.mft (raw, json)
Hash identifier: WTtAVobnP6I2EokazwdsNWihMY9x+EUeEaSSAZtvzQM=
Subject key identifier: 76:7D:DD:0D:00:9D:83:09:E4:FB:D9:69:0F:F4:FF:2D:7D:AB:2C:41
Authority key identifier: AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18
Certificate issuer: /CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
Certificate serial: 01964F6CC09F4E2BDF5E98AE90AC3860B874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
Manifest number: 03C6
Signing time: Sat 19 Apr 2025 19:00:49 +0000
Manifest this update: Sat 19 Apr 2025 19:00:49 +0000
Manifest next update: Sun 20 Apr 2025 19:00:49 +0000
Files and hashes: 1: PwlcQaBPeu72jRxpS1TyAFafqIs.roa (hash: zweRMxR6GdWC0C5ngJnRInvOkWHsboI5uvSiYLo2X20=)
2: rmjJUYwq1UwKy4IUaMhuRboWHBg.crl (hash: PLBRuEZ4KbaFVVf2lmIX6TcGgAGvD7f/5VPsJZseouY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:c0:9f:4e:2b:df:5e:98:ae:90:ac:38:60:b8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
Validity
Not Before: Apr 19 19:00:49 2025 GMT
Not After : Apr 20 19:00:49 2025 GMT
Subject: CN=767ddd0d009d8309e4fbd9690ff4ff2d7dab2c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:66:ca:da:ae:3a:a7:63:e7:7f:c6:30:a8:65:
46:49:1e:6c:ed:c9:dc:72:f6:49:b3:8b:e2:16:ff:
e7:b2:1e:bb:90:77:eb:be:c3:31:94:cb:0f:7f:20:
c6:a6:b9:c4:cd:f9:bd:d8:b1:9d:9c:bd:0e:28:62:
58:ce:4c:57:5d:a1:7a:73:ac:7c:27:69:f0:44:a2:
5b:50:8f:bf:6c:26:83:93:79:39:41:fc:d6:56:ca:
a9:b8:d0:94:e0:60:0a:33:e6:41:cf:f5:6d:92:42:
60:ef:b2:0b:b6:db:e2:8f:2f:d9:60:25:0b:24:2a:
d8:38:40:d7:75:3f:63:9c:0d:dd:17:96:6b:f7:19:
8e:62:e7:2d:0f:9c:c9:3d:b8:97:36:49:88:c5:b4:
39:98:ea:91:35:16:ad:bb:31:8c:64:21:f5:fb:86:
cc:db:5e:ed:af:8a:0a:46:1d:47:ae:7e:e3:8d:ba:
f1:48:71:42:b4:69:0e:a2:a1:fa:fe:28:c4:51:0a:
7c:82:f1:bb:41:d0:f4:5a:27:58:82:31:b7:92:11:
dd:98:62:36:c7:52:85:36:d4:e0:2a:ea:62:9f:04:
3e:84:2c:de:00:81:ec:85:49:04:a2:10:cb:67:60:
2e:55:73:6c:bf:99:b9:08:d7:95:54:cf:c5:2b:17:
67:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7D:DD:0D:00:9D:83:09:E4:FB:D9:69:0F:F4:FF:2D:7D:AB:2C:41
X509v3 Authority Key Identifier:
keyid:AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8c:fc:da:cc:95:c1:98:15:2f:62:10:17:27:75:ce:b3:93:
14:07:c6:f3:12:02:1e:5e:3f:71:e4:4b:5c:4e:c3:36:7c:36:
ee:fa:31:58:fc:7c:ac:59:5b:ca:8b:c4:81:fa:19:03:40:f0:
e6:5b:cf:58:16:c2:23:1b:71:3c:af:ef:2d:7b:35:cc:30:e5:
a6:fc:4f:9e:58:ad:9a:84:16:37:8f:2c:28:20:60:3e:bd:e5:
ad:b0:0e:d8:ac:0c:db:b1:25:55:46:be:3c:21:42:de:65:b5:
9e:f1:df:4b:f5:0c:0f:9b:f0:59:de:cd:b7:8e:d1:79:cf:5c:
e9:e4:c9:02:77:28:92:60:e6:ac:1b:3a:6b:34:01:a7:c2:7a:
48:40:93:24:8f:04:45:4a:66:04:33:9e:2d:e0:47:be:35:35:
57:53:13:c6:77:b3:79:df:a5:f9:11:66:95:a3:38:bd:3c:fe:
b7:cb:c9:04:9d:ee:e3:ed:3f:72:e0:7c:24:e0:df:f0:47:2a:
79:16:35:ff:f9:00:78:07:16:15:80:ea:59:46:75:46:b9:87:
8e:02:54:de:1c:45:c6:ea:72:76:b0:25:12:64:49:65:d4:37:
0a:c6:70:65:08:6a:4d:1f:5c:71:c7:ba:42:45:00:35:57:03:
0d:fe:0a:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbMCfTivfXpiukKw4YLh0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNjhjOTUxOGMyYWQ1NGMwYWNiODIxNDY4Yzg2ZTQ1YmEx
NjFjMTgwHhcNMjUwNDE5MTkwMDQ5WhcNMjUwNDIwMTkwMDQ5WjAzMTEwLwYDVQQD
Eyg3NjdkZGQwZDAwOWQ4MzA5ZTRmYmQ5NjkwZmY0ZmYyZDdkYWIyYzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2bK2q46p2Pnf8YwqGVGSR5s7cnc
cvZJs4viFv/nsh67kHfrvsMxlMsPfyDGprnEzfm92LGdnL0OKGJYzkxXXaF6c6x8
J2nwRKJbUI+/bCaDk3k5QfzWVsqpuNCU4GAKM+ZBz/VtkkJg77ILttvijy/ZYCUL
JCrYOEDXdT9jnA3dF5Zr9xmOYuctD5zJPbiXNkmIxbQ5mOqRNRatuzGMZCH1+4bM
217tr4oKRh1Hrn7jjbrxSHFCtGkOoqH6/ijEUQp8gvG7QdD0WidYgjG3khHdmGI2
x1KFNtTgKupinwQ+hCzeAIHshUkEohDLZ2AuVXNsv5m5CNeVVM/FKxdnLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZ93Q0AnYMJ5PvZaQ/0/y19qyxBMB8GA1UdIwQY
MBaAFK5oyVGMKtVMCsuCFGjIbkW6FhwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm1qSlVZd3ExVXdLeTRJVWFNaHVSYm9XSEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83YjQyYjQtMWQxMi00MmNmLWE4ZjAt
MTZiNmJlZGE4N2QwLzEvcm1qSlVZd3ExVXdLeTRJVWFNaHVSYm9XSEJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS83YjQyYjQtMWQxMi00MmNmLWE4ZjAtMTZiNmJlZGE4N2Qw
LzEvcm1qSlVZd3ExVXdLeTRJVWFNaHVSYm9XSEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIz82syV
wZgVL2IQFyd1zrOTFAfG8xICHl4/ceRLXE7DNnw27voxWPx8rFlbyovEgfoZA0Dw
5lvPWBbCIxtxPK/vLXs1zDDlpvxPnlitmoQWN48sKCBgPr3lrbAO2KwM27ElVUa+
PCFC3mW1nvHfS/UMD5vwWd7Nt47Rec9c6eTJAncokmDmrBs6azQBp8J6SECTJI8E
RUpmBDOeLeBHvjU1V1MTxnezed+l+RFmlaM4vTz+t8vJBJ3u4+0/cuB8JODf8Ecq
eRY1//kAeAcWFYDqWUZ1RrmHjgJU3hxFxupydrAlEmRJZdQ3CsZwZQhqTR9ccce6
QkUANVcDDf4K/w==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:08 2025 by rpki-client