Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
File: R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft (raw, json)
Hash identifier: ZP+XcWmwIdx91i7fm/nET05j9kTjofx63sCEC10vNPk=
Subject key identifier: E8:27:27:22:60:E2:72:34:13:32:2F:49:0C:5E:66:BD:B1:37:60:6D
Authority key identifier: 47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
Certificate issuer: /CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Certificate serial: 019650B673D897A98D21C9D91F817DA057F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 01:00:56 +0000
Manifest this update: Sun 20 Apr 2025 01:00:56 +0000
Manifest next update: Mon 21 Apr 2025 01:00:56 +0000
Files and hashes: 1: 3SOTukwSWrR1Nu1I7c8QHUHDj5Q.roa (hash: 4YWkgAQs57y3jWp09RgMoPwSBLEZe+2Hmh3qEftE0D8=)
2: R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl (hash: dLKPwQmDeaFL0sosLQaOEF4Fov8cUhtqMZWwRePnyDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:73:d8:97:a9:8d:21:c9:d9:1f:81:7d:a0:57:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Validity
Not Before: Apr 20 01:00:56 2025 GMT
Not After : Apr 21 01:00:56 2025 GMT
Subject: CN=e827272260e2723413322f490c5e66bdb137606d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c1:16:b5:ea:f5:b9:98:ae:e5:c2:a0:31:d2:
91:16:b1:4a:4a:41:40:1d:bd:6b:13:08:d0:a2:2e:
20:6b:6b:28:b6:5a:2c:51:8a:87:8d:21:9c:df:cc:
d9:b7:cd:db:ae:07:a1:9f:b1:d9:81:3c:6e:87:11:
d7:93:61:55:e0:63:d8:b7:4f:e7:f0:04:bd:c5:d2:
3f:b7:b4:bc:56:e1:7b:6f:b7:c6:3c:50:04:12:d9:
1e:78:fe:b1:e2:bf:08:7e:80:8f:52:e0:26:43:1a:
30:05:8e:22:ff:ac:dd:f2:b2:cc:8c:94:a9:4c:1b:
61:42:44:b4:98:26:49:8b:83:62:64:29:19:a3:ef:
7d:e5:ec:df:8a:d4:60:b7:36:91:ff:6a:ca:9b:07:
bb:df:63:40:f3:16:84:d7:ba:79:3a:4d:cb:be:ee:
4c:eb:8e:b9:91:26:8f:3b:8e:08:bd:06:a5:a1:bc:
14:fc:c1:2d:e5:df:08:f6:aa:0e:cc:eb:1e:fd:91:
cd:0f:68:56:ec:43:3c:a8:cf:57:aa:ba:0f:e2:a5:
95:d3:90:8f:55:6f:e3:6d:6e:c5:8b:b6:59:8b:e9:
2e:6d:67:1f:22:16:eb:3d:d8:eb:8a:65:e4:98:41:
7d:36:15:44:43:1d:75:82:14:d1:d5:5e:22:de:53:
c3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:27:27:22:60:E2:72:34:13:32:2F:49:0C:5E:66:BD:B1:37:60:6D
X509v3 Authority Key Identifier:
keyid:47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:57:91:93:4e:d7:d1:72:a5:ff:32:60:87:a7:93:95:38:12:
3c:b7:2e:a9:a3:fd:48:48:5c:e7:ac:16:c1:77:e4:8e:0b:3f:
8f:c3:32:fd:d2:17:a8:78:2a:a2:c8:e2:0c:c9:5f:16:ca:8a:
9a:0e:a1:73:05:30:4d:a6:9f:d6:c2:8f:17:e5:93:13:0e:84:
66:2e:bc:9f:8d:51:2a:c8:d9:a0:81:bc:fd:ce:2c:41:f2:32:
f1:4b:9f:99:ee:27:e3:b9:bc:b1:2e:d9:84:e2:5e:ab:aa:8d:
15:18:50:4c:fe:b1:4e:5b:c3:46:64:c0:35:1f:7e:24:f0:14:
6b:8f:b4:ac:c3:ea:8e:87:88:c7:e0:41:2e:8c:aa:60:96:82:
97:44:57:0c:d6:e4:cd:03:1e:2c:b8:10:83:51:41:7e:11:e1:
30:30:ce:06:a4:73:1f:a1:c7:70:41:0e:bd:30:c3:ca:46:07:
6c:7c:f1:6d:22:37:d8:bd:f6:fa:62:0e:6c:00:3c:ec:1e:ad:
51:98:3c:e0:43:fd:05:17:19:1e:65:0e:49:fc:b1:20:ca:3b:
14:0f:c8:ac:94:4e:ad:98:ee:b0:6a:28:b4:58:01:f1:0f:1b:
6f:ca:a3:30:24:86:a9:3c:0f:5f:3c:64:11:a2:4c:69:27:5b:
68:e5:4c:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQtnPYl6mNIcnZH4F9oFf2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3OGQyNDg5OGQxY2Y1MmQyM2Y5NTYxZGM2YWMwZjEzNjNl
NmM3NjAwHhcNMjUwNDIwMDEwMDU2WhcNMjUwNDIxMDEwMDU2WjAzMTEwLwYDVQQD
EyhlODI3MjcyMjYwZTI3MjM0MTMzMjJmNDkwYzVlNjZiZGIxMzc2MDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMEWter1uZiu5cKgMdKRFrFKSkFA
Hb1rEwjQoi4ga2sotlosUYqHjSGc38zZt83brgehn7HZgTxuhxHXk2FV4GPYt0/n
8AS9xdI/t7S8VuF7b7fGPFAEEtkeeP6x4r8IfoCPUuAmQxowBY4i/6zd8rLMjJSp
TBthQkS0mCZJi4NiZCkZo+995ezfitRgtzaR/2rKmwe732NA8xaE17p5Ok3Lvu5M
6465kSaPO44IvQalobwU/MEt5d8I9qoOzOse/ZHND2hW7EM8qM9XqroP4qWV05CP
VW/jbW7Fi7ZZi+kubWcfIhbrPdjrimXkmEF9NhVEQx11ghTR1V4i3lPDzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgnJyJg4nI0EzIvSQxeZr2xN2BtMB8GA1UdIwQY
MBaAFEeNJImNHPUtI/lWHcasDxNj5sdgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjQwa2lZMGM5UzBqLVZZZHhxd1BFMlBteDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy82Y2I3MmQtNDVhNy00NDkwLTljNTkt
OTNlYWQzNWExMmNhLzEvUjQwa2lZMGM5UzBqLVZZZHhxd1BFMlBteDJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy82Y2I3MmQtNDVhNy00NDkwLTljNTktOTNlYWQzNWExMmNh
LzEvUjQwa2lZMGM5UzBqLVZZZHhxd1BFMlBteDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfleRk07X
0XKl/zJgh6eTlTgSPLcuqaP9SEhc56wWwXfkjgs/j8My/dIXqHgqosjiDMlfFsqK
mg6hcwUwTaaf1sKPF+WTEw6EZi68n41RKsjZoIG8/c4sQfIy8Uufme4n47m8sS7Z
hOJeq6qNFRhQTP6xTlvDRmTANR9+JPAUa4+0rMPqjoeIx+BBLoyqYJaCl0RXDNbk
zQMeLLgQg1FBfhHhMDDOBqRzH6HHcEEOvTDDykYHbHzxbSI32L32+mIObAA87B6t
UZg84EP9BRcZHmUOSfyxIMo7FA/IrJROrZjusGootFgB8Q8bb8qjMCSGqTwPXzxk
EaJMaSdbaOVM6A==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:29:52 2025 by rpki-client