Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
File: Rv57VnIiRRFtQjS-SEoCpIod3h8.mft (raw, json)
Hash identifier: tkDx2bgzIUG7RQfILZW0gRuUlc57UHZkoUFCgJZqZto=
Subject key identifier: 82:8D:08:81:A8:43:95:AA:10:D9:FB:CC:14:7F:66:60:1A:96:62:3F
Authority key identifier: 46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
Certificate issuer: /CN=46fe7b56722245116d4234be484a02a48a1dde1f
Certificate serial: 019640672C043D5BBFDA41D06DFB37C72886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
Manifest number: 0E76
Signing time: Wed 16 Apr 2025 21:00:25 +0000
Manifest this update: Wed 16 Apr 2025 21:00:25 +0000
Manifest next update: Thu 17 Apr 2025 21:00:25 +0000
Files and hashes: 1: IhchjAlH7wZG7kzQTy4JNv3HhP8.roa (hash: MX+poTln1XfrF458aN+rzETZ5ejTHBJDcPW84QX3+eg=)
2: Rv57VnIiRRFtQjS-SEoCpIod3h8.crl (hash: U/uL6pre433a+ZJtPO5bxAKrJr9yqEW4ktD8goUzcKg=)
3: m7K3o6zKpvccw8S7oHzkq7OVkd4.roa (hash: GgfDl73eI/b08tNz06PPsn6okyEEe2tBCJUd3Gjwvrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:2c:04:3d:5b:bf:da:41:d0:6d:fb:37:c7:28:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46fe7b56722245116d4234be484a02a48a1dde1f
Validity
Not Before: Apr 16 21:00:25 2025 GMT
Not After : Apr 17 21:00:25 2025 GMT
Subject: CN=828d0881a84395aa10d9fbcc147f66601a96623f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:9f:7c:bb:52:46:11:23:69:69:ee:62:9f:
91:dc:ee:a1:6c:56:c5:d5:f7:95:b5:d6:f6:fd:aa:
9d:b3:48:0c:ea:3e:8c:de:a6:aa:cf:30:ff:2b:66:
7b:f4:8c:6b:76:9c:85:0c:44:40:6d:5f:66:69:25:
ae:37:65:d5:b9:8a:f7:3d:d0:55:af:1d:1a:3e:e0:
f4:04:04:ae:b0:5e:7e:31:60:07:d1:36:40:7e:fe:
84:68:6d:40:88:7c:d1:60:d7:09:ca:d7:6e:a5:24:
fb:f5:4e:67:bc:e4:19:d7:51:b6:f4:6c:d2:18:14:
e9:e8:fe:27:ab:75:40:8e:f8:7c:e9:c6:39:13:33:
ea:04:4a:ef:12:e3:1f:ae:cc:f2:01:7c:6e:39:68:
d5:67:87:56:e6:78:d7:26:87:5e:87:ed:0f:c5:f6:
28:28:65:86:cb:97:f9:0b:b4:f5:8c:a7:98:e6:e0:
54:fa:0e:ca:35:38:99:a6:ad:10:ba:12:03:03:fa:
32:0f:23:3b:7d:8d:51:43:31:a0:c3:d1:2e:63:66:
5b:5f:15:7e:86:31:fc:5b:bc:7b:d4:93:6d:6f:0b:
00:06:d4:13:b7:9e:82:5c:f1:b1:cf:63:37:99:c3:
d2:10:59:f6:51:ba:04:8a:b9:e3:47:51:06:1a:45:
b8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8D:08:81:A8:43:95:AA:10:D9:FB:CC:14:7F:66:60:1A:96:62:3F
X509v3 Authority Key Identifier:
keyid:46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:eb:0b:30:44:dd:2a:6e:d2:ae:ae:bd:dc:ce:5e:02:85:38:
76:62:3a:1c:8c:cb:be:79:00:70:b6:55:94:b2:63:f8:19:e9:
0b:54:bd:20:42:7b:65:7a:d6:90:a6:16:3e:32:f2:4d:13:17:
a3:17:8f:c4:46:51:a7:e2:fd:6e:5b:36:13:e3:8a:48:3f:9d:
d3:81:65:ab:f0:62:df:88:43:74:aa:ce:96:b2:9b:b0:2b:93:
fa:dd:cd:f5:f5:21:4b:50:54:dc:14:66:00:4d:65:cb:f4:fe:
59:58:45:8f:a0:71:2b:67:ca:0e:e9:24:0a:98:d9:78:42:0d:
20:bb:62:96:54:3c:2a:a3:11:47:c3:4b:0b:22:ed:5b:3a:16:
a4:18:94:cc:b5:fd:49:52:2f:f0:12:5d:95:07:32:73:b2:b6:
1b:02:d0:64:64:28:28:c0:1b:43:12:c3:bf:1a:f9:ac:85:48:
b2:08:67:21:44:c8:9a:99:0a:a7:cd:08:45:84:ba:75:45:d0:
3d:8a:67:5a:d5:8a:33:6c:a4:ed:25:5c:24:5e:a0:90:8e:b5:
dd:84:f7:05:55:5b:a4:ac:eb:2f:be:c1:b2:c0:d9:de:36:b8:
c8:4b:20:ef:2f:23:2e:08:62:7e:2b:43:4e:be:43:e0:a2:fd:
8f:7b:b2:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZAZywEPVu/2kHQbfs3xyiGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZmU3YjU2NzIyMjQ1MTE2ZDQyMzRiZTQ4NGEwMmE0OGEx
ZGRlMWYwHhcNMjUwNDE2MjEwMDI1WhcNMjUwNDE3MjEwMDI1WjAzMTEwLwYDVQQD
Eyg4MjhkMDg4MWE4NDM5NWFhMTBkOWZiY2MxNDdmNjY2MDFhOTY2MjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwniffLtSRhEjaWnuYp+R3O6hbFbF
1feVtdb2/aqds0gM6j6M3qaqzzD/K2Z79IxrdpyFDERAbV9maSWuN2XVuYr3PdBV
rx0aPuD0BASusF5+MWAH0TZAfv6EaG1AiHzRYNcJytdupST79U5nvOQZ11G29GzS
GBTp6P4nq3VAjvh86cY5EzPqBErvEuMfrszyAXxuOWjVZ4dW5njXJodeh+0PxfYo
KGWGy5f5C7T1jKeY5uBU+g7KNTiZpq0QuhIDA/oyDyM7fY1RQzGgw9EuY2ZbXxV+
hjH8W7x71JNtbwsABtQTt56CXPGxz2M3mcPSEFn2UboEirnjR1EGGkW40wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKNCIGoQ5WqENn7zBR/ZmAalmI/MB8GA1UdIwQY
MBaAFEb+e1ZyIkURbUI0vkhKAqSKHd4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnY1N1ZuSWlSUkZ0UWpTLVNFb0NwSW9kM2g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85MDgxNDMtZjkxNi00NzE4LThmOTct
NGJkMzM5MmQ1NWQxLzEvUnY1N1ZuSWlSUkZ0UWpTLVNFb0NwSW9kM2g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85MDgxNDMtZjkxNi00NzE4LThmOTctNGJkMzM5MmQ1NWQx
LzEvUnY1N1ZuSWlSUkZ0UWpTLVNFb0NwSW9kM2g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAresLMETd
Km7Srq693M5eAoU4dmI6HIzLvnkAcLZVlLJj+BnpC1S9IEJ7ZXrWkKYWPjLyTRMX
oxePxEZRp+L9bls2E+OKSD+d04Flq/Bi34hDdKrOlrKbsCuT+t3N9fUhS1BU3BRm
AE1ly/T+WVhFj6BxK2fKDukkCpjZeEINILtillQ8KqMRR8NLCyLtWzoWpBiUzLX9
SVIv8BJdlQcyc7K2GwLQZGQoKMAbQxLDvxr5rIVIsghnIUTImpkKp80IRYS6dUXQ
PYpnWtWKM2yk7SVcJF6gkI613YT3BVVbpKzrL77BssDZ3ja4yEsg7y8jLghifitD
Tr5D4KL9j3uydA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 06:42:16 2025 by rpki-client