Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
File: rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft (raw, json)
Hash identifier: rYU6/Lt4ebWUQSn7bi0JvYBvtBSQvj3CaUcyB7WLv0M=
Subject key identifier: 51:26:CD:AC:CA:57:C9:B3:E4:05:AE:73:8A:E7:CA:72:1E:F1:0F:19
Authority key identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
Certificate issuer: /CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Certificate serial: 019650B64613179F91A4F9773A52D5DF539A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
Manifest number: 0EF9
Signing time: Sun 20 Apr 2025 01:00:44 +0000
Manifest this update: Sun 20 Apr 2025 01:00:44 +0000
Manifest next update: Mon 21 Apr 2025 01:00:44 +0000
Files and hashes: 1: 8Wti1PH3KuI5W3Ps9JfxSql0m7Q.roa (hash: CpKe22p+vfF1GPX/Ydl6oGQUK80PsEj4zMJRNQ1KdVw=)
2: ON3iIV_oOMJOwBGtDykVdsbeibU.roa (hash: 9WvGCqlVAIcwLRzryj0uvMHkAzQLE90GQaNR429D0NE=)
3: rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl (hash: ra4Qkh/hqJIuEZXLxPJjNIoECOr29L4i8vr1ubuuOOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:46:13:17:9f:91:a4:f9:77:3a:52:d5:df:53:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Validity
Not Before: Apr 20 01:00:44 2025 GMT
Not After : Apr 21 01:00:44 2025 GMT
Subject: CN=5126cdacca57c9b3e405ae738ae7ca721ef10f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7e:06:f5:db:06:10:f7:19:07:4f:b5:57:5b:
0d:19:35:a8:a4:a7:90:a5:99:f7:ed:17:7c:14:5f:
26:84:06:7c:58:ea:76:9b:80:05:45:68:ea:23:f3:
48:c3:6a:99:20:92:9b:2d:71:fa:e2:e7:f6:4e:b8:
4b:42:ef:4c:a6:0e:ab:d0:72:0c:c5:da:69:f9:db:
ac:12:bc:12:1d:69:2c:30:fc:30:5c:7f:61:2a:1b:
28:65:5b:4c:fd:c8:b6:43:2a:d7:df:72:e8:6a:c9:
6c:eb:e0:f3:07:e7:f3:22:c4:64:da:da:14:f1:6a:
8a:ff:86:84:1d:8f:86:74:b0:68:29:af:4d:51:63:
db:97:f0:90:6e:f8:d1:94:97:70:79:28:60:c5:10:
3f:25:96:ac:1e:13:74:7e:07:59:e6:77:6d:5e:38:
47:d5:be:f5:5d:4f:6d:c2:c6:6d:ea:9b:85:42:39:
b6:95:79:06:a3:00:16:09:93:70:9b:9d:b6:64:95:
8a:25:57:bf:62:a4:73:64:d7:6b:0d:d6:c3:1a:a0:
1a:2f:46:6c:8a:30:6e:20:98:71:3d:ee:fe:7c:d3:
f0:ac:f6:fe:d3:74:18:8b:05:bf:98:4d:de:12:b3:
18:cd:87:a7:12:1a:f4:2f:17:48:82:31:f3:78:de:
06:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:26:CD:AC:CA:57:C9:B3:E4:05:AE:73:8A:E7:CA:72:1E:F1:0F:19
X509v3 Authority Key Identifier:
keyid:AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:90:2f:90:6e:7c:46:15:dd:b0:15:2e:3c:c0:0d:ed:9e:ac:
63:a6:fa:74:18:eb:4f:5d:4c:1d:49:8a:90:d7:cf:b1:1c:c7:
6f:a5:b4:bc:ac:39:cb:8e:c9:f6:09:ab:48:23:04:58:49:4f:
b2:ac:5b:ce:66:53:d1:b8:fd:f1:f0:bd:0f:43:20:15:b7:69:
f5:22:28:47:8c:21:92:10:d1:1b:1a:cb:89:20:f0:b9:1e:52:
8a:04:c4:66:d6:79:4a:e6:fa:82:2f:ec:98:14:07:6e:4f:96:
a9:9e:1d:b8:51:d1:b2:21:0c:82:7c:fe:d3:d7:5e:4f:6d:cf:
97:19:21:82:26:d2:52:0b:ff:17:70:7e:f8:2a:b3:fc:3a:41:
04:cd:34:68:0d:6b:8e:35:c4:fd:aa:95:c1:07:ad:a4:8e:55:
c4:b0:0e:5f:57:89:da:8f:e4:8b:a4:35:68:95:2f:75:a7:a1:
25:b7:0e:6a:67:fd:8a:cb:f8:dd:9b:7d:87:ef:c0:15:bf:7d:
ee:ae:a7:c0:ea:ff:2e:55:5f:3f:64:77:0d:16:ed:00:8b:49:
ce:2a:43:64:f0:c2:70:d7:1b:cb:dc:fc:3c:98:62:db:84:f2:
45:c6:25:6c:f1:1a:c6:de:e4:7b:f9:af:06:6c:2d:9c:32:6d:
20:7e:53:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQtkYTF5+RpPl3OlLV31OaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkY2UzYzJhYWZjNzc4M2NjZTgyMzQ1NTFmM2U5NjYxZDI3
ZWVmYmMwHhcNMjUwNDIwMDEwMDQ0WhcNMjUwNDIxMDEwMDQ0WjAzMTEwLwYDVQQD
Eyg1MTI2Y2RhY2NhNTdjOWIzZTQwNWFlNzM4YWU3Y2E3MjFlZjEwZjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn4G9dsGEPcZB0+1V1sNGTWopKeQ
pZn37Rd8FF8mhAZ8WOp2m4AFRWjqI/NIw2qZIJKbLXH64uf2TrhLQu9Mpg6r0HIM
xdpp+dusErwSHWksMPwwXH9hKhsoZVtM/ci2QyrX33Loasls6+DzB+fzIsRk2toU
8WqK/4aEHY+GdLBoKa9NUWPbl/CQbvjRlJdweShgxRA/JZasHhN0fgdZ5ndtXjhH
1b71XU9twsZt6puFQjm2lXkGowAWCZNwm522ZJWKJVe/YqRzZNdrDdbDGqAaL0Zs
ijBuIJhxPe7+fNPwrPb+03QYiwW/mE3eErMYzYenEhr0LxdIgjHzeN4G6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEmzazKV8mz5AWuc4rnynIe8Q8ZMB8GA1UdIwQY
MBaAFK3OPCqvx3g8zoI0VR8+lmHSfu+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmM0OEtxX0hlRHpPZ2pSVkh6NldZZEotNzd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84MjRjY2QtYmM5Yi00YTgyLWJlOTEt
NjMxMDRkYjZhN2E1LzEvcmM0OEtxX0hlRHpPZ2pSVkh6NldZZEotNzd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS84MjRjY2QtYmM5Yi00YTgyLWJlOTEtNjMxMDRkYjZhN2E1
LzEvcmM0OEtxX0hlRHpPZ2pSVkh6NldZZEotNzd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5AvkG58
RhXdsBUuPMAN7Z6sY6b6dBjrT11MHUmKkNfPsRzHb6W0vKw5y47J9gmrSCMEWElP
sqxbzmZT0bj98fC9D0MgFbdp9SIoR4whkhDRGxrLiSDwuR5SigTEZtZ5Sub6gi/s
mBQHbk+WqZ4duFHRsiEMgnz+09deT23PlxkhgibSUgv/F3B++Cqz/DpBBM00aA1r
jjXE/aqVwQetpI5VxLAOX1eJ2o/ki6Q1aJUvdaehJbcOamf9isv43Zt9h+/AFb99
7q6nwOr/LlVfP2R3DRbtAItJzipDZPDCcNcby9z8PJhi24TyRcYlbPEaxt7ke/mv
BmwtnDJtIH5TYg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:29:16 2025 by rpki-client