Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
File: iTr8bv5imQomky9A4VCyfu1TnEs.mft (raw, json)
Hash identifier: de0t79Emii3GPCE0xlOfUvm5+AbOMDo7qSjdKFSA3Gs=
Subject key identifier: 76:0A:3A:96:BC:4A:9C:A3:50:D2:3F:82:1E:5A:D1:11:46:0D:B0:52
Authority key identifier: 89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
Certificate issuer: /CN=893afc6efe62990a26932f40e150b27eed539c4b
Certificate serial: 0196470E970D06C255BFC15BA0E2D536A90C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
Manifest number: 14F4
Signing time: Fri 18 Apr 2025 04:01:00 +0000
Manifest this update: Fri 18 Apr 2025 04:01:00 +0000
Manifest next update: Sat 19 Apr 2025 04:01:00 +0000
Files and hashes: 1: UvkgBounMtuI2EY4VakFPmSVVf8.roa (hash: B8b+cAv47Fq4zMohD+Ikbfg+w/maMgI605v1qgGvxbU=)
2: aMP60-6kIcycfPRX1mrnGq3rKu4.roa (hash: 3JfLcJd1nqn3CbGO/VzxfaF4cayveMgFQoD5eZc253E=)
3: iTr8bv5imQomky9A4VCyfu1TnEs.crl (hash: 0kOWpNckK40OSknnV2ZaYfz/2vihqkcT1pUBGbTkbI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:0e:97:0d:06:c2:55:bf:c1:5b:a0:e2:d5:36:a9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afc6efe62990a26932f40e150b27eed539c4b
Validity
Not Before: Apr 18 04:01:00 2025 GMT
Not After : Apr 19 04:01:00 2025 GMT
Subject: CN=760a3a96bc4a9ca350d23f821e5ad111460db052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:81:3b:37:01:6d:3b:93:72:f6:d1:75:e7:5e:
78:16:59:bc:b4:14:4e:7e:5b:94:00:ae:a6:03:36:
85:59:a4:79:8a:6f:54:63:4f:fc:6d:2f:5f:de:c2:
c1:29:d5:ef:d3:5c:62:0a:b5:eb:c9:78:23:17:56:
a3:f1:b0:15:15:97:f5:67:92:7b:b0:84:45:42:44:
de:7d:c0:69:f5:7d:9a:f4:c8:86:d7:6c:49:0f:e9:
66:f0:e9:2e:2a:68:ae:0c:c4:d6:02:1e:08:53:a9:
80:8d:4e:64:92:7e:d9:83:fc:a2:d3:83:b1:7a:65:
9d:ae:a2:9e:81:6b:ec:13:a1:5c:8f:a9:02:46:b2:
fb:91:07:2e:ec:3c:8e:6f:27:83:1b:a5:14:30:69:
89:f5:a3:a3:f2:13:75:3e:cb:f6:fc:3c:20:b9:fe:
c0:80:03:ae:9c:44:66:64:f4:4c:3c:10:72:0d:97:
ff:66:0f:c0:09:10:d7:94:e7:34:f1:23:45:bf:c7:
29:75:32:7b:a9:3f:7a:bf:2d:79:0a:20:9e:38:48:
06:45:07:6e:fb:a9:5e:a5:27:10:bb:c0:a7:f7:1e:
ee:78:2b:75:11:3b:b2:47:ed:91:f2:68:bd:ca:31:
c0:7a:13:35:89:02:2a:9d:87:ee:76:f3:f2:d6:ef:
4f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0A:3A:96:BC:4A:9C:A3:50:D2:3F:82:1E:5A:D1:11:46:0D:B0:52
X509v3 Authority Key Identifier:
keyid:89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:a4:a4:14:7f:8e:2e:90:9c:37:37:ef:26:9f:96:60:ac:d7:
62:95:a9:cc:80:12:11:ae:a8:e2:97:a7:2f:61:cb:21:29:67:
2f:48:96:1c:6d:e8:f7:eb:e0:94:5c:af:f9:b7:46:be:d5:5c:
28:86:af:36:de:99:cf:2c:98:59:e0:cb:19:53:52:79:f6:8c:
2d:53:96:70:34:a4:d4:dc:73:ef:87:59:8a:ee:29:17:1a:b0:
77:23:a4:62:09:6c:17:da:2b:08:be:ff:bd:a9:c1:38:10:f4:
93:f8:e8:97:eb:0f:b3:13:cc:07:cb:c1:10:46:a3:32:ad:8a:
0a:7a:d9:67:fa:90:de:62:93:3a:79:9b:fe:35:3c:44:f1:1e:
c4:58:07:c9:ed:51:f9:1f:a6:c5:6b:cd:91:9a:b4:ce:3d:8f:
1a:95:ac:bd:38:aa:7b:a4:55:48:b0:fb:ac:eb:b8:45:6d:18:
24:ef:ec:81:e4:50:ca:6d:d5:df:c5:58:de:c0:f5:2c:cd:b6:
4d:fa:40:ec:70:04:fa:2c:d7:ae:d6:fb:64:c7:9d:af:36:76:
17:41:5e:f9:9b:e2:63:53:16:d2:ff:03:ea:1c:2e:2a:f8:f5:
1b:aa:cb:b1:90:6e:92:40:22:32:cf:73:40:bd:63:c2:d1:d1:
a1:f1:cc:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZHDpcNBsJVv8FboOLVNqkMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5M2FmYzZlZmU2Mjk5MGEyNjkzMmY0MGUxNTBiMjdlZWQ1
MzljNGIwHhcNMjUwNDE4MDQwMTAwWhcNMjUwNDE5MDQwMTAwWjAzMTEwLwYDVQQD
Eyg3NjBhM2E5NmJjNGE5Y2EzNTBkMjNmODIxZTVhZDExMTQ2MGRiMDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYE7NwFtO5Ny9tF15154Flm8tBRO
fluUAK6mAzaFWaR5im9UY0/8bS9f3sLBKdXv01xiCrXryXgjF1aj8bAVFZf1Z5J7
sIRFQkTefcBp9X2a9MiG12xJD+lm8OkuKmiuDMTWAh4IU6mAjU5kkn7Zg/yi04Ox
emWdrqKegWvsE6Fcj6kCRrL7kQcu7DyObyeDG6UUMGmJ9aOj8hN1Psv2/Dwguf7A
gAOunERmZPRMPBByDZf/Zg/ACRDXlOc08SNFv8cpdTJ7qT96vy15CiCeOEgGRQdu
+6lepScQu8Cn9x7ueCt1ETuyR+2R8mi9yjHAehM1iQIqnYfudvPy1u9P5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYKOpa8SpyjUNI/gh5a0RFGDbBSMB8GA1UdIwQY
MBaAFIk6/G7+YpkKJpMvQOFQsn7tU5xLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVRyOGJ2NWltUW9ta3k5QTRWQ3lmdTFUbkVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83ZTE4ZjAtYWYxZC00N2MxLThkYjUt
NWE1MjMzZGMwY2UwLzEvaVRyOGJ2NWltUW9ta3k5QTRWQ3lmdTFUbkVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi83ZTE4ZjAtYWYxZC00N2MxLThkYjUtNWE1MjMzZGMwY2Uw
LzEvaVRyOGJ2NWltUW9ta3k5QTRWQ3lmdTFUbkVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxqSkFH+O
LpCcNzfvJp+WYKzXYpWpzIASEa6o4penL2HLISlnL0iWHG3o9+vglFyv+bdGvtVc
KIavNt6ZzyyYWeDLGVNSefaMLVOWcDSk1Nxz74dZiu4pFxqwdyOkYglsF9orCL7/
vanBOBD0k/jol+sPsxPMB8vBEEajMq2KCnrZZ/qQ3mKTOnmb/jU8RPEexFgHye1R
+R+mxWvNkZq0zj2PGpWsvTiqe6RVSLD7rOu4RW0YJO/sgeRQym3V38VY3sD1LM22
TfpA7HAE+izXrtb7ZMedrzZ2F0Fe+ZviY1MW0v8D6hwuKvj1G6rLsZBukkAiMs9z
QL1jwtHRofHMbQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 06:51:22 2025 by rpki-client