Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
File: 29fJUTSL0uCcyvdvV7g4XxXfROQ.mft (raw, json)
Hash identifier: L7ZrNJJSXYswaTuaox4eRuQVVmC6dg+OcFKuGrL00jI=
Subject key identifier: 41:A7:6D:5D:2E:2A:FC:7B:33:34:FE:CC:B6:D0:58:0C:12:6A:15:C2
Authority key identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
Certificate issuer: /CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Certificate serial: 0196B3A1C43A23AFC1A65A1987308DC2B107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
Manifest number: 1533
Signing time: Fri 09 May 2025 06:00:45 +0000
Manifest this update: Fri 09 May 2025 06:00:45 +0000
Manifest next update: Sat 10 May 2025 06:00:45 +0000
Files and hashes: 1: 16VwzWVgNRyLCtAXch9PWfSWgeM.roa (hash: C203Vfz7VUs5MzzkDe6+jJ/0Hm3QJ8YvUWmNLcGjW6Q=)
2: 29fJUTSL0uCcyvdvV7g4XxXfROQ.crl (hash: dhzsQviT4It2gjyBDF8TuPKGqjp74iYM01G0yAMmBWE=)
3: si754UrpKqsViXC-aHyx2LtipFA.roa (hash: VCYyh8ACSkDGJLu/cfRmB43QT8YqJ4jUUodjDefcg/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:a1:c4:3a:23:af:c1:a6:5a:19:87:30:8d:c2:b1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Validity
Not Before: May 9 06:00:45 2025 GMT
Not After : May 10 06:00:45 2025 GMT
Subject: CN=41a76d5d2e2afc7b3334feccb6d0580c126a15c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8b:53:f0:27:36:58:2f:fd:75:99:aa:92:d9:
3d:bc:b9:a7:55:bc:ea:64:f0:09:fc:10:75:ce:7a:
c0:0d:76:a9:fe:b7:83:f0:c7:0f:3a:1e:47:55:2a:
39:c9:9d:b1:00:7a:fc:99:55:d2:43:5f:77:85:d4:
a0:4c:79:d8:2d:29:8d:e9:f6:1e:8a:b0:1a:b8:a2:
32:62:e5:9f:26:e8:53:1b:43:94:d4:2f:99:af:dd:
e2:0c:f0:bc:d8:7b:08:da:02:b1:35:8d:3d:c6:18:
60:6e:62:51:2d:54:91:7c:64:de:c5:d0:e4:38:f2:
de:44:1a:3b:03:e5:06:9c:1d:db:03:b1:f9:7d:44:
31:6a:53:17:20:2e:1e:34:6c:81:da:c9:df:16:d7:
8b:44:e5:c1:d4:0d:5b:c4:85:9d:65:e4:18:1e:49:
d5:2d:66:5e:0b:22:cf:f7:1a:94:d0:ff:95:45:54:
6f:23:9f:94:02:7b:b7:d6:5f:4e:5e:97:e9:a2:3f:
67:42:dc:26:05:fb:c1:51:ac:52:51:66:df:10:09:
73:86:2a:cb:bd:18:b7:62:4c:97:c5:50:67:89:04:
63:5f:e1:9a:18:63:e6:ed:15:d4:8e:d8:4e:5a:c8:
9d:2e:b7:27:8a:01:89:8e:e7:fd:fb:62:a6:a8:51:
30:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A7:6D:5D:2E:2A:FC:7B:33:34:FE:CC:B6:D0:58:0C:12:6A:15:C2
X509v3 Authority Key Identifier:
keyid:DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:96:8a:73:ef:cc:4c:75:f0:2d:84:e3:ca:45:5c:12:bd:12:
5e:00:fb:2f:dd:fc:fd:16:f3:66:0a:5e:1c:ea:43:14:02:ed:
ff:91:30:78:d7:55:7c:fd:97:33:a8:81:5f:da:13:68:9a:81:
9c:68:ff:1a:c0:70:2c:bc:36:09:e9:41:d5:96:4b:5f:98:72:
d2:4e:7a:e4:96:1e:5f:9b:18:08:7b:64:6e:72:74:72:51:53:
30:06:84:ce:67:63:22:d9:a1:5f:5b:3b:70:51:d6:10:fd:35:
7f:0a:2d:01:dd:2f:15:39:13:c9:72:4b:cb:5f:1a:86:14:52:
fd:6d:e0:5d:94:53:b7:43:85:84:f1:18:41:f9:56:5b:f8:b9:
8a:c2:86:73:2a:2c:8c:cf:a1:1b:50:93:84:71:fc:90:01:c5:
74:47:08:32:35:fb:36:e7:99:f2:b2:a0:44:3a:62:8e:60:5d:
ad:22:2f:54:b9:c3:f5:d8:d0:c6:b1:db:b7:b3:1a:62:20:80:
ef:f2:eb:91:20:b5:5d:37:69:77:b3:6d:2d:3f:02:4a:d8:07:
11:bb:79:16:35:03:5f:98:d8:78:15:94:29:99:0d:25:02:b5:
aa:03:83:28:74:ba:63:25:14:82:d6:b7:73:2d:1e:fa:f1:b7:
b6:b8:ca:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZazocQ6I6/BploZhzCNwrEHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZDdjOTUxMzQ4YmQyZTA5Y2NhZjc2ZjU3YjgzODVmMTVk
ZjQ0ZTQwHhcNMjUwNTA5MDYwMDQ1WhcNMjUwNTEwMDYwMDQ1WjAzMTEwLwYDVQQD
Eyg0MWE3NmQ1ZDJlMmFmYzdiMzMzNGZlY2NiNmQwNTgwYzEyNmExNWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64tT8Cc2WC/9dZmqktk9vLmnVbzq
ZPAJ/BB1znrADXap/reD8McPOh5HVSo5yZ2xAHr8mVXSQ193hdSgTHnYLSmN6fYe
irAauKIyYuWfJuhTG0OU1C+Zr93iDPC82HsI2gKxNY09xhhgbmJRLVSRfGTexdDk
OPLeRBo7A+UGnB3bA7H5fUQxalMXIC4eNGyB2snfFteLROXB1A1bxIWdZeQYHknV
LWZeCyLP9xqU0P+VRVRvI5+UAnu31l9OXpfpoj9nQtwmBfvBUaxSUWbfEAlzhirL
vRi3YkyXxVBniQRjX+GaGGPm7RXUjthOWsidLrcnigGJjuf9+2KmqFEwqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGnbV0uKvx7MzT+zLbQWAwSahXCMB8GA1UdIwQY
MBaAFNvXyVE0i9LgnMr3b1e4OF8V30TkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjlmSlVUU0wwdUNjeXZkdlY3ZzRYeFhmUk9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84NTNjNzYtYTM5OC00MzVhLWJlNDEt
N2QwYWM1MjgxNWE2LzEvMjlmSlVUU0wwdUNjeXZkdlY3ZzRYeFhmUk9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84NTNjNzYtYTM5OC00MzVhLWJlNDEtN2QwYWM1MjgxNWE2
LzEvMjlmSlVUU0wwdUNjeXZkdlY3ZzRYeFhmUk9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZaKc+/M
THXwLYTjykVcEr0SXgD7L938/RbzZgpeHOpDFALt/5EweNdVfP2XM6iBX9oTaJqB
nGj/GsBwLLw2CelB1ZZLX5hy0k565JYeX5sYCHtkbnJ0clFTMAaEzmdjItmhX1s7
cFHWEP01fwotAd0vFTkTyXJLy18ahhRS/W3gXZRTt0OFhPEYQflWW/i5isKGcyos
jM+hG1CThHH8kAHFdEcIMjX7NueZ8rKgRDpijmBdrSIvVLnD9djQxrHbt7MaYiCA
7/LrkSC1XTdpd7NtLT8CStgHEbt5FjUDX5jYeBWUKZkNJQK1qgODKHS6YyUUgta3
cy0e+vG3trjKEQ==
-----END CERTIFICATE-----
Generated at Fri May 9 07:18:42 2025 by rpki-client