Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
File: iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft (raw, json)
Hash identifier: +c7+F6pmEY6tfiyaU0phkQ71gYDi7opoo7xMeGML/qo=
Subject key identifier: FD:8E:3B:82:C4:4E:C8:B2:42:10:EE:7C:1A:49:5D:EA:B9:76:31:2B
Authority key identifier: 89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
Certificate issuer: /CN=893a58124ce9cc43783955255e7f583905cdb14e
Certificate serial: 0196D709D1EAA850601162A8DCF7862FB60C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
Manifest number: 0DAA
Signing time: Fri 16 May 2025 03:01:07 +0000
Manifest this update: Fri 16 May 2025 03:01:07 +0000
Manifest next update: Sat 17 May 2025 03:01:07 +0000
Files and hashes: 1: iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl (hash: aymYHPEyXjeumLIfVbsrZLrM2915oE4lVb+fydn7C9Y=)
2: t9nkji_Xq4DRGMttbRDw-jVfqPI.roa (hash: MJaMfbYXB+V545skyyIWbRiW1FYp9UFjL+ooREdIKpc=)
3: x3UpgxINfYGtKCtOQQ8nTKqnfYQ.roa (hash: bx0oE168u4Tmbz20f8oi8B9aCfZBYtjemV0iReEb4PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:09:d1:ea:a8:50:60:11:62:a8:dc:f7:86:2f:b6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a58124ce9cc43783955255e7f583905cdb14e
Validity
Not Before: May 16 03:01:07 2025 GMT
Not After : May 17 03:01:07 2025 GMT
Subject: CN=fd8e3b82c44ec8b24210ee7c1a495deab976312b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c9:1f:12:1f:c9:15:f0:c4:d3:eb:d8:6e:88:
4f:28:c3:5c:eb:d2:de:78:6c:ab:8a:30:cf:8a:d1:
23:7f:48:da:01:40:86:bf:37:09:63:6e:b7:90:b6:
0a:76:f8:95:cd:73:ee:aa:fb:65:d1:9b:ea:ee:83:
60:70:5a:8e:21:07:bd:6d:07:b4:64:b8:5f:e6:e5:
84:7b:9b:69:17:f8:88:96:ca:fd:1c:89:71:e0:9a:
3e:1f:ef:08:6b:96:58:7e:54:b6:e9:d8:e6:88:11:
77:2e:19:d8:5e:d9:4e:ae:04:4d:93:3d:1f:40:31:
dc:41:79:2f:e8:8a:71:31:8f:93:e3:7c:16:6d:a3:
e3:f8:5a:b3:6e:b5:5c:7b:5a:21:94:67:6e:17:d7:
6b:d8:1e:d0:16:ed:5f:c6:ce:91:7a:c1:0e:1e:2a:
c4:94:d8:d0:78:52:8a:0d:94:04:1b:63:ef:53:87:
3f:0f:15:ce:23:cb:bd:8f:6a:ce:a1:5c:86:24:77:
4a:2b:3a:84:34:79:02:e6:e2:9a:08:56:8d:39:8e:
a7:b0:c5:52:87:5a:f0:79:68:de:2f:47:e6:c3:ed:
de:d8:32:2d:bf:0b:86:b9:f7:36:28:c0:52:bf:1f:
5e:6a:81:45:96:c3:1c:03:79:eb:61:cf:d5:fd:45:
62:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8E:3B:82:C4:4E:C8:B2:42:10:EE:7C:1A:49:5D:EA:B9:76:31:2B
X509v3 Authority Key Identifier:
keyid:89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a3:a4:a7:19:a7:30:96:ab:72:0e:29:51:f9:e8:32:70:0b:
95:40:c6:e0:0a:4e:6a:1c:af:36:ce:a5:23:cb:44:56:31:70:
e2:8d:6e:04:1a:e4:14:28:80:01:19:27:11:be:9d:a6:9b:ac:
09:bd:d0:47:82:80:53:dc:87:da:52:9f:e2:28:64:34:96:c9:
0d:7b:5a:ff:40:33:29:a2:52:a9:90:2e:7a:a9:f9:aa:33:92:
82:55:3a:d9:02:7d:b3:39:0d:eb:d0:f9:11:50:b4:49:af:27:
10:64:5c:97:ae:de:10:82:c4:0e:f4:1d:30:4d:a4:94:f2:cf:
ea:32:2e:9f:0b:6c:e7:b8:16:d5:71:5f:b1:90:c7:d3:1c:67:
c4:53:ce:f0:ea:99:b6:be:d3:dc:ef:5b:8a:9c:25:f4:dc:1c:
ed:4b:e7:76:55:11:77:35:74:f4:4a:16:6f:32:89:c4:11:3b:
a8:03:32:f3:23:b2:3a:ca:db:e9:bc:a6:2d:c5:cd:dc:29:7a:
8a:d3:71:bd:f2:b2:a6:9b:38:4b:75:9d:03:06:ba:41:79:31:
e4:0e:47:38:e1:ae:ca:8b:c0:a4:5d:8d:09:d1:fc:bd:b9:11:
4e:f8:90:48:b8:48:45:aa:6a:03:25:ad:5f:7e:7c:5e:19:6e:
49:96:04:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbXCdHqqFBgEWKo3PeGL7YMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5M2E1ODEyNGNlOWNjNDM3ODM5NTUyNTVlN2Y1ODM5MDVj
ZGIxNGUwHhcNMjUwNTE2MDMwMTA3WhcNMjUwNTE3MDMwMTA3WjAzMTEwLwYDVQQD
EyhmZDhlM2I4MmM0NGVjOGIyNDIxMGVlN2MxYTQ5NWRlYWI5NzYzMTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMkfEh/JFfDE0+vYbohPKMNc69Le
eGyrijDPitEjf0jaAUCGvzcJY263kLYKdviVzXPuqvtl0Zvq7oNgcFqOIQe9bQe0
ZLhf5uWEe5tpF/iIlsr9HIlx4Jo+H+8Ia5ZYflS26djmiBF3LhnYXtlOrgRNkz0f
QDHcQXkv6IpxMY+T43wWbaPj+FqzbrVce1ohlGduF9dr2B7QFu1fxs6ResEOHirE
lNjQeFKKDZQEG2PvU4c/DxXOI8u9j2rOoVyGJHdKKzqENHkC5uKaCFaNOY6nsMVS
h1rweWjeL0fmw+3e2DItvwuGufc2KMBSvx9eaoFFlsMcA3nrYc/V/UVidwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2OO4LETsiyQhDufBpJXeq5djErMB8GA1UdIwQY
MBaAFIk6WBJM6cxDeDlVJV5/WDkFzbFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVRwWUVrenB6RU40T1ZVbFhuOVlPUVhOc1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hMzUyYmEtYzIyOC00YTE1LTkxNjgt
MzAzYjhiYzI4YmZhLzEvaVRwWUVrenB6RU40T1ZVbFhuOVlPUVhOc1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9hMzUyYmEtYzIyOC00YTE1LTkxNjgtMzAzYjhiYzI4YmZh
LzEvaVRwWUVrenB6RU40T1ZVbFhuOVlPUVhOc1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6Okpxmn
MJarcg4pUfnoMnALlUDG4ApOahyvNs6lI8tEVjFw4o1uBBrkFCiAARknEb6dppus
Cb3QR4KAU9yH2lKf4ihkNJbJDXta/0AzKaJSqZAueqn5qjOSglU62QJ9szkN69D5
EVC0Sa8nEGRcl67eEILEDvQdME2klPLP6jIunwts57gW1XFfsZDH0xxnxFPO8OqZ
tr7T3O9bipwl9Nwc7UvndlURdzV09EoWbzKJxBE7qAMy8yOyOsrb6bymLcXN3Cl6
itNxvfKypps4S3WdAwa6QXkx5A5HOOGuyovApF2NCdH8vbkRTviQSLhIRapqAyWt
X358XhluSZYEvA==
-----END CERTIFICATE-----
Generated at Fri May 16 13:23:36 2025 by rpki-client