Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
File: PKap1LWSRrTjNhThpLWRthGOihU.mft (raw, json)
Hash identifier: 1oJgcw4Uvj8treZkkaGXca2QFP8UM9Iq9xeh9fDVSBQ=
Subject key identifier: BD:F6:50:19:6C:DC:69:B0:54:1A:E7:8C:7E:5C:48:55:2A:7D:53:1C
Authority key identifier: 3C:A6:A9:D4:B5:92:46:B4:E3:36:14:E1:A4:B5:91:B6:11:8E:8A:15
Certificate issuer: /CN=3ca6a9d4b59246b4e33614e1a4b591b6118e8a15
Certificate serial: 0196AE0D47277466200DEC7B745C09D097F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
Manifest number: 10CF
Signing time: Thu 08 May 2025 04:00:27 +0000
Manifest this update: Thu 08 May 2025 04:00:27 +0000
Manifest next update: Fri 09 May 2025 04:00:27 +0000
Files and hashes: 1: PKap1LWSRrTjNhThpLWRthGOihU.crl (hash: tPJQLMsqvLwjIz3aH3OrqdQ6uvnbk48i2p/A08lsVmM=)
2: Szhjvm0y4QI0uwIjWJbCdPZPvps.roa (hash: Y0iaHG2LAJbIgjzTxyOFn6Uuz+FyO1yYuNhr0qnz3To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0d:47:27:74:66:20:0d:ec:7b:74:5c:09:d0:97:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca6a9d4b59246b4e33614e1a4b591b6118e8a15
Validity
Not Before: May 8 04:00:27 2025 GMT
Not After : May 9 04:00:27 2025 GMT
Subject: CN=bdf650196cdc69b0541ae78c7e5c48552a7d531c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7e:f8:96:60:ad:36:1c:e6:1d:da:0e:56:8a:
7b:dc:97:c5:b2:81:61:c5:31:aa:fd:9a:6c:2a:08:
e2:52:76:0f:c9:67:6c:1d:d7:e0:df:58:d6:9f:d3:
c6:cc:55:ff:8b:db:84:0c:49:04:6e:ae:87:7e:ed:
de:9c:f8:42:c2:58:86:1a:66:80:5a:ea:86:4a:8d:
2a:c5:27:02:a4:9d:8c:f2:e5:97:98:08:ba:65:c2:
dd:86:e1:60:7c:10:2e:68:0f:0d:8d:31:3f:8d:eb:
33:92:d7:dd:77:08:07:4d:b4:90:04:d6:fa:80:07:
56:f4:0b:e3:2a:b8:0f:ee:df:4d:26:1b:93:ff:5d:
94:5f:f1:89:79:7a:80:2b:57:b5:f7:a5:9e:6f:4f:
16:3e:0d:9e:f2:a6:63:0e:8c:a7:66:cc:23:1b:e4:
bd:91:af:cf:dd:cd:a6:8b:41:23:5b:3a:7f:54:64:
8f:11:79:6c:ce:16:35:3f:17:a7:b9:79:25:e1:8a:
f3:82:00:5d:08:dd:97:67:0d:c2:2f:a2:57:fa:56:
b7:4e:41:6b:01:3d:27:fd:e1:58:7c:99:2c:5d:c1:
d9:0d:9a:82:59:11:f1:bb:53:cd:56:36:ab:2f:76:
73:55:14:a5:a3:be:8e:49:e0:07:7c:b8:71:97:ff:
13:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F6:50:19:6C:DC:69:B0:54:1A:E7:8C:7E:5C:48:55:2A:7D:53:1C
X509v3 Authority Key Identifier:
keyid:3C:A6:A9:D4:B5:92:46:B4:E3:36:14:E1:A4:B5:91:B6:11:8E:8A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6a:d6:e7:1f:bf:3b:a6:74:f0:88:8c:60:a2:20:52:d7:25:
10:5a:71:64:b3:51:98:4d:da:dc:fb:c1:f8:0c:5c:b2:b7:83:
00:d5:fb:b1:0f:0f:6e:69:f8:df:e1:c3:de:33:ca:77:97:76:
38:3a:10:66:19:dd:a7:e6:cf:ba:31:61:69:00:7c:15:7d:f6:
bf:c1:e9:30:13:9d:1f:de:56:2f:fb:b6:53:13:73:67:50:34:
75:0c:cc:06:3b:b1:a0:6c:ae:29:5a:b2:22:f7:a2:b1:1e:21:
5c:29:a3:4d:61:11:e3:e4:0d:d4:b8:d2:f8:54:ee:54:a1:c6:
64:72:67:29:b9:e9:1c:99:36:8b:57:b0:00:24:86:3a:bc:48:
8a:52:03:01:0b:a6:7e:a9:a0:07:cc:76:62:99:c5:7f:36:95:
f4:04:f5:47:8b:c2:f8:ae:d5:03:44:cc:b1:ad:d2:53:a6:c0:
2b:d7:3a:83:d2:08:d4:34:e8:3b:e9:f0:50:bb:92:52:b9:c7:
d1:87:08:02:3e:8e:47:4e:19:e9:36:1d:04:ed:16:44:fd:35:
3e:f7:ad:16:db:4b:9d:f1:4b:30:1f:cc:25:3f:63:8e:6a:83:
ec:5f:77:7d:6f:74:73:3a:e5:51:77:f6:18:0b:08:63:3a:4b:
48:31:c6:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZauDUcndGYgDex7dFwJ0Jf3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYTZhOWQ0YjU5MjQ2YjRlMzM2MTRlMWE0YjU5MWI2MTE4
ZThhMTUwHhcNMjUwNTA4MDQwMDI3WhcNMjUwNTA5MDQwMDI3WjAzMTEwLwYDVQQD
EyhiZGY2NTAxOTZjZGM2OWIwNTQxYWU3OGM3ZTVjNDg1NTJhN2Q1MzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4X74lmCtNhzmHdoOVop73JfFsoFh
xTGq/ZpsKgjiUnYPyWdsHdfg31jWn9PGzFX/i9uEDEkEbq6Hfu3enPhCwliGGmaA
WuqGSo0qxScCpJ2M8uWXmAi6ZcLdhuFgfBAuaA8NjTE/jeszktfddwgHTbSQBNb6
gAdW9AvjKrgP7t9NJhuT/12UX/GJeXqAK1e196Web08WPg2e8qZjDoynZswjG+S9
ka/P3c2mi0EjWzp/VGSPEXlszhY1PxenuXkl4YrzggBdCN2XZw3CL6JX+la3TkFr
AT0n/eFYfJksXcHZDZqCWRHxu1PNVjarL3ZzVRSlo76OSeAHfLhxl/8T0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL32UBls3GmwVBrnjH5cSFUqfVMcMB8GA1UdIwQY
MBaAFDymqdS1kka04zYU4aS1kbYRjooVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEthcDFMV1NSclRqTmhUaHBMV1J0aEdPaWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9kZDY1MTgtYmYzNS00YzU4LWI4MWIt
OTRiMTQ5M2RmMWYyLzEvUEthcDFMV1NSclRqTmhUaHBMV1J0aEdPaWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9kZDY1MTgtYmYzNS00YzU4LWI4MWItOTRiMTQ5M2RmMWYy
LzEvUEthcDFMV1NSclRqTmhUaHBMV1J0aEdPaWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2rW5x+/
O6Z08IiMYKIgUtclEFpxZLNRmE3a3PvB+AxcsreDANX7sQ8Pbmn43+HD3jPKd5d2
ODoQZhndp+bPujFhaQB8FX32v8HpMBOdH95WL/u2UxNzZ1A0dQzMBjuxoGyuKVqy
IveisR4hXCmjTWER4+QN1LjS+FTuVKHGZHJnKbnpHJk2i1ewACSGOrxIilIDAQum
fqmgB8x2YpnFfzaV9AT1R4vC+K7VA0TMsa3SU6bAK9c6g9II1DToO+nwULuSUrnH
0YcIAj6OR04Z6TYdBO0WRP01PvetFttLnfFLMB/MJT9jjmqD7F93fW90czrlUXf2
GAsIYzpLSDHG4w==
-----END CERTIFICATE-----
Generated at Thu May 8 10:14:23 2025 by rpki-client