Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.mft
File: f3YJUscz9vLuklTtzRTg2qeLOIw.mft (raw, json)
Hash identifier: ZrqHnHXjn5KP5gL8K1tsfD5WzZ3v26zkmWy2e4j95vo=
Subject key identifier: 5D:7A:67:42:76:25:DA:86:4F:90:4D:3A:0C:A1:F6:F2:12:7B:F9:63
Authority key identifier: 7F:76:09:52:C7:33:F6:F2:EE:92:54:ED:CD:14:E0:DA:A7:8B:38:8C
Certificate issuer: /CN=7f760952c733f6f2ee9254edcd14e0daa78b388c
Certificate serial: 0196B7EC5BFB646041A3631A00F2471250E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3YJUscz9vLuklTtzRTg2qeLOIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.mft
Manifest number: 0315
Signing time: Sat 10 May 2025 02:00:42 +0000
Manifest this update: Sat 10 May 2025 02:00:42 +0000
Manifest next update: Sun 11 May 2025 02:00:42 +0000
Files and hashes: 1: ZCBQTSRDp2Vji2C9hSrbiPFq7OY.roa (hash: PB9NVbc1SKDdgUUB+S0NaDZM0GQCTky3OkA9OktttX0=)
2: f3YJUscz9vLuklTtzRTg2qeLOIw.crl (hash: 5Vs/VG2XATRL4vyiUrFIn4o2d8W8wYPgxtRO49kgX/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f3YJUscz9vLuklTtzRTg2qeLOIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:5b:fb:64:60:41:a3:63:1a:00:f2:47:12:50:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f760952c733f6f2ee9254edcd14e0daa78b388c
Validity
Not Before: May 10 02:00:42 2025 GMT
Not After : May 11 02:00:42 2025 GMT
Subject: CN=5d7a67427625da864f904d3a0ca1f6f2127bf963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f6:7b:ca:a4:dd:a9:f5:58:3b:50:1e:90:5b:
c9:ff:7a:bb:44:79:86:83:f2:81:2a:af:1f:19:07:
67:be:e2:05:93:39:6b:81:b3:62:ca:2c:da:70:f5:
45:8c:34:0d:1d:26:e1:7a:29:86:1e:e2:8a:64:a8:
68:51:9d:be:21:c2:27:67:c4:ee:1a:2e:65:3b:af:
92:d4:e2:93:21:3f:6c:b8:00:b5:1d:5c:9d:63:97:
cd:b6:30:5f:5b:de:39:bc:bd:57:f4:f9:1a:1e:bf:
91:cd:b8:12:6f:96:7e:30:87:6f:83:95:f7:c7:3a:
57:fd:64:8f:ae:f6:a4:90:5c:b0:d7:86:35:31:ca:
4e:ce:07:5b:f0:2c:77:5f:22:43:bf:34:4e:83:f8:
7a:30:a0:95:9a:15:32:58:ff:97:35:99:cd:0b:d6:
f7:ca:92:28:19:fa:8d:22:d9:f9:70:75:90:c0:f6:
3d:b2:49:f1:30:e2:4f:ed:a4:2b:49:28:d5:18:ed:
71:2d:b1:80:87:05:de:a2:bc:1f:6d:bd:7d:9e:0b:
35:c4:6b:a2:a6:95:3a:8f:1f:4c:df:15:a8:f0:7b:
eb:2f:25:91:cf:6a:30:e5:c1:03:fd:5d:a3:82:9c:
02:62:47:92:24:b0:f4:b6:35:8e:c5:88:52:58:73:
8e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7A:67:42:76:25:DA:86:4F:90:4D:3A:0C:A1:F6:F2:12:7B:F9:63
X509v3 Authority Key Identifier:
keyid:7F:76:09:52:C7:33:F6:F2:EE:92:54:ED:CD:14:E0:DA:A7:8B:38:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3YJUscz9vLuklTtzRTg2qeLOIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:44:8d:83:0b:42:fb:cb:ee:db:5d:9b:5b:61:b1:53:fa:84:
90:59:aa:4f:0a:38:80:5f:cd:1c:5e:71:b2:17:4f:1d:ff:74:
57:0f:de:3a:9c:b0:25:a6:e1:74:4c:74:0a:cf:d9:67:3a:b9:
e1:0d:65:79:f9:d5:c9:7f:6d:b7:d2:df:51:12:4b:ff:d5:05:
6f:a3:72:d1:8b:3d:32:c4:6a:ae:5e:72:65:fc:da:f6:83:fa:
6e:0e:7a:68:23:53:04:a5:91:9a:8b:69:e1:88:43:9b:07:da:
4d:2d:b4:f5:dc:44:0b:fc:3e:81:72:b9:19:6e:91:7d:3d:ea:
e9:4d:19:cc:ab:62:2b:bd:fc:dd:6f:d3:a2:42:c4:02:7c:86:
08:b5:5d:d0:10:11:5d:96:67:04:c3:9f:89:fb:05:33:be:50:
fe:f6:3b:46:e7:90:4d:60:18:13:35:78:b5:62:d9:3b:8b:69:
9b:2e:17:ef:bc:37:19:e9:f6:97:36:c1:07:1d:ae:63:af:15:
e4:43:7f:37:b2:4a:db:ff:41:78:b4:db:1f:cf:cb:86:99:1f:
d0:b5:d2:5a:dc:0e:f4:d5:2d:c2:0a:d8:1a:f0:98:46:1e:9d:
dd:dc:7c:53:37:03:0e:c8:22:57:cc:61:17:aa:10:ce:38:00:
43:26:c6:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa37Fv7ZGBBo2MaAPJHElDlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNzYwOTUyYzczM2Y2ZjJlZTkyNTRlZGNkMTRlMGRhYTc4
YjM4OGMwHhcNMjUwNTEwMDIwMDQyWhcNMjUwNTExMDIwMDQyWjAzMTEwLwYDVQQD
Eyg1ZDdhNjc0Mjc2MjVkYTg2NGY5MDRkM2EwY2ExZjZmMjEyN2JmOTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vZ7yqTdqfVYO1AekFvJ/3q7RHmG
g/KBKq8fGQdnvuIFkzlrgbNiyizacPVFjDQNHSbheimGHuKKZKhoUZ2+IcInZ8Tu
Gi5lO6+S1OKTIT9suAC1HVydY5fNtjBfW945vL1X9PkaHr+RzbgSb5Z+MIdvg5X3
xzpX/WSPrvakkFyw14Y1McpOzgdb8Cx3XyJDvzROg/h6MKCVmhUyWP+XNZnNC9b3
ypIoGfqNItn5cHWQwPY9sknxMOJP7aQrSSjVGO1xLbGAhwXeorwfbb19ngs1xGui
ppU6jx9M3xWo8HvrLyWRz2ow5cED/V2jgpwCYkeSJLD0tjWOxYhSWHOO8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF16Z0J2JdqGT5BNOgyh9vISe/ljMB8GA1UdIwQY
MBaAFH92CVLHM/by7pJU7c0U4NqniziMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjNZSlVzY3o5dkx1a2xUdHpSVGcycWVMT0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iNjRhNTktOWZlZC00MWRhLWI4MzUt
OWFlODgwOWM4NTE1LzEvZjNZSlVzY3o5dkx1a2xUdHpSVGcycWVMT0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9iNjRhNTktOWZlZC00MWRhLWI4MzUtOWFlODgwOWM4NTE1
LzEvZjNZSlVzY3o5dkx1a2xUdHpSVGcycWVMT0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkSNgwtC
+8vu212bW2GxU/qEkFmqTwo4gF/NHF5xshdPHf90Vw/eOpywJabhdEx0Cs/ZZzq5
4Q1lefnVyX9tt9LfURJL/9UFb6Ny0Ys9MsRqrl5yZfza9oP6bg56aCNTBKWRmotp
4YhDmwfaTS209dxEC/w+gXK5GW6RfT3q6U0ZzKtiK7383W/TokLEAnyGCLVd0BAR
XZZnBMOfifsFM75Q/vY7RueQTWAYEzV4tWLZO4tpmy4X77w3Gen2lzbBBx2uY68V
5EN/N7JK2/9BeLTbH8/Lhpkf0LXSWtwO9NUtwgrYGvCYRh6d3dx8UzcDDsgiV8xh
F6oQzjgAQybGlA==
-----END CERTIFICATE-----
Generated at Sat May 10 07:23:57 2025 by rpki-client