Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
File: rZr63kGDroAEjWuEgY7sRvaA-iY.mft (raw, json)
Hash identifier: tA1Aa0Vbkc2tHvbrV5zt1xrDL64TmBRb8kOu43pleI0=
Subject key identifier: C4:71:CD:AB:E4:05:BD:0A:5C:D0:4B:0A:91:7C:6B:B4:89:64:4C:CC
Authority key identifier: AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
Certificate issuer: /CN=ad9afade4183ae80048d6b84818eec46f680fa26
Certificate serial: 0196C1945EB7088C4DE8C706A9DEA59F7FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
Manifest number: 1369
Signing time: Sun 11 May 2025 23:00:48 +0000
Manifest this update: Sun 11 May 2025 23:00:48 +0000
Manifest next update: Mon 12 May 2025 23:00:48 +0000
Files and hashes: 1: dHcu1Xe1bMDTNim9SJl30JSk4hI.roa (hash: qRzLbHq22DmrTaMRCm+OCQCo4sWL5SJUeqY8R0TqngI=)
2: g1AtdX4-A4stQRdXTWV50haWr_U.roa (hash: SfjbeTWsFCpHADmiaD0ANERB3vzQ++Aj8Swnoj6lsUI=)
3: rZr63kGDroAEjWuEgY7sRvaA-iY.crl (hash: wXbtliQ9F34UsoZI/7+yXlcKzuf6GQbLuA3wjo2B59M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:94:5e:b7:08:8c:4d:e8:c7:06:a9:de:a5:9f:7f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9afade4183ae80048d6b84818eec46f680fa26
Validity
Not Before: May 11 23:00:48 2025 GMT
Not After : May 12 23:00:48 2025 GMT
Subject: CN=c471cdabe405bd0a5cd04b0a917c6bb489644ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:f9:18:e5:83:07:d6:80:3f:47:0f:75:56:
e7:b4:a2:7b:0a:5c:e9:58:83:d6:7f:72:7e:9b:94:
65:51:1d:61:cf:d2:d5:2b:a8:e5:07:f6:18:63:3c:
c7:26:2f:0c:3e:3f:64:26:f0:73:25:42:9c:df:06:
fb:14:43:36:94:57:28:49:92:ea:b6:66:3b:c8:07:
aa:89:bd:ca:a5:33:26:08:9f:8d:c9:86:90:06:10:
a2:0b:87:bd:72:a2:8d:6d:ee:1f:1b:2b:45:31:cb:
92:f9:9c:b5:2e:37:cc:44:76:ee:34:5f:1d:3c:85:
c4:c4:16:b2:25:10:54:48:d0:99:bf:94:1f:c4:48:
4f:2b:12:3d:11:d4:9f:1b:42:7b:71:b1:2c:69:a5:
24:50:1f:92:c9:6a:c8:3c:d5:40:83:d8:16:2c:00:
69:cb:50:cb:a1:97:a5:12:08:d4:53:2a:fb:6e:ca:
a0:04:4c:15:5d:90:77:ae:30:81:b8:3b:ae:c9:f2:
e3:29:48:40:6f:d2:2c:ed:27:bb:c1:d6:95:82:2b:
d0:5a:d3:a9:3f:e8:40:eb:2d:12:f9:cc:b7:c4:cf:
97:a5:20:61:53:68:a2:e8:ee:49:0a:e8:86:0a:cf:
18:be:13:82:0c:b9:de:d8:53:32:bf:c3:c6:2f:a0:
5b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:71:CD:AB:E4:05:BD:0A:5C:D0:4B:0A:91:7C:6B:B4:89:64:4C:CC
X509v3 Authority Key Identifier:
keyid:AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5c:8d:0e:8f:0a:70:44:f6:01:99:23:a0:af:10:94:30:7a:
b3:21:2a:81:58:7c:04:94:ae:d9:ec:43:99:f1:83:88:b4:bc:
09:9f:34:aa:9b:bd:5b:02:14:38:f5:d4:52:ee:cd:6c:0d:15:
f2:e8:32:e1:58:e1:d8:5e:de:3c:ae:9f:f2:37:12:ed:a3:f4:
31:94:ab:7a:67:cb:36:96:ae:f2:3c:66:75:bc:cf:ca:8b:bc:
4a:f2:4a:fb:05:6a:87:a5:5d:7d:b3:04:f8:73:b0:9c:cf:0c:
67:df:e4:d6:7c:f5:d7:e5:35:bd:d3:99:07:ca:3f:82:7a:70:
6a:82:cd:1f:aa:fc:da:29:27:ac:66:fd:a8:7b:79:80:42:24:
b6:2c:7b:ac:16:cf:d0:05:93:38:c2:6b:06:71:e8:8b:24:d7:
29:8b:e4:54:05:75:8d:a6:82:f3:f5:cd:b4:f6:c8:2d:f9:86:
46:7d:97:b5:0e:0e:a5:a4:f1:8d:31:38:2b:c0:94:51:f4:99:
35:36:2e:00:d1:af:4d:52:72:52:a5:e4:b2:2a:16:d2:35:ad:
c3:d2:7e:fd:12:f5:d4:92:6d:c8:ab:d0:76:75:80:ad:f7:30:
8a:52:5c:c0:e4:e2:29:70:0a:da:a4:0f:4d:d1:95:1b:ab:f8:
46:70:87:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBlF63CIxN6McGqd6ln3//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOWFmYWRlNDE4M2FlODAwNDhkNmI4NDgxOGVlYzQ2ZjY4
MGZhMjYwHhcNMjUwNTExMjMwMDQ4WhcNMjUwNTEyMjMwMDQ4WjAzMTEwLwYDVQQD
EyhjNDcxY2RhYmU0MDViZDBhNWNkMDRiMGE5MTdjNmJiNDg5NjQ0Y2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk35GOWDB9aAP0cPdVbntKJ7Clzp
WIPWf3J+m5RlUR1hz9LVK6jlB/YYYzzHJi8MPj9kJvBzJUKc3wb7FEM2lFcoSZLq
tmY7yAeqib3KpTMmCJ+NyYaQBhCiC4e9cqKNbe4fGytFMcuS+Zy1LjfMRHbuNF8d
PIXExBayJRBUSNCZv5QfxEhPKxI9EdSfG0J7cbEsaaUkUB+SyWrIPNVAg9gWLABp
y1DLoZelEgjUUyr7bsqgBEwVXZB3rjCBuDuuyfLjKUhAb9Is7Se7wdaVgivQWtOp
P+hA6y0S+cy3xM+XpSBhU2ii6O5JCuiGCs8YvhOCDLne2FMyv8PGL6BbmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRxzavkBb0KXNBLCpF8a7SJZEzMMB8GA1UdIwQY
MBaAFK2a+t5Bg66ABI1rhIGO7Eb2gPomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclpyNjNrR0Ryb0FFald1RWdZN3NSdmFBLWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kMzc3Y2QtZTM2Zi00Y2I5LTgyNWIt
YzAyMzM0YmUxMjhjLzEvclpyNjNrR0Ryb0FFald1RWdZN3NSdmFBLWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9kMzc3Y2QtZTM2Zi00Y2I5LTgyNWItYzAyMzM0YmUxMjhj
LzEvclpyNjNrR0Ryb0FFald1RWdZN3NSdmFBLWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVyNDo8K
cET2AZkjoK8QlDB6syEqgVh8BJSu2exDmfGDiLS8CZ80qpu9WwIUOPXUUu7NbA0V
8ugy4Vjh2F7ePK6f8jcS7aP0MZSremfLNpau8jxmdbzPyou8SvJK+wVqh6VdfbME
+HOwnM8MZ9/k1nz11+U1vdOZB8o/gnpwaoLNH6r82iknrGb9qHt5gEIktix7rBbP
0AWTOMJrBnHoiyTXKYvkVAV1jaaC8/XNtPbILfmGRn2XtQ4OpaTxjTE4K8CUUfSZ
NTYuANGvTVJyUqXksioW0jWtw9J+/RL11JJtyKvQdnWArfcwilJcwOTiKXAK2qQP
TdGVG6v4RnCHiw==
-----END CERTIFICATE-----
Generated at Mon May 12 03:22:08 2025 by rpki-client