Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
File: _pLvNTIb-Pcic0v_nfpj-9DwaQo.mft (raw, json)
Hash identifier: wm8yh5wa+oV59F1YOWwOrnt0WS4WB+/5+QP+CZalMtk=
Subject key identifier: 64:76:7F:55:FD:BF:5A:6E:E1:C8:44:6B:59:AA:3B:F3:DB:0E:62:24
Authority key identifier: FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A
Certificate issuer: /CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a
Certificate serial: 0196B7B5532506D5DB93CE494CC60E940C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
Manifest number: 0E9C
Signing time: Sat 10 May 2025 01:00:35 +0000
Manifest this update: Sat 10 May 2025 01:00:35 +0000
Manifest next update: Sun 11 May 2025 01:00:35 +0000
Files and hashes: 1: FsJZX9GGj2A1me0tekd7HmtKIf4.roa (hash: wa9LmtrA5IFHkOGKHcF70x4E1HktC1RNDhObryrXOsE=)
2: _pLvNTIb-Pcic0v_nfpj-9DwaQo.crl (hash: szuyU+N9SSJRVNFu6eOds+6f0d3fJBIdoqyLaz2Mo2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:53:25:06:d5:db:93:ce:49:4c:c6:0e:94:0c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a
Validity
Not Before: May 10 01:00:35 2025 GMT
Not After : May 11 01:00:35 2025 GMT
Subject: CN=64767f55fdbf5a6ee1c8446b59aa3bf3db0e6224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:6b:20:ae:d8:f6:b9:eb:76:83:33:04:9f:
3a:06:f5:0b:86:c8:45:ea:b6:c5:fd:f7:42:28:e2:
31:71:84:f0:87:7e:b5:08:3b:e4:68:b2:0c:47:cc:
06:2b:f7:4a:a2:d6:d8:ab:d5:04:e6:95:63:5e:6b:
ee:7f:4a:58:a8:53:4d:aa:9b:f4:f8:d4:cb:64:31:
b8:94:4e:b2:38:f3:56:f5:da:bc:6a:f0:20:23:89:
6e:da:5b:62:f1:33:d2:c3:ae:72:eb:31:e9:05:92:
a6:e8:87:aa:bd:f4:01:ed:65:af:a9:dc:9b:34:d9:
fc:3b:03:9a:de:9d:85:aa:11:3a:db:9e:da:fd:8c:
b8:73:d9:79:9b:f4:32:4f:a6:74:d0:2c:f9:04:e7:
71:94:18:f3:17:b7:0a:5c:5d:0c:33:2d:e7:31:47:
df:6c:65:63:f8:73:eb:7f:3e:16:fd:aa:19:66:db:
c3:55:70:0b:30:8b:ca:53:b0:cc:3d:63:ad:79:fe:
d6:8f:01:92:32:3b:cc:da:cc:83:4b:0f:ee:dc:f8:
59:80:64:e0:e1:7f:4d:c4:86:20:18:37:6c:24:ce:
2c:1c:a2:d6:72:ca:1c:f5:c6:46:1d:a1:ca:f9:13:
dd:53:85:0b:df:40:48:eb:75:c5:68:e1:d7:e5:da:
3c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:76:7F:55:FD:BF:5A:6E:E1:C8:44:6B:59:AA:3B:F3:DB:0E:62:24
X509v3 Authority Key Identifier:
keyid:FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:5b:80:d5:85:fe:a4:2e:71:0c:af:f3:d6:89:82:a8:8c:8b:
84:a4:0a:46:aa:03:ac:95:c4:d3:70:da:6b:91:99:7c:eb:47:
27:2e:68:47:62:c7:f6:48:70:0e:7b:c5:46:c5:36:42:7d:10:
4a:5f:6f:3c:0c:66:93:19:2d:b7:0c:83:3f:9f:e2:cf:d7:8f:
f3:2f:1d:ad:e6:c8:e4:67:3f:9f:29:17:26:60:e9:0d:c8:51:
1c:f2:7f:50:63:e5:1c:98:06:0d:06:c6:91:61:ea:a0:2f:36:
c0:47:17:fb:d9:79:58:12:d3:ed:a5:c7:50:80:a2:46:bf:da:
22:56:cd:03:6b:05:09:91:23:e2:5e:37:0e:c6:c7:8f:6f:8c:
7c:47:f7:95:7b:8b:f7:b7:cf:57:60:c6:e7:8e:4c:a7:2f:9f:
6a:bb:65:d7:72:e1:5f:4c:51:31:c4:ca:d1:2c:78:c5:bf:38:
ad:50:0f:be:1c:74:69:68:65:45:3a:f6:0a:54:1c:76:0f:a8:
bc:c0:f3:9a:93:97:b7:2f:70:db:35:ed:7e:2e:a8:d4:08:11:
f9:1e:a8:8a:e6:53:c1:db:53:a5:6b:7e:9e:a4:c3:e5:8e:1e:
5d:d5:cc:ab:10:9b:9b:d0:46:67:d3:bf:51:6b:3c:13:b3:38:
d5:97:cb:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3tVMlBtXbk85JTMYOlAw1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlOTJlZjM1MzIxYmY4ZjcyMjczNGJmZjlkZmE2M2ZiZDBm
MDY5MGEwHhcNMjUwNTEwMDEwMDM1WhcNMjUwNTExMDEwMDM1WjAzMTEwLwYDVQQD
Eyg2NDc2N2Y1NWZkYmY1YTZlZTFjODQ0NmI1OWFhM2JmM2RiMGU2MjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVlrIK7Y9rnrdoMzBJ86BvULhshF
6rbF/fdCKOIxcYTwh361CDvkaLIMR8wGK/dKotbYq9UE5pVjXmvuf0pYqFNNqpv0
+NTLZDG4lE6yOPNW9dq8avAgI4lu2lti8TPSw65y6zHpBZKm6IeqvfQB7WWvqdyb
NNn8OwOa3p2FqhE6257a/Yy4c9l5m/QyT6Z00Cz5BOdxlBjzF7cKXF0MMy3nMUff
bGVj+HPrfz4W/aoZZtvDVXALMIvKU7DMPWOtef7WjwGSMjvM2syDSw/u3PhZgGTg
4X9NxIYgGDdsJM4sHKLWcsoc9cZGHaHK+RPdU4UL30BI63XFaOHX5do8CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGR2f1X9v1pu4chEa1mqO/PbDmIkMB8GA1UdIwQY
MBaAFP6S7zUyG/j3InNL/536Y/vQ8GkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3BMdk5USWItUGNpYzB2X25mcGotOUR3YVFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kMjcyNWQtODAwMS00MWYxLTgwZTUt
YTllZWYyOTRhYzM0LzEvX3BMdk5USWItUGNpYzB2X25mcGotOUR3YVFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9kMjcyNWQtODAwMS00MWYxLTgwZTUtYTllZWYyOTRhYzM0
LzEvX3BMdk5USWItUGNpYzB2X25mcGotOUR3YVFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuluA1YX+
pC5xDK/z1omCqIyLhKQKRqoDrJXE03Daa5GZfOtHJy5oR2LH9khwDnvFRsU2Qn0Q
Sl9vPAxmkxkttwyDP5/iz9eP8y8drebI5Gc/nykXJmDpDchRHPJ/UGPlHJgGDQbG
kWHqoC82wEcX+9l5WBLT7aXHUICiRr/aIlbNA2sFCZEj4l43DsbHj2+MfEf3lXuL
97fPV2DG545Mpy+fartl13LhX0xRMcTK0Sx4xb84rVAPvhx0aWhlRTr2ClQcdg+o
vMDzmpOXty9w2zXtfi6o1AgR+R6oiuZTwdtTpWt+nqTD5Y4eXdXMqxCbm9BGZ9O/
UWs8E7M41ZfLMw==
-----END CERTIFICATE-----
Generated at Sat May 10 10:34:52 2025 by rpki-client