Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
File: PrRw_U1nQhL_yCqZNvP-JUvszmY.mft (raw, json)
Hash identifier: iyeE+QZ6hqXyfnqAhCaDR2f8S0ZWsOGIPeKvRm/85eo=
Subject key identifier: 9C:A1:B0:EA:E6:15:02:18:94:A5:B7:69:30:F8:AD:E3:0E:EB:BF:BC
Authority key identifier: 3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
Certificate issuer: /CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Certificate serial: 0196C4CC35ED65D95D25ADD45FB381E4EA8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 14:00:39 +0000
Manifest this update: Mon 12 May 2025 14:00:39 +0000
Manifest next update: Tue 13 May 2025 14:00:39 +0000
Files and hashes: 1: PrRw_U1nQhL_yCqZNvP-JUvszmY.crl (hash: YjXQyRp1tZ3mWqhnl89/h2e6SWQh/b9+iv1wpdl3D9s=)
2: aATeS7_Zg3KdAOaKx-n1ZvynPH4.roa (hash: BiTKK6ZatcQ+uoSfiABBAw2jPEjkMuOpjqegStTZ06Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cc:35:ed:65:d9:5d:25:ad:d4:5f:b3:81:e4:ea:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Validity
Not Before: May 12 14:00:39 2025 GMT
Not After : May 13 14:00:39 2025 GMT
Subject: CN=9ca1b0eae615021894a5b76930f8ade30eebbfbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:34:68:d5:2c:65:15:52:c4:20:a8:91:f8:f5:
20:92:73:70:34:02:a1:e0:90:b6:2e:ef:31:0f:82:
45:59:da:c7:ca:05:2a:ad:6f:de:0b:1e:01:da:4d:
2d:cb:89:ec:d6:75:33:5b:44:9a:15:72:c8:c8:6a:
da:8c:c0:3c:98:a8:81:7e:21:d6:e6:03:b8:de:58:
e1:9c:3d:28:38:69:62:ba:b1:f6:91:56:78:5d:4b:
09:99:2c:df:3a:08:86:0a:7e:7c:08:cc:ff:81:59:
26:a1:7e:bd:c3:85:5a:9d:43:9f:34:8a:95:14:2f:
a4:2c:e5:1d:fe:54:d0:19:c7:78:d1:2c:cc:60:56:
e7:24:9b:17:0e:09:6e:da:4e:c0:da:27:cb:79:fe:
82:82:70:be:bf:a7:41:73:3a:6e:55:c9:f9:40:f1:
3e:4d:ee:7f:87:74:a0:5c:e8:13:5d:93:82:91:8a:
2a:ae:d8:43:c0:25:87:bc:80:5f:f5:e0:cb:97:7f:
be:65:8e:aa:63:de:c7:46:19:86:a2:bc:21:1b:da:
bd:00:a4:0f:a8:0a:ab:00:91:7f:c5:4e:75:21:6f:
7a:10:42:51:95:55:48:ed:d0:66:6c:d4:84:d4:25:
51:96:c0:ab:92:03:e4:d5:f6:9c:15:d6:a2:f9:23:
45:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A1:B0:EA:E6:15:02:18:94:A5:B7:69:30:F8:AD:E3:0E:EB:BF:BC
X509v3 Authority Key Identifier:
keyid:3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:89:64:0e:09:30:09:bb:29:3e:97:27:a8:8a:b5:dc:ea:75:
7e:84:93:d6:20:93:7f:66:79:bd:81:6b:4c:b5:c5:a0:c0:a3:
83:d5:ba:7d:94:d5:a2:91:f3:31:23:62:f9:f8:34:a3:06:36:
59:ce:ce:19:ca:3a:25:b3:33:54:df:05:0e:73:b4:d0:d1:ba:
2e:fe:8c:f2:5d:37:ee:11:7f:bd:b7:a0:b1:d0:f3:20:27:7a:
67:6a:1c:16:16:2e:cc:a3:4a:a4:e2:fe:dc:96:f0:01:8e:65:
f8:3e:91:4f:3e:40:a7:0d:83:6c:2e:21:9d:27:b5:d5:48:a0:
e2:18:1e:ba:ad:07:26:04:59:24:62:cf:d7:4a:f5:80:f4:24:
ec:e7:d4:f6:b8:4c:0b:0f:10:b0:8c:37:33:7d:d0:52:ee:27:
f7:29:25:d7:e6:97:45:52:52:27:81:c3:8a:a1:ae:f3:1a:b9:
eb:72:bb:47:8f:8a:24:5b:6d:0c:af:24:2d:08:af:49:a1:85:
bb:f1:3d:8c:30:28:18:12:14:3b:67:b5:9d:ef:1b:80:5d:78:
aa:bb:4d:3c:d2:c5:69:92:c6:cb:bb:97:17:14:6c:97:6d:dd:
a7:95:59:c4:a3:df:71:e4:c9:58:00:0d:34:5b:9b:ea:17:57:
81:8a:96:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEzDXtZdldJa3UX7OB5OqNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYjQ3MGZkNGQ2NzQyMTJmZmM4MmE5OTM2ZjNmZTI1NGJl
Y2NlNjYwHhcNMjUwNTEyMTQwMDM5WhcNMjUwNTEzMTQwMDM5WjAzMTEwLwYDVQQD
Eyg5Y2ExYjBlYWU2MTUwMjE4OTRhNWI3NjkzMGY4YWRlMzBlZWJiZmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DRo1SxlFVLEIKiR+PUgknNwNAKh
4JC2Lu8xD4JFWdrHygUqrW/eCx4B2k0ty4ns1nUzW0SaFXLIyGrajMA8mKiBfiHW
5gO43ljhnD0oOGliurH2kVZ4XUsJmSzfOgiGCn58CMz/gVkmoX69w4VanUOfNIqV
FC+kLOUd/lTQGcd40SzMYFbnJJsXDglu2k7A2ifLef6CgnC+v6dBczpuVcn5QPE+
Te5/h3SgXOgTXZOCkYoqrthDwCWHvIBf9eDLl3++ZY6qY97HRhmGorwhG9q9AKQP
qAqrAJF/xU51IW96EEJRlVVI7dBmbNSE1CVRlsCrkgPk1facFdai+SNFwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyhsOrmFQIYlKW3aTD4reMO67+8MB8GA1UdIwQY
MBaAFD60cP1NZ0IS/8gqmTbz/iVL7M5mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHJSd19VMW5RaExfeUNxWk52UC1KVXZzem1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83NDRlNTMtOGRlNi00NjcxLTlmODAt
NWYwMTU3MzBkODExLzEvUHJSd19VMW5RaExfeUNxWk52UC1KVXZzem1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi83NDRlNTMtOGRlNi00NjcxLTlmODAtNWYwMTU3MzBkODEx
LzEvUHJSd19VMW5RaExfeUNxWk52UC1KVXZzem1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYlkDgkw
CbspPpcnqIq13Op1foST1iCTf2Z5vYFrTLXFoMCjg9W6fZTVopHzMSNi+fg0owY2
Wc7OGco6JbMzVN8FDnO00NG6Lv6M8l037hF/vbegsdDzICd6Z2ocFhYuzKNKpOL+
3JbwAY5l+D6RTz5Apw2DbC4hnSe11Uig4hgeuq0HJgRZJGLP10r1gPQk7OfU9rhM
Cw8QsIw3M33QUu4n9ykl1+aXRVJSJ4HDiqGu8xq563K7R4+KJFttDK8kLQivSaGF
u/E9jDAoGBIUO2e1ne8bgF14qrtNPNLFaZLGy7uXFxRsl23dp5VZxKPfceTJWAAN
NFub6hdXgYqW2w==
-----END CERTIFICATE-----
Generated at Mon May 12 19:26:03 2025 by rpki-client