Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
File: RPTFphl4VJskg4j530SdKpXhCgc.mft (raw, json)
Hash identifier: ZJZEu9cjeUzBpXjPcSbjBcQeZUCSrnQC53lY8pVDB/o=
Subject key identifier: 83:11:B2:E4:46:CD:DB:3C:B1:A1:04:69:19:1C:3E:A7:5B:CD:C1:4F
Authority key identifier: 44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07
Certificate issuer: /CN=44f4c5a61978549b248388f9df449d2a95e10a07
Certificate serial: 0196BF6F551E16DDFFEE3EE0EBF3D9B8D1F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 13:01:06 +0000
Manifest this update: Sun 11 May 2025 13:01:06 +0000
Manifest next update: Mon 12 May 2025 13:01:06 +0000
Files and hashes: 1: RPTFphl4VJskg4j530SdKpXhCgc.crl (hash: 1+do9CG1fEEn7iKStPRUfAEhluHApY9KDD9mQKGfObA=)
2: ios5KWpmGZUyejt9fTyM20Kq3iQ.roa (hash: ueEa/mQzKdPiJu8mODUSR4ctsWUuOZw5Ht5pcIUfCfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:55:1e:16:dd:ff:ee:3e:e0:eb:f3:d9:b8:d1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f4c5a61978549b248388f9df449d2a95e10a07
Validity
Not Before: May 11 13:01:06 2025 GMT
Not After : May 12 13:01:06 2025 GMT
Subject: CN=8311b2e446cddb3cb1a10469191c3ea75bcdc14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:59:49:2d:d2:78:19:3a:3e:93:0b:4f:68:39:
1b:d2:34:4d:cf:0f:23:6d:77:0e:a6:d1:d1:55:64:
77:2a:26:08:b0:4c:82:ce:ae:b2:e3:d2:9b:c0:c2:
85:33:47:39:f9:1a:9e:f1:47:58:61:97:7f:57:96:
73:d1:3c:c4:ed:f6:47:34:7e:79:c7:35:2a:2e:04:
e2:1f:37:2f:c8:eb:6f:b1:bf:da:83:4f:20:b8:65:
ec:64:b0:dc:21:78:2e:d5:54:fd:14:23:8f:cc:6a:
ad:b6:6d:8a:6e:41:26:00:31:0b:9b:62:45:29:d6:
5b:8c:01:e1:33:ab:66:ee:1a:d6:eb:3e:ae:44:56:
62:80:a4:90:f0:e8:d2:77:de:65:0d:4c:31:6f:af:
5d:fb:08:a9:e0:e7:52:f6:ce:92:0f:22:67:01:07:
f3:ea:eb:31:8d:39:57:9a:28:2e:9a:a0:8a:fc:d2:
60:4a:43:4c:8f:33:95:9e:fc:32:fa:ee:c4:7e:cd:
b8:ba:26:62:ea:32:9b:9c:de:d3:b2:48:f3:2e:62:
21:ec:a1:61:d1:e5:67:6e:e3:3f:e0:2b:1c:15:33:
49:f0:34:dd:a3:00:9f:d5:c7:67:2c:e3:2c:6f:54:
a6:de:33:4a:94:ee:18:a2:c8:ae:8a:36:e9:63:64:
71:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:11:B2:E4:46:CD:DB:3C:B1:A1:04:69:19:1C:3E:A7:5B:CD:C1:4F
X509v3 Authority Key Identifier:
keyid:44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:5e:8e:66:30:9d:91:06:8a:8f:a8:37:5d:19:b2:2b:22:5b:
4b:1e:f0:e3:db:6f:19:e4:71:07:2e:ac:6c:0b:66:41:1a:ae:
a9:ca:ca:3a:5b:4e:1a:20:fd:90:29:61:50:b0:1b:56:c9:32:
2a:d1:12:55:a6:9b:33:d5:49:4c:4a:36:28:47:c5:22:c5:72:
7d:ac:99:a9:a2:c5:d3:9e:44:67:8d:66:b1:76:11:db:29:8e:
b2:da:67:d0:86:1c:f8:86:da:b3:60:b4:4a:30:04:ca:11:3c:
72:5b:80:9c:72:f9:01:b8:ac:79:4a:d6:a7:ee:f0:1c:cd:2e:
a0:33:04:ac:1a:5b:be:0e:bf:a6:a2:56:1f:8f:28:d0:ae:58:
41:b6:c0:99:ba:96:2f:80:03:a4:7d:a2:29:d2:c6:bc:c4:4c:
ca:e2:4c:ce:37:c4:64:d6:97:dd:a5:d1:e5:8c:14:05:2d:84:
16:99:b5:ec:47:73:9a:24:dd:71:38:3e:a6:16:6d:cf:e7:70:
9f:51:d5:17:47:87:0e:ae:f4:d1:0b:79:f0:71:76:e7:55:21:
ef:88:e5:80:04:5a:1a:e0:a6:19:e9:73:ec:1c:9f:7b:33:5e:
0c:b4:84:80:66:9f:64:5a:c6:b4:01:2a:65:82:db:65:0e:44:
f9:eb:26:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/b1UeFt3/7j7g6/PZuNH3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZjRjNWE2MTk3ODU0OWIyNDgzODhmOWRmNDQ5ZDJhOTVl
MTBhMDcwHhcNMjUwNTExMTMwMTA2WhcNMjUwNTEyMTMwMTA2WjAzMTEwLwYDVQQD
Eyg4MzExYjJlNDQ2Y2RkYjNjYjFhMTA0NjkxOTFjM2VhNzViY2RjMTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FlJLdJ4GTo+kwtPaDkb0jRNzw8j
bXcOptHRVWR3KiYIsEyCzq6y49KbwMKFM0c5+Rqe8UdYYZd/V5Zz0TzE7fZHNH55
xzUqLgTiHzcvyOtvsb/ag08guGXsZLDcIXgu1VT9FCOPzGqttm2KbkEmADELm2JF
KdZbjAHhM6tm7hrW6z6uRFZigKSQ8OjSd95lDUwxb69d+wip4OdS9s6SDyJnAQfz
6usxjTlXmigumqCK/NJgSkNMjzOVnvwy+u7Efs24uiZi6jKbnN7TskjzLmIh7KFh
0eVnbuM/4CscFTNJ8DTdowCf1cdnLOMsb1Sm3jNKlO4YosiuijbpY2RxfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMRsuRGzds8saEEaRkcPqdbzcFPMB8GA1UdIwQY
MBaAFET0xaYZeFSbJIOI+d9EnSqV4QoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlBURnBobDRWSnNrZzRqNTMwU2RLcFhoQ2djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lNWM4ZGYtNGVmOC00ZDkwLWE0OTAt
MzU4MDBlOWYxNzBlLzEvUlBURnBobDRWSnNrZzRqNTMwU2RLcFhoQ2djLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9lNWM4ZGYtNGVmOC00ZDkwLWE0OTAtMzU4MDBlOWYxNzBl
LzEvUlBURnBobDRWSnNrZzRqNTMwU2RLcFhoQ2djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuF6OZjCd
kQaKj6g3XRmyKyJbSx7w49tvGeRxBy6sbAtmQRquqcrKOltOGiD9kClhULAbVsky
KtESVaabM9VJTEo2KEfFIsVyfayZqaLF055EZ41msXYR2ymOstpn0IYc+Ibas2C0
SjAEyhE8cluAnHL5AbiseUrWp+7wHM0uoDMErBpbvg6/pqJWH48o0K5YQbbAmbqW
L4ADpH2iKdLGvMRMyuJMzjfEZNaX3aXR5YwUBS2EFpm17EdzmiTdcTg+phZtz+dw
n1HVF0eHDq700Qt58HF251Uh74jlgARaGuCmGelz7ByfezNeDLSEgGafZFrGtAEq
ZYLbZQ5E+esmgA==
-----END CERTIFICATE-----
Generated at Sun May 11 16:52:51 2025 by rpki-client