Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
File: rONjRGSGG9S_jFvH48m_09JGpN0.mft (raw, json)
Hash identifier: ZTHEyWYYeOTvvEc+mnk9BCFVJi28obotO3pqlMJKoAU=
Subject key identifier: C3:E0:A1:60:04:84:E6:72:1C:8A:4B:2E:74:AE:EE:53:63:B1:FD:B5
Authority key identifier: AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
Certificate issuer: /CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Certificate serial: 0196A19B1DD1793825BB443A0C40EFD651B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 18:00:19 +0000
Manifest this update: Mon 05 May 2025 18:00:19 +0000
Manifest next update: Tue 06 May 2025 18:00:19 +0000
Files and hashes: 1: Obsiy3NGEoUjL-DLQo0yhLx4KAI.roa (hash: p9j2sVfI93AXLXtc3YNcT/Xcs3W13x3825+kRDw3Ko8=)
2: rONjRGSGG9S_jFvH48m_09JGpN0.crl (hash: lmNE6tnjMIVW50cb5FHinki52jHDGs8kfd/vp4li2ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9b:1d:d1:79:38:25:bb:44:3a:0c:40:ef:d6:51:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Validity
Not Before: May 5 18:00:19 2025 GMT
Not After : May 6 18:00:19 2025 GMT
Subject: CN=c3e0a1600484e6721c8a4b2e74aeee5363b1fdb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9e:73:1d:3b:d2:87:07:dc:18:46:7d:64:0a:
5c:35:91:26:76:92:03:44:c2:3d:66:e2:1b:40:7a:
e1:19:31:ba:66:7c:06:15:1f:c0:57:68:75:d5:25:
fb:cd:bd:14:6b:5d:03:f4:41:0d:a8:d9:65:68:e3:
22:b9:2b:49:47:0d:ee:95:92:e3:10:ff:cd:84:24:
f7:aa:12:e7:71:79:77:56:36:16:76:f4:3e:d3:d1:
f0:60:14:b3:94:4f:9c:a0:84:96:71:f5:de:dd:7d:
5e:43:94:66:1e:ef:59:59:d9:fd:cc:66:c7:43:72:
3e:15:36:6a:11:f8:e3:7f:be:77:82:d7:ab:cf:d8:
72:28:cc:85:41:68:26:81:63:bc:42:4a:7f:c2:75:
f9:31:a8:72:c5:b9:10:48:ec:2c:87:75:93:21:c3:
f3:b9:f5:b0:b9:ed:f0:96:a8:b3:3a:d7:9a:a3:4a:
04:67:64:0b:da:b9:60:57:ca:33:de:7a:1d:8f:dd:
fc:92:17:29:35:c1:17:0a:63:a0:43:87:3a:90:cc:
4b:73:0d:38:c8:50:84:39:c2:02:1b:35:ae:dd:9c:
22:f2:23:73:cd:b0:db:f2:04:9b:86:ba:bb:3a:90:
30:cd:da:9f:4f:46:61:49:c3:7b:1c:ed:58:79:58:
06:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E0:A1:60:04:84:E6:72:1C:8A:4B:2E:74:AE:EE:53:63:B1:FD:B5
X509v3 Authority Key Identifier:
keyid:AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:98:56:88:ba:3f:44:7a:82:38:07:84:48:41:ff:6a:57:7b:
06:33:de:28:5b:ba:fc:c8:63:8f:e6:3b:36:b2:11:ec:99:97:
fb:83:90:8a:64:39:92:94:2e:a5:55:10:51:4d:66:75:a3:34:
67:3c:14:0b:18:37:b8:a7:aa:80:fa:87:14:db:0f:80:be:d4:
36:0e:46:b4:1b:f7:9e:25:2d:6b:1b:3f:ad:27:80:59:b9:4b:
1d:20:25:ff:32:4c:45:e7:e3:08:4d:d6:60:cc:9c:a2:ef:49:
83:d5:7a:a5:b1:c0:e5:ec:38:59:ac:11:ae:fa:5b:f1:c3:9c:
4a:94:26:c9:a6:96:a9:5f:d2:1e:1e:ca:f8:c0:5a:cf:aa:62:
2d:b3:e3:37:26:fb:74:11:37:74:2d:5e:78:b3:e8:a3:ec:1d:
d9:91:a9:88:f8:4f:43:a2:cd:48:71:35:d6:a7:29:c7:37:c2:
96:bf:c6:17:97:66:2f:bd:b4:c2:cc:73:a1:58:e5:d2:04:b3:
8b:92:11:14:5c:79:a9:db:5c:06:2b:ad:87:8e:58:e7:c3:5a:
d6:c1:73:ef:d6:ef:b4:0c:98:dd:08:99:91:a7:b0:b1:1c:64:
a4:88:2e:5b:c5:89:4c:b5:40:de:d1:31:0d:a3:bc:70:55:f3:
d9:4f:f6:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZahmx3ReTglu0Q6DEDv1lG2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZTM2MzQ0NjQ4NjFiZDRiZjhjNWJjN2UzYzliZmQzZDI0
NmE0ZGQwHhcNMjUwNTA1MTgwMDE5WhcNMjUwNTA2MTgwMDE5WjAzMTEwLwYDVQQD
EyhjM2UwYTE2MDA0ODRlNjcyMWM4YTRiMmU3NGFlZWU1MzYzYjFmZGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ5zHTvShwfcGEZ9ZApcNZEmdpID
RMI9ZuIbQHrhGTG6ZnwGFR/AV2h11SX7zb0Ua10D9EENqNllaOMiuStJRw3ulZLj
EP/NhCT3qhLncXl3VjYWdvQ+09HwYBSzlE+coISWcfXe3X1eQ5RmHu9ZWdn9zGbH
Q3I+FTZqEfjjf753gterz9hyKMyFQWgmgWO8Qkp/wnX5MahyxbkQSOwsh3WTIcPz
ufWwue3wlqizOteao0oEZ2QL2rlgV8oz3nodj938khcpNcEXCmOgQ4c6kMxLcw04
yFCEOcICGzWu3Zwi8iNzzbDb8gSbhrq7OpAwzdqfT0ZhScN7HO1YeVgGHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPgoWAEhOZyHIpLLnSu7lNjsf21MB8GA1UdIwQY
MBaAFKzjY0RkhhvUv4xbx+PJv9PSRqTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMGVmNTktMTg0Mi00Y2EzLTk4NjUt
MDY3Y2M0NDI2YzI4LzEvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9iMGVmNTktMTg0Mi00Y2EzLTk4NjUtMDY3Y2M0NDI2YzI4
LzEvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJhWiLo/
RHqCOAeESEH/ald7BjPeKFu6/Mhjj+Y7NrIR7JmX+4OQimQ5kpQupVUQUU1mdaM0
ZzwUCxg3uKeqgPqHFNsPgL7UNg5GtBv3niUtaxs/rSeAWblLHSAl/zJMRefjCE3W
YMycou9Jg9V6pbHA5ew4WawRrvpb8cOcSpQmyaaWqV/SHh7K+MBaz6piLbPjNyb7
dBE3dC1eeLPoo+wd2ZGpiPhPQ6LNSHE11qcpxzfClr/GF5dmL720wsxzoVjl0gSz
i5IRFFx5qdtcBiuth45Y58Na1sFz79bvtAyY3QiZkaewsRxkpIguW8WJTLVA3tEx
DaO8cFXz2U/2Qg==
-----END CERTIFICATE-----
Generated at Tue May 6 03:19:36 2025 by rpki-client