Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
File: Rns5TPikBRwWfUaLx7iSpx3uTQM.mft (raw, json)
Hash identifier: SW4106p6ipr2Qfb+TTeDjB+LR1wzsnsuPfJJqSJ6vOQ=
Subject key identifier: 48:55:2A:78:EB:71:3D:21:2F:BE:EB:0D:98:33:19:CF:ED:20:77:C1
Authority key identifier: 46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03
Certificate issuer: /CN=467b394cf8a4051c167d468bc7b892a71dee4d03
Certificate serial: 0196C26FA9972095AE4F6334B8E2FAE83916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
Manifest number: 0925
Signing time: Mon 12 May 2025 03:00:19 +0000
Manifest this update: Mon 12 May 2025 03:00:19 +0000
Manifest next update: Tue 13 May 2025 03:00:19 +0000
Files and hashes: 1: Rns5TPikBRwWfUaLx7iSpx3uTQM.crl (hash: avxDyhdw2JebnqEEU9jNRmqh1P5CWP8Vm0pQk4VMv+Q=)
2: dgAEK4wIhzdNcfF05upWmZfXZZk.roa (hash: U/vt5a1C9rZX//TwbwJI8SM4gcB/oWBETRm681WJLz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:a9:97:20:95:ae:4f:63:34:b8:e2:fa:e8:39:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467b394cf8a4051c167d468bc7b892a71dee4d03
Validity
Not Before: May 12 03:00:19 2025 GMT
Not After : May 13 03:00:19 2025 GMT
Subject: CN=48552a78eb713d212fbeeb0d983319cfed2077c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b9:6e:5d:35:49:03:54:a2:91:b5:48:69:8c:
ca:3c:cb:76:b0:ad:9b:3d:8f:59:2b:77:63:4b:2c:
24:a2:e3:39:f9:3d:79:d1:f2:39:28:34:68:77:04:
10:31:d1:95:86:cd:03:20:6b:88:bb:ec:89:ad:e3:
1d:3c:45:c4:5a:18:e3:ac:bb:a6:ce:19:08:74:fd:
72:79:5b:5e:ba:6c:c6:31:46:18:5f:3c:e6:b4:d1:
79:98:71:bd:72:ba:81:47:2a:65:e3:bf:a2:4a:fc:
63:44:fa:06:7c:b5:13:86:97:38:b3:d9:72:97:82:
fb:23:4c:60:7f:bc:c6:2c:46:30:1e:ab:76:e4:78:
22:21:ce:e3:2f:02:cf:26:f3:f8:ce:f1:5e:04:de:
ca:b7:3b:01:fc:8f:f3:8c:e6:ac:e4:51:71:2b:8d:
f1:5d:30:31:73:82:9b:70:00:7c:65:a8:b1:5e:92:
25:23:11:9b:03:e3:d6:3e:84:6d:49:e5:72:09:38:
67:f9:b4:e3:84:3e:40:78:a4:1c:e5:1e:c7:af:7d:
34:13:68:b7:d4:1a:be:b7:2c:03:8d:64:9a:9e:7c:
6b:ba:c9:4c:85:64:a5:45:bd:17:11:05:fa:4c:da:
34:0d:f5:e9:fb:3a:07:80:16:5c:b8:29:db:77:42:
df:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:55:2A:78:EB:71:3D:21:2F:BE:EB:0D:98:33:19:CF:ED:20:77:C1
X509v3 Authority Key Identifier:
keyid:46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:82:ee:7c:ac:32:d8:a9:be:03:5d:b2:12:95:83:7e:69:ca:
f6:c1:d9:ab:c0:2e:8c:00:00:37:84:66:9b:bb:43:77:5d:b0:
a8:a1:de:cc:10:b5:fe:f5:13:54:fe:95:ac:42:81:1f:89:ab:
e5:5f:20:5b:e5:4c:14:5c:34:10:27:2c:99:4f:80:35:f4:1d:
08:a3:7b:0a:44:16:a7:ca:da:68:5c:49:96:f6:25:74:8d:0b:
c2:7c:d8:63:21:ea:c5:26:e4:87:44:d0:d5:6b:e4:1b:57:45:
b0:47:25:1f:0a:9c:ae:b2:2b:32:a1:ad:ec:de:25:d7:ed:5c:
4b:65:fb:b2:b1:7e:ab:36:73:58:e6:da:5c:36:d7:fd:0c:09:
1a:26:77:3d:2e:86:70:33:2c:0f:00:12:41:61:4d:2a:11:78:
1e:6d:e5:09:bc:3b:9c:e5:96:f5:b3:36:85:57:1d:04:e8:39:
ee:be:39:bc:da:d1:80:4a:d0:55:10:59:9d:c3:ff:6a:f0:d8:
28:3d:ff:e9:79:99:da:ea:5a:87:6d:19:54:9d:3f:17:84:d0:
fc:b1:7b:eb:ac:01:83:90:0e:44:e0:c8:c7:f6:9d:4e:c3:d9:
12:6d:eb:6e:52:00:8a:27:3e:7b:66:89:3c:ad:37:0e:b5:d7:
19:6a:a0:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCb6mXIJWuT2M0uOL66DkWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2N2IzOTRjZjhhNDA1MWMxNjdkNDY4YmM3Yjg5MmE3MWRl
ZTRkMDMwHhcNMjUwNTEyMDMwMDE5WhcNMjUwNTEzMDMwMDE5WjAzMTEwLwYDVQQD
Eyg0ODU1MmE3OGViNzEzZDIxMmZiZWViMGQ5ODMzMTljZmVkMjA3N2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbluXTVJA1SikbVIaYzKPMt2sK2b
PY9ZK3djSywkouM5+T150fI5KDRodwQQMdGVhs0DIGuIu+yJreMdPEXEWhjjrLum
zhkIdP1yeVteumzGMUYYXzzmtNF5mHG9crqBRypl47+iSvxjRPoGfLUThpc4s9ly
l4L7I0xgf7zGLEYwHqt25HgiIc7jLwLPJvP4zvFeBN7KtzsB/I/zjOas5FFxK43x
XTAxc4KbcAB8ZaixXpIlIxGbA+PWPoRtSeVyCThn+bTjhD5AeKQc5R7Hr300E2i3
1Bq+tywDjWSannxruslMhWSlRb0XEQX6TNo0DfXp+zoHgBZcuCnbd0LfSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhVKnjrcT0hL77rDZgzGc/tIHfBMB8GA1UdIwQY
MBaAFEZ7OUz4pAUcFn1Gi8e4kqcd7k0DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm5zNVRQaWtCUndXZlVhTHg3aVNweDN1VFFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNWM4MDUtZjYwYy00NDJjLWFjNWQt
MGYwMWI1NjA2NTdjLzEvUm5zNVRQaWtCUndXZlVhTHg3aVNweDN1VFFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zNWM4MDUtZjYwYy00NDJjLWFjNWQtMGYwMWI1NjA2NTdj
LzEvUm5zNVRQaWtCUndXZlVhTHg3aVNweDN1VFFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi4LufKwy
2Km+A12yEpWDfmnK9sHZq8AujAAAN4Rmm7tDd12wqKHezBC1/vUTVP6VrEKBH4mr
5V8gW+VMFFw0ECcsmU+ANfQdCKN7CkQWp8raaFxJlvYldI0LwnzYYyHqxSbkh0TQ
1WvkG1dFsEclHwqcrrIrMqGt7N4l1+1cS2X7srF+qzZzWObaXDbX/QwJGiZ3PS6G
cDMsDwASQWFNKhF4Hm3lCbw7nOWW9bM2hVcdBOg57r45vNrRgErQVRBZncP/avDY
KD3/6XmZ2upah20ZVJ0/F4TQ/LF766wBg5AORODIx/adTsPZEm3rblIAiic+e2aJ
PK03DrXXGWqgUw==
-----END CERTIFICATE-----
Generated at Mon May 12 10:59:42 2025 by rpki-client