Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
File: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft (raw, json)
Hash identifier: jvMeIARs67VHUc8GwyE0iYB3m7NcxJDbxNsBQJf67eM=
Subject key identifier: 5B:83:12:86:9F:F7:15:32:7B:59:9F:FF:90:8A:FF:49:0F:D5:54:9E
Authority key identifier: BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
Certificate issuer: /CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Certificate serial: 0196B558B073FD6F31450097F10ED446321A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
Manifest number: 1531
Signing time: Fri 09 May 2025 14:00:10 +0000
Manifest this update: Fri 09 May 2025 14:00:10 +0000
Manifest next update: Sat 10 May 2025 14:00:10 +0000
Files and hashes: 1: 1-MOd61mqzzUd3k7RQR0FdOI1Nn0.roa (hash: Ney+qmboFEb3EnQIoVOu45+2AwAnlZ+xcFMz6UpUYIw=)
2: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl (hash: 7bRQyaCX3iys8/7y82AZ0C14l1mbTZDrUNcO1+C17aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:58:b0:73:fd:6f:31:45:00:97:f1:0e:d4:46:32:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Validity
Not Before: May 9 14:00:10 2025 GMT
Not After : May 10 14:00:10 2025 GMT
Subject: CN=5b8312869ff715327b599fff908aff490fd5549e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e1:98:14:89:87:75:ee:ac:08:8c:1f:f7:a6:
21:1b:15:ea:9d:0e:dc:a9:24:ee:6d:f8:28:4f:15:
ac:19:a8:e2:df:69:f7:3b:fe:04:3b:27:bb:48:04:
f1:40:aa:6d:0e:83:2e:78:81:65:dd:c0:b3:66:2b:
a2:cd:2e:40:83:90:69:95:c3:06:94:93:b3:32:d0:
9f:8e:bc:c1:c5:5b:56:f7:a7:28:dc:28:62:a7:d4:
73:54:79:a4:a9:5f:c6:c6:0f:6f:a3:ef:9b:4e:52:
19:37:f2:09:45:4c:8b:c8:fe:67:c4:5a:98:e2:ae:
7c:43:80:e4:d1:e6:4f:b1:ed:4e:bd:d9:c9:e3:52:
0a:ab:fb:31:b4:e1:b8:0f:52:8a:1c:ac:a1:d1:58:
95:ec:dd:04:82:3e:20:7d:af:99:b2:44:fd:93:b8:
88:ee:af:cf:62:e7:06:65:ef:5c:c4:13:3d:2e:0f:
3b:51:81:58:7c:b7:eb:d5:e9:ec:e6:e2:8c:30:cc:
a1:15:c9:a5:7c:89:c4:97:30:c3:1b:56:05:b3:27:
52:12:1a:4c:1e:30:a4:95:c7:a8:aa:73:ad:1f:55:
68:ea:33:0e:2a:7f:f2:67:10:e2:df:23:af:d3:47:
05:19:f3:1b:84:26:d9:19:eb:af:b6:4e:a1:4c:cd:
82:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:83:12:86:9F:F7:15:32:7B:59:9F:FF:90:8A:FF:49:0F:D5:54:9E
X509v3 Authority Key Identifier:
keyid:BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:7f:8f:bf:48:4c:66:7e:03:af:cc:c7:64:df:65:e0:fa:da:
54:ce:30:02:d9:2e:91:f9:37:7e:a6:b2:b9:d7:1e:a4:c6:83:
9d:a4:f9:b3:f0:ae:1b:fe:c5:f0:30:6b:ce:56:a0:4a:79:47:
85:44:aa:81:0a:dd:07:b9:6b:c6:a7:68:24:18:fd:45:eb:3c:
cf:cd:5f:ec:48:6a:93:39:5b:6a:ff:c0:fc:91:e3:a9:89:6a:
07:28:8e:b8:78:9c:43:38:26:6b:21:6f:c0:8e:28:23:80:f9:
b1:12:e8:b3:c6:e5:0e:cb:8d:a2:5b:f1:be:81:17:59:16:dd:
fb:4a:87:51:94:f6:4b:ed:97:c9:eb:5e:38:58:f2:9d:6f:7f:
b5:ba:e5:12:65:92:64:35:f2:f1:9e:64:ff:82:70:e8:61:25:
07:12:c5:01:26:c4:6e:b1:cf:35:c2:6d:20:c3:8e:54:2b:3d:
af:de:5e:7b:57:6a:a6:73:05:9d:1f:9b:70:0a:65:7a:a9:33:
68:bb:f2:ba:90:7f:19:66:ae:fb:b3:9d:ac:e6:0f:7f:0a:f2:
ca:d2:0a:08:39:f4:16:79:b5:2f:30:0c:36:4e:2b:70:d8:de:
8a:72:eb:8f:1d:0a:bb:13:2d:19:2e:6f:27:e7:82:fb:cc:4d:
be:d2:3e:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa1WLBz/W8xRQCX8Q7URjIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNGI1MWIwYmFjNDVmYTIyNmJkMmRjZmYxMTczMGVkNDBl
YzIxNDkwHhcNMjUwNTA5MTQwMDEwWhcNMjUwNTEwMTQwMDEwWjAzMTEwLwYDVQQD
Eyg1YjgzMTI4NjlmZjcxNTMyN2I1OTlmZmY5MDhhZmY0OTBmZDU1NDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuGYFImHde6sCIwf96YhGxXqnQ7c
qSTubfgoTxWsGaji32n3O/4EOye7SATxQKptDoMueIFl3cCzZiuizS5Ag5BplcMG
lJOzMtCfjrzBxVtW96co3Chip9RzVHmkqV/Gxg9vo++bTlIZN/IJRUyLyP5nxFqY
4q58Q4Dk0eZPse1OvdnJ41IKq/sxtOG4D1KKHKyh0ViV7N0Egj4gfa+ZskT9k7iI
7q/PYucGZe9cxBM9Lg87UYFYfLfr1ens5uKMMMyhFcmlfInElzDDG1YFsydSEhpM
HjCklceoqnOtH1Vo6jMOKn/yZxDi3yOv00cFGfMbhCbZGeuvtk6hTM2CqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuDEoaf9xUye1mf/5CK/0kP1VSeMB8GA1UdIwQY
MBaAFL9LUbC6xF+iJr0tz/EXMO1A7CFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZWIwNjQtYTkyMi00NmE2LTg2Y2Et
ZTQzNTIzOTgzNzkzLzEvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kZWIwNjQtYTkyMi00NmE2LTg2Y2EtZTQzNTIzOTgzNzkz
LzEvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIX+Pv0hM
Zn4Dr8zHZN9l4PraVM4wAtkukfk3fqayudcepMaDnaT5s/CuG/7F8DBrzlagSnlH
hUSqgQrdB7lrxqdoJBj9Res8z81f7Ehqkzlbav/A/JHjqYlqByiOuHicQzgmayFv
wI4oI4D5sRLos8blDsuNolvxvoEXWRbd+0qHUZT2S+2XyeteOFjynW9/tbrlEmWS
ZDXy8Z5k/4Jw6GElBxLFASbEbrHPNcJtIMOOVCs9r95ee1dqpnMFnR+bcApleqkz
aLvyupB/GWau+7OdrOYPfwryytIKCDn0Fnm1LzAMNk4rcNjeinLrjx0KuxMtGS5v
J+eC+8xNvtI+8w==
-----END CERTIFICATE-----
Generated at Fri May 9 18:45:09 2025 by rpki-client