Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier: GHp8a1WeXOEkiB6klsVDpPDQDipyOgxkno6d3niIcVM=
Subject key identifier: 8F:81:4A:2C:5B:1B:8A:8F:A8:5A:2E:0F:06:B5:63:77:5B:7B:A8:4C
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 0196A2E5648E2C77277A67AA6C7D800F506C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number: 07BB
Signing time: Tue 06 May 2025 00:01:04 +0000
Manifest this update: Tue 06 May 2025 00:01:04 +0000
Manifest next update: Wed 07 May 2025 00:01:04 +0000
Files and hashes: 1: 9T-K1Qm3b8gpXgz9zJRHreyTvgM.roa (hash: dWSzFCZcssBKJcBODdxFw6oV27vvhXKSqLYxiGBOtGQ=)
2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: w0WitXXCnX2q193zhUNP6Dqx0ntU37WkMMGVBDpVcAM=)
3: hEhkAm4wvhKI8lm4TouQ913BI64.roa (hash: QBQPmns85EKoDttpiWLYZhYuUsat9iVL0D6w2NFPGj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e5:64:8e:2c:77:27:7a:67:aa:6c:7d:80:0f:50:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: May 6 00:01:04 2025 GMT
Not After : May 7 00:01:04 2025 GMT
Subject: CN=8f814a2c5b1b8a8fa85a2e0f06b563775b7ba84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:15:e3:9c:c3:37:67:a6:31:f8:1d:51:e1:1c:
63:23:33:78:be:cb:eb:d8:2c:06:b8:f4:76:1a:9e:
b1:f6:b1:be:89:e2:35:95:5f:ea:02:03:56:22:c1:
6d:8e:08:b4:ed:51:49:71:79:a0:8c:1c:f1:a0:17:
f1:95:34:a1:be:1c:5a:e4:f9:80:39:1f:3e:31:80:
b2:a7:7f:d4:04:4b:fb:fd:2d:18:02:3a:cd:5f:48:
37:e0:8f:26:c5:9a:f4:df:b3:df:43:1a:dd:97:32:
c5:a6:ea:b9:f8:0e:03:29:06:93:4a:f9:cd:0b:4b:
29:7e:43:6a:60:13:b3:56:5c:e5:5c:fd:0c:dc:7f:
7b:08:ea:c5:3e:4c:85:c4:d2:3f:2f:5b:9a:6f:86:
44:e6:32:fa:32:21:51:9f:8a:6e:86:e4:24:c6:79:
eb:f6:be:65:95:1a:eb:da:26:c4:25:de:73:44:5b:
08:34:82:77:7c:1b:48:53:29:3b:2a:1f:bd:12:dd:
8a:45:56:90:ec:91:5f:9a:99:c8:1e:18:54:57:20:
3f:8a:53:de:ba:a8:b3:c2:12:3d:07:69:34:59:17:
09:16:43:cb:5f:94:b8:11:5e:1f:61:55:de:18:53:
22:20:57:cc:f0:db:52:d5:2e:a5:de:37:74:23:c0:
cf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:81:4A:2C:5B:1B:8A:8F:A8:5A:2E:0F:06:B5:63:77:5B:7B:A8:4C
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d2:1e:82:73:d9:2f:ef:71:5e:28:02:91:c6:f5:88:24:36:
14:ee:ec:80:e1:24:6c:b2:1b:fc:b3:c3:d4:b6:67:bc:71:42:
3d:e2:b7:62:4e:96:09:8f:4c:0e:94:ce:2d:6c:8b:ca:f8:ca:
50:7e:4b:22:c7:13:a4:48:30:68:82:a7:f1:44:1a:15:f7:4c:
a8:20:f0:3f:aa:43:c7:0a:4f:74:28:e8:fa:a2:d3:29:6a:7c:
79:f8:81:63:89:8a:41:52:a1:12:b3:fe:36:32:19:e8:5f:82:
89:9f:91:70:ed:e8:ce:33:f2:29:81:2b:c3:1c:b6:c6:14:8c:
04:21:2e:2b:06:cb:0b:24:ab:a3:db:63:58:96:60:dd:a8:68:
b6:32:9a:d2:dc:5c:82:be:cf:ee:6e:45:a4:ab:0a:38:28:2b:
e0:87:59:ca:2f:7b:aa:33:a8:b0:0c:ce:ca:8f:10:9e:03:34:
13:d8:aa:b3:e9:d0:59:bb:93:25:8e:f6:f4:bf:9e:d3:af:7a:
cc:b7:bd:2b:03:d8:a6:d5:f4:5a:f5:83:45:63:43:52:1d:95:
2f:4e:3e:54:dc:2c:c0:d3:ee:0d:b1:08:cb:33:0b:81:64:a5:
22:74:fb:f2:f7:1f:80:b7:b8:bb:bb:b8:52:c2:60:9a:16:91:
e5:85:c7:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZai5WSOLHcnemeqbH2AD1BsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNmYxZTlmMDk1MGU0ZjM5YzljNWZlZTNmODY4YTI0ZWIz
NjFlZjEwHhcNMjUwNTA2MDAwMTA0WhcNMjUwNTA3MDAwMTA0WjAzMTEwLwYDVQQD
Eyg4ZjgxNGEyYzViMWI4YThmYTg1YTJlMGYwNmI1NjM3NzViN2JhODRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohXjnMM3Z6Yx+B1R4RxjIzN4vsvr
2CwGuPR2Gp6x9rG+ieI1lV/qAgNWIsFtjgi07VFJcXmgjBzxoBfxlTShvhxa5PmA
OR8+MYCyp3/UBEv7/S0YAjrNX0g34I8mxZr037PfQxrdlzLFpuq5+A4DKQaTSvnN
C0spfkNqYBOzVlzlXP0M3H97COrFPkyFxNI/L1uab4ZE5jL6MiFRn4puhuQkxnnr
9r5llRrr2ibEJd5zRFsINIJ3fBtIUyk7Kh+9Et2KRVaQ7JFfmpnIHhhUVyA/ilPe
uqizwhI9B2k0WRcJFkPLX5S4EV4fYVXeGFMiIFfM8NtS1S6l3jd0I8DPtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+BSixbG4qPqFouDwa1Y3dbe6hMMB8GA1UdIwQY
MBaAFAtvHp8JUOTznJxf7j+GiiTrNh7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lNjliZDMtMjE1ZS00NDIyLTkxNzAt
MDgxYmNiYWM0ZGFmLzEvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lNjliZDMtMjE1ZS00NDIyLTkxNzAtMDgxYmNiYWM0ZGFm
LzEvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9IegnPZ
L+9xXigCkcb1iCQ2FO7sgOEkbLIb/LPD1LZnvHFCPeK3Yk6WCY9MDpTOLWyLyvjK
UH5LIscTpEgwaIKn8UQaFfdMqCDwP6pDxwpPdCjo+qLTKWp8efiBY4mKQVKhErP+
NjIZ6F+CiZ+RcO3ozjPyKYErwxy2xhSMBCEuKwbLCySro9tjWJZg3ahotjKa0txc
gr7P7m5FpKsKOCgr4IdZyi97qjOosAzOyo8QngM0E9iqs+nQWbuTJY729L+e0696
zLe9KwPYptX0WvWDRWNDUh2VL04+VNwswNPuDbEIyzMLgWSlInT78vcfgLe4u7u4
UsJgmhaR5YXH4Q==
-----END CERTIFICATE-----
Generated at Tue May 6 01:29:40 2025 by rpki-client