Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
File: 493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json)
Hash identifier: avvMdwZSIxa6CCf1Scu00BHe4OfMapsaJaQdxtG/OzQ=
Subject key identifier: 17:A4:EC:FB:98:D3:83:6A:43:EA:AF:70:63:C1:B3:1F:EC:B5:74:3A
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial: 0196A6C241976A3E6F846D36E128CC538E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
Manifest number: 0D90
Signing time: Tue 06 May 2025 18:01:10 +0000
Manifest this update: Tue 06 May 2025 18:01:10 +0000
Manifest next update: Wed 07 May 2025 18:01:10 +0000
Files and hashes: 1: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: 8WRBupEnTIg5D/MdWobkTtdbCW5mX7cqnviCP1s7pzo=)
2: VaNHYKd7fkf8MUmIAFzRDiRSuAg.roa (hash: kArqpkPgXwbWfVfsCGeziL2LJL/J3oK8UFUA3DsKS6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:c2:41:97:6a:3e:6f:84:6d:36:e1:28:cc:53:8e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Validity
Not Before: May 6 18:01:10 2025 GMT
Not After : May 7 18:01:10 2025 GMT
Subject: CN=17a4ecfb98d3836a43eaaf7063c1b31fecb5743a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a5:7a:73:bc:29:be:22:f8:37:cb:26:b2:59:
bf:62:7b:30:5e:e4:fa:fa:d1:be:dc:2a:64:7d:8b:
0e:bf:6c:c6:52:0f:f5:50:e8:0e:03:fa:64:a3:ef:
78:a9:3c:e5:4b:64:49:49:bc:1b:c3:64:40:21:2a:
8f:03:3e:50:0a:e6:6f:83:c7:8f:18:a3:e3:66:36:
88:44:82:e1:39:04:b2:e4:cf:20:7f:e5:c1:b2:37:
49:d7:37:4e:c9:99:67:90:3b:8f:64:db:fd:21:ec:
6b:02:d9:15:71:7d:7b:9a:7e:81:14:f8:88:d0:78:
84:08:49:1b:b8:f2:5b:f1:a6:03:dc:39:16:55:e5:
98:45:ab:39:6c:58:61:e8:64:4c:e6:c6:e4:1f:77:
03:ff:7e:d8:60:b7:e9:94:00:d5:04:34:4f:5b:4b:
41:cf:ce:34:91:73:3c:05:56:51:63:68:48:6f:22:
4a:a5:23:b5:d1:e4:d8:87:2f:df:74:a0:cd:49:ab:
dd:0c:5e:49:7c:dd:4b:ce:d1:d3:e7:93:06:6b:ae:
2c:5f:77:09:71:c3:50:d3:70:51:3c:db:84:ff:db:
0d:6a:0f:1d:8c:95:cc:ca:bf:6d:85:49:02:0e:3b:
f2:cc:0d:81:c7:0c:be:f4:86:d4:f5:d9:4c:92:6a:
e4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A4:EC:FB:98:D3:83:6A:43:EA:AF:70:63:C1:B3:1F:EC:B5:74:3A
X509v3 Authority Key Identifier:
keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b5:72:47:9a:a4:02:50:c7:c8:00:aa:6d:c6:a6:19:73:43:
c0:db:70:90:f7:c0:75:54:7a:75:88:f6:fe:2b:43:38:b9:06:
a1:f3:d4:be:16:77:28:25:62:d2:77:f2:ec:ae:0a:7a:4d:e0:
f3:b3:a0:c0:64:cd:8b:01:ac:0e:ec:72:ae:43:c2:a3:68:a6:
ed:2a:ce:10:be:0e:a5:13:b4:b6:fc:b4:94:0f:33:cf:6b:b2:
2b:c6:d3:0a:bb:dd:b3:36:fd:f7:53:35:d6:c6:cb:c0:15:3a:
e2:c2:a5:e2:df:27:d5:34:bc:33:29:74:bb:60:7b:f8:2c:e3:
79:cc:3a:61:0f:a4:10:63:68:5b:16:d1:81:43:53:eb:ce:ca:
e0:c1:16:4e:75:7c:46:d1:05:6a:c0:2a:66:4e:21:71:67:bb:
24:ab:e1:8c:55:99:fb:61:da:70:9d:f5:f0:9b:9f:d7:78:50:
55:e7:d9:66:f8:a2:ad:75:20:b0:d4:df:ee:c0:85:ea:18:a6:
1d:a8:74:57:9a:0d:57:91:c1:e4:a7:e9:75:e1:26:aa:9e:6c:
b7:82:77:06:65:aa:9f:d2:1f:5d:8d:b3:54:40:57:7a:17:62:
a8:61:e3:7d:01:74:ae:7c:51:12:5e:54:ce:71:45:8c:89:13:
b2:d2:99:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZamwkGXaj5vhG024SjMU45XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZGRkM2NiNjQ4YmViNDI1MWQ0N2NjNGI2NWJjZDY0YjA5
YThkNGIwHhcNMjUwNTA2MTgwMTEwWhcNMjUwNTA3MTgwMTEwWjAzMTEwLwYDVQQD
EygxN2E0ZWNmYjk4ZDM4MzZhNDNlYWFmNzA2M2MxYjMxZmVjYjU3NDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qV6c7wpviL4N8smslm/YnswXuT6
+tG+3CpkfYsOv2zGUg/1UOgOA/pko+94qTzlS2RJSbwbw2RAISqPAz5QCuZvg8eP
GKPjZjaIRILhOQSy5M8gf+XBsjdJ1zdOyZlnkDuPZNv9IexrAtkVcX17mn6BFPiI
0HiECEkbuPJb8aYD3DkWVeWYRas5bFhh6GRM5sbkH3cD/37YYLfplADVBDRPW0tB
z840kXM8BVZRY2hIbyJKpSO10eTYhy/fdKDNSavdDF5JfN1LztHT55MGa64sX3cJ
ccNQ03BRPNuE/9sNag8djJXMyr9thUkCDjvyzA2Bxwy+9IbU9dlMkmrkewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBek7PuY04NqQ+qvcGPBsx/stXQ6MB8GA1UdIwQY
MBaAFOPd08tki+tCUdR8xLZbzWSwmo1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mYzE0N2EtODNmYy00YTUzLWE5MTIt
YjZiNzZlMjJmZmFjLzEvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9mYzE0N2EtODNmYy00YTUzLWE5MTItYjZiNzZlMjJmZmFj
LzEvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp7VyR5qk
AlDHyACqbcamGXNDwNtwkPfAdVR6dYj2/itDOLkGofPUvhZ3KCVi0nfy7K4Kek3g
87OgwGTNiwGsDuxyrkPCo2im7SrOEL4OpRO0tvy0lA8zz2uyK8bTCrvdszb991M1
1sbLwBU64sKl4t8n1TS8Myl0u2B7+Czjecw6YQ+kEGNoWxbRgUNT687K4MEWTnV8
RtEFasAqZk4hcWe7JKvhjFWZ+2HacJ318Juf13hQVefZZviirXUgsNTf7sCF6him
Hah0V5oNV5HB5KfpdeEmqp5st4J3BmWqn9IfXY2zVEBXehdiqGHjfQF0rnxREl5U
znFFjIkTstKZGg==
-----END CERTIFICATE-----
Generated at Wed May 7 01:21:51 2025 by rpki-client