Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
File: R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft (raw, json)
Hash identifier: CyDDTal1DAUF4gxDILhzqUUBsqr+V3C0sxXswtlLeHg=
Subject key identifier: FC:7F:23:8C:4B:C5:D6:1F:DC:4E:AA:08:0B:71:B9:A4:60:84:D0:12
Authority key identifier: 47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
Certificate issuer: /CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Certificate serial: 0196BEC9B7012A5CBF56695D9D35598B6D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
Manifest number: 053C
Signing time: Sun 11 May 2025 10:00:12 +0000
Manifest this update: Sun 11 May 2025 10:00:12 +0000
Manifest next update: Mon 12 May 2025 10:00:12 +0000
Files and hashes: 1: 0XKLHVF6OopWfkCp5SGDRjUGSwc.roa (hash: LlbXk7YPxKtyITregmmE7lsrGbU25UL9jnRqhgrsqYQ=)
2: BXJ7UivZREqfV3oE_cto5-RbCwU.roa (hash: H5O0TywJPldSIFgMKfugAhkIQ7kPwBy5/c6iSkGttag=)
3: R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl (hash: YVm6lml2o5haHNGeRmRj3ikMGabKmxQjbtYVojRQdlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:c9:b7:01:2a:5c:bf:56:69:5d:9d:35:59:8b:6d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Validity
Not Before: May 11 10:00:12 2025 GMT
Not After : May 12 10:00:12 2025 GMT
Subject: CN=fc7f238c4bc5d61fdc4eaa080b71b9a46084d012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ef:54:b1:4a:8b:d6:24:d0:e5:ff:ff:32:8c:
ea:ae:0a:43:3e:e3:36:cb:0a:37:e2:d8:3b:70:d6:
23:c6:77:e3:0a:94:d7:d1:d5:cd:e4:3f:7c:0d:5e:
27:d8:9d:60:c6:4d:46:e1:18:d9:ce:45:e5:00:ff:
27:5d:f6:b7:76:a7:f7:3a:58:60:a6:d0:34:f1:1c:
1e:34:a6:87:38:4e:a3:e0:b9:5c:b2:d4:ae:3e:69:
6d:fd:74:4b:44:01:ab:d4:3f:c1:9a:3d:5f:21:74:
73:80:4d:02:49:54:f1:f8:da:07:c3:f8:ef:2d:95:
53:34:17:86:80:ff:b7:bb:b8:b9:75:69:62:41:bd:
9c:26:2f:33:05:00:9c:c8:fd:3f:20:a7:21:80:08:
f9:fe:be:88:ab:f0:e3:2b:19:af:07:d6:52:ae:6d:
e8:2f:d7:22:b2:da:ce:07:aa:65:4b:83:18:39:c1:
d4:f1:68:20:19:44:3a:97:87:18:f7:51:0f:e1:6c:
52:e1:0f:88:ff:3f:1c:03:0e:45:48:da:1b:59:e7:
1a:19:4b:dd:c0:5c:08:18:73:65:e0:d6:ce:26:ac:
e7:11:00:bf:d2:02:81:bb:f7:3a:49:f9:fe:e1:23:
ec:9f:7c:b0:f1:63:04:a9:3b:ba:c8:b1:ab:91:1b:
16:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7F:23:8C:4B:C5:D6:1F:DC:4E:AA:08:0B:71:B9:A4:60:84:D0:12
X509v3 Authority Key Identifier:
keyid:47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0b:99:06:50:f3:c1:f2:d9:ae:4b:1c:6c:da:35:c8:95:32:
38:ed:58:39:58:3e:05:0a:bf:c7:65:de:4c:fe:b1:8c:3a:6a:
0f:66:12:b9:3c:64:d4:ed:2d:56:4e:df:ac:ec:37:e7:ef:b1:
98:87:13:23:4b:2e:84:5f:53:9a:ec:75:3f:aa:2f:f5:e1:18:
d7:4b:75:3b:cf:af:95:d0:29:79:1f:1f:49:a2:9f:28:f6:a5:
dc:69:b3:ff:35:f4:02:cd:e6:df:a5:97:77:d5:1d:ca:71:d3:
be:ca:32:a3:ea:e7:f8:f4:5e:fe:a6:88:2c:31:4d:59:43:f5:
86:62:6e:aa:26:f0:3f:d0:e8:f1:5f:52:89:90:e3:67:ba:54:
a4:1c:13:84:3b:4b:1e:51:4b:f1:db:21:d3:b8:2c:6b:d7:44:
b8:ec:4e:bf:16:50:0a:aa:7a:5c:d6:1b:36:35:9c:c8:a2:ff:
97:b0:8d:3c:b8:08:7a:f7:15:a1:47:91:3e:b7:11:56:51:6a:
d8:62:cb:7e:89:16:9b:ba:93:49:97:db:cd:6a:7e:22:c1:71:
76:fc:ec:fc:15:f8:92:7c:f5:18:32:7d:c9:e2:c9:cb:63:9d:
5a:0f:ac:d3:59:16:97:4a:2a:35:32:7c:bd:dc:a7:a3:f7:88:
0b:a8:a1:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+ybcBKly/VmldnTVZi20nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3N2Y0YjZlYzQzNDcxNTdjNGQxM2VmMGU3YWJlMTI5MGEw
YmY1N2MwHhcNMjUwNTExMTAwMDEyWhcNMjUwNTEyMTAwMDEyWjAzMTEwLwYDVQQD
EyhmYzdmMjM4YzRiYzVkNjFmZGM0ZWFhMDgwYjcxYjlhNDYwODRkMDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+9UsUqL1iTQ5f//MozqrgpDPuM2
ywo34tg7cNYjxnfjCpTX0dXN5D98DV4n2J1gxk1G4RjZzkXlAP8nXfa3dqf3Olhg
ptA08RweNKaHOE6j4LlcstSuPmlt/XRLRAGr1D/Bmj1fIXRzgE0CSVTx+NoHw/jv
LZVTNBeGgP+3u7i5dWliQb2cJi8zBQCcyP0/IKchgAj5/r6Iq/DjKxmvB9ZSrm3o
L9cistrOB6plS4MYOcHU8WggGUQ6l4cY91EP4WxS4Q+I/z8cAw5FSNobWecaGUvd
wFwIGHNl4NbOJqznEQC/0gKBu/c6Sfn+4SPsn3yw8WMEqTu6yLGrkRsWLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPx/I4xLxdYf3E6qCAtxuaRghNASMB8GA1UdIwQY
MBaAFEd/S27ENHFXxNE+8Oer4SkKC/V8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjM5TGJzUTBjVmZFMFQ3dzU2dmhLUW9MOVh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zOTNlMTYtODk4ZS00NWQ4LTlkNzIt
ZDhiZDI1MGI2NGY5LzEvUjM5TGJzUTBjVmZFMFQ3dzU2dmhLUW9MOVh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zOTNlMTYtODk4ZS00NWQ4LTlkNzItZDhiZDI1MGI2NGY5
LzEvUjM5TGJzUTBjVmZFMFQ3dzU2dmhLUW9MOVh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkAuZBlDz
wfLZrkscbNo1yJUyOO1YOVg+BQq/x2XeTP6xjDpqD2YSuTxk1O0tVk7frOw35++x
mIcTI0suhF9Tmux1P6ov9eEY10t1O8+vldApeR8fSaKfKPal3Gmz/zX0As3m36WX
d9UdynHTvsoyo+rn+PRe/qaILDFNWUP1hmJuqibwP9Do8V9SiZDjZ7pUpBwThDtL
HlFL8dsh07gsa9dEuOxOvxZQCqp6XNYbNjWcyKL/l7CNPLgIevcVoUeRPrcRVlFq
2GLLfokWm7qTSZfbzWp+IsFxdvzs/BX4knz1GDJ9yeLJy2OdWg+s01kWl0oqNTJ8
vdyno/eIC6ihdA==
-----END CERTIFICATE-----
Generated at Sun May 11 13:45:03 2025 by rpki-client