Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
File: i0I-HXKxAwcL7VecQFl-0guEwW4.mft (raw, json)
Hash identifier: Elbl0NyQyGnmPoMqT3xN5DQNDlQ2t+PwAacfQLvoirs=
Subject key identifier: 4D:09:1C:75:FD:5F:6D:5A:CC:80:5C:23:E4:66:8D:91:D6:3D:AD:EF
Authority key identifier: 8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E
Certificate issuer: /CN=8b423e1d72b103070bed579c40597ed20b84c16e
Certificate serial: 0196A051E3E18CB090E033EE96A8F112B5D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
Manifest number: 03A7
Signing time: Mon 05 May 2025 12:00:43 +0000
Manifest this update: Mon 05 May 2025 12:00:43 +0000
Manifest next update: Tue 06 May 2025 12:00:43 +0000
Files and hashes: 1: i0I-HXKxAwcL7VecQFl-0guEwW4.crl (hash: Da0//+F7zaE/ECBObZyAfPP/N3PqwmXgk0vQGwm8X0k=)
2: r5RExikwh9VTxHZbndQhO_XU-vQ.roa (hash: 9NeQ0bAnfg+NNUQ9+vUOpq7EYWJaPxwQiPdu/Cupofw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:e3:e1:8c:b0:90:e0:33:ee:96:a8:f1:12:b5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b423e1d72b103070bed579c40597ed20b84c16e
Validity
Not Before: May 5 12:00:43 2025 GMT
Not After : May 6 12:00:43 2025 GMT
Subject: CN=4d091c75fd5f6d5acc805c23e4668d91d63dadef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:81:26:a2:b6:ee:32:c3:70:fb:09:d5:de:c1:
4a:a0:5c:ae:74:5b:79:21:f0:e7:68:e2:dd:ed:f8:
9d:41:66:ea:79:73:2d:31:77:4f:78:92:86:9f:5b:
84:1e:7f:07:ab:e1:64:ae:8b:aa:38:70:23:b6:d0:
17:51:c2:74:ca:c4:03:d1:9d:06:7e:f7:ed:3d:1f:
ac:87:f6:bf:20:fe:2d:d5:48:9b:5b:d3:cc:d8:c7:
71:49:2f:c8:d0:dc:a3:0a:e5:40:08:fa:a9:57:1f:
48:b9:36:cf:b5:53:d8:43:7d:d3:b4:c1:b7:e7:16:
b7:4b:cc:64:d1:44:08:e1:9d:1b:dc:b0:0c:52:a0:
83:46:83:f6:41:2e:04:16:36:1c:5a:f8:fc:aa:62:
5c:9c:de:95:6d:bf:96:6b:08:28:d5:c1:6c:38:93:
4c:38:fc:94:7c:c0:1a:59:64:53:bc:60:13:3f:b8:
92:fb:73:c1:30:81:46:6a:97:a0:2b:02:c2:8b:fc:
7b:fa:c7:e0:75:13:99:4c:5d:b4:59:6a:1e:97:1a:
76:97:c1:eb:2c:06:b4:29:c1:d9:df:c9:60:ff:a9:
f8:d4:8c:7a:f7:8c:c8:27:3c:46:c9:ec:8b:6e:87:
c2:9e:24:6c:bb:62:ae:b3:7e:28:56:e8:62:b8:d2:
fa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:09:1C:75:FD:5F:6D:5A:CC:80:5C:23:E4:66:8D:91:D6:3D:AD:EF
X509v3 Authority Key Identifier:
keyid:8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a8:4c:31:98:9b:36:6b:bb:c4:8a:86:3d:43:d8:a1:62:90:
ef:35:85:ac:e9:b3:8e:b4:eb:5f:1b:ed:e5:a5:bb:8b:d0:58:
c2:53:94:63:24:50:bc:8a:d5:50:07:20:48:83:a7:99:e7:00:
71:72:26:0e:53:6b:2a:1c:26:1e:d0:e4:d6:91:5f:8a:fd:dc:
7b:3d:7c:dc:69:e1:76:a1:14:d4:56:e0:52:e3:72:ff:b8:b1:
1b:0f:fb:84:84:2c:d5:83:e8:37:d8:e0:d4:43:df:6c:f2:c8:
6f:32:73:5e:38:c2:b6:20:2c:38:37:f6:da:1c:d5:01:4e:83:
a7:b4:ab:bf:1f:be:1b:7b:53:b5:48:9c:b5:bb:93:b3:18:e5:
81:f8:33:77:bb:9d:36:d7:a8:ae:cf:8e:b0:dd:8b:01:f7:61:
b6:b0:53:dc:0c:06:aa:7d:27:52:c8:e4:eb:36:7f:7b:ce:70:
d8:51:ad:b3:05:63:e8:9f:ec:8c:5f:bd:d8:08:ca:69:58:3a:
ef:6d:c3:02:f1:7e:06:c6:8b:5b:06:67:a6:31:32:f4:ee:52:
a8:bb:fa:ca:03:20:ff:2c:79:70:64:dd:3b:83:a6:76:16:f9:
6b:58:0f:e1:05:44:32:9c:75:d1:26:1a:44:68:96:b4:c7:74:
93:dd:1d:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagUePhjLCQ4DPulqjxErXSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNDIzZTFkNzJiMTAzMDcwYmVkNTc5YzQwNTk3ZWQyMGI4
NGMxNmUwHhcNMjUwNTA1MTIwMDQzWhcNMjUwNTA2MTIwMDQzWjAzMTEwLwYDVQQD
Eyg0ZDA5MWM3NWZkNWY2ZDVhY2M4MDVjMjNlNDY2OGQ5MWQ2M2RhZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4EmorbuMsNw+wnV3sFKoFyudFt5
IfDnaOLd7fidQWbqeXMtMXdPeJKGn1uEHn8Hq+FkrouqOHAjttAXUcJ0ysQD0Z0G
fvftPR+sh/a/IP4t1UibW9PM2MdxSS/I0NyjCuVACPqpVx9IuTbPtVPYQ33TtMG3
5xa3S8xk0UQI4Z0b3LAMUqCDRoP2QS4EFjYcWvj8qmJcnN6Vbb+Wawgo1cFsOJNM
OPyUfMAaWWRTvGATP7iS+3PBMIFGapegKwLCi/x7+sfgdROZTF20WWoelxp2l8Hr
LAa0KcHZ38lg/6n41Ix694zIJzxGyeyLbofCniRsu2Kus34oVuhiuNL6PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0JHHX9X21azIBcI+RmjZHWPa3vMB8GA1UdIwQY
MBaAFItCPh1ysQMHC+1XnEBZftILhMFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTBJLUhYS3hBd2NMN1ZlY1FGbC0wZ3VFd1c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC82NzU4YTAtM2JiMi00NzVlLWE5Yjgt
YjkwOWVkMjAyYjY0LzEvaTBJLUhYS3hBd2NMN1ZlY1FGbC0wZ3VFd1c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC82NzU4YTAtM2JiMi00NzVlLWE5YjgtYjkwOWVkMjAyYjY0
LzEvaTBJLUhYS3hBd2NMN1ZlY1FGbC0wZ3VFd1c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb6hMMZib
Nmu7xIqGPUPYoWKQ7zWFrOmzjrTrXxvt5aW7i9BYwlOUYyRQvIrVUAcgSIOnmecA
cXImDlNrKhwmHtDk1pFfiv3cez183GnhdqEU1FbgUuNy/7ixGw/7hIQs1YPoN9jg
1EPfbPLIbzJzXjjCtiAsODf22hzVAU6Dp7Srvx++G3tTtUictbuTsxjlgfgzd7ud
Nteors+OsN2LAfdhtrBT3AwGqn0nUsjk6zZ/e85w2FGtswVj6J/sjF+92AjKaVg6
723DAvF+BsaLWwZnpjEy9O5SqLv6ygMg/yx5cGTdO4Omdhb5a1gP4QVEMpx10SYa
RGiWtMd0k90dMA==
-----END CERTIFICATE-----
Generated at Mon May 5 15:43:55 2025 by rpki-client