Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
File: pPhiddwhxh2gzs0Sfpd0zKoysLs.mft (raw, json)
Hash identifier: wlRDfGcJRbvpqm0+tjHVhearPAFXEKR0h/ifHI6y/WM=
Subject key identifier: 75:EC:EC:13:B0:37:76:95:95:AF:04:11:D1:D5:EF:73:AD:43:13:7D
Authority key identifier: A4:F8:62:75:DC:21:C6:1D:A0:CE:CD:12:7E:97:74:CC:AA:32:B0:BB
Certificate issuer: /CN=a4f86275dc21c61da0cecd127e9774ccaa32b0bb
Certificate serial: 0196CD2A32A604C169CAF05A7A14DE439A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
Manifest number: 153D
Signing time: Wed 14 May 2025 05:00:16 +0000
Manifest this update: Wed 14 May 2025 05:00:16 +0000
Manifest next update: Thu 15 May 2025 05:00:16 +0000
Files and hashes: 1: a0SjSsK93R47m4eRP1Kso9k59CQ.roa (hash: 4DqaXQky67MktM88+QkXZEvBSJRKln9MtvLpFVmXjJ0=)
2: pPhiddwhxh2gzs0Sfpd0zKoysLs.crl (hash: lJqqoubRkkqKIIpao6mR7k+HampIQwI0aFmvoM7caHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:2a:32:a6:04:c1:69:ca:f0:5a:7a:14:de:43:9a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f86275dc21c61da0cecd127e9774ccaa32b0bb
Validity
Not Before: May 14 05:00:16 2025 GMT
Not After : May 15 05:00:16 2025 GMT
Subject: CN=75ecec13b037769595af0411d1d5ef73ad43137d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:6f:9d:a8:5a:88:08:79:11:57:d2:da:b4:
b7:ba:dd:ba:ac:d5:ad:0a:30:20:ec:63:57:cb:8e:
a5:25:5c:df:8e:96:11:45:89:66:c0:0a:7f:0c:8d:
34:63:60:1c:ae:f4:75:81:8b:0e:62:3a:93:be:ae:
a6:a2:21:2e:70:ce:b8:6f:6e:f6:24:a3:b4:38:d2:
f4:5f:02:b9:6c:b3:64:08:74:bf:28:41:0d:13:de:
c2:b5:95:c4:a9:ba:9f:b8:05:5e:6f:bb:7c:70:94:
1f:72:ae:ec:ca:88:07:18:11:d8:3d:16:34:82:9b:
9e:c1:06:ad:68:27:7d:55:1f:fd:18:59:f0:c6:0a:
95:a0:ec:e0:e4:bd:d1:a4:85:12:a2:a3:b5:2b:48:
72:26:8a:4f:26:e9:2f:84:f2:ea:9f:c9:bc:5c:30:
ac:1b:7b:d8:40:4f:b4:10:97:5b:b1:71:0a:e5:7c:
af:d2:6a:15:84:7f:65:33:a7:5a:9c:9f:56:e2:14:
f4:05:00:40:f0:6f:14:12:29:6a:f9:d7:eb:98:a1:
17:31:2b:7a:45:e7:10:5a:4d:e9:34:f1:0d:09:18:
35:52:ea:9e:22:63:22:51:c6:7d:a0:53:51:65:28:
4c:ae:4c:0d:3b:02:15:10:a9:cc:df:67:20:d9:0f:
65:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EC:EC:13:B0:37:76:95:95:AF:04:11:D1:D5:EF:73:AD:43:13:7D
X509v3 Authority Key Identifier:
keyid:A4:F8:62:75:DC:21:C6:1D:A0:CE:CD:12:7E:97:74:CC:AA:32:B0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:48:b9:f4:c9:8e:fe:cf:71:0a:11:b2:23:04:d8:1b:04:16:
3c:4f:bd:93:27:ef:1b:7e:f8:fa:7a:6f:0f:4f:28:f0:4e:fc:
9f:4b:31:98:e8:04:7f:44:e2:fe:89:84:c6:87:6e:ec:77:c9:
2c:31:8c:2c:39:1b:93:15:48:d9:53:4b:4c:59:b2:00:9b:e5:
f5:28:08:03:80:a3:e4:f9:9c:da:69:8a:b0:8a:32:96:c4:04:
8e:b9:c8:1b:4c:45:ed:b9:7d:08:d9:73:6a:6f:cc:72:a1:54:
13:ea:42:b2:f7:05:17:ee:7d:b7:e1:6d:d1:6e:44:2e:7f:9a:
8c:3b:1b:0e:86:d1:e8:be:87:c9:d8:b7:91:88:1f:7c:db:12:
1e:4d:78:89:65:b3:61:e4:5b:64:76:06:43:dd:ba:dc:6d:2c:
3a:33:e6:41:54:9b:47:d4:94:a3:ab:d0:ae:d5:f1:05:40:94:
21:14:19:8e:92:73:f4:3d:72:e6:27:37:71:7b:4b:b7:01:a1:
cf:72:95:f2:67:81:9f:a4:13:18:73:e1:15:2b:24:0d:98:52:
4b:08:72:37:13:a6:aa:d2:97:23:e5:6d:f3:06:85:f5:42:e1:
6e:9f:de:a8:4b:be:f5:69:fc:c5:49:54:12:9d:70:28:6b:28:
02:15:ff:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbNKjKmBMFpyvBaehTeQ5owMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0Zjg2Mjc1ZGMyMWM2MWRhMGNlY2QxMjdlOTc3NGNjYWEz
MmIwYmIwHhcNMjUwNTE0MDUwMDE2WhcNMjUwNTE1MDUwMDE2WjAzMTEwLwYDVQQD
Eyg3NWVjZWMxM2IwMzc3Njk1OTVhZjA0MTFkMWQ1ZWY3M2FkNDMxMzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg9vnahaiAh5EVfS2rS3ut26rNWt
CjAg7GNXy46lJVzfjpYRRYlmwAp/DI00Y2AcrvR1gYsOYjqTvq6moiEucM64b272
JKO0ONL0XwK5bLNkCHS/KEENE97CtZXEqbqfuAVeb7t8cJQfcq7syogHGBHYPRY0
gpuewQataCd9VR/9GFnwxgqVoOzg5L3RpIUSoqO1K0hyJopPJukvhPLqn8m8XDCs
G3vYQE+0EJdbsXEK5Xyv0moVhH9lM6danJ9W4hT0BQBA8G8UEilq+dfrmKEXMSt6
RecQWk3pNPENCRg1UuqeImMiUcZ9oFNRZShMrkwNOwIVEKnM32cg2Q9lyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXs7BOwN3aVla8EEdHV73OtQxN9MB8GA1UdIwQY
MBaAFKT4YnXcIcYdoM7NEn6XdMyqMrC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBoaWRkd2h4aDJnenMwU2ZwZDB6S295c0xzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YThiZjItNmNiMy00OWFlLTllMzIt
ODgyOWVlNjYxYzY0LzEvcFBoaWRkd2h4aDJnenMwU2ZwZDB6S295c0xzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83YThiZjItNmNiMy00OWFlLTllMzItODgyOWVlNjYxYzY0
LzEvcFBoaWRkd2h4aDJnenMwU2ZwZDB6S295c0xzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeEi59MmO
/s9xChGyIwTYGwQWPE+9kyfvG374+npvD08o8E78n0sxmOgEf0Ti/omExodu7HfJ
LDGMLDkbkxVI2VNLTFmyAJvl9SgIA4Cj5Pmc2mmKsIoylsQEjrnIG0xF7bl9CNlz
am/McqFUE+pCsvcFF+59t+Ft0W5ELn+ajDsbDobR6L6Hydi3kYgffNsSHk14iWWz
YeRbZHYGQ9263G0sOjPmQVSbR9SUo6vQrtXxBUCUIRQZjpJz9D1y5ic3cXtLtwGh
z3KV8meBn6QTGHPhFSskDZhSSwhyNxOmqtKXI+Vt8waF9ULhbp/eqEu+9Wn8xUlU
Ep1wKGsoAhX/OA==
-----END CERTIFICATE-----
Generated at Wed May 14 10:47:22 2025 by rpki-client