Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
File: _32KebrU-YPQxJiVr1DqigPrxw0.mft (raw, json)
Hash identifier: IMR8EAWV+0BNzc1baLr6gC/eDiQrBFftHPAYWJlE7BI=
Subject key identifier: C1:BD:5A:96:80:C1:0B:6C:B7:E9:64:15:42:63:DF:18:6F:26:7A:5A
Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
Certificate issuer: /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Certificate serial: 0196BE9323720E9BB364576880AAB65A8133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
Manifest number: 0BDE
Signing time: Sun 11 May 2025 09:00:35 +0000
Manifest this update: Sun 11 May 2025 09:00:35 +0000
Manifest next update: Mon 12 May 2025 09:00:35 +0000
Files and hashes: 1: 5XQsn3P_G3JsGnxxDNwlCAnpKoA.roa (hash: Fe5zRDY7jD+WRSzJ0H39dtDk1v9N5Zf6dRgDXos+lRE=)
2: 8LrCpJVZw00cB6v7Jxmu5danMVM.roa (hash: LkYRg4fRX+WYVMtQ+HSrUSifp72hGXmKbB4Mx1yLYEo=)
3: IDEflvuhIV83KNodcAdWAptJFNk.roa (hash: zpiVwHp2RqR56XaB25fCyR/sdSQ8zP/Sy5LNAYg81lo=)
4: _32KebrU-YPQxJiVr1DqigPrxw0.crl (hash: NafHzhgOjso2fjiLU8T/V2xjBx4ldqafQDJBBdPD22s=)
5: efPu30dPCju-4pIJ71jJgsdRacM.roa (hash: Gv4sp48MmAuu7ucXxDGtE47NMYnt8tPa86vOcXvxFhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:23:72:0e:9b:b3:64:57:68:80:aa:b6:5a:81:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Validity
Not Before: May 11 09:00:35 2025 GMT
Not After : May 12 09:00:35 2025 GMT
Subject: CN=c1bd5a9680c10b6cb7e964154263df186f267a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ba:db:6a:36:20:e7:c6:b8:f0:00:15:b5:eb:
48:63:6c:e8:92:18:04:2f:c3:bf:91:65:00:73:b8:
f1:c2:6f:9b:bc:1e:14:ef:46:b5:f9:db:88:1d:3f:
a4:3e:15:da:67:9e:80:dd:9e:2e:c2:1e:1d:d2:94:
a7:9f:6c:c5:6c:e0:1a:6c:15:2b:7c:ca:70:2f:81:
4b:ef:01:6b:6d:3d:b4:f9:e6:b3:4f:35:74:77:77:
58:5b:4e:3d:ab:bc:ad:0d:1f:4c:13:a2:92:65:3d:
fa:30:24:7a:f0:13:04:0c:a4:be:ce:98:04:8c:9a:
58:4f:33:77:a6:11:6e:2b:d2:9f:da:a9:53:e0:1c:
7e:df:e0:75:9e:d5:20:11:0a:fe:68:cf:74:07:04:
72:ab:d2:d9:36:7f:63:1d:74:b2:18:11:d1:17:28:
ea:cb:58:64:40:b9:62:df:49:e7:ca:74:8d:be:bb:
4d:00:d1:09:67:f0:0b:d4:61:23:ad:5c:a4:3b:48:
0b:a8:b3:62:7d:72:3f:de:52:02:57:89:f0:c6:69:
49:ec:cb:ac:ab:fb:88:3c:f4:8d:a6:8d:f5:2a:b2:
fc:82:66:ba:3b:eb:21:72:96:89:0f:6f:62:bb:a3:
4c:6c:9c:ff:bb:58:3b:ba:30:0e:dc:89:46:3c:d5:
2c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BD:5A:96:80:C1:0B:6C:B7:E9:64:15:42:63:DF:18:6F:26:7A:5A
X509v3 Authority Key Identifier:
keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c0:c6:58:b6:d2:4c:bd:dc:57:28:3a:1b:8c:4d:39:dd:d0:
2b:0f:88:70:f5:ad:ce:4b:0c:21:2c:37:aa:e2:55:e5:1d:cb:
22:d1:c3:88:e4:15:d5:b7:b7:a0:9c:77:7c:9d:ca:df:2c:8e:
9e:ae:58:2d:c0:97:5b:ca:b1:df:c4:ed:a7:87:32:c9:46:9f:
ee:8e:a2:01:9f:1e:65:01:02:04:52:92:43:21:b8:cd:67:a0:
92:18:98:aa:cf:e6:6d:87:d1:74:b2:78:8b:d9:27:f7:cc:33:
0c:9b:b4:51:3d:ca:ee:ee:84:cb:ca:74:9e:d1:15:bf:28:13:
8c:c9:5d:c6:c4:20:fb:55:5e:c4:85:b7:ea:0e:17:2f:6d:e0:
9a:97:85:55:91:62:d9:3a:a7:86:5f:8a:22:bc:6a:7f:82:0f:
33:01:1d:6e:6c:03:6b:b1:63:aa:21:b2:37:a7:01:b2:77:27:
da:a1:5b:9f:07:74:5d:62:d6:20:46:1d:74:4d:39:ff:8f:70:
55:8a:4b:64:79:24:6a:cf:6c:95:d0:39:da:46:2f:8b:00:29:
ab:68:59:4f:96:a8:4d:01:d0:da:69:78:fc:c6:27:16:2a:57:
54:7e:24:79:d9:81:8d:54:45:92:3c:48:f6:e9:f3:19:12:92:
a8:ab:36:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+kyNyDpuzZFdogKq2WoEzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmN2Q4YTc5YmFkNGY5ODNkMGM0OTg5NWFmNTBlYThhMDNl
YmM3MGQwHhcNMjUwNTExMDkwMDM1WhcNMjUwNTEyMDkwMDM1WjAzMTEwLwYDVQQD
EyhjMWJkNWE5NjgwYzEwYjZjYjdlOTY0MTU0MjYzZGYxODZmMjY3YTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37rbajYg58a48AAVtetIY2zokhgE
L8O/kWUAc7jxwm+bvB4U70a1+duIHT+kPhXaZ56A3Z4uwh4d0pSnn2zFbOAabBUr
fMpwL4FL7wFrbT20+eazTzV0d3dYW049q7ytDR9ME6KSZT36MCR68BMEDKS+zpgE
jJpYTzN3phFuK9Kf2qlT4Bx+3+B1ntUgEQr+aM90BwRyq9LZNn9jHXSyGBHRFyjq
y1hkQLli30nnynSNvrtNANEJZ/AL1GEjrVykO0gLqLNifXI/3lICV4nwxmlJ7Mus
q/uIPPSNpo31KrL8gma6O+shcpaJD29iu6NMbJz/u1g7ujAO3IlGPNUsYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMG9WpaAwQtst+lkFUJj3xhvJnpaMB8GA1UdIwQY
MBaAFP99inm61PmD0MSYla9Q6ooD68cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzMyS2ViclUtWVBReEppVnIxRHFpZ1ByeHcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80NDI0ZWYtNjhhYS00YjcwLWIyY2Mt
MDg3M2UzOTk0ZDBlLzEvXzMyS2ViclUtWVBReEppVnIxRHFpZ1ByeHcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi80NDI0ZWYtNjhhYS00YjcwLWIyY2MtMDg3M2UzOTk0ZDBl
LzEvXzMyS2ViclUtWVBReEppVnIxRHFpZ1ByeHcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlcDGWLbS
TL3cVyg6G4xNOd3QKw+IcPWtzksMISw3quJV5R3LItHDiOQV1be3oJx3fJ3K3yyO
nq5YLcCXW8qx38Ttp4cyyUaf7o6iAZ8eZQECBFKSQyG4zWegkhiYqs/mbYfRdLJ4
i9kn98wzDJu0UT3K7u6Ey8p0ntEVvygTjMldxsQg+1VexIW36g4XL23gmpeFVZFi
2Tqnhl+KIrxqf4IPMwEdbmwDa7FjqiGyN6cBsncn2qFbnwd0XWLWIEYddE05/49w
VYpLZHkkas9sldA52kYviwApq2hZT5aoTQHQ2ml4/MYnFipXVH4kedmBjVRFkjxI
9unzGRKSqKs2iw==
-----END CERTIFICATE-----
Generated at Sun May 11 12:27:03 2025 by rpki-client