Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
File: maykAWr4XVlpVITNYTzxiW39WaE.mft (raw, json)
Hash identifier: 1zAYG6SNv+iLDmOchl4xkB4p3cGfVgmWtJkSlvzCMRs=
Subject key identifier: 48:3C:C5:42:B0:E8:21:CE:87:3F:4A:6D:79:D2:3F:74:58:18:9F:E9
Authority key identifier: 99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
Certificate issuer: /CN=99aca4016af85d59695484cd613cf1896dfd59a1
Certificate serial: 0196B558E8E6E8900F6D91600B6879C23A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
Manifest number: 0344
Signing time: Fri 09 May 2025 14:00:24 +0000
Manifest this update: Fri 09 May 2025 14:00:24 +0000
Manifest next update: Sat 10 May 2025 14:00:24 +0000
Files and hashes: 1: ZpEam4JrA75W3vKeb-kb3n0W0y0.roa (hash: kYGb95Bh9aZOERP/x6nIdXNnyuRNyDQM9q/MQE4pooE=)
2: maykAWr4XVlpVITNYTzxiW39WaE.crl (hash: j5l8UkQCLsUPvi8Lxv1YK9g+wQvqUP6n2Ti0VpNPQsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:58:e8:e6:e8:90:0f:6d:91:60:0b:68:79:c2:3a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99aca4016af85d59695484cd613cf1896dfd59a1
Validity
Not Before: May 9 14:00:24 2025 GMT
Not After : May 10 14:00:24 2025 GMT
Subject: CN=483cc542b0e821ce873f4a6d79d23f7458189fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:95:30:64:9a:2b:d9:64:da:bf:ba:ce:8c:a1:
0f:66:c9:cb:76:33:3f:ef:7f:ce:a0:17:98:d4:dd:
01:1c:3c:b3:65:6e:7f:c0:2d:09:a3:e1:b1:0e:7f:
c0:d4:79:df:fb:42:88:da:e8:d8:88:c0:88:dd:e4:
6c:ce:d6:6a:2f:ab:ef:54:27:00:0a:25:38:5b:3b:
ad:c9:0c:a2:90:b9:eb:12:9b:77:32:4a:25:46:01:
68:aa:b6:4c:20:16:d9:25:65:ca:0f:c1:d4:8f:1f:
24:9f:10:a2:35:34:ca:d1:d1:8c:d0:e8:c4:d7:9b:
03:ef:79:e3:fd:33:51:73:fd:4e:8b:5b:fe:00:af:
8a:13:38:aa:2d:67:c4:14:7a:72:04:8f:40:98:8b:
64:09:d6:9a:e7:c0:5d:3b:50:e6:44:28:bd:00:86:
a1:50:7a:fb:0a:4b:12:18:39:65:97:b1:0e:3f:f0:
7a:5e:13:64:54:92:f4:34:32:16:06:cf:68:ef:41:
4f:8c:d4:32:54:b0:85:e5:73:44:e6:52:f7:58:09:
0d:2c:5a:8e:86:ad:5c:32:be:16:bd:97:f9:ff:f6:
7f:c4:a6:1b:cf:41:aa:c9:69:d6:be:a8:68:7c:7f:
af:2c:be:82:3b:25:5e:32:86:8b:84:56:fd:c2:40:
e8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3C:C5:42:B0:E8:21:CE:87:3F:4A:6D:79:D2:3F:74:58:18:9F:E9
X509v3 Authority Key Identifier:
keyid:99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d3:c1:1e:f4:6c:3e:9b:8a:54:c6:07:fd:a0:cb:ca:f7:97:
b3:c8:1c:4d:3a:cb:88:2b:12:eb:2f:e8:e0:3f:10:9f:03:e8:
e6:e4:92:13:f1:49:28:c6:e6:ee:a3:c2:eb:2e:3e:97:1c:29:
4a:56:10:52:d4:6e:d6:a0:5a:7f:2e:86:4e:46:1b:51:e3:e0:
ef:a6:7f:84:8f:80:1b:5d:a1:6a:fc:03:72:8c:3d:e2:31:f5:
1b:a1:96:24:e3:d3:7f:21:92:86:82:a8:2a:1f:5b:19:60:9f:
05:b0:f8:2a:34:3f:b8:f8:76:e0:94:7f:1c:37:63:79:0e:69:
69:f4:41:79:a4:d6:8b:84:8c:30:a4:dc:f9:af:79:8e:b6:b1:
b8:98:8c:85:d3:2e:85:83:fd:f6:be:1a:49:a6:e0:fe:de:f7:
c6:df:a9:12:3d:5e:7e:29:f3:b5:c3:79:e6:67:6b:d7:70:c1:
a4:97:18:26:22:9b:96:48:31:4b:cf:fc:72:45:32:eb:63:a4:
9c:8f:bc:5c:bb:cd:fe:c3:4e:ec:d5:f9:a1:65:bc:5f:b1:19:
0a:38:57:60:f1:cd:f2:8d:95:5d:c6:2a:df:76:74:af:ac:55:
be:8f:bd:ef:f8:cc:ae:9d:22:ac:b8:60:33:59:a5:d6:bc:df:
6b:0a:11:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa1WOjm6JAPbZFgC2h5wjpWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YWNhNDAxNmFmODVkNTk2OTU0ODRjZDYxM2NmMTg5NmRm
ZDU5YTEwHhcNMjUwNTA5MTQwMDI0WhcNMjUwNTEwMTQwMDI0WjAzMTEwLwYDVQQD
Eyg0ODNjYzU0MmIwZTgyMWNlODczZjRhNmQ3OWQyM2Y3NDU4MTg5ZmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5UwZJor2WTav7rOjKEPZsnLdjM/
73/OoBeY1N0BHDyzZW5/wC0Jo+GxDn/A1Hnf+0KI2ujYiMCI3eRsztZqL6vvVCcA
CiU4WzutyQyikLnrEpt3MkolRgFoqrZMIBbZJWXKD8HUjx8knxCiNTTK0dGM0OjE
15sD73nj/TNRc/1Oi1v+AK+KEziqLWfEFHpyBI9AmItkCdaa58BdO1DmRCi9AIah
UHr7CksSGDlll7EOP/B6XhNkVJL0NDIWBs9o70FPjNQyVLCF5XNE5lL3WAkNLFqO
hq1cMr4WvZf5//Z/xKYbz0GqyWnWvqhofH+vLL6COyVeMoaLhFb9wkDo5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEg8xUKw6CHOhz9KbXnSP3RYGJ/pMB8GA1UdIwQY
MBaAFJmspAFq+F1ZaVSEzWE88Ylt/VmhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWF5a0FXcjRYVmxwVklUTllUenhpVzM5V2FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lMGMxZDQtOGIzMy00MzYwLTlmNTAt
Y2JiYWM2ZTRhZDcxLzEvbWF5a0FXcjRYVmxwVklUTllUenhpVzM5V2FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9lMGMxZDQtOGIzMy00MzYwLTlmNTAtY2JiYWM2ZTRhZDcx
LzEvbWF5a0FXcjRYVmxwVklUTllUenhpVzM5V2FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNPBHvRs
PpuKVMYH/aDLyveXs8gcTTrLiCsS6y/o4D8QnwPo5uSSE/FJKMbm7qPC6y4+lxwp
SlYQUtRu1qBafy6GTkYbUePg76Z/hI+AG12havwDcow94jH1G6GWJOPTfyGShoKo
Kh9bGWCfBbD4KjQ/uPh24JR/HDdjeQ5pafRBeaTWi4SMMKTc+a95jraxuJiMhdMu
hYP99r4aSabg/t73xt+pEj1efinztcN55mdr13DBpJcYJiKblkgxS8/8ckUy62Ok
nI+8XLvN/sNO7NX5oWW8X7EZCjhXYPHN8o2VXcYq33Z0r6xVvo+97/jMrp0irLhg
M1ml1rzfawoRwA==
-----END CERTIFICATE-----
Generated at Fri May 9 23:53:11 2025 by rpki-client