Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
File: 458aboTAJ378tW2UKw615FZHESk.mft (raw, json)
Hash identifier: xPfDMUq0pdkc/tnL8X1UgZNci0Ih5MxmO75BwONAlX0=
Subject key identifier: D1:69:DE:8F:C6:2B:98:82:4D:C9:A3:67:FB:63:61:59:67:2C:BE:6A
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 0196BDEE397BCFC3A806D06C77E5F991F5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
Manifest number: 153B
Signing time: Sun 11 May 2025 06:00:28 +0000
Manifest this update: Sun 11 May 2025 06:00:28 +0000
Manifest next update: Mon 12 May 2025 06:00:28 +0000
Files and hashes: 1: 00-pDRnkJ28HOY9PiW3UHtRlnaA.roa (hash: ajRA1r/wZbCFV5DRURYHBboFEqfVmi4nUu+o5RsVv7I=)
2: 458aboTAJ378tW2UKw615FZHESk.crl (hash: ws1kxX7kSXBBRBLXVgDpAgwIAShoYlaaZvv7PtvjPeE=)
3: h0icjzgutWd6lA-1BOIfw-Gwjqg.roa (hash: S1MAwDWcpRVxYAC6r+etNs1goxhniGxwWQ8E6EEXeo8=)
4: w1G2WgRwg5TMv1o-ctrHxpnkGg8.roa (hash: agU6Qqy0fnivl3H4SG64+Hxp9Tp7KmPmlQXRx4PQep0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:39:7b:cf:c3:a8:06:d0:6c:77:e5:f9:91:f5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: May 11 06:00:28 2025 GMT
Not After : May 12 06:00:28 2025 GMT
Subject: CN=d169de8fc62b98824dc9a367fb636159672cbe6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:53:a2:11:e9:23:c3:60:99:d8:bd:83:ca:
d4:1b:82:2b:ba:b2:09:74:99:db:e4:99:0b:5d:b5:
de:a6:f2:6d:ff:07:14:5d:7d:e5:b4:21:39:0c:3b:
43:42:11:82:93:81:62:76:de:2d:93:d0:65:9c:10:
1e:d9:a5:72:ca:22:d2:dc:2e:bc:fa:fd:98:d4:88:
0a:da:b8:92:3e:90:9a:82:1d:86:21:ba:94:f4:4d:
0d:fc:fd:2e:e9:d6:ef:da:c2:10:a0:91:94:7c:bc:
39:61:00:76:86:1e:7a:f1:5c:e6:89:df:ed:5e:78:
19:2a:ac:b1:74:0c:fb:5f:c1:5e:5c:77:60:68:a4:
61:34:2e:0b:86:68:7e:cc:31:de:4a:36:dd:a5:ae:
29:9a:55:40:b4:5d:32:b0:fe:b5:d7:1a:6d:0b:11:
5a:88:35:a9:72:b3:cb:9a:9d:b2:ef:dc:fb:c1:a2:
3e:a3:a1:c6:28:cf:86:96:26:e0:c0:0f:cd:9f:a8:
7f:06:48:31:96:2e:90:ca:ef:f6:ae:9b:f6:48:84:
96:48:a8:b6:de:8d:ee:f0:75:d9:ee:98:c0:db:27:
f2:ee:3e:07:16:21:b9:39:67:90:67:5d:a7:60:d2:
b6:79:ba:0e:9f:3a:52:fc:9d:e9:1d:b0:2c:1e:6c:
05:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:69:DE:8F:C6:2B:98:82:4D:C9:A3:67:FB:63:61:59:67:2C:BE:6A
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3e:78:8d:11:3a:0e:20:1f:b1:cd:a1:7f:2d:12:d2:c2:22:
22:96:04:a7:b7:a8:aa:0b:bd:18:21:b2:7a:74:3f:f1:ee:81:
70:ef:10:5d:8c:32:bd:d3:cc:a7:72:2d:2b:2b:02:31:ea:33:
a3:84:9c:d4:11:8c:cb:3e:ee:89:4d:02:f6:75:01:da:76:c4:
ab:46:19:80:09:87:7b:c6:c6:2a:94:54:24:4a:a1:70:2c:fb:
de:38:93:45:a3:61:2d:ce:98:df:47:cb:3f:73:7b:e9:a4:0f:
ee:8c:be:95:a6:57:99:fc:60:43:76:ce:e8:84:81:a8:14:de:
0b:0a:07:61:df:e2:46:79:8a:46:ef:7f:3e:7c:f1:5e:cf:9e:
67:17:ff:6a:5d:0d:52:50:18:37:78:e5:a1:05:9b:a8:43:2f:
ae:2c:3e:e6:73:7d:59:e7:f8:f0:e8:29:b3:1b:82:4e:bf:73:
db:db:76:e2:ce:e9:bf:bf:0d:65:6e:4d:ef:e6:9f:b5:53:39:
82:bd:4f:44:15:02:67:a5:c9:38:13:cd:f3:ae:68:c0:86:7f:
28:af:87:ca:8c:0b:35:27:39:32:5d:20:38:62:9c:43:3b:2b:
3b:1e:11:25:10:79:8c:82:26:16:98:4d:1f:5e:d3:b1:fa:6a:
f9:5f:eb:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa97jl7z8OoBtBsd+X5kfW5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOWYxYTZlODRjMDI3N2VmY2I1NmQ5NDJiMGViNWU0NTY0
NzExMjkwHhcNMjUwNTExMDYwMDI4WhcNMjUwNTEyMDYwMDI4WjAzMTEwLwYDVQQD
EyhkMTY5ZGU4ZmM2MmI5ODgyNGRjOWEzNjdmYjYzNjE1OTY3MmNiZTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFpTohHpI8Ngmdi9g8rUG4IrurIJ
dJnb5JkLXbXepvJt/wcUXX3ltCE5DDtDQhGCk4Fidt4tk9BlnBAe2aVyyiLS3C68
+v2Y1IgK2riSPpCagh2GIbqU9E0N/P0u6dbv2sIQoJGUfLw5YQB2hh568Vzmid/t
XngZKqyxdAz7X8FeXHdgaKRhNC4Lhmh+zDHeSjbdpa4pmlVAtF0ysP611xptCxFa
iDWpcrPLmp2y79z7waI+o6HGKM+GlibgwA/Nn6h/Bkgxli6Qyu/2rpv2SISWSKi2
3o3u8HXZ7pjA2yfy7j4HFiG5OWeQZ12nYNK2eboOnzpS/J3pHbAsHmwF5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFp3o/GK5iCTcmjZ/tjYVlnLL5qMB8GA1UdIwQY
MBaAFOOfGm6EwCd+/LVtlCsOteRWRxEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xNjBhNzctNzU2ZC00NDFhLTg2YzMt
MGU1MzkyNzU3ZjgyLzEvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8xNjBhNzctNzU2ZC00NDFhLTg2YzMtMGU1MzkyNzU3Zjgy
LzEvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmD54jRE6
DiAfsc2hfy0S0sIiIpYEp7eoqgu9GCGyenQ/8e6BcO8QXYwyvdPMp3ItKysCMeoz
o4Sc1BGMyz7uiU0C9nUB2nbEq0YZgAmHe8bGKpRUJEqhcCz73jiTRaNhLc6Y30fL
P3N76aQP7oy+laZXmfxgQ3bO6ISBqBTeCwoHYd/iRnmKRu9/PnzxXs+eZxf/al0N
UlAYN3jloQWbqEMvriw+5nN9Wef48OgpsxuCTr9z29t24s7pv78NZW5N7+aftVM5
gr1PRBUCZ6XJOBPN865owIZ/KK+HyowLNSc5Ml0gOGKcQzsrOx4RJRB5jIImFphN
H17Tsfpq+V/rnQ==
-----END CERTIFICATE-----
Generated at Sun May 11 10:34:27 2025 by rpki-client