Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File: v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier: 6j8IhT9+Z9XzrXSCzAsljmEwmQi/DxSSpdN5YDNfLjs=
Subject key identifier: 46:D7:ED:C4:BE:18:FA:FA:7B:FB:A4:97:FE:8B:07:0E:62:C3:7F:65
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial: 0196B823A3BCEA5EC36D4105709053C594C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number: 140A
Signing time: Sat 10 May 2025 03:01:05 +0000
Manifest this update: Sat 10 May 2025 03:01:05 +0000
Manifest next update: Sun 11 May 2025 03:01:05 +0000
Files and hashes: 1: V8R9NuBsBMtjM8dngpbvo3MJx5s.roa (hash: kncxVZkCgNT2UYYst35neieskR5Qm/mNu8V3+IA6Ku8=)
2: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: 9wsxm4ElUJSKn6uB70kkv4szYYGHQnb48y/tW2PbZ/4=)
3: yd8_f-atyxFNKtcv_cFVTfpnZt4.roa (hash: pN1o2J3yJeBV6MHLs3BSzPMoqupOmN0yj1atUVgcuyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:a3:bc:ea:5e:c3:6d:41:05:70:90:53:c5:94:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Validity
Not Before: May 10 03:01:05 2025 GMT
Not After : May 11 03:01:05 2025 GMT
Subject: CN=46d7edc4be18fafa7bfba497fe8b070e62c37f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:b8:21:3d:d5:ad:7a:27:ef:e3:ae:00:72:
ea:5f:1f:d6:4c:a7:99:db:cb:0a:13:ee:e7:3f:38:
1d:ec:e4:05:cb:86:fe:98:07:e1:e7:38:79:0b:17:
3c:9c:9f:14:54:d8:0a:31:84:96:4c:f7:fd:49:da:
fb:88:9f:1f:2f:b9:5e:53:bb:36:90:73:d8:2b:1e:
b2:6a:34:0b:ef:14:6d:c6:da:c8:0c:bc:11:6e:ea:
bc:2e:dc:b1:0c:f4:51:ff:76:bc:34:ac:94:70:65:
06:eb:b3:fb:9a:0d:da:0a:31:bc:2b:17:e8:44:b9:
62:81:c6:ea:f0:61:9f:47:cd:60:94:0d:0a:9d:58:
75:90:6b:c2:66:5c:20:73:0f:da:d6:27:a6:12:63:
5d:28:c7:ce:5a:e4:fa:a7:68:72:8d:43:66:88:6f:
89:f0:bb:53:9c:0a:ef:8d:24:11:d1:51:36:5c:0f:
5f:55:95:de:00:ba:75:6b:23:22:e5:6c:f2:b7:f8:
05:02:0b:7f:2e:23:e9:72:24:2b:fc:d8:97:53:f0:
d6:22:8c:48:fa:88:dc:e8:80:1a:97:b2:33:30:0c:
b8:e9:db:28:c0:ff:75:92:68:2f:8b:e3:69:ba:41:
73:06:84:0f:e0:af:cc:10:7c:57:4e:72:0b:d9:58:
c6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D7:ED:C4:BE:18:FA:FA:7B:FB:A4:97:FE:8B:07:0E:62:C3:7F:65
X509v3 Authority Key Identifier:
keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d6:29:87:a5:1e:2b:74:a6:ad:c6:fc:a8:59:12:0c:bf:c8:
84:32:71:b2:42:a0:80:c5:be:aa:60:d1:12:cc:a4:19:77:0d:
99:1d:d1:7f:a1:26:ab:60:76:67:fb:e6:c4:49:59:24:6a:8a:
4c:31:9c:39:55:0a:6e:e2:0a:6b:08:fc:80:73:d1:a7:42:f9:
7b:14:c5:52:db:1a:33:b7:eb:8c:7a:3e:7c:c4:e9:ad:cc:d5:
9b:d1:f3:29:ea:c5:f2:2b:10:a1:9a:b9:9a:bc:e3:be:08:c7:
ff:42:6e:5b:e1:63:32:1a:b0:93:cf:af:c4:e6:54:e9:a3:47:
58:54:8d:5a:01:ae:e7:84:35:8c:13:0e:43:cc:0e:d4:c1:3a:
a9:9b:9b:8a:29:08:90:7d:8c:d0:ec:44:3f:dd:b3:23:3e:5e:
fa:5b:5f:96:08:dd:12:ab:8a:47:cb:dd:cd:e6:3d:fc:f3:83:
63:e5:b2:35:3c:52:7b:63:7e:15:32:83:60:8a:d0:1d:68:06:
04:d3:b5:70:90:2d:bc:99:23:fd:53:2d:f9:b8:bc:7a:fb:68:
7e:ce:d9:f4:18:c3:74:16:83:93:f8:9a:d8:8e:3e:9b:25:7c:
d4:8e:c4:3f:c5:06:68:60:a1:f3:fd:13:ca:aa:8a:e9:d4:73:
7e:f4:73:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4I6O86l7DbUEFcJBTxZTHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNmMxZGY2NjIzNzRkNGFlY2QwYzhiM2Y4NDMxMmRmNDIx
MjU1OTkwHhcNMjUwNTEwMDMwMTA1WhcNMjUwNTExMDMwMTA1WjAzMTEwLwYDVQQD
Eyg0NmQ3ZWRjNGJlMThmYWZhN2JmYmE0OTdmZThiMDcwZTYyYzM3ZjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3S4IT3VrXon7+OuAHLqXx/WTKeZ
28sKE+7nPzgd7OQFy4b+mAfh5zh5Cxc8nJ8UVNgKMYSWTPf9Sdr7iJ8fL7leU7s2
kHPYKx6yajQL7xRtxtrIDLwRbuq8LtyxDPRR/3a8NKyUcGUG67P7mg3aCjG8Kxfo
RLligcbq8GGfR81glA0KnVh1kGvCZlwgcw/a1iemEmNdKMfOWuT6p2hyjUNmiG+J
8LtTnArvjSQR0VE2XA9fVZXeALp1ayMi5Wzyt/gFAgt/LiPpciQr/NiXU/DWIoxI
+ojc6IAal7IzMAy46dsowP91kmgvi+NpukFzBoQP4K/MEHxXTnIL2VjGAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbX7cS+GPr6e/ukl/6LBw5iw39lMB8GA1UdIwQY
MBaAFL9sHfZiN01K7NDIs/hDEt9CElWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZDIyMGItNWY3MC00OWMyLTljYzct
OTA4NDE5ZDM5NDAxLzEvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mZDIyMGItNWY3MC00OWMyLTljYzctOTA4NDE5ZDM5NDAx
LzEvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtYph6Ue
K3Smrcb8qFkSDL/IhDJxskKggMW+qmDREsykGXcNmR3Rf6Emq2B2Z/vmxElZJGqK
TDGcOVUKbuIKawj8gHPRp0L5exTFUtsaM7frjHo+fMTprczVm9HzKerF8isQoZq5
mrzjvgjH/0JuW+FjMhqwk8+vxOZU6aNHWFSNWgGu54Q1jBMOQ8wO1ME6qZubiikI
kH2M0OxEP92zIz5e+ltflgjdEquKR8vdzeY9/PODY+WyNTxSe2N+FTKDYIrQHWgG
BNO1cJAtvJkj/VMt+bi8evtofs7Z9BjDdBaDk/ia2I4+myV81I7EP8UGaGCh8/0T
yqqK6dRzfvRzhQ==
-----END CERTIFICATE-----
Generated at Sat May 10 10:14:27 2025 by rpki-client