Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
File: 23uiovC_o6dvXJkaR82YaMbR674.mft (raw, json)
Hash identifier: KZVe0y555GvG6Zl6W0LK9ye/MM1TW1qL1zw+p4M+Bo4=
Subject key identifier: 78:29:5B:E0:FA:60:EE:CB:AF:D3:55:70:58:EF:83:89:44:B2:A1:D9
Authority key identifier: DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
Certificate issuer: /CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Certificate serial: 0196B89168857A585C1AE092A5F2FC53BC27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
Manifest number: 11E3
Signing time: Sat 10 May 2025 05:00:59 +0000
Manifest this update: Sat 10 May 2025 05:00:59 +0000
Manifest next update: Sun 11 May 2025 05:00:59 +0000
Files and hashes: 1: 23uiovC_o6dvXJkaR82YaMbR674.crl (hash: kd6JJpYBla9X5GSsZzQd+LAKCcK07ooBZxz4P7xRljE=)
2: J8hzJTM2uz7yXJSlk16QOqdb0iI.roa (hash: sPVr5eHmre5tC1ZjjWRY6ekKAEsqs3UiVYcFX3QHcj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:68:85:7a:58:5c:1a:e0:92:a5:f2:fc:53:bc:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Validity
Not Before: May 10 05:00:59 2025 GMT
Not After : May 11 05:00:59 2025 GMT
Subject: CN=78295be0fa60eecbafd3557058ef838944b2a1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:19:4f:35:46:fd:0c:90:61:49:2e:80:34:c9:
7a:72:96:32:07:82:a3:a5:0f:d2:39:06:27:d8:8b:
da:85:9a:c0:70:bf:27:e6:31:d6:f9:3f:c6:78:18:
75:e1:ce:2c:e8:63:5e:36:4d:c9:08:01:6a:b9:ad:
a9:ac:08:1d:60:80:dd:db:0d:d7:d8:c6:fd:75:a9:
0f:77:d5:60:82:99:bc:d0:f6:75:a8:28:45:20:41:
50:c4:d5:65:2c:22:7e:07:d8:0c:07:9c:30:91:75:
d3:d5:15:8b:c8:66:38:62:b0:39:fd:03:33:1e:17:
c7:78:70:5c:db:56:ca:48:c5:43:2f:c0:17:43:8d:
22:84:ff:00:44:d6:34:27:9f:53:74:c4:59:84:3a:
de:0d:95:f8:c1:a1:18:d0:1a:8c:1d:6f:87:14:a6:
57:50:72:b3:d1:25:10:3d:e4:c3:b8:a4:1f:62:8d:
75:06:b0:4c:9f:6e:4b:76:95:8e:77:63:28:bf:3e:
6c:5f:2d:b8:3c:8b:54:08:37:f7:78:51:2c:d4:04:
b6:3b:ca:63:a7:3f:c6:16:d3:7c:a7:e6:11:b5:0d:
f8:86:97:8c:85:33:03:a0:f2:b7:20:87:63:c4:17:
3a:88:3e:4a:7d:d4:81:55:0c:3c:6e:58:5e:c5:78:
a9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:29:5B:E0:FA:60:EE:CB:AF:D3:55:70:58:EF:83:89:44:B2:A1:D9
X509v3 Authority Key Identifier:
keyid:DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:20:77:e0:a5:bb:6c:2d:64:55:4e:62:85:66:fe:e3:f7:96:
e8:67:9b:f4:4f:bb:2b:5a:2e:ae:95:5d:cf:29:60:ec:2d:8f:
3c:82:c4:1c:8d:55:1c:6b:d4:7f:72:b4:01:95:4a:90:75:a8:
0c:70:66:80:8c:67:55:5e:40:35:4f:9a:9f:31:a8:99:d5:72:
32:87:7e:8d:b0:ab:60:96:61:5f:bf:ad:8e:61:a4:c7:19:d9:
3b:e3:b8:0e:96:b4:04:2a:e4:08:4e:75:a4:da:de:d6:cd:f1:
4d:f3:8f:45:e7:83:33:a5:cc:32:4e:62:7b:99:52:50:b3:cf:
9d:17:7d:14:a4:cf:e2:f4:e3:7e:96:0d:29:63:a7:45:d2:b9:
05:dd:30:21:54:54:00:35:52:63:61:22:35:48:fc:cc:87:45:
4b:4c:8c:22:90:c3:1a:ac:1a:e7:e5:e3:7c:af:d4:9a:ed:f3:
ad:fb:5d:7c:c3:f9:4b:0b:b6:92:d8:92:cc:46:a1:f4:b2:3c:
06:71:d1:f8:26:96:e2:ce:94:a7:be:7c:13:9d:da:31:4a:97:
2f:5d:f6:db:fa:18:7a:aa:65:a3:53:3e:0c:b1:bb:b6:cd:ef:
40:83:0f:94:2b:ad:29:53:77:5e:a7:0c:ff:54:e7:84:75:27:
44:90:95:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4kWiFelhcGuCSpfL8U7wnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiN2JhMmEyZjBiZmEzYTc2ZjVjOTkxYTQ3Y2Q5ODY4YzZk
MWViYmUwHhcNMjUwNTEwMDUwMDU5WhcNMjUwNTExMDUwMDU5WjAzMTEwLwYDVQQD
Eyg3ODI5NWJlMGZhNjBlZWNiYWZkMzU1NzA1OGVmODM4OTQ0YjJhMWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xlPNUb9DJBhSS6ANMl6cpYyB4Kj
pQ/SOQYn2IvahZrAcL8n5jHW+T/GeBh14c4s6GNeNk3JCAFqua2prAgdYIDd2w3X
2Mb9dakPd9Vggpm80PZ1qChFIEFQxNVlLCJ+B9gMB5wwkXXT1RWLyGY4YrA5/QMz
HhfHeHBc21bKSMVDL8AXQ40ihP8ARNY0J59TdMRZhDreDZX4waEY0BqMHW+HFKZX
UHKz0SUQPeTDuKQfYo11BrBMn25LdpWOd2Movz5sXy24PItUCDf3eFEs1AS2O8pj
pz/GFtN8p+YRtQ34hpeMhTMDoPK3IIdjxBc6iD5KfdSBVQw8blhexXipSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgpW+D6YO7Lr9NVcFjvg4lEsqHZMB8GA1UdIwQY
MBaAFNt7oqLwv6Onb1yZGkfNmGjG0eu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82MTdhOWYtM2ZiMi00Y2JiLTk5ZmEt
ZjIyZWI2NWZjYzcyLzEvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC82MTdhOWYtM2ZiMi00Y2JiLTk5ZmEtZjIyZWI2NWZjYzcy
LzEvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbSB34KW7
bC1kVU5ihWb+4/eW6Geb9E+7K1ourpVdzylg7C2PPILEHI1VHGvUf3K0AZVKkHWo
DHBmgIxnVV5ANU+anzGomdVyMod+jbCrYJZhX7+tjmGkxxnZO+O4Dpa0BCrkCE51
pNre1s3xTfOPReeDM6XMMk5ie5lSULPPnRd9FKTP4vTjfpYNKWOnRdK5Bd0wIVRU
ADVSY2EiNUj8zIdFS0yMIpDDGqwa5+XjfK/Umu3zrftdfMP5Swu2ktiSzEah9LI8
BnHR+CaW4s6Up758E53aMUqXL1322/oYeqplo1M+DLG7ts3vQIMPlCutKVN3XqcM
/1TnhHUnRJCV4A==
-----END CERTIFICATE-----
Generated at Sat May 10 14:52:13 2025 by rpki-client