Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
File: PyixvqC1iXcj6nxfu918zSlSsFw.mft (raw, json)
Hash identifier: ZgLOHGhR4kas8Y4f+OXCmZppDg7NIGMPrZXolaIX5HA=
Subject key identifier: 01:D4:03:DC:6F:EF:E8:82:4D:C7:1C:89:CB:E9:E3:F7:BF:E1:F9:4B
Authority key identifier: 3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
Certificate issuer: /CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Certificate serial: 0196CE063FE9A0DFF567A9B108EF406EDC6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
Manifest number: 0602
Signing time: Wed 14 May 2025 09:00:38 +0000
Manifest this update: Wed 14 May 2025 09:00:38 +0000
Manifest next update: Thu 15 May 2025 09:00:38 +0000
Files and hashes: 1: 1F_TkFNUb-s2_7y4TclItI2rQso.roa (hash: CLIjr10SKvI8VikQ8I8lxU5GeLh25bWphMtR56ykfWg=)
2: PyixvqC1iXcj6nxfu918zSlSsFw.crl (hash: vnkqjPYFlJoEbcAa37EmnLY5ua2DHf0aHHjZwPjyWY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:06:3f:e9:a0:df:f5:67:a9:b1:08:ef:40:6e:dc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Validity
Not Before: May 14 09:00:38 2025 GMT
Not After : May 15 09:00:38 2025 GMT
Subject: CN=01d403dc6fefe8824dc71c89cbe9e3f7bfe1f94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b9:35:ee:e5:f2:4d:de:8e:46:1a:e1:2a:02:
50:c8:19:79:ac:f4:1f:96:f0:db:c5:32:e8:ca:22:
d7:ec:e3:16:39:ef:d1:ae:d4:5b:d2:37:e1:2a:48:
f1:ba:1b:b7:df:98:99:05:40:c7:f7:61:00:e5:a4:
04:18:8a:5e:ec:77:26:57:62:d4:ca:e1:7b:77:ec:
4a:1a:0d:d4:69:34:a1:52:8e:7e:b9:2d:b7:3d:a3:
51:08:99:b9:84:7d:f7:93:d0:2a:77:f9:19:13:2e:
3a:b6:ae:e5:8d:b1:ea:34:b6:a7:32:6d:64:8e:15:
36:f5:99:1b:e4:e7:0f:74:eb:b4:98:06:56:d5:25:
7e:75:fd:6d:34:ad:57:4e:81:55:d6:a8:b3:51:40:
26:d7:32:54:5a:d6:1a:23:96:3c:64:b8:b3:c7:34:
97:1d:47:dc:01:c4:29:1a:05:2f:40:c3:df:72:d5:
0c:53:0d:27:24:6f:83:04:75:72:4c:62:69:0d:11:
d9:91:c9:79:71:55:fc:0a:3c:7d:49:53:b2:41:88:
ca:db:1c:32:cd:06:5e:96:b6:7a:d0:0b:61:61:38:
0f:0d:d9:38:e8:d2:6d:b6:8c:73:bf:bb:f0:fa:5a:
14:ad:0b:b1:48:e1:0c:97:4a:52:57:45:94:de:65:
fd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D4:03:DC:6F:EF:E8:82:4D:C7:1C:89:CB:E9:E3:F7:BF:E1:F9:4B
X509v3 Authority Key Identifier:
keyid:3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:df:58:48:b0:33:4a:a9:1f:27:94:78:2d:87:21:7e:71:53:
6e:11:75:97:2f:fb:35:0a:02:16:4b:69:df:f8:31:d5:26:95:
ab:9f:b6:16:1d:cc:6e:97:fd:75:05:00:f1:47:10:4d:5d:67:
50:7f:a3:6f:58:36:3a:c7:1e:c7:89:c0:3e:21:06:7e:01:01:
23:95:9a:ee:b7:45:4c:a6:29:b6:54:07:69:99:a7:54:ef:fd:
18:de:a6:5b:7e:bd:71:9a:af:0a:56:d2:e4:dd:c8:82:73:94:
72:db:53:9b:77:19:6e:f1:9b:b5:c6:cc:20:f9:83:45:a8:75:
a8:65:86:69:50:e5:78:68:96:9a:37:9a:4b:94:39:67:9b:62:
34:2e:a8:4d:40:24:ab:e4:f6:b9:84:31:4d:ee:4c:4f:f3:66:
d7:e8:91:ce:9a:d7:d8:54:5a:42:55:78:70:5b:60:33:69:99:
35:8f:08:ef:2c:82:0f:33:e5:2b:a7:a4:2c:08:c8:ad:21:24:
12:fb:26:e3:a1:11:2d:51:a7:fc:b2:de:d5:f7:26:2d:cd:97:
1e:1f:6a:4c:62:6a:da:d9:a8:70:b8:7b:dc:b1:7b:be:94:43:
11:c5:42:d0:d0:43:dc:c1:72:93:5f:ee:f4:1c:a5:97:a4:d0:
df:7f:6c:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbOBj/poN/1Z6mxCO9AbtxqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMjhiMWJlYTBiNTg5NzcyM2VhN2M1ZmJiZGQ3Y2NkMjk1
MmIwNWMwHhcNMjUwNTE0MDkwMDM4WhcNMjUwNTE1MDkwMDM4WjAzMTEwLwYDVQQD
EygwMWQ0MDNkYzZmZWZlODgyNGRjNzFjODljYmU5ZTNmN2JmZTFmOTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rk17uXyTd6ORhrhKgJQyBl5rPQf
lvDbxTLoyiLX7OMWOe/RrtRb0jfhKkjxuhu335iZBUDH92EA5aQEGIpe7HcmV2LU
yuF7d+xKGg3UaTShUo5+uS23PaNRCJm5hH33k9Aqd/kZEy46tq7ljbHqNLanMm1k
jhU29Zkb5OcPdOu0mAZW1SV+df1tNK1XToFV1qizUUAm1zJUWtYaI5Y8ZLizxzSX
HUfcAcQpGgUvQMPfctUMUw0nJG+DBHVyTGJpDRHZkcl5cVX8Cjx9SVOyQYjK2xwy
zQZelrZ60AthYTgPDdk46NJttoxzv7vw+loUrQuxSOEMl0pSV0WU3mX9EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHUA9xv7+iCTcccicvp4/e/4flLMB8GA1UdIwQY
MBaAFD8osb6gtYl3I+p8X7vdfM0pUrBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHlpeHZxQzFpWGNqNm54ZnU5MTh6U2xTc0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kODhiNDYtNmVmOS00NjI0LTg5ODQt
YmZhNmQzNDA3ODdhLzEvUHlpeHZxQzFpWGNqNm54ZnU5MTh6U2xTc0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9kODhiNDYtNmVmOS00NjI0LTg5ODQtYmZhNmQzNDA3ODdh
LzEvUHlpeHZxQzFpWGNqNm54ZnU5MTh6U2xTc0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc99YSLAz
SqkfJ5R4LYchfnFTbhF1ly/7NQoCFktp3/gx1SaVq5+2Fh3Mbpf9dQUA8UcQTV1n
UH+jb1g2Oscex4nAPiEGfgEBI5Wa7rdFTKYptlQHaZmnVO/9GN6mW369cZqvClbS
5N3IgnOUcttTm3cZbvGbtcbMIPmDRah1qGWGaVDleGiWmjeaS5Q5Z5tiNC6oTUAk
q+T2uYQxTe5MT/Nm1+iRzprX2FRaQlV4cFtgM2mZNY8I7yyCDzPlK6ekLAjIrSEk
Evsm46ERLVGn/LLe1fcmLc2XHh9qTGJq2tmocLh73LF7vpRDEcVC0NBD3MFyk1/u
9Byll6TQ339sTA==
-----END CERTIFICATE-----
Generated at Wed May 14 15:50:35 2025 by rpki-client