Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
File: _1ipjbd3y5FspWOX7D2HyYY2cxA.mft (raw, json)
Hash identifier: TJfdMuzBwsKW80mtu42dsxxZllu++87nAfJituksuaI=
Subject key identifier: 3C:54:31:A6:6F:4D:95:CB:63:EF:13:F6:0D:5D:5B:7A:04:F2:EF:90
Authority key identifier: FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10
Certificate issuer: /CN=ff58a98db777cb916ca56397ec3d87c986367310
Certificate serial: 0196A68AFC546F7F8E12F90EF4768FA08778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
Manifest number: 02AE
Signing time: Tue 06 May 2025 17:00:48 +0000
Manifest this update: Tue 06 May 2025 17:00:48 +0000
Manifest next update: Wed 07 May 2025 17:00:48 +0000
Files and hashes: 1: VM8iNIPAK1gceHYBC6UTJ0oubJk.roa (hash: mqZXcR34R810uEv+4/cBz9V4eZISHr2d9EqXL39avwo=)
2: _1ipjbd3y5FspWOX7D2HyYY2cxA.crl (hash: 4c29aU9CvDD/tUwQlugnuyAWtHPNFIuhACjSiOCqW1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:8a:fc:54:6f:7f:8e:12:f9:0e:f4:76:8f:a0:87:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff58a98db777cb916ca56397ec3d87c986367310
Validity
Not Before: May 6 17:00:48 2025 GMT
Not After : May 7 17:00:48 2025 GMT
Subject: CN=3c5431a66f4d95cb63ef13f60d5d5b7a04f2ef90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b5:f1:2d:35:43:f5:95:f1:9b:6a:85:ac:a3:
82:38:7e:a7:43:cf:37:62:fc:74:50:ee:da:b6:97:
26:fa:08:b3:21:95:7c:f1:9a:59:cb:2a:45:1a:0b:
ef:d0:6b:55:86:1e:b4:0c:b4:b1:8a:08:9c:66:52:
1a:10:a7:27:a3:d8:1a:f2:c0:ca:b4:d4:9f:b7:42:
ae:ec:f6:13:27:f4:06:87:35:47:c9:92:9e:29:98:
26:54:a2:1d:7c:b1:91:86:1f:03:a4:48:80:fb:86:
13:60:c8:7e:ea:ed:f1:66:35:25:00:6c:17:80:f5:
11:9c:b9:02:57:c5:f8:5e:c0:87:27:f2:55:0a:22:
b5:17:3a:67:16:c8:e5:01:c1:7f:c3:5c:ba:26:16:
bc:60:66:89:7c:b7:ef:e4:4d:e6:68:c5:c8:52:44:
1c:cd:00:7c:fd:2b:d9:20:84:7b:a2:82:b6:8d:38:
12:f7:6e:3e:f8:8b:60:3b:26:57:0c:51:10:8e:b0:
47:1b:c8:9f:e3:22:fd:09:1c:ed:b9:4a:ac:ca:0d:
65:5a:ba:1b:28:86:58:65:b1:40:10:a1:31:27:6f:
7d:a6:ca:71:72:a3:ae:7b:8f:71:18:80:b7:5c:92:
97:4e:2b:83:f8:0f:3f:42:7f:4c:e6:4e:fb:d0:a1:
68:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:54:31:A6:6F:4D:95:CB:63:EF:13:F6:0D:5D:5B:7A:04:F2:EF:90
X509v3 Authority Key Identifier:
keyid:FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:6c:89:b7:22:ae:f7:eb:e6:a9:66:dc:8f:46:6d:e4:23:a3:
d9:b1:ec:be:f3:22:38:92:71:bb:f8:ad:02:47:71:e1:31:27:
33:67:51:4f:cf:70:51:17:b3:70:4d:d9:68:51:9d:88:03:e1:
28:8f:08:6d:8b:fd:04:0a:77:b4:ee:a2:6a:4f:ad:e8:73:02:
91:00:1b:0b:18:89:68:5c:c0:02:1b:c3:33:45:8d:89:ca:6c:
5f:3f:28:6b:e7:9f:a7:05:19:0c:a7:fe:a8:c4:51:3a:3c:89:
30:58:d4:0c:24:e6:73:89:02:c6:d3:6d:0c:29:e8:01:e8:43:
dd:fe:0b:14:0d:1a:33:b7:76:8a:7b:dd:ef:b5:9f:9f:c1:1a:
6c:4f:9c:10:da:d4:68:6d:dc:5a:42:da:f3:9b:be:e3:c9:66:
ad:56:b5:5c:60:8a:68:45:19:62:83:c5:cb:86:67:23:00:3e:
79:19:8e:36:fa:73:dc:1b:df:c7:4f:fd:79:d6:25:c4:a0:b3:
4a:5d:58:74:dd:96:d3:ed:41:06:ae:1f:7a:07:6d:95:6a:d8:
e6:07:11:22:ec:0a:e2:19:32:40:08:18:0d:67:c8:44:82:3c:
46:ac:d8:e3:65:b5:bb:e7:2c:7c:4e:5a:15:e2:d7:17:0a:a9:
38:9b:47:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZamivxUb3+OEvkO9HaPoId4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNThhOThkYjc3N2NiOTE2Y2E1NjM5N2VjM2Q4N2M5ODYz
NjczMTAwHhcNMjUwNTA2MTcwMDQ4WhcNMjUwNTA3MTcwMDQ4WjAzMTEwLwYDVQQD
EygzYzU0MzFhNjZmNGQ5NWNiNjNlZjEzZjYwZDVkNWI3YTA0ZjJlZjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7XxLTVD9ZXxm2qFrKOCOH6nQ883
Yvx0UO7atpcm+gizIZV88ZpZyypFGgvv0GtVhh60DLSxigicZlIaEKcno9ga8sDK
tNSft0Ku7PYTJ/QGhzVHyZKeKZgmVKIdfLGRhh8DpEiA+4YTYMh+6u3xZjUlAGwX
gPURnLkCV8X4XsCHJ/JVCiK1FzpnFsjlAcF/w1y6Jha8YGaJfLfv5E3maMXIUkQc
zQB8/SvZIIR7ooK2jTgS924++ItgOyZXDFEQjrBHG8if4yL9CRztuUqsyg1lWrob
KIZYZbFAEKExJ299pspxcqOue49xGIC3XJKXTiuD+A8/Qn9M5k770KFobwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxUMaZvTZXLY+8T9g1dW3oE8u+QMB8GA1UdIwQY
MBaAFP9YqY23d8uRbKVjl+w9h8mGNnMQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzFpcGpiZDN5NUZzcFdPWDdEMkh5WVkyY3hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81MzA1YzgtYzZhOC00MGUzLWI0M2Ut
MmQ2ZWVmOTA1NjA3LzEvXzFpcGpiZDN5NUZzcFdPWDdEMkh5WVkyY3hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny81MzA1YzgtYzZhOC00MGUzLWI0M2UtMmQ2ZWVmOTA1NjA3
LzEvXzFpcGpiZDN5NUZzcFdPWDdEMkh5WVkyY3hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0GyJtyKu
9+vmqWbcj0Zt5COj2bHsvvMiOJJxu/itAkdx4TEnM2dRT89wURezcE3ZaFGdiAPh
KI8IbYv9BAp3tO6iak+t6HMCkQAbCxiJaFzAAhvDM0WNicpsXz8oa+efpwUZDKf+
qMRROjyJMFjUDCTmc4kCxtNtDCnoAehD3f4LFA0aM7d2invd77Wfn8EabE+cENrU
aG3cWkLa85u+48lmrVa1XGCKaEUZYoPFy4ZnIwA+eRmONvpz3Bvfx0/9edYlxKCz
Sl1YdN2W0+1BBq4fegdtlWrY5gcRIuwK4hkyQAgYDWfIRII8RqzY42W1u+csfE5a
FeLXFwqpOJtHeQ==
-----END CERTIFICATE-----
Generated at Tue May 6 20:34:44 2025 by rpki-client