Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
File: 564DMp48D3Pqg_tjfKIK7OFqjrQ.mft (raw, json)
Hash identifier: dm9hFHWOVlyX5Ldz8ExReh3FrIFfS7RJXPmm5cVCxEc=
Subject key identifier: 9C:08:F6:FA:00:2C:48:53:4B:44:3A:91:E4:33:4D:F2:88:21:92:97
Authority key identifier: E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4
Certificate issuer: /CN=e7ae03329e3c0f73ea83fb637ca20aece16a8eb4
Certificate serial: 0196BAED6BC463CA46E41EC2F034E933EED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 16:00:43 +0000
Manifest this update: Sat 10 May 2025 16:00:43 +0000
Manifest next update: Sun 11 May 2025 16:00:43 +0000
Files and hashes: 1: 564DMp48D3Pqg_tjfKIK7OFqjrQ.crl (hash: dIE85tkhsnlYFp+oUGhsd/5nhYb8Jcz8CAI5Mm8dPYY=)
2: Q15HcwZBg-b0xM3n5sFCeWUqPMU.roa (hash: FQv+IrKxJOgkLV5JEMBWkTPo0W/To8EL8sbfGOS1Pm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:6b:c4:63:ca:46:e4:1e:c2:f0:34:e9:33:ee:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7ae03329e3c0f73ea83fb637ca20aece16a8eb4
Validity
Not Before: May 10 16:00:43 2025 GMT
Not After : May 11 16:00:43 2025 GMT
Subject: CN=9c08f6fa002c48534b443a91e4334df288219297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f1:fb:3a:35:2f:c2:a1:1f:47:7b:75:f6:82:
49:9d:44:6e:00:2d:13:0b:cd:9c:89:ba:2c:79:71:
fc:63:b7:4d:57:b2:83:ca:81:68:c6:98:41:52:89:
58:fd:38:7d:37:0a:23:00:67:60:14:0d:b6:95:d6:
a9:bd:9a:20:d0:40:0e:f3:e4:0d:51:e8:5c:f4:fd:
5c:d6:f6:06:c0:5a:b8:70:ed:04:21:a1:e8:97:b3:
0e:79:36:57:e9:62:b1:ee:73:41:73:01:d8:92:80:
92:04:e7:1b:10:b0:87:45:9e:7b:51:71:d9:eb:52:
a6:f0:6f:b3:54:d5:3a:80:4c:2e:fc:11:6e:6c:e4:
ae:66:5a:ea:ce:79:0a:81:9d:9b:b2:ba:1a:9a:96:
dc:03:42:a9:1a:08:29:58:fd:9f:27:2c:b5:0e:04:
02:98:14:1d:ca:98:a1:b2:cf:ae:d1:ed:4a:65:8f:
1f:78:52:b9:23:66:f6:14:6b:a8:f3:fd:e1:4b:40:
cd:bb:0f:36:4b:33:26:1c:0e:c4:9f:6e:63:01:74:
dc:18:7e:d6:f3:5d:95:58:ee:7f:74:93:98:03:17:
7f:a7:bb:0a:6f:fb:89:41:6d:5c:1c:6a:88:fa:06:
25:ae:fe:66:de:11:08:61:c4:27:73:33:20:74:e0:
24:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:08:F6:FA:00:2C:48:53:4B:44:3A:91:E4:33:4D:F2:88:21:92:97
X509v3 Authority Key Identifier:
keyid:E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6e:a3:58:38:80:cf:ed:bb:ad:0b:b4:e7:1b:e0:a6:09:6d:
5e:65:0a:14:c2:aa:57:6a:b8:2d:a2:91:55:3e:33:b8:83:d0:
db:17:4a:fc:69:23:8e:ec:48:51:ce:5c:38:a2:ac:d0:88:2a:
8f:03:8c:44:94:1c:62:f2:ca:e2:39:32:df:4e:57:f3:20:94:
ed:c8:04:88:eb:49:92:17:34:23:a6:dc:fc:c9:19:77:ae:d0:
d5:7f:c2:f5:37:1a:26:33:42:4a:b2:5c:42:ad:9f:ae:8b:20:
2b:d5:8b:a6:9c:35:6e:e1:d5:03:d4:3d:38:90:cd:1c:b6:c5:
3f:ac:bb:76:46:35:f9:b6:da:e3:66:b4:75:64:d0:9e:bd:4c:
f5:b8:1f:03:f5:95:ab:8f:52:bb:83:bc:e8:34:c5:62:73:3d:
e4:3b:ca:8a:dd:fc:40:ad:ec:2a:3f:1c:c7:16:52:21:6d:2b:
5c:c7:a3:84:e2:11:6a:b9:58:bf:2e:f8:38:ee:11:3b:74:b1:
cf:46:25:8f:6d:d2:aa:21:5a:3b:4c:8f:28:7b:36:da:96:b2:
a0:cd:59:59:e7:56:e9:dd:c7:1b:31:06:8d:5a:d1:01:21:6e:
69:be:93:30:42:33:51:58:7d:dd:7f:2d:9e:9a:d4:eb:1c:f3:
8b:a4:42:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa67WvEY8pG5B7C8DTpM+7QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3YWUwMzMyOWUzYzBmNzNlYTgzZmI2MzdjYTIwYWVjZTE2
YThlYjQwHhcNMjUwNTEwMTYwMDQzWhcNMjUwNTExMTYwMDQzWjAzMTEwLwYDVQQD
Eyg5YzA4ZjZmYTAwMmM0ODUzNGI0NDNhOTFlNDMzNGRmMjg4MjE5Mjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPH7OjUvwqEfR3t19oJJnURuAC0T
C82ciboseXH8Y7dNV7KDyoFoxphBUolY/Th9NwojAGdgFA22ldapvZog0EAO8+QN
Uehc9P1c1vYGwFq4cO0EIaHol7MOeTZX6WKx7nNBcwHYkoCSBOcbELCHRZ57UXHZ
61Km8G+zVNU6gEwu/BFubOSuZlrqznkKgZ2bsroampbcA0KpGggpWP2fJyy1DgQC
mBQdypihss+u0e1KZY8feFK5I2b2FGuo8/3hS0DNuw82SzMmHA7En25jAXTcGH7W
812VWO5/dJOYAxd/p7sKb/uJQW1cHGqI+gYlrv5m3hEIYcQnczMgdOAkpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwI9voALEhTS0Q6keQzTfKIIZKXMB8GA1UdIwQY
MBaAFOeuAzKePA9z6oP7Y3yiCuzhao60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTY0RE1wNDhEM1BxZ190amZLSUs3T0ZxanJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80NzhhZWItZDk3Zi00N2I3LTgxYjAt
YTE3ZGFiNzAxYzQxLzEvNTY0RE1wNDhEM1BxZ190amZLSUs3T0ZxanJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My80NzhhZWItZDk3Zi00N2I3LTgxYjAtYTE3ZGFiNzAxYzQx
LzEvNTY0RE1wNDhEM1BxZ190amZLSUs3T0ZxanJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALW6jWDiA
z+27rQu05xvgpgltXmUKFMKqV2q4LaKRVT4zuIPQ2xdK/GkjjuxIUc5cOKKs0Igq
jwOMRJQcYvLK4jky305X8yCU7cgEiOtJkhc0I6bc/MkZd67Q1X/C9TcaJjNCSrJc
Qq2frosgK9WLppw1buHVA9Q9OJDNHLbFP6y7dkY1+bba42a0dWTQnr1M9bgfA/WV
q49Su4O86DTFYnM95DvKit38QK3sKj8cxxZSIW0rXMejhOIRarlYvy74OO4RO3Sx
z0Ylj23SqiFaO0yPKHs22payoM1ZWedW6d3HGzEGjVrRASFuab6TMEIzUVh93X8t
nprU6xzzi6RCDg==
-----END CERTIFICATE-----
Generated at Sun May 11 01:23:44 2025 by rpki-client