Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
File: iH0wEZNRUA8lmlfi_2hQeX0bTho.mft (raw, json)
Hash identifier: Lp7fCMezavad7ZB4CeXI9hpIp45lHZ7KKZrzHHnog9o=
Subject key identifier: 60:8A:B8:6C:31:06:7D:4F:95:21:17:49:0B:20:C3:46:FD:06:4B:CD
Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
Certificate issuer: /CN=887d30119351500f259a57e2ff6850797d1b4e1a
Certificate serial: 0196C12624707F7F29CF266051C9AABF337D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 21:00:24 +0000
Manifest this update: Sun 11 May 2025 21:00:24 +0000
Manifest next update: Mon 12 May 2025 21:00:24 +0000
Files and hashes: 1: iH0wEZNRUA8lmlfi_2hQeX0bTho.crl (hash: aM5ZiJdJ2O0nyeOxOFd56LsVpfsiYCIjCKzI8rcw9qE=)
2: qABhsOLWjcCV2-NCnGtwC8QlYyU.roa (hash: md9z/89P3sn3nXo5h/larqHDUL4eXCPfvLewxfl/iTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:24:70:7f:7f:29:cf:26:60:51:c9:aa:bf:33:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a
Validity
Not Before: May 11 21:00:24 2025 GMT
Not After : May 12 21:00:24 2025 GMT
Subject: CN=608ab86c31067d4f952117490b20c346fd064bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:58:3d:da:43:91:51:30:30:40:2f:f4:64:7a:
04:58:2a:fb:0e:1c:96:11:d6:4b:78:20:0d:b5:30:
ad:e5:62:ee:e2:64:5d:a3:94:39:5c:1e:a3:1d:4d:
2b:cf:98:9a:e7:05:3f:37:80:a1:61:e2:a5:59:52:
eb:51:8f:4f:fb:da:c2:f4:4e:82:7c:f9:6c:0e:26:
ab:0a:92:53:14:e0:00:74:ad:c2:e7:fd:4b:c8:a9:
98:03:b4:47:f9:e9:c4:8a:06:fe:f6:81:a6:85:8f:
23:a8:e2:42:9d:2e:58:eb:dc:2c:50:be:23:b7:64:
10:87:58:25:dd:20:99:8f:95:a7:e9:bc:56:55:f6:
38:9f:e7:39:dd:f2:64:96:f5:b2:0a:87:f4:59:e2:
92:af:84:aa:ec:56:6f:c7:72:19:9c:af:5d:f0:3a:
10:9a:c2:21:65:45:1f:9a:21:56:d0:9c:99:28:98:
fd:aa:f2:4a:34:fc:94:39:a6:0d:98:df:71:8f:e6:
98:17:06:25:3f:48:ab:55:fc:7d:77:ab:d5:d6:82:
1a:ce:b6:9e:88:46:9a:ca:3a:fc:d6:d0:3b:23:38:
fc:5a:62:c7:e4:bb:c5:45:88:45:3d:9d:1b:88:d9:
e4:a4:eb:87:d1:7d:eb:4d:86:2e:eb:3b:f9:f3:4a:
30:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8A:B8:6C:31:06:7D:4F:95:21:17:49:0B:20:C3:46:FD:06:4B:CD
X509v3 Authority Key Identifier:
keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:36:55:5f:4e:15:e5:b1:a9:76:92:ab:05:e3:db:20:30:41:
3a:2e:9e:96:27:2c:ee:c2:ea:13:77:10:e3:9c:a8:63:e9:6d:
15:b4:c8:f1:7e:1f:83:77:bd:64:a7:b7:98:b8:c5:d8:79:e0:
7a:10:01:11:69:34:d0:d7:9c:f1:79:13:5b:d7:79:21:f1:29:
b0:fa:47:de:55:aa:93:1c:21:e3:93:f2:32:08:7a:b7:74:8a:
11:14:61:2e:49:31:09:50:51:f0:9d:ff:c8:0d:33:ba:37:fe:
d9:55:d5:e2:27:ec:6c:d9:71:4e:3a:a0:30:83:3d:73:17:aa:
da:0a:ba:7c:d6:d1:b3:fa:d2:34:7a:9f:bc:d9:14:94:04:44:
b3:e2:a3:f3:85:ca:25:bb:ee:ef:ed:bb:29:4d:29:3f:3c:05:
99:1a:b1:78:c3:ae:18:43:8d:88:13:91:88:a1:de:85:7c:7f:
41:b0:6f:b6:ba:22:89:a9:82:fb:98:f1:ef:9a:a5:e7:2d:c3:
ce:8e:a7:58:9e:bd:71:59:c1:d9:b7:28:c5:42:59:33:3b:eb:
ca:ca:2f:58:ad:93:4a:cb:b8:59:73:30:fa:31:71:cc:a0:7b:
15:1d:e6:df:7c:58:6d:79:e6:04:41:e2:73:31:8f:41:a3:bf:
bd:18:dc:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBJiRwf38pzyZgUcmqvzN9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4N2QzMDExOTM1MTUwMGYyNTlhNTdlMmZmNjg1MDc5N2Qx
YjRlMWEwHhcNMjUwNTExMjEwMDI0WhcNMjUwNTEyMjEwMDI0WjAzMTEwLwYDVQQD
Eyg2MDhhYjg2YzMxMDY3ZDRmOTUyMTE3NDkwYjIwYzM0NmZkMDY0YmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1g92kORUTAwQC/0ZHoEWCr7DhyW
EdZLeCANtTCt5WLu4mRdo5Q5XB6jHU0rz5ia5wU/N4ChYeKlWVLrUY9P+9rC9E6C
fPlsDiarCpJTFOAAdK3C5/1LyKmYA7RH+enEigb+9oGmhY8jqOJCnS5Y69wsUL4j
t2QQh1gl3SCZj5Wn6bxWVfY4n+c53fJklvWyCof0WeKSr4Sq7FZvx3IZnK9d8DoQ
msIhZUUfmiFW0JyZKJj9qvJKNPyUOaYNmN9xj+aYFwYlP0irVfx9d6vV1oIazrae
iEaayjr81tA7Izj8WmLH5LvFRYhFPZ0biNnkpOuH0X3rTYYu6zv580owQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCKuGwxBn1PlSEXSQsgw0b9BkvNMB8GA1UdIwQY
MBaAFIh9MBGTUVAPJZpX4v9oUHl9G04aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mZWJiMmUtZjBkYS00ZDc0LWI1NDct
Zjc0MDFiNGU0YjRhLzEvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9mZWJiMmUtZjBkYS00ZDc0LWI1NDctZjc0MDFiNGU0YjRh
LzEvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTZVX04V
5bGpdpKrBePbIDBBOi6elics7sLqE3cQ45yoY+ltFbTI8X4fg3e9ZKe3mLjF2Hng
ehABEWk00Nec8XkTW9d5IfEpsPpH3lWqkxwh45PyMgh6t3SKERRhLkkxCVBR8J3/
yA0zujf+2VXV4ifsbNlxTjqgMIM9cxeq2gq6fNbRs/rSNHqfvNkUlAREs+Kj84XK
Jbvu7+27KU0pPzwFmRqxeMOuGEONiBORiKHehXx/QbBvtroiiamC+5jx75ql5y3D
zo6nWJ69cVnB2bcoxUJZMzvrysovWK2TSsu4WXMw+jFxzKB7FR3m33xYbXnmBEHi
czGPQaO/vRjcFA==
-----END CERTIFICATE-----
Generated at Mon May 12 06:46:37 2025 by rpki-client