Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
File: pNyKTpFqo_eO94BHrCDQ0PipUPk.mft (raw, json)
Hash identifier: IyjO6/6V/mtqma9QPRtZkSflRNF3XCzA54PwAZMwtDI=
Subject key identifier: 86:B2:EB:68:FF:BE:2F:E1:3B:E6:F1:85:27:8D:87:F5:8C:E6:E8:E4
Authority key identifier: A4:DC:8A:4E:91:6A:A3:F7:8E:F7:80:47:AC:20:D0:D0:F8:A9:50:F9
Certificate issuer: /CN=a4dc8a4e916aa3f78ef78047ac20d0d0f8a950f9
Certificate serial: 0196AFFC41A25AD1E76800F2E9EDDFDA2365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
Manifest number: 0BA8
Signing time: Thu 08 May 2025 13:01:06 +0000
Manifest this update: Thu 08 May 2025 13:01:06 +0000
Manifest next update: Fri 09 May 2025 13:01:06 +0000
Files and hashes: 1: UTvK6gSJU03H7EOW3gSzFazwB7M.roa (hash: fFNxwITyp66ny+cQJs93d3VRTa/z6HUTvmCKvoybY9I=)
2: pNyKTpFqo_eO94BHrCDQ0PipUPk.crl (hash: /Zstn69/TKh5suKgQd8YrB2FzovYGc12AhxQqfH3Dgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fc:41:a2:5a:d1:e7:68:00:f2:e9:ed:df:da:23:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4dc8a4e916aa3f78ef78047ac20d0d0f8a950f9
Validity
Not Before: May 8 13:01:06 2025 GMT
Not After : May 9 13:01:06 2025 GMT
Subject: CN=86b2eb68ffbe2fe13be6f185278d87f58ce6e8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:37:98:1d:75:d9:d0:9b:5e:4b:41:4c:75:
87:00:60:e8:de:63:9a:79:d3:e5:96:80:25:38:88:
97:66:ae:bb:4b:a6:13:f1:f3:b0:ed:60:55:0c:6f:
ac:6c:68:48:47:05:b4:ff:4b:31:9e:95:43:c8:24:
23:52:aa:ed:76:42:e0:b3:88:a0:93:a4:c5:74:df:
5e:9c:7c:3c:be:4b:70:e8:2a:26:93:e3:f7:51:fe:
4c:51:2d:92:93:53:5c:f8:1f:b9:2a:dd:8e:47:6b:
b8:bc:3a:55:d0:0c:df:b8:ad:ec:de:b8:bf:f6:8d:
0d:71:0f:02:36:89:ec:4d:2b:a6:08:65:f7:6b:ce:
06:f6:41:6f:1e:73:4b:e4:51:db:b9:b2:96:50:87:
d8:be:b2:31:88:2d:84:a9:d3:b1:77:24:06:6e:04:
ab:16:f6:21:ba:6d:1e:39:68:cc:2c:fe:57:4a:79:
4e:11:b1:b4:4f:4a:c5:64:57:fe:d5:aa:5d:25:d6:
f2:b6:a7:28:86:a8:2e:0c:9d:d7:ef:e3:5e:47:7b:
e1:b3:bd:1d:ef:c5:8d:d9:d4:bf:19:e3:99:3a:7b:
e7:c9:be:6f:82:88:8d:d0:ec:3f:e9:fe:91:24:b7:
7f:da:5c:8f:51:b4:d2:f9:74:15:ee:4c:c9:f6:fc:
5d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B2:EB:68:FF:BE:2F:E1:3B:E6:F1:85:27:8D:87:F5:8C:E6:E8:E4
X509v3 Authority Key Identifier:
keyid:A4:DC:8A:4E:91:6A:A3:F7:8E:F7:80:47:AC:20:D0:D0:F8:A9:50:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0c:36:0b:6d:f1:ab:7e:c0:d7:c5:e0:db:bb:c3:aa:32:75:
39:5a:7b:ed:7f:d9:a8:f6:d8:69:ea:cd:18:a0:16:ac:da:5b:
d0:db:a1:4f:4e:80:8e:84:31:f3:74:c8:20:e3:4f:c9:db:ca:
6b:2b:71:d1:4c:b9:c1:45:60:07:60:b6:65:c9:af:47:46:63:
2d:4b:91:06:40:7f:40:ac:2a:1b:23:42:4b:49:4d:9a:ca:a5:
ee:1d:d8:e5:0c:5f:8d:2b:81:97:66:e3:56:fd:bc:8a:8f:72:
98:42:f6:25:ec:ff:47:1b:70:43:20:80:62:32:30:db:3f:40:
fa:34:fa:63:dc:16:6f:05:8e:fc:54:97:e5:d0:bc:30:a4:9b:
c5:ad:14:62:7e:94:da:6d:58:c3:85:ea:41:b3:ea:d6:2e:01:
c3:96:2d:81:ad:a3:21:05:ce:94:5d:8c:56:d2:8c:09:fb:d5:
81:59:3e:8f:dd:d1:eb:14:a6:89:f9:90:14:ed:41:8e:4b:63:
ee:c5:36:95:3a:28:c5:1c:c8:9b:98:16:7c:26:6b:39:35:60:
0a:30:20:29:12:f4:16:08:d2:bb:b9:5e:5a:d2:e1:a9:07:aa:
ce:57:4c:d7:86:5b:33:8b:71:bb:91:47:49:29:04:14:27:a8:
30:28:9c:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZav/EGiWtHnaADy6e3f2iNlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZGM4YTRlOTE2YWEzZjc4ZWY3ODA0N2FjMjBkMGQwZjhh
OTUwZjkwHhcNMjUwNTA4MTMwMTA2WhcNMjUwNTA5MTMwMTA2WjAzMTEwLwYDVQQD
Eyg4NmIyZWI2OGZmYmUyZmUxM2JlNmYxODUyNzhkODdmNThjZTZlOGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4o3mB112dCbXktBTHWHAGDo3mOa
edPlloAlOIiXZq67S6YT8fOw7WBVDG+sbGhIRwW0/0sxnpVDyCQjUqrtdkLgs4ig
k6TFdN9enHw8vktw6Comk+P3Uf5MUS2Sk1Nc+B+5Kt2OR2u4vDpV0AzfuK3s3ri/
9o0NcQ8CNonsTSumCGX3a84G9kFvHnNL5FHbubKWUIfYvrIxiC2EqdOxdyQGbgSr
FvYhum0eOWjMLP5XSnlOEbG0T0rFZFf+1apdJdbytqcohqguDJ3X7+NeR3vhs70d
78WN2dS/GeOZOnvnyb5vgoiN0Ow/6f6RJLd/2lyPUbTS+XQV7kzJ9vxdRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIay62j/vi/hO+bxhSeNh/WM5ujkMB8GA1UdIwQY
MBaAFKTcik6RaqP3jveAR6wg0ND4qVD5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE55S1RwRnFvX2VPOTRCSHJDRFEwUGlwVVBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9hZTFiODktZmQ0OC00YjJkLWE4OGUt
OTY2YmU0ODMyODE1LzEvcE55S1RwRnFvX2VPOTRCSHJDRFEwUGlwVVBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9hZTFiODktZmQ0OC00YjJkLWE4OGUtOTY2YmU0ODMyODE1
LzEvcE55S1RwRnFvX2VPOTRCSHJDRFEwUGlwVVBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALAw2C23x
q37A18Xg27vDqjJ1OVp77X/ZqPbYaerNGKAWrNpb0NuhT06AjoQx83TIIONPydvK
aytx0Uy5wUVgB2C2ZcmvR0ZjLUuRBkB/QKwqGyNCS0lNmsql7h3Y5QxfjSuBl2bj
Vv28io9ymEL2Jez/RxtwQyCAYjIw2z9A+jT6Y9wWbwWO/FSX5dC8MKSbxa0UYn6U
2m1Yw4XqQbPq1i4Bw5Ytga2jIQXOlF2MVtKMCfvVgVk+j93R6xSmifmQFO1Bjktj
7sU2lTooxRzIm5gWfCZrOTVgCjAgKRL0FgjSu7leWtLhqQeqzldM14ZbM4txu5FH
SSkEFCeoMCicaw==
-----END CERTIFICATE-----
Generated at Thu May 8 20:44:28 2025 by rpki-client