Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
File: RpNQgcd6h0XntiuTuC2iliN5suI.mft (raw, json)
Hash identifier: h8IEqqNonqIJVjKOMgeolaApQzL1aDbnaHhX0dyVE0I=
Subject key identifier: F3:21:7E:76:33:9E:02:EC:D5:3D:D2:38:68:3D:DA:8C:09:DF:A9:DD
Authority key identifier: 46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2
Certificate issuer: /CN=46935081c77a8745e7b62b93b82da2962379b2e2
Certificate serial: 01969FE3F0E4022B2E373F63C0BA4512225B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 10:00:37 +0000
Manifest this update: Mon 05 May 2025 10:00:37 +0000
Manifest next update: Tue 06 May 2025 10:00:37 +0000
Files and hashes: 1: 5S9DzB-Zkm3msjgPAbdmsNofi_E.roa (hash: JVrfzyFqi2bm7cADIRU0rzxEk+g6lOHGxW3e0YIX/NA=)
2: RpNQgcd6h0XntiuTuC2iliN5suI.crl (hash: j6mCjAOB2GDGS7zaug2a3o7dXe62ZGuwtjplu9aBiSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e3:f0:e4:02:2b:2e:37:3f:63:c0:ba:45:12:22:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46935081c77a8745e7b62b93b82da2962379b2e2
Validity
Not Before: May 5 10:00:37 2025 GMT
Not After : May 6 10:00:37 2025 GMT
Subject: CN=f3217e76339e02ecd53dd238683dda8c09dfa9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:d1:3a:0d:93:3c:e5:95:a3:5b:6a:63:f5:
38:9a:4e:84:c2:42:0e:d5:37:d2:f5:61:62:c5:bd:
e2:75:58:69:0b:f6:5d:b4:77:6b:ae:39:eb:c2:97:
db:9c:82:42:fc:62:86:d2:3c:50:8e:35:3a:ec:f8:
a2:48:1f:42:bc:a6:2c:68:f7:67:aa:40:91:92:a9:
f9:6a:c4:aa:52:5a:41:ae:3f:8a:94:82:a7:2d:26:
8d:6e:bb:e8:ed:28:d2:64:cc:0f:f0:75:28:d6:7b:
3b:2c:00:71:84:bb:87:fe:a8:55:c3:5b:da:ea:8f:
23:31:0b:01:92:03:95:16:77:06:74:82:4f:68:d6:
91:31:72:4e:1b:b3:c7:3f:dc:63:d0:d2:63:c4:30:
e2:b1:3b:61:3f:e2:26:61:3c:0c:d3:c3:26:19:01:
6b:fa:b9:a2:7d:f1:3c:01:06:c3:1e:f6:69:b7:30:
d9:ac:60:d2:9b:71:07:1f:7d:02:8d:ae:b2:35:27:
0a:fb:b2:a9:a0:6e:f7:95:c4:25:f9:61:1b:09:37:
e2:1c:da:9e:ce:7c:a9:33:e2:e3:8b:14:a9:f2:75:
e4:74:ba:11:61:58:09:b2:69:de:a8:a6:ec:fc:e0:
a8:2d:a1:e0:72:80:c0:e3:87:c6:c1:b4:93:26:79:
d4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:21:7E:76:33:9E:02:EC:D5:3D:D2:38:68:3D:DA:8C:09:DF:A9:DD
X509v3 Authority Key Identifier:
keyid:46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f0:04:2d:ec:1c:9e:e7:4b:f6:c6:bb:69:f5:ee:4d:46:7b:
f6:62:6c:6c:df:42:52:86:ab:c7:a0:a8:f1:ce:3f:75:63:25:
33:93:86:ee:74:c6:83:9f:10:e1:9a:db:a9:a1:22:53:bc:b7:
4b:15:f6:3d:5f:f5:59:97:a2:3d:d7:44:78:51:32:8d:1d:3a:
9c:27:53:1c:93:40:f3:7b:04:48:01:03:dc:cc:39:93:ef:1f:
84:0d:ef:2a:05:ce:c2:47:25:41:63:e4:09:37:54:25:e5:80:
85:fe:d6:24:7d:d5:09:53:ba:3a:1a:d2:fb:62:ed:8d:24:46:
4a:7a:c7:9c:92:b6:97:df:83:30:fb:e5:f8:5c:e6:5c:bc:90:
a4:41:29:3e:d0:bc:db:38:78:5b:5f:52:b4:7d:de:4b:e4:78:
28:25:f4:2c:9f:96:23:57:2d:f2:15:c5:75:8f:e4:a2:e6:30:
fd:d3:29:fc:11:0a:32:55:70:14:3c:d4:6f:9c:c9:e2:3f:2b:
57:61:85:33:7f:10:26:98:71:d7:94:6a:e9:66:56:80:fd:f3:
1a:b4:8e:34:b4:af:91:d5:f1:33:ce:cb:b3:e2:d8:57:48:8c:
bb:fa:76:d5:bb:8f:e3:58:8c:df:84:59:e0:f8:df:a2:7f:64:
b2:b7:91:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaf4/DkAisuNz9jwLpFEiJbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OTM1MDgxYzc3YTg3NDVlN2I2MmI5M2I4MmRhMjk2MjM3
OWIyZTIwHhcNMjUwNTA1MTAwMDM3WhcNMjUwNTA2MTAwMDM3WjAzMTEwLwYDVQQD
EyhmMzIxN2U3NjMzOWUwMmVjZDUzZGQyMzg2ODNkZGE4YzA5ZGZhOWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+DROg2TPOWVo1tqY/U4mk6EwkIO
1TfS9WFixb3idVhpC/ZdtHdrrjnrwpfbnIJC/GKG0jxQjjU67PiiSB9CvKYsaPdn
qkCRkqn5asSqUlpBrj+KlIKnLSaNbrvo7SjSZMwP8HUo1ns7LABxhLuH/qhVw1va
6o8jMQsBkgOVFncGdIJPaNaRMXJOG7PHP9xj0NJjxDDisTthP+ImYTwM08MmGQFr
+rmiffE8AQbDHvZptzDZrGDSm3EHH30Cja6yNScK+7KpoG73lcQl+WEbCTfiHNqe
znypM+LjixSp8nXkdLoRYVgJsmneqKbs/OCoLaHgcoDA44fGwbSTJnnUMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMhfnYzngLs1T3SOGg92owJ36ndMB8GA1UdIwQY
MBaAFEaTUIHHeodF57Yrk7gtopYjebLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnBOUWdjZDZoMFhudGl1VHVDMmlsaU41c3VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85MDYwNmUtOTMxNi00ZWEzLWJjNzQt
YTM1YzI3ZDk1MTg2LzEvUnBOUWdjZDZoMFhudGl1VHVDMmlsaU41c3VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85MDYwNmUtOTMxNi00ZWEzLWJjNzQtYTM1YzI3ZDk1MTg2
LzEvUnBOUWdjZDZoMFhudGl1VHVDMmlsaU41c3VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/AELewc
nudL9sa7afXuTUZ79mJsbN9CUoarx6Co8c4/dWMlM5OG7nTGg58Q4ZrbqaEiU7y3
SxX2PV/1WZeiPddEeFEyjR06nCdTHJNA83sESAED3Mw5k+8fhA3vKgXOwkclQWPk
CTdUJeWAhf7WJH3VCVO6OhrS+2LtjSRGSnrHnJK2l9+DMPvl+FzmXLyQpEEpPtC8
2zh4W19StH3eS+R4KCX0LJ+WI1ct8hXFdY/kouYw/dMp/BEKMlVwFDzUb5zJ4j8r
V2GFM38QJphx15Rq6WZWgP3zGrSONLSvkdXxM87Ls+LYV0iMu/p21buP41iM34RZ
4Pjfon9ksreRFg==
-----END CERTIFICATE-----
Generated at Mon May 5 12:13:10 2025 by rpki-client