Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
File: V9wqO2671XpOSCmt0_KgKnbld4k.mft (raw, json)
Hash identifier: HBzfmQrTvNYDMzedTAfDRAHXPuMsgxEDHe2wTSNR4co=
Subject key identifier: B7:D4:CF:92:DF:B2:D4:5D:AD:4D:51:8F:97:A0:1E:A5:A2:2A:08:8F
Authority key identifier: 57:DC:2A:3B:6E:BB:D5:7A:4E:48:29:AD:D3:F2:A0:2A:76:E5:77:89
Certificate issuer: /CN=57dc2a3b6ebbd57a4e4829add3f2a02a76e57789
Certificate serial: 0196C83B4195107E632A8C2B865E86CC7FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9wqO2671XpOSCmt0_KgKnbld4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
Manifest number: 0230
Signing time: Tue 13 May 2025 06:00:48 +0000
Manifest this update: Tue 13 May 2025 06:00:48 +0000
Manifest next update: Wed 14 May 2025 06:00:48 +0000
Files and hashes: 1: V9wqO2671XpOSCmt0_KgKnbld4k.crl (hash: JJdUW1/c7n8xcsVuXZXdlrI956L9KLvSEhXe3dxnIdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9wqO2671XpOSCmt0_KgKnbld4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:3b:41:95:10:7e:63:2a:8c:2b:86:5e:86:cc:7f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57dc2a3b6ebbd57a4e4829add3f2a02a76e57789
Validity
Not Before: May 13 06:00:48 2025 GMT
Not After : May 14 06:00:48 2025 GMT
Subject: CN=b7d4cf92dfb2d45dad4d518f97a01ea5a22a088f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2e:0d:47:bf:6b:a9:4a:54:45:fb:3e:9b:7f:
c6:22:7f:23:73:5c:3a:dc:35:93:20:17:42:18:85:
7a:70:6e:05:60:b2:11:7f:7b:54:fc:b1:44:3b:ca:
8b:19:55:a6:bd:ce:6b:4c:18:2f:25:5a:38:de:12:
20:30:a3:5f:6d:68:6c:bb:19:f1:f5:64:0c:94:2b:
47:62:b6:aa:66:fa:5b:26:b2:7a:ee:56:85:0e:db:
ba:5d:da:58:f6:12:5c:bc:e1:3e:08:6c:5b:1a:4b:
26:0e:ea:6e:3e:94:45:89:98:e8:b9:7f:65:ce:92:
11:80:d7:61:7c:00:af:b7:17:ae:8f:91:38:3c:7c:
97:a7:5c:ff:67:28:a1:5e:ed:dd:76:5d:24:5f:c1:
da:21:4c:dc:7a:da:6f:27:d3:6e:42:a6:40:ad:09:
f4:9b:86:4f:d2:e6:eb:35:4e:24:aa:ee:bc:a9:dc:
36:d0:73:a0:32:24:e3:25:a2:d2:ad:99:73:56:9c:
56:29:94:50:62:9b:b5:f7:da:08:05:66:e5:fd:ec:
9b:9a:c8:9a:17:80:32:19:9f:0b:33:c0:21:4e:1a:
99:94:46:2c:cf:17:dd:20:95:b9:64:23:a4:3e:46:
cf:ae:6a:a3:88:2e:6d:f0:5a:b7:2b:70:d5:94:0b:
cc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D4:CF:92:DF:B2:D4:5D:AD:4D:51:8F:97:A0:1E:A5:A2:2A:08:8F
X509v3 Authority Key Identifier:
keyid:57:DC:2A:3B:6E:BB:D5:7A:4E:48:29:AD:D3:F2:A0:2A:76:E5:77:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9wqO2671XpOSCmt0_KgKnbld4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:fa:8f:2e:32:6f:23:9d:38:b5:b1:9d:10:a4:dd:b2:88:64:
45:0a:ae:fb:6f:ea:f1:49:58:2c:96:67:39:9d:b1:04:74:cf:
b4:aa:a7:42:cc:d0:b5:cf:c5:52:b8:27:92:71:08:19:d7:d3:
7b:44:8b:e4:44:05:e0:82:ca:a7:d0:21:78:94:02:a1:10:07:
19:9c:6a:92:a3:99:63:95:db:3c:02:cf:ac:d8:d1:01:f1:10:
c7:ee:0e:c6:61:78:07:17:77:d1:0f:3c:85:f2:f6:0d:0c:c7:
74:7e:12:54:b8:6f:b8:70:65:ca:fb:93:ff:8d:80:de:72:f8:
15:35:70:c4:cf:11:15:eb:07:3e:bc:9b:0a:ec:79:7c:9f:6a:
1b:b2:61:41:9a:09:ff:cb:cb:6c:4b:d0:61:f5:e0:6b:2f:69:
c7:e5:82:da:2e:e1:ef:62:bd:8f:6f:6b:23:ce:ac:0e:9c:41:
e0:76:e6:73:f5:d9:08:c2:27:77:15:04:0b:bd:7c:37:d7:b0:
8b:fb:89:3e:a2:f7:82:fc:02:ad:ad:18:ee:3f:46:fd:aa:14:
f7:88:22:d2:0c:b2:1f:32:00:1e:c4:da:cf:cb:6e:9d:42:11:
7d:96:4d:d0:9d:a5:8b:56:23:f8:30:55:f0:50:a2:f5:44:5b:
89:05:39:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbIO0GVEH5jKowrhl6GzH+vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZGMyYTNiNmViYmQ1N2E0ZTQ4MjlhZGQzZjJhMDJhNzZl
NTc3ODkwHhcNMjUwNTEzMDYwMDQ4WhcNMjUwNTE0MDYwMDQ4WjAzMTEwLwYDVQQD
EyhiN2Q0Y2Y5MmRmYjJkNDVkYWQ0ZDUxOGY5N2EwMWVhNWEyMmEwODhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS4NR79rqUpURfs+m3/GIn8jc1w6
3DWTIBdCGIV6cG4FYLIRf3tU/LFEO8qLGVWmvc5rTBgvJVo43hIgMKNfbWhsuxnx
9WQMlCtHYraqZvpbJrJ67laFDtu6XdpY9hJcvOE+CGxbGksmDupuPpRFiZjouX9l
zpIRgNdhfACvtxeuj5E4PHyXp1z/ZyihXu3ddl0kX8HaIUzcetpvJ9NuQqZArQn0
m4ZP0ubrNU4kqu68qdw20HOgMiTjJaLSrZlzVpxWKZRQYpu199oIBWbl/eybmsia
F4AyGZ8LM8AhThqZlEYszxfdIJW5ZCOkPkbPrmqjiC5t8Fq3K3DVlAvMyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfUz5LfstRdrU1Rj5egHqWiKgiPMB8GA1UdIwQY
MBaAFFfcKjtuu9V6TkgprdPyoCp25XeJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjl3cU8yNjcxWHBPU0NtdDBfS2dLbmJsZDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS82NTQ1MDQtNTRlMS00NTAyLWFiMjIt
NDA0NTlkNjkzNGFlLzEvVjl3cU8yNjcxWHBPU0NtdDBfS2dLbmJsZDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS82NTQ1MDQtNTRlMS00NTAyLWFiMjItNDA0NTlkNjkzNGFl
LzEvVjl3cU8yNjcxWHBPU0NtdDBfS2dLbmJsZDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfqPLjJv
I504tbGdEKTdsohkRQqu+2/q8UlYLJZnOZ2xBHTPtKqnQszQtc/FUrgnknEIGdfT
e0SL5EQF4ILKp9AheJQCoRAHGZxqkqOZY5XbPALPrNjRAfEQx+4OxmF4Bxd30Q88
hfL2DQzHdH4SVLhvuHBlyvuT/42A3nL4FTVwxM8RFesHPrybCux5fJ9qG7JhQZoJ
/8vLbEvQYfXgay9px+WC2i7h72K9j29rI86sDpxB4Hbmc/XZCMIndxUEC718N9ew
i/uJPqL3gvwCra0Y7j9G/aoU94gi0gyyHzIAHsTaz8tunUIRfZZN0J2li1Yj+DBV
8FCi9URbiQU5Zw==
-----END CERTIFICATE-----
Generated at Tue May 13 14:18:43 2025 by rpki-client