Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
File: iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft (raw, json)
Hash identifier: zjPwlh2/e9Zf//WxqpX5aPsR2XTv8hi08izStuWdo+s=
Subject key identifier: 3D:7C:0D:A9:D5:86:7B:4C:E0:3D:75:74:CF:7F:17:03:EC:45:77:DF
Authority key identifier: 89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57
Certificate issuer: /CN=892d21566ccfc3bb079ec5854b044ab809804157
Certificate serial: 0196C683740F5D754FD4429D475CCB9C94DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 22:00:25 +0000
Manifest this update: Mon 12 May 2025 22:00:25 +0000
Manifest next update: Tue 13 May 2025 22:00:25 +0000
Files and hashes: 1: _xlkfnRMKnsNclJVExLAcIhA2l8.roa (hash: yd6Q3aFKUFt1tUH23Si46a/9sl4TuzKnFUmsDxLLaqw=)
2: iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl (hash: ibcSlrwn3THyS8XJfRwFVBbev29CYNS5hAOKnDIiLeQ=)
3: zlNvNdUfJ603zOBB38DPZ-NzG8o.roa (hash: gEXJj7MnEC8VWadeJK9z3p3E0Dv26srWKVnkmAOkpEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:74:0f:5d:75:4f:d4:42:9d:47:5c:cb:9c:94:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892d21566ccfc3bb079ec5854b044ab809804157
Validity
Not Before: May 12 22:00:25 2025 GMT
Not After : May 13 22:00:25 2025 GMT
Subject: CN=3d7c0da9d5867b4ce03d7574cf7f1703ec4577df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:6c:a6:8c:5d:cd:09:22:40:66:75:64:ed:
1c:59:26:b6:6a:ba:4b:dc:c5:73:ab:ee:f7:e1:c4:
89:67:df:be:97:fc:b9:34:b8:b4:5d:23:3c:56:f9:
2a:9a:72:8d:9e:70:21:c7:d9:d1:7a:66:a5:e6:de:
fa:3b:57:1a:71:4d:f0:18:85:23:d4:4c:bb:98:15:
5e:6e:5b:40:ce:62:71:66:fa:c8:85:d1:1f:46:94:
27:55:30:1d:54:ea:9f:b0:8f:8e:f7:29:3c:7c:98:
0a:01:fe:eb:ea:62:1d:10:ee:f7:38:f7:58:22:69:
df:4e:3f:da:6d:db:a9:e6:3d:0e:eb:85:c9:d4:bd:
93:62:94:e9:63:1a:38:d0:1d:32:f4:dd:ea:c2:fb:
2e:98:87:a6:26:59:5a:a2:0e:4a:45:49:29:92:56:
c5:36:48:17:4a:63:2a:0c:e4:98:ab:d9:5b:3f:16:
f4:fd:c5:02:23:a3:8d:94:cc:ee:bc:cf:ec:b9:61:
f9:ca:68:a5:07:10:fd:de:87:1f:64:2a:cf:11:b2:
e2:24:17:44:d0:1e:8e:bf:48:d1:2c:a2:0c:a0:5c:
a0:89:6c:cc:c4:7c:79:ab:c2:6c:bb:db:90:c7:a4:
33:68:e3:68:7e:69:87:2b:f7:b2:01:f9:e8:bd:47:
97:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7C:0D:A9:D5:86:7B:4C:E0:3D:75:74:CF:7F:17:03:EC:45:77:DF
X509v3 Authority Key Identifier:
keyid:89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e9:72:97:b3:bd:9d:d7:ef:12:76:96:d7:ce:44:c9:67:24:
4c:d7:79:e2:f9:b7:f5:23:45:40:c2:69:aa:bd:45:65:fc:30:
55:92:96:12:84:9c:98:40:37:80:18:19:e4:9f:ed:1e:c6:ab:
85:28:64:6a:70:f4:33:1c:d2:cd:28:4e:de:93:97:7d:b0:8e:
e4:ec:2b:61:cd:e9:41:81:93:da:91:bd:3d:80:90:57:d9:33:
68:85:d9:0c:77:f9:dd:b2:61:51:3f:d9:6d:26:09:0c:44:d2:
5f:54:ee:bb:3e:69:90:eb:c6:bf:ec:50:1e:8a:c0:c8:ee:56:
f6:9e:72:53:1b:96:ee:63:49:bf:b3:bb:9a:ca:86:e9:19:e2:
86:b0:2d:6b:c7:11:42:12:63:85:b9:dd:48:c5:49:f6:6a:78:
80:1e:b0:ce:a3:b6:f9:2c:fe:4f:4b:77:b7:a7:fa:60:d3:12:
4a:09:e5:77:d6:2a:ec:43:72:dd:bd:b5:89:fc:11:18:44:29:
c9:1d:d7:0d:49:98:a0:8a:74:2a:0c:51:f3:d4:35:63:69:77:
75:15:4a:7e:e8:c3:d5:97:fa:33:50:32:59:24:5a:06:5b:cc:
57:e3:b1:2d:7d:0d:35:ff:44:72:45:a8:e8:a3:f5:8e:47:30:
e4:d5:3d:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbGg3QPXXVP1EKdR1zLnJTaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MmQyMTU2NmNjZmMzYmIwNzllYzU4NTRiMDQ0YWI4MDk4
MDQxNTcwHhcNMjUwNTEyMjIwMDI1WhcNMjUwNTEzMjIwMDI1WjAzMTEwLwYDVQQD
EygzZDdjMGRhOWQ1ODY3YjRjZTAzZDc1NzRjZjdmMTcwM2VjNDU3N2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtBspoxdzQkiQGZ1ZO0cWSa2arpL
3MVzq+734cSJZ9++l/y5NLi0XSM8VvkqmnKNnnAhx9nRemal5t76O1cacU3wGIUj
1Ey7mBVebltAzmJxZvrIhdEfRpQnVTAdVOqfsI+O9yk8fJgKAf7r6mIdEO73OPdY
ImnfTj/abdup5j0O64XJ1L2TYpTpYxo40B0y9N3qwvsumIemJllaog5KRUkpklbF
NkgXSmMqDOSYq9lbPxb0/cUCI6ONlMzuvM/suWH5ymilBxD93ocfZCrPEbLiJBdE
0B6Ov0jRLKIMoFygiWzMxHx5q8Jsu9uQx6QzaONofmmHK/eyAfnovUeXlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD18DanVhntM4D11dM9/FwPsRXffMB8GA1UdIwQY
MBaAFIktIVZsz8O7B57FhUsESrgJgEFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVMwaFZtelB3N3NIbnNXRlN3Ukt1QW1BUVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9kNTk3YjAtNjQyNS00MjVmLWI3MjMt
NGViOGIwYjQ5YzRhLzEvaVMwaFZtelB3N3NIbnNXRlN3Ukt1QW1BUVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9kNTk3YjAtNjQyNS00MjVmLWI3MjMtNGViOGIwYjQ5YzRh
LzEvaVMwaFZtelB3N3NIbnNXRlN3Ukt1QW1BUVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXelyl7O9
ndfvEnaW185EyWckTNd54vm39SNFQMJpqr1FZfwwVZKWEoScmEA3gBgZ5J/tHsar
hShkanD0MxzSzShO3pOXfbCO5OwrYc3pQYGT2pG9PYCQV9kzaIXZDHf53bJhUT/Z
bSYJDETSX1Tuuz5pkOvGv+xQHorAyO5W9p5yUxuW7mNJv7O7msqG6RnihrAta8cR
QhJjhbndSMVJ9mp4gB6wzqO2+Sz+T0t3t6f6YNMSSgnld9Yq7ENy3b21ifwRGEQp
yR3XDUmYoIp0KgxR89Q1Y2l3dRVKfujD1Zf6M1AyWSRaBlvMV+OxLX0NNf9EckWo
6KP1jkcw5NU9Jw==
-----END CERTIFICATE-----
Generated at Tue May 13 04:21:34 2025 by rpki-client