Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
File: 43O80yVaDa1fSjUNEdyJH6C-BDc.mft (raw, json)
Hash identifier: iw3HCMEaKXchryaUIa67UarFgBrinM/XxAGR/DfgGsc=
Subject key identifier: A1:18:16:B0:3E:38:EF:AD:6F:84:DB:99:7D:BA:D6:C6:E7:92:0C:E0
Authority key identifier: E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
Certificate issuer: /CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Certificate serial: 01969FE40920EA58E94749DBD4F4BBBB568D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
Manifest number: 05F4
Signing time: Mon 05 May 2025 10:00:43 +0000
Manifest this update: Mon 05 May 2025 10:00:43 +0000
Manifest next update: Tue 06 May 2025 10:00:43 +0000
Files and hashes: 1: 1-AKJmO9q5axmG2bLlo_CKWpT7rI.roa (hash: IzbOHhtlqnCQLwohTNVhlpmomMZIZO83L4rK6yCvODA=)
2: 43O80yVaDa1fSjUNEdyJH6C-BDc.crl (hash: +UY29WdXb2pCKg9GeDShHTnZk7RPdhCXXi3qnUq8vaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:09:20:ea:58:e9:47:49:db:d4:f4:bb:bb:56:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Validity
Not Before: May 5 10:00:43 2025 GMT
Not After : May 6 10:00:43 2025 GMT
Subject: CN=a11816b03e38efad6f84db997dbad6c6e7920ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:57:d8:09:3c:38:85:62:7f:d9:b9:37:81:
12:02:96:8a:25:c0:8a:9b:fc:94:ea:85:66:85:9c:
f2:14:a5:88:7c:3d:3b:fa:66:23:4e:79:30:f0:c6:
05:db:f7:19:87:b5:34:20:bd:09:4e:16:4c:cd:f1:
8c:54:b7:29:b6:b8:0f:10:08:72:33:ac:28:d5:a9:
77:f0:08:a1:af:bf:6b:30:39:cb:0d:b6:9f:63:0a:
27:30:6d:c5:6e:3c:27:54:56:0a:e7:e4:be:42:26:
43:ff:a7:59:3c:03:43:7b:b1:f1:07:ea:37:dc:7f:
95:58:30:05:94:2f:54:87:89:10:b7:a2:25:a3:ac:
41:2b:8f:75:a8:48:4f:73:16:a2:9c:62:c2:3c:e5:
b6:63:81:9c:87:a7:03:bc:be:85:e8:da:aa:bf:3d:
2a:2d:e6:5f:d6:b9:ee:26:3e:00:8b:de:32:0c:6b:
34:db:5f:74:cd:7a:06:1e:d4:dc:7b:0a:8f:7c:4a:
02:53:8e:4a:4d:f2:b8:79:06:8b:07:73:82:27:94:
01:f8:c9:39:1f:1d:ad:97:86:f5:3f:38:c5:f7:79:
57:ae:51:cb:db:f3:88:0e:6f:77:7d:e0:0f:18:56:
05:2a:6e:73:bd:95:dd:e8:2c:88:ef:d9:77:1a:9d:
80:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:18:16:B0:3E:38:EF:AD:6F:84:DB:99:7D:BA:D6:C6:E7:92:0C:E0
X509v3 Authority Key Identifier:
keyid:E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b5:de:b2:1e:b9:2e:f3:76:40:71:e5:6e:62:98:e4:dc:26:
ca:c4:20:66:69:80:56:73:11:35:17:a1:3b:41:00:04:6a:9c:
88:ec:06:6b:63:c7:9b:63:e4:e2:20:88:18:66:8a:a2:6e:93:
cb:13:0d:c8:6e:99:75:42:0d:cc:85:bf:5d:3f:a4:f9:a1:21:
2c:26:73:92:17:26:56:cf:49:3c:12:ce:46:ae:1c:7e:d3:a3:
7a:a2:cd:7f:0e:d4:6b:1c:5f:76:8e:00:d7:ec:a7:43:74:d5:
1a:8f:64:54:c8:db:0c:f6:a9:cc:5e:cd:ad:1e:30:b3:b9:70:
11:f5:b3:cd:d4:34:f2:e0:2e:2a:3f:97:c1:28:53:81:89:98:
68:7c:46:a0:31:b9:1f:b5:c2:a8:2b:6b:66:81:ff:8a:a5:b7:
da:4a:54:cb:7e:1d:e3:41:9d:1b:80:0b:d1:a5:7e:c9:6e:8a:
7a:81:56:9d:88:46:21:5b:dc:3f:eb:f5:ec:03:f5:aa:0d:bb:
6c:90:08:57:1d:d0:f7:27:56:0a:0d:21:8f:87:5f:63:15:a7:
ff:83:28:b6:eb:4d:bc:3f:4c:51:1b:e8:a2:83:e4:ae:ee:15:
8b:c6:1b:5d:98:ed:22:02:1f:09:1c:ea:a2:b2:5c:2d:e6:3e:
3b:7e:75:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaf5Akg6ljpR0nb1PS7u1aNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNzNiY2QzMjU1YTBkYWQ1ZjRhMzUwZDExZGM4OTFmYTBi
ZTA0MzcwHhcNMjUwNTA1MTAwMDQzWhcNMjUwNTA2MTAwMDQzWjAzMTEwLwYDVQQD
EyhhMTE4MTZiMDNlMzhlZmFkNmY4NGRiOTk3ZGJhZDZjNmU3OTIwY2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukpX2Ak8OIVif9m5N4ESApaKJcCK
m/yU6oVmhZzyFKWIfD07+mYjTnkw8MYF2/cZh7U0IL0JThZMzfGMVLcptrgPEAhy
M6wo1al38Aihr79rMDnLDbafYwonMG3FbjwnVFYK5+S+QiZD/6dZPANDe7HxB+o3
3H+VWDAFlC9Uh4kQt6Ilo6xBK491qEhPcxainGLCPOW2Y4Gch6cDvL6F6Nqqvz0q
LeZf1rnuJj4Ai94yDGs02190zXoGHtTcewqPfEoCU45KTfK4eQaLB3OCJ5QB+Mk5
Hx2tl4b1PzjF93lXrlHL2/OIDm93feAPGFYFKm5zvZXd6CyI79l3Gp2ACQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEYFrA+OO+tb4TbmX261sbnkgzgMB8GA1UdIwQY
MBaAFONzvNMlWg2tX0o1DRHciR+gvgQ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNPODB5VmFEYTFmU2pVTkVkeUpINkMtQkRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kMjBkYmMtMmFiNC00M2ZiLTgwYTIt
MDRlN2IxYThjZTE4LzEvNDNPODB5VmFEYTFmU2pVTkVkeUpINkMtQkRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kMjBkYmMtMmFiNC00M2ZiLTgwYTItMDRlN2IxYThjZTE4
LzEvNDNPODB5VmFEYTFmU2pVTkVkeUpINkMtQkRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAarXesh65
LvN2QHHlbmKY5NwmysQgZmmAVnMRNRehO0EABGqciOwGa2PHm2Pk4iCIGGaKom6T
yxMNyG6ZdUINzIW/XT+k+aEhLCZzkhcmVs9JPBLORq4cftOjeqLNfw7Uaxxfdo4A
1+ynQ3TVGo9kVMjbDPapzF7NrR4ws7lwEfWzzdQ08uAuKj+XwShTgYmYaHxGoDG5
H7XCqCtrZoH/iqW32kpUy34d40GdG4AL0aV+yW6KeoFWnYhGIVvcP+v17AP1qg27
bJAIVx3Q9ydWCg0hj4dfYxWn/4MotutNvD9MURvoooPkru4Vi8YbXZjtIgIfCRzq
orJcLeY+O351zg==
-----END CERTIFICATE-----
Generated at Mon May 5 18:40:28 2025 by rpki-client