Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
File: 84BJvoAaE244erwUSY5IYETZYng.mft (raw, json)
Hash identifier: 07eBf/3h8n1M8iZis3O3A9iaGGkiRFAOenh3fpTrCMI=
Subject key identifier: 1B:F8:42:F1:B8:24:D1:44:BA:D2:0F:AD:C1:CE:C1:57:2D:6A:BE:10
Authority key identifier: F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
Certificate issuer: /CN=f38049be801a136e387abc14498e486044d96278
Certificate serial: 0196B8FEBF37AE6B3BC213216499E262C4D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
Manifest number: 027D
Signing time: Sat 10 May 2025 07:00:24 +0000
Manifest this update: Sat 10 May 2025 07:00:24 +0000
Manifest next update: Sun 11 May 2025 07:00:24 +0000
Files and hashes: 1: 84BJvoAaE244erwUSY5IYETZYng.crl (hash: l2UWFvPgre1jfae/QS3WJ8dIWSewpp1bRpytsjzeGws=)
2: Iu2chtpqWcHWj5ICMYSAAIfiajQ.roa (hash: V17YrAyWPucLnXshp6FV+qrXZ0uT+XGK95n0G3fUe08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:bf:37:ae:6b:3b:c2:13:21:64:99:e2:62:c4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38049be801a136e387abc14498e486044d96278
Validity
Not Before: May 10 07:00:24 2025 GMT
Not After : May 11 07:00:24 2025 GMT
Subject: CN=1bf842f1b824d144bad20fadc1cec1572d6abe10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:b7:2c:45:81:ad:be:d5:db:6c:51:d3:1e:
47:79:a0:ae:55:19:68:89:26:38:30:bd:64:14:5e:
70:58:55:fa:9a:92:6d:01:11:1f:f1:1a:56:ef:bf:
26:b9:e4:d5:f6:98:c0:8f:65:d8:9b:13:28:6d:11:
0a:5b:e4:6d:00:92:5b:bb:3a:74:85:50:2b:d7:81:
6c:22:40:e0:cd:62:eb:6f:72:64:6b:7c:55:0a:fc:
c4:3f:a3:d3:85:39:ff:33:db:2e:b8:9f:ff:7e:d6:
10:13:69:19:fd:b8:56:ce:dd:5c:99:2d:f8:09:9e:
9d:4c:35:78:00:6e:53:a5:16:ea:51:6a:f3:d7:c7:
26:20:35:5b:14:34:43:a5:03:0d:d1:6e:32:04:75:
e8:b9:30:0f:e4:4c:2f:19:e2:3a:bd:57:2c:08:fb:
2f:8a:eb:34:b8:60:50:d9:b1:e8:0c:1d:48:f1:1e:
87:a2:ce:71:3e:c4:a9:75:26:94:e6:12:25:f1:a5:
bf:8f:06:de:08:12:4b:15:69:cb:7b:16:83:6a:8a:
b0:96:d9:45:61:cc:c8:29:88:fa:5e:19:bc:f7:74:
3a:4a:52:97:f0:b9:aa:e4:b8:fc:49:3d:54:ab:10:
bd:33:65:e1:5e:c5:7c:39:90:22:9c:1b:54:4b:1f:
15:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F8:42:F1:B8:24:D1:44:BA:D2:0F:AD:C1:CE:C1:57:2D:6A:BE:10
X509v3 Authority Key Identifier:
keyid:F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:6c:a5:e2:d6:e6:c3:7a:4d:81:63:cc:d4:64:0b:9e:f6:08:
ca:f2:55:7d:c6:62:a1:6e:6a:4e:16:5b:8d:62:84:1b:d9:64:
9a:dd:e5:6a:e7:5d:e2:d7:3a:df:70:83:a3:eb:7f:91:92:1b:
aa:38:d0:75:68:ac:73:8c:1e:f2:b5:1d:3b:27:a9:4b:46:72:
90:77:c4:f7:d2:89:00:71:75:09:f7:f2:0e:09:0d:d8:49:00:
17:21:5c:58:ae:d3:86:bc:49:1c:49:e3:a2:3f:8e:43:00:1c:
bd:ea:4c:69:53:fb:b9:c3:88:c1:aa:5d:72:72:f4:d9:e3:4f:
f7:bc:66:22:1e:c9:40:87:6c:af:44:2d:fe:a5:80:52:c7:0c:
4c:e0:d9:7c:d3:51:5b:75:60:4c:c5:5d:17:2e:78:25:73:7e:
cb:02:2f:43:15:24:ab:98:db:73:c0:42:37:08:3d:13:c6:f8:
40:68:5f:83:ef:b2:06:bb:fe:ef:c5:59:ef:63:5e:c2:b3:3b:
83:fa:df:96:13:c7:0c:8f:01:7d:9e:86:3c:49:fa:88:66:1d:
c2:67:ca:f2:48:d4:1f:9c:f4:5a:cf:64:1e:a1:d1:11:e8:1e:
53:6d:b5:2f:19:2b:e5:81:c5:8e:5a:d3:08:1a:79:26:11:68:
7b:79:a5:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4/r83rms7whMhZJniYsTSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzODA0OWJlODAxYTEzNmUzODdhYmMxNDQ5OGU0ODYwNDRk
OTYyNzgwHhcNMjUwNTEwMDcwMDI0WhcNMjUwNTExMDcwMDI0WjAzMTEwLwYDVQQD
EygxYmY4NDJmMWI4MjRkMTQ0YmFkMjBmYWRjMWNlYzE1NzJkNmFiZTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwm3LEWBrb7V22xR0x5HeaCuVRlo
iSY4ML1kFF5wWFX6mpJtAREf8RpW778mueTV9pjAj2XYmxMobREKW+RtAJJbuzp0
hVAr14FsIkDgzWLrb3Jka3xVCvzEP6PThTn/M9suuJ//ftYQE2kZ/bhWzt1cmS34
CZ6dTDV4AG5TpRbqUWrz18cmIDVbFDRDpQMN0W4yBHXouTAP5EwvGeI6vVcsCPsv
ius0uGBQ2bHoDB1I8R6Hos5xPsSpdSaU5hIl8aW/jwbeCBJLFWnLexaDaoqwltlF
YczIKYj6Xhm893Q6SlKX8Lmq5Lj8ST1UqxC9M2XhXsV8OZAinBtUSx8VXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBv4QvG4JNFEutIPrcHOwVctar4QMB8GA1UdIwQY
MBaAFPOASb6AGhNuOHq8FEmOSGBE2WJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODRCSnZvQWFFMjQ0ZXJ3VVNZNUlZRVRaWW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9kZWVkYjQtMjYyMC00NDFiLTg2MTYt
MjhmNGRhZDM3OGZjLzEvODRCSnZvQWFFMjQ0ZXJ3VVNZNUlZRVRaWW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9kZWVkYjQtMjYyMC00NDFiLTg2MTYtMjhmNGRhZDM3OGZj
LzEvODRCSnZvQWFFMjQ0ZXJ3VVNZNUlZRVRaWW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmyl4tbm
w3pNgWPM1GQLnvYIyvJVfcZioW5qThZbjWKEG9lkmt3laudd4tc633CDo+t/kZIb
qjjQdWisc4we8rUdOyepS0ZykHfE99KJAHF1CffyDgkN2EkAFyFcWK7ThrxJHEnj
oj+OQwAcvepMaVP7ucOIwapdcnL02eNP97xmIh7JQIdsr0Qt/qWAUscMTODZfNNR
W3VgTMVdFy54JXN+ywIvQxUkq5jbc8BCNwg9E8b4QGhfg++yBrv+78VZ72NewrM7
g/rflhPHDI8BfZ6GPEn6iGYdwmfK8kjUH5z0Ws9kHqHREegeU221Lxkr5YHFjlrT
CBp5JhFoe3mlnw==
-----END CERTIFICATE-----
Generated at Sat May 10 10:42:45 2025 by rpki-client