Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
File: PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft (raw, json)
Hash identifier: Gi+bM3m/GxjAvqFpwQ2UxFUZfwjXAnt95c4HtIyu1Rg=
Subject key identifier: 5D:11:8B:47:14:EB:1F:8A:E3:16:F0:57:8F:E4:C3:BF:15:EA:06:F5
Authority key identifier: 3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
Certificate issuer: /CN=3c177b528043a85953fc250f991d9d8020e2810d
Certificate serial: 0196B3D832521F78FD999A1D79B76AE1E45B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
Manifest number: 1539
Signing time: Fri 09 May 2025 07:00:12 +0000
Manifest this update: Fri 09 May 2025 07:00:12 +0000
Manifest next update: Sat 10 May 2025 07:00:12 +0000
Files and hashes: 1: 97b_DOZexsMsbNq0jd1_KnrCkGw.roa (hash: Zsql+k4AO5wopmLFKXiIANICmsUjbHpn09FeXgUdFls=)
2: PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl (hash: tIUArBNVfHT0Sro6/ItPLVk6bt5uBrf938flDA186EA=)
3: vFJBXwiLiT0SV6hpYm9T1KH_3Sw.roa (hash: iZ/rALDyZJ1JAyWAtw5uSLsZV8Z+UzVJnNgd7eGfu2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 07:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:32:52:1f:78:fd:99:9a:1d:79:b7:6a:e1:e4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c177b528043a85953fc250f991d9d8020e2810d
Validity
Not Before: May 9 07:00:12 2025 GMT
Not After : May 10 07:00:12 2025 GMT
Subject: CN=5d118b4714eb1f8ae316f0578fe4c3bf15ea06f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5c:4e:ef:65:72:e0:52:b5:8e:18:3b:e6:cc:
3e:0e:98:dc:ff:f5:09:ea:f3:1f:ff:13:2d:f6:97:
6d:4e:4d:b3:59:96:a1:71:f1:dd:f3:e2:06:44:57:
06:d8:15:ea:6a:80:cd:95:99:36:71:5a:7e:ef:88:
30:8b:37:e2:0e:a7:aa:99:e6:12:6d:59:bf:93:e7:
e0:ec:ef:39:b2:1e:c8:c6:e6:df:f8:86:b7:51:7a:
e4:8b:43:24:84:f8:99:0d:c0:d2:f1:fd:0b:77:fb:
29:bc:10:bf:94:9d:b1:46:35:28:07:1e:00:2b:4a:
42:9e:82:27:a8:d5:31:24:56:d2:78:f5:40:5d:cf:
86:d3:a0:92:97:bc:68:55:60:09:86:3f:3d:83:8c:
5a:e3:16:55:6b:c5:55:ef:65:d3:15:ee:39:af:2e:
30:e5:ea:ee:5e:e8:fe:f4:4e:b5:1f:34:1e:1a:25:
f0:37:61:16:f3:2f:8f:d8:9d:9b:01:28:35:d1:37:
04:13:d2:ec:37:cf:f2:ea:d5:16:01:de:d4:fe:d5:
f7:25:09:1d:e1:0f:10:d7:13:dc:d9:ab:2f:46:8b:
da:1b:78:0d:48:af:5c:67:89:e9:6b:c4:57:eb:b5:
cb:5b:29:bb:2a:f6:9d:7e:32:a0:a9:1f:ea:2f:f1:
e1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:11:8B:47:14:EB:1F:8A:E3:16:F0:57:8F:E4:C3:BF:15:EA:06:F5
X509v3 Authority Key Identifier:
keyid:3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b2:ec:8d:8d:28:08:d3:82:91:bd:c0:3e:ed:20:20:e0:ba:
aa:93:61:a7:63:e6:a2:4b:78:de:fd:cf:f8:45:c1:91:8f:49:
7d:23:b3:a7:e3:46:3b:30:50:11:b5:9b:9d:1e:10:53:46:d5:
b9:5c:9c:a7:b2:b4:43:03:c9:d6:1c:0d:e4:6c:71:aa:92:96:
aa:6b:82:76:ba:6a:8e:1c:fb:8c:32:47:95:ca:1a:de:1b:68:
2b:60:97:78:d6:ea:af:28:fc:0b:b3:1d:7a:45:26:dc:3d:8d:
ac:bc:73:81:03:eb:0e:a1:f8:e2:f0:bb:af:c7:59:9e:1d:66:
fa:a8:94:f2:b0:2a:14:51:55:1b:9d:ad:64:20:c7:38:66:13:
89:c8:dc:bf:f3:0d:2c:af:ef:84:b8:4b:91:cc:4a:a0:e6:83:
c7:0f:c6:d9:99:95:72:41:89:2a:59:35:94:46:73:11:ef:5d:
25:ae:00:1c:a2:08:7c:33:d5:2f:b6:0d:20:7a:9e:db:27:a8:
c1:c1:74:33:18:2b:21:34:07:34:80:b5:59:74:a7:84:90:e8:
d0:6e:c9:18:e4:5d:13:ae:ed:1d:3e:9e:ec:36:c4:be:65:5d:
37:f5:b3:2f:bc:20:1f:22:9a:da:df:3c:48:a3:97:42:74:c4:
a1:c3:c6:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaz2DJSH3j9mZodebdq4eRbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMTc3YjUyODA0M2E4NTk1M2ZjMjUwZjk5MWQ5ZDgwMjBl
MjgxMGQwHhcNMjUwNTA5MDcwMDEyWhcNMjUwNTEwMDcwMDEyWjAzMTEwLwYDVQQD
Eyg1ZDExOGI0NzE0ZWIxZjhhZTMxNmYwNTc4ZmU0YzNiZjE1ZWEwNmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVxO72Vy4FK1jhg75sw+Dpjc//UJ
6vMf/xMt9pdtTk2zWZahcfHd8+IGRFcG2BXqaoDNlZk2cVp+74gwizfiDqeqmeYS
bVm/k+fg7O85sh7Ixubf+Ia3UXrki0MkhPiZDcDS8f0Ld/spvBC/lJ2xRjUoBx4A
K0pCnoInqNUxJFbSePVAXc+G06CSl7xoVWAJhj89g4xa4xZVa8VV72XTFe45ry4w
5eruXuj+9E61HzQeGiXwN2EW8y+P2J2bASg10TcEE9LsN8/y6tUWAd7U/tX3JQkd
4Q8Q1xPc2asvRovaG3gNSK9cZ4npa8RX67XLWym7KvadfjKgqR/qL/HhfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0Ri0cU6x+K4xbwV4/kw78V6gb1MB8GA1UdIwQY
MBaAFDwXe1KAQ6hZU/wlD5kdnYAg4oENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEJkN1VvQkRxRmxUX0NVUG1SMmRnQ0RpZ1EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81ZWQ1MjUtM2YzNy00YzcwLWEyZWMt
YTQxNTFiNWUyZmNmLzEvUEJkN1VvQkRxRmxUX0NVUG1SMmRnQ0RpZ1EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81ZWQ1MjUtM2YzNy00YzcwLWEyZWMtYTQxNTFiNWUyZmNm
LzEvUEJkN1VvQkRxRmxUX0NVUG1SMmRnQ0RpZ1EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7LsjY0o
CNOCkb3APu0gIOC6qpNhp2Pmokt43v3P+EXBkY9JfSOzp+NGOzBQEbWbnR4QU0bV
uVycp7K0QwPJ1hwN5GxxqpKWqmuCdrpqjhz7jDJHlcoa3htoK2CXeNbqryj8C7Md
ekUm3D2NrLxzgQPrDqH44vC7r8dZnh1m+qiU8rAqFFFVG52tZCDHOGYTicjcv/MN
LK/vhLhLkcxKoOaDxw/G2ZmVckGJKlk1lEZzEe9dJa4AHKIIfDPVL7YNIHqe2yeo
wcF0MxgrITQHNIC1WXSnhJDo0G7JGORdE67tHT6e7DbEvmVdN/WzL7wgHyKa2t88
SKOXQnTEocPGWQ==
-----END CERTIFICATE-----
Generated at Fri May 9 12:00:35 2025 by rpki-client