Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
File: iuS5P-tx3eKCO3DH27eeD5m1bBs.mft (raw, json)
Hash identifier: DAVZSbG7EWoYoinhja16aCLYceBr/Cvv9sAPICbLaP0=
Subject key identifier: 1D:EA:3E:44:DF:34:54:BD:F5:1B:B3:9A:08:5F:4E:02:3C:C7:C1:0D
Authority key identifier: 8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
Certificate issuer: /CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Certificate serial: 0196CBE16DF170908B695D837318258E4289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
Manifest number: 0853
Signing time: Tue 13 May 2025 23:01:10 +0000
Manifest this update: Tue 13 May 2025 23:01:10 +0000
Manifest next update: Wed 14 May 2025 23:01:10 +0000
Files and hashes: 1: J2gFJxTXec_tCl5fYmT5ueu90dA.roa (hash: eqh0jr48WZnOgc9VcsakSv2fxPv1f923UQBSwi0u554=)
2: iuS5P-tx3eKCO3DH27eeD5m1bBs.crl (hash: HILwmQfeM7DSdnmFqVaYND+5aiplwMcE+v4qpMMZNyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:e1:6d:f1:70:90:8b:69:5d:83:73:18:25:8e:42:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Validity
Not Before: May 13 23:01:10 2025 GMT
Not After : May 14 23:01:10 2025 GMT
Subject: CN=1dea3e44df3454bdf51bb39a085f4e023cc7c10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f7:b0:c3:d7:4a:d8:48:4f:7b:bb:79:06:1e:
70:fd:d0:73:5b:fc:95:cf:7c:7e:8c:0c:b7:f4:4d:
8c:a8:1d:af:04:aa:8b:52:72:4b:9c:7e:38:fb:a4:
4c:84:81:de:68:f7:c8:fd:9a:72:a5:19:1b:35:ce:
5a:01:76:9f:7c:1e:8d:40:86:48:13:db:0e:3f:88:
80:e6:23:2b:1b:4a:fb:6b:10:0d:72:7e:9a:2e:58:
7c:1f:1a:60:39:57:f6:9d:39:34:62:da:1e:05:ae:
0e:99:2e:a9:01:a8:de:77:10:d5:df:df:40:df:7e:
c6:22:16:ca:35:09:48:35:8a:dd:a6:c1:35:44:c6:
ff:29:20:2a:d4:c5:29:a6:b9:4c:cc:18:f9:b1:7e:
9d:08:e0:f2:07:85:c1:d6:cc:cd:75:77:32:7d:b3:
57:66:57:35:f2:47:0d:59:2a:2c:fe:aa:44:36:dc:
7e:c1:b8:8d:3d:34:77:b6:83:83:69:13:77:0f:4c:
c4:33:5b:7f:9d:cd:5c:a6:19:fb:21:c8:83:31:64:
69:3d:fc:a6:14:84:48:01:49:e2:05:97:7f:cb:5b:
f6:94:64:5f:5a:70:3f:de:85:d9:c6:98:08:2c:9b:
2a:07:27:9f:1f:d7:ef:e2:79:1d:5b:db:39:b8:80:
44:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EA:3E:44:DF:34:54:BD:F5:1B:B3:9A:08:5F:4E:02:3C:C7:C1:0D
X509v3 Authority Key Identifier:
keyid:8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:78:68:b1:9c:e9:0f:02:c8:bf:21:c5:1b:25:42:77:5c:18:
b8:ca:c2:ed:b5:24:03:72:c7:6c:e2:fa:50:4b:70:28:0e:bb:
ed:3a:04:97:8e:88:42:8f:62:8b:d5:e0:4d:40:3b:f2:7b:54:
14:96:49:7a:c1:82:f0:e9:86:20:da:53:7f:46:bf:57:1c:dd:
60:b7:f6:73:67:b0:0b:77:d7:f3:b0:23:68:be:84:f6:df:69:
48:5a:3b:c6:fb:60:a7:3d:cf:a5:ce:75:b5:9a:81:07:5f:70:
ee:df:a7:4d:ba:e6:44:96:e0:ae:29:fe:75:1e:3d:fc:31:24:
4b:ce:c4:cd:23:eb:87:5e:2a:ad:ef:d9:18:d6:d8:8a:66:9f:
ed:6c:4b:29:8b:be:5c:0e:d9:84:83:2c:04:41:a6:1e:f2:fd:
f3:8d:4a:dd:37:68:c7:3b:b6:f3:e5:b8:2e:cc:54:2a:f9:db:
e9:50:b8:08:cb:50:2c:a3:ec:33:45:ed:f3:58:4f:f2:47:d4:
25:5f:6b:9c:66:2c:ae:47:d2:f3:84:07:09:0d:49:12:39:b0:
59:c1:ca:38:c8:37:0b:08:90:69:50:4f:a1:b7:06:7d:6f:67:
2a:9e:3b:94:3d:2a:22:cb:6e:c0:60:46:88:6b:79:32:58:42:
b2:ee:6a:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbL4W3xcJCLaV2DcxgljkKJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZTRiOTNmZWI3MWRkZTI4MjNiNzBjN2RiYjc5ZTBmOTli
NTZjMWIwHhcNMjUwNTEzMjMwMTEwWhcNMjUwNTE0MjMwMTEwWjAzMTEwLwYDVQQD
EygxZGVhM2U0NGRmMzQ1NGJkZjUxYmIzOWEwODVmNGUwMjNjYzdjMTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Peww9dK2EhPe7t5Bh5w/dBzW/yV
z3x+jAy39E2MqB2vBKqLUnJLnH44+6RMhIHeaPfI/ZpypRkbNc5aAXaffB6NQIZI
E9sOP4iA5iMrG0r7axANcn6aLlh8HxpgOVf2nTk0YtoeBa4OmS6pAajedxDV399A
337GIhbKNQlINYrdpsE1RMb/KSAq1MUpprlMzBj5sX6dCODyB4XB1szNdXcyfbNX
Zlc18kcNWSos/qpENtx+wbiNPTR3toODaRN3D0zEM1t/nc1cphn7IciDMWRpPfym
FIRIAUniBZd/y1v2lGRfWnA/3oXZxpgILJsqByefH9fv4nkdW9s5uIBE1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3qPkTfNFS99RuzmghfTgI8x8ENMB8GA1UdIwQY
MBaAFIrkuT/rcd3igjtwx9u3ng+ZtWwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXVTNVAtdHgzZUtDTzNESDI3ZWVENW0xYkJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83MGU2NzgtODQ5NS00NmFlLTk2ZDct
MjljNTE3NjkwMmM2LzEvaXVTNVAtdHgzZUtDTzNESDI3ZWVENW0xYkJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC83MGU2NzgtODQ5NS00NmFlLTk2ZDctMjljNTE3NjkwMmM2
LzEvaXVTNVAtdHgzZUtDTzNESDI3ZWVENW0xYkJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXhosZzp
DwLIvyHFGyVCd1wYuMrC7bUkA3LHbOL6UEtwKA677ToEl46IQo9ii9XgTUA78ntU
FJZJesGC8OmGINpTf0a/VxzdYLf2c2ewC3fX87AjaL6E9t9pSFo7xvtgpz3Ppc51
tZqBB19w7t+nTbrmRJbgrin+dR49/DEkS87EzSPrh14qre/ZGNbYimaf7WxLKYu+
XA7ZhIMsBEGmHvL9841K3Tdoxzu28+W4LsxUKvnb6VC4CMtQLKPsM0Xt81hP8kfU
JV9rnGYsrkfS84QHCQ1JEjmwWcHKOMg3CwiQaVBPobcGfW9nKp47lD0qIstuwGBG
iGt5MlhCsu5qCQ==
-----END CERTIFICATE-----
Generated at Wed May 14 03:05:22 2025 by rpki-client