Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
File: rJHyMKDi7to4EFIudKaYIAcT5iA.mft (raw, json)
Hash identifier: iWrU9I/TFmwo+RvlQt8YBj8sHGvHN4WPnBrmnb18GJg=
Subject key identifier: 57:88:33:CD:04:47:19:FC:A1:18:E3:50:42:0D:77:95:90:74:F5:1D
Authority key identifier: AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20
Certificate issuer: /CN=ac91f230a0e2eeda3810522e74a698200713e620
Certificate serial: 0196BCA4F3C2D822F13E7FA5FCFA2A89A275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
Manifest number: 0E43
Signing time: Sun 11 May 2025 00:00:48 +0000
Manifest this update: Sun 11 May 2025 00:00:48 +0000
Manifest next update: Mon 12 May 2025 00:00:48 +0000
Files and hashes: 1: gP_zsXfkqrzssG9MD4Zd7ibjL_Y.roa (hash: I686Ip553hliGvYAsWQzyhxBsV7CF+b8RDLkN0tXgB4=)
2: rJHyMKDi7to4EFIudKaYIAcT5iA.crl (hash: T8vveE1uP90oOGUsjle0n+gO5UK+b2LaEh513i4ylTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:f3:c2:d8:22:f1:3e:7f:a5:fc:fa:2a:89:a2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac91f230a0e2eeda3810522e74a698200713e620
Validity
Not Before: May 11 00:00:48 2025 GMT
Not After : May 12 00:00:48 2025 GMT
Subject: CN=578833cd044719fca118e350420d77959074f51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:85:01:ab:91:37:db:ee:5f:a5:d1:40:b4:
51:47:4d:3e:1b:ea:43:d1:09:37:97:82:a9:79:d9:
d5:57:90:b2:52:a3:83:62:ad:28:a2:b4:c4:88:2f:
b1:77:43:8e:36:09:89:45:bc:95:47:02:20:20:31:
c1:1e:a5:6f:45:83:fc:4b:82:b8:65:b8:2f:92:f2:
34:cb:d0:bd:15:92:73:b6:2a:c6:b1:99:1b:e0:37:
49:da:56:f7:68:3f:e2:3e:d3:64:c8:24:ac:fb:4d:
95:e7:41:79:8f:09:ed:0f:02:8e:bb:31:40:c7:2a:
5f:30:4e:8f:98:12:79:dc:00:99:21:dd:fa:16:8a:
b9:91:67:f0:c3:3b:3a:95:51:14:0d:ab:87:89:12:
df:fb:a9:d8:b2:c6:e8:30:e5:36:36:ef:35:0a:a2:
96:70:50:8a:bd:85:fb:60:ab:5a:e1:4b:42:9e:17:
16:c0:ac:6a:45:01:ff:aa:dc:5a:c0:82:96:6a:6b:
16:1d:69:c4:4d:66:ab:60:3b:34:d2:e1:5c:cf:08:
56:7e:8f:a6:74:31:ad:e0:22:4d:f6:6b:a2:dd:2f:
87:66:83:39:08:16:86:e5:61:6d:8c:bd:19:4f:0a:
68:f1:95:ba:fd:b7:69:a5:85:b8:fa:07:d2:65:ca:
f8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:88:33:CD:04:47:19:FC:A1:18:E3:50:42:0D:77:95:90:74:F5:1D
X509v3 Authority Key Identifier:
keyid:AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:6a:77:25:67:31:70:a8:a5:30:36:4c:b2:bd:40:10:f2:f9:
f7:b9:ab:b2:e4:25:f1:b0:4b:74:78:cc:88:84:97:8b:a4:c4:
01:42:5b:f2:f2:e5:d9:ba:cc:e0:57:2b:66:30:9e:eb:04:dc:
ab:fc:c5:e3:27:b1:73:5c:65:52:cc:47:ba:d7:f8:e4:c9:e1:
a0:9b:2a:8b:ba:ee:91:48:4b:28:b4:88:82:c1:ec:0a:15:46:
eb:f6:c2:5c:14:52:c0:34:50:00:8e:99:07:e0:3b:cb:34:66:
2e:10:64:14:3a:07:bc:9a:86:ab:4a:65:1f:ce:d8:ae:ac:4b:
9b:41:d5:0f:a9:c0:d4:47:87:6a:e7:27:b4:20:22:e2:8c:4b:
f6:27:14:be:d8:30:e6:f4:54:07:fd:a9:c0:c6:c8:85:5a:2e:
52:04:4c:e6:d5:66:a5:2f:55:c6:ef:2f:f7:89:c8:7e:92:ce:
46:b2:4b:7c:31:72:58:d8:ec:8a:20:6c:b9:85:15:af:ce:40:
23:51:a1:97:69:5a:8f:1b:99:93:d7:4b:ee:64:ce:3a:a4:6c:
36:06:d4:88:b4:00:28:40:0c:2a:17:fb:a4:3f:91:d3:3d:04:
24:12:3b:9a:63:1a:28:4b:63:33:3d:e2:0e:b1:51:f8:52:09:
24:05:d4:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8pPPC2CLxPn+l/PoqiaJ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOTFmMjMwYTBlMmVlZGEzODEwNTIyZTc0YTY5ODIwMDcx
M2U2MjAwHhcNMjUwNTExMDAwMDQ4WhcNMjUwNTEyMDAwMDQ4WjAzMTEwLwYDVQQD
Eyg1Nzg4MzNjZDA0NDcxOWZjYTExOGUzNTA0MjBkNzc5NTkwNzRmNTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtySFAauRN9vuX6XRQLRRR00+G+pD
0Qk3l4KpednVV5CyUqODYq0oorTEiC+xd0OONgmJRbyVRwIgIDHBHqVvRYP8S4K4
ZbgvkvI0y9C9FZJztirGsZkb4DdJ2lb3aD/iPtNkyCSs+02V50F5jwntDwKOuzFA
xypfME6PmBJ53ACZId36Foq5kWfwwzs6lVEUDauHiRLf+6nYssboMOU2Nu81CqKW
cFCKvYX7YKta4UtCnhcWwKxqRQH/qtxawIKWamsWHWnETWarYDs00uFczwhWfo+m
dDGt4CJN9mui3S+HZoM5CBaG5WFtjL0ZTwpo8ZW6/bdppYW4+gfSZcr40wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeIM80ERxn8oRjjUEINd5WQdPUdMB8GA1UdIwQY
MBaAFKyR8jCg4u7aOBBSLnSmmCAHE+YgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckpIeU1LRGk3dG80RUZJdWRLYVlJQWNUNWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9iNDYzYTYtMjgyZi00NWYwLWI0YmEt
Y2RmOTJmYmU4ZjBiLzEvckpIeU1LRGk3dG80RUZJdWRLYVlJQWNUNWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9iNDYzYTYtMjgyZi00NWYwLWI0YmEtY2RmOTJmYmU4ZjBi
LzEvckpIeU1LRGk3dG80RUZJdWRLYVlJQWNUNWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmp3JWcx
cKilMDZMsr1AEPL597mrsuQl8bBLdHjMiISXi6TEAUJb8vLl2brM4FcrZjCe6wTc
q/zF4yexc1xlUsxHutf45MnhoJsqi7rukUhLKLSIgsHsChVG6/bCXBRSwDRQAI6Z
B+A7yzRmLhBkFDoHvJqGq0plH87YrqxLm0HVD6nA1EeHaucntCAi4oxL9icUvtgw
5vRUB/2pwMbIhVouUgRM5tVmpS9Vxu8v94nIfpLORrJLfDFyWNjsiiBsuYUVr85A
I1Ghl2lajxuZk9dL7mTOOqRsNgbUiLQAKEAMKhf7pD+R0z0EJBI7mmMaKEtjMz3i
DrFR+FIJJAXUSw==
-----END CERTIFICATE-----
Generated at Sun May 11 09:06:23 2025 by rpki-client