Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
File: cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft (raw, json)
Hash identifier: cZQLt+hQYtvKcwg0uqAVxN7vg8KD8wqHP/p1xDebdcY=
Subject key identifier: 62:6A:37:79:F7:EC:AD:CF:FB:21:DE:A8:E7:99:2D:DD:42:F3:53:38
Authority key identifier: 70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D
Certificate issuer: /CN=708029a674177efd99252275094618c0c9cfbd1d
Certificate serial: 0196A2ADBF04B364CB7490385E6A1036F1B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
Manifest number: 04F1
Signing time: Mon 05 May 2025 23:00:17 +0000
Manifest this update: Mon 05 May 2025 23:00:17 +0000
Manifest next update: Tue 06 May 2025 23:00:17 +0000
Files and hashes: 1: cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl (hash: xQgQxcdnUz3z+ZaU0FWJRaA7kllp0XHBrfS5LKmQmbE=)
2: gf0Xy6qbBLzQzsLjIlFfh_7JZjk.roa (hash: Ah/uhPrNkgzcI+es99gluPPaRScN93x4JTQmt+pb9V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:ad:bf:04:b3:64:cb:74:90:38:5e:6a:10:36:f1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708029a674177efd99252275094618c0c9cfbd1d
Validity
Not Before: May 5 23:00:17 2025 GMT
Not After : May 6 23:00:17 2025 GMT
Subject: CN=626a3779f7ecadcffb21dea8e7992ddd42f35338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e2:e9:7f:45:08:a7:d5:85:e5:8f:d5:aa:19:
7a:b6:5d:2c:a9:cd:62:20:3b:00:c2:a3:ac:20:75:
7b:ff:ae:11:c3:17:29:1b:13:cc:f5:f5:17:91:a4:
85:cc:73:fb:c7:99:d4:6b:a0:f0:2e:be:ea:4b:6b:
76:66:90:51:43:eb:d8:bc:b6:61:00:bd:4e:78:63:
e1:d9:e3:a9:d9:25:b6:b8:82:ab:68:9e:6c:6b:5b:
cb:bc:dd:7c:98:14:b3:aa:a1:40:96:05:7a:47:a2:
22:28:fc:51:95:b5:07:ab:24:ae:2c:87:df:ca:4a:
60:93:6a:1d:b5:8e:f5:71:6e:16:cd:23:27:9d:83:
a5:0b:14:f3:6d:2e:23:96:c9:69:b0:07:a6:ed:d6:
7c:5b:c4:02:92:25:47:25:79:93:64:d9:b5:30:a1:
2e:12:a2:8c:77:02:c2:0a:ee:26:a6:e7:70:10:4c:
df:11:c3:b2:46:bd:68:d9:5d:e5:2e:dc:68:eb:c5:
f1:dd:ab:1d:99:33:ab:25:84:fa:27:90:f5:e3:11:
05:c0:31:c5:65:b3:d1:d5:16:31:a5:8e:3b:08:17:
04:cd:d4:4a:5a:2d:af:de:db:20:5a:e9:2b:61:d3:
36:41:97:36:ff:79:c1:5d:10:15:6e:9e:3c:af:9c:
af:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6A:37:79:F7:EC:AD:CF:FB:21:DE:A8:E7:99:2D:DD:42:F3:53:38
X509v3 Authority Key Identifier:
keyid:70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:49:bd:40:59:39:1a:21:58:96:a0:a2:45:bf:dd:2e:23:5a:
b8:7e:64:67:9d:8c:12:34:d5:d9:a0:e4:8a:d3:b0:87:fc:28:
aa:a2:31:7e:87:ca:f4:ea:c5:40:36:73:81:4d:0b:5a:fb:0d:
d6:fc:ad:35:92:1c:a5:81:4b:6b:05:13:9b:d7:80:43:46:19:
03:86:f0:1c:49:74:59:bc:02:3b:5d:97:5c:e1:7c:2e:28:50:
d3:ad:ff:5d:e7:6c:a6:de:26:eb:49:cd:9f:a3:bb:25:8b:47:
ef:4f:19:d4:a0:de:b3:e6:58:d9:76:b4:74:17:4a:c4:9a:67:
78:8e:6b:37:57:a0:95:52:e3:54:10:e0:f1:97:94:30:66:27:
94:7d:b8:16:5d:03:9e:a7:03:5a:da:9b:8d:82:08:49:d5:ab:
b9:0a:9a:b6:ad:cc:f4:da:1e:f2:e9:d1:a0:da:d4:06:56:06:
1d:28:3e:1e:f6:62:ae:3e:a7:ec:46:22:8f:08:60:cf:31:eb:
e8:ed:5e:2c:63:4d:9a:79:0a:f2:3b:93:ee:4e:45:2d:69:b9:
ab:cb:92:fe:59:43:cb:58:64:a5:8c:c0:ce:ff:a7:3b:62:63:
9c:3a:62:e5:3a:c0:3a:1e:d7:d6:ab:be:4c:97:62:ac:bd:01:
6b:3d:ae:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZairb8Es2TLdJA4XmoQNvG4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwODAyOWE2NzQxNzdlZmQ5OTI1MjI3NTA5NDYxOGMwYzlj
ZmJkMWQwHhcNMjUwNTA1MjMwMDE3WhcNMjUwNTA2MjMwMDE3WjAzMTEwLwYDVQQD
Eyg2MjZhMzc3OWY3ZWNhZGNmZmIyMWRlYThlNzk5MmRkZDQyZjM1MzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uLpf0UIp9WF5Y/Vqhl6tl0sqc1i
IDsAwqOsIHV7/64RwxcpGxPM9fUXkaSFzHP7x5nUa6DwLr7qS2t2ZpBRQ+vYvLZh
AL1OeGPh2eOp2SW2uIKraJ5sa1vLvN18mBSzqqFAlgV6R6IiKPxRlbUHqySuLIff
ykpgk2odtY71cW4WzSMnnYOlCxTzbS4jlslpsAem7dZ8W8QCkiVHJXmTZNm1MKEu
EqKMdwLCCu4mpudwEEzfEcOyRr1o2V3lLtxo68Xx3asdmTOrJYT6J5D14xEFwDHF
ZbPR1RYxpY47CBcEzdRKWi2v3tsgWukrYdM2QZc2/3nBXRAVbp48r5yv3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJqN3n37K3P+yHeqOeZLd1C81M4MB8GA1UdIwQY
MBaAFHCAKaZ0F379mSUidQlGGMDJz70dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0lBcHBuUVhmdjJaSlNKMUNVWVl3TW5QdlIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wOGQ0NGMtZjEwMi00YjcwLThkYjAt
NzJhYmVlZmVkYTRhLzEvY0lBcHBuUVhmdjJaSlNKMUNVWVl3TW5QdlIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8wOGQ0NGMtZjEwMi00YjcwLThkYjAtNzJhYmVlZmVkYTRh
LzEvY0lBcHBuUVhmdjJaSlNKMUNVWVl3TW5QdlIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0m9QFk5
GiFYlqCiRb/dLiNauH5kZ52MEjTV2aDkitOwh/woqqIxfofK9OrFQDZzgU0LWvsN
1vytNZIcpYFLawUTm9eAQ0YZA4bwHEl0WbwCO12XXOF8LihQ063/Xedspt4m60nN
n6O7JYtH708Z1KDes+ZY2Xa0dBdKxJpneI5rN1eglVLjVBDg8ZeUMGYnlH24Fl0D
nqcDWtqbjYIISdWruQqatq3M9Noe8unRoNrUBlYGHSg+HvZirj6n7EYijwhgzzHr
6O1eLGNNmnkK8juT7k5FLWm5q8uS/llDy1hkpYzAzv+nO2JjnDpi5TrAOh7X1qu+
TJdirL0Baz2u3A==
-----END CERTIFICATE-----
Generated at Tue May 6 02:04:41 2025 by rpki-client