Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
File: rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft (raw, json)
Hash identifier: zS/A+9V4Njv/V2cjmviHiS0fqZetnxBbxulDvogzfnk=
Subject key identifier: AC:85:4D:4C:5A:56:77:74:1E:F5:6E:01:15:19:E7:4B:4E:85:1B:E1
Authority key identifier: AD:39:3C:63:F1:78:65:78:21:A2:37:BA:02:6C:A5:27:92:33:33:3D
Certificate issuer: /CN=ad393c63f178657821a237ba026ca5279233333d
Certificate serial: 0196C57107C2944716B8C301528BE345F566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
Manifest number: 0DAC
Signing time: Mon 12 May 2025 17:00:41 +0000
Manifest this update: Mon 12 May 2025 17:00:41 +0000
Manifest next update: Tue 13 May 2025 17:00:41 +0000
Files and hashes: 1: NRGRL-46NCSPaGi9AZCwzE3w5nE.roa (hash: u0L8t2q2EBStWXwxFZXL40Y75wNx2nDlIz7mo+UHSk8=)
2: rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl (hash: Bv81DP6myPMTdHHeIpby5lYUMRTox29hpwrmDgeFvnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:71:07:c2:94:47:16:b8:c3:01:52:8b:e3:45:f5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad393c63f178657821a237ba026ca5279233333d
Validity
Not Before: May 12 17:00:41 2025 GMT
Not After : May 13 17:00:41 2025 GMT
Subject: CN=ac854d4c5a5677741ef56e011519e74b4e851be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:d1:d8:0e:e4:60:e5:e6:d0:10:79:af:cf:
ef:1b:87:a1:00:43:a2:29:09:32:d0:2c:7c:05:e1:
46:a4:ae:02:30:97:4b:a2:f6:39:d5:a9:6f:dd:2d:
f2:61:1e:77:56:8b:cd:8e:44:1c:d2:58:90:0f:76:
7d:be:13:1d:6e:66:22:c2:83:9b:15:67:4d:85:93:
96:fd:59:c4:e5:83:7c:a4:65:bc:0b:1d:d9:ae:d8:
6f:55:70:fa:2b:c6:17:1a:57:be:8b:93:38:f7:06:
27:16:08:9f:1d:a7:58:9a:60:46:9e:ad:4c:c5:e8:
bb:3e:c8:e2:4d:b6:ca:93:a9:72:30:82:2b:0d:44:
ad:d2:d3:54:64:41:56:e7:6f:26:bf:0e:e0:73:bc:
9d:45:37:b8:d3:a1:0d:53:8c:4f:59:63:de:4f:20:
46:e1:7a:a1:22:24:e8:5f:c7:30:16:75:65:4f:44:
21:ba:c6:4a:92:71:10:e8:a8:0e:54:fb:be:68:65:
3d:0a:f5:de:3a:62:2b:f3:22:ab:fe:fa:3b:4d:25:
1b:12:3d:4d:90:5b:7b:e3:54:a2:da:d5:1d:09:e4:
2e:2f:85:d3:3b:cf:d4:a1:da:e3:fa:29:d6:e8:d0:
0c:a0:eb:ea:23:2a:ca:4d:a6:56:7b:5d:24:66:4d:
0e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:85:4D:4C:5A:56:77:74:1E:F5:6E:01:15:19:E7:4B:4E:85:1B:E1
X509v3 Authority Key Identifier:
keyid:AD:39:3C:63:F1:78:65:78:21:A2:37:BA:02:6C:A5:27:92:33:33:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f5:a9:86:68:40:5c:32:96:a4:03:dd:f5:b6:30:59:d0:5a:
7d:a6:99:53:9d:0c:ef:36:55:09:da:2d:d2:82:69:72:c6:08:
8f:0c:14:6f:29:3a:c0:2a:fc:67:16:b4:bd:eb:de:5b:06:ff:
39:ae:e0:7d:01:95:73:57:5d:8b:dd:1b:fb:56:99:76:80:72:
bb:c7:46:8d:bb:30:fb:99:27:19:a4:97:01:c6:a9:82:1c:7a:
e7:85:a1:87:99:83:c4:1c:70:a9:d4:d6:fa:1d:f5:48:b1:76:
f8:09:40:fd:b6:e0:88:bb:28:00:c0:92:b3:82:a1:fd:b8:03:
6f:10:05:4f:5e:c7:8f:4a:89:b2:b7:c1:5c:ab:22:4c:b7:3c:
0e:2b:39:e2:ea:32:a3:ed:ab:be:9d:0e:e9:6b:8d:d8:a4:1c:
09:d0:47:8a:92:3a:aa:e9:d5:c1:26:8a:90:ed:f3:3b:31:65:
a4:8e:9d:4b:64:07:f3:f9:77:73:1d:5f:5d:e2:3f:a4:99:1a:
ba:d9:c6:79:6a:46:ae:c9:39:de:b9:26:d9:38:0e:fe:2f:22:
28:07:fa:15:1d:9c:fa:33:a7:e6:83:ae:0c:2e:cb:82:da:d2:
16:58:ca:d1:09:7e:e1:92:fe:f8:92:e4:d3:17:8b:5d:d7:92:
2e:d2:d8:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFcQfClEcWuMMBUovjRfVmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMzkzYzYzZjE3ODY1NzgyMWEyMzdiYTAyNmNhNTI3OTIz
MzMzM2QwHhcNMjUwNTEyMTcwMDQxWhcNMjUwNTEzMTcwMDQxWjAzMTEwLwYDVQQD
EyhhYzg1NGQ0YzVhNTY3Nzc0MWVmNTZlMDExNTE5ZTc0YjRlODUxYmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCHR2A7kYOXm0BB5r8/vG4ehAEOi
KQky0Cx8BeFGpK4CMJdLovY51alv3S3yYR53VovNjkQc0liQD3Z9vhMdbmYiwoOb
FWdNhZOW/VnE5YN8pGW8Cx3ZrthvVXD6K8YXGle+i5M49wYnFgifHadYmmBGnq1M
xei7PsjiTbbKk6lyMIIrDUSt0tNUZEFW528mvw7gc7ydRTe406ENU4xPWWPeTyBG
4XqhIiToX8cwFnVlT0QhusZKknEQ6KgOVPu+aGU9CvXeOmIr8yKr/vo7TSUbEj1N
kFt741Si2tUdCeQuL4XTO8/Uodrj+inW6NAMoOvqIyrKTaZWe10kZk0OTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyFTUxaVnd0HvVuARUZ50tOhRvhMB8GA1UdIwQY
MBaAFK05PGPxeGV4IaI3ugJspSeSMzM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclRrOFlfRjRaWGdob2plNkFteWxKNUl6TXowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zOWU5ZWMtOGZhNS00MDljLWIxZGUt
OTM3ZTlkOTljYWMyLzEvclRrOFlfRjRaWGdob2plNkFteWxKNUl6TXowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zOWU5ZWMtOGZhNS00MDljLWIxZGUtOTM3ZTlkOTljYWMy
LzEvclRrOFlfRjRaWGdob2plNkFteWxKNUl6TXowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/WphmhA
XDKWpAPd9bYwWdBafaaZU50M7zZVCdot0oJpcsYIjwwUbyk6wCr8Zxa0veveWwb/
Oa7gfQGVc1ddi90b+1aZdoByu8dGjbsw+5knGaSXAcapghx654Whh5mDxBxwqdTW
+h31SLF2+AlA/bbgiLsoAMCSs4Kh/bgDbxAFT17Hj0qJsrfBXKsiTLc8Dis54uoy
o+2rvp0O6WuN2KQcCdBHipI6qunVwSaKkO3zOzFlpI6dS2QH8/l3cx1fXeI/pJka
utnGeWpGrsk53rkm2TgO/i8iKAf6FR2c+jOn5oOuDC7LgtrSFljK0Ql+4ZL++JLk
0xeLXdeSLtLYbw==
-----END CERTIFICATE-----
Generated at Mon May 12 20:11:30 2025 by rpki-client