Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
File: u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft (raw, json)
Hash identifier: Miv3RG92ng0FJRqTIacW+Lfx4cKbQ+8yEgcopS9mrXw=
Subject key identifier: CA:3C:82:70:86:4A:06:36:77:C3:20:9D:23:37:56:61:6D:4A:14:9B
Authority key identifier: BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
Certificate issuer: /CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Certificate serial: 0196BAB693EA05C902FBFEC0CE7D12931883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
Manifest number: 030D
Signing time: Sat 10 May 2025 15:00:49 +0000
Manifest this update: Sat 10 May 2025 15:00:49 +0000
Manifest next update: Sun 11 May 2025 15:00:49 +0000
Files and hashes: 1: 1-d2k_vU-BkEDRcLdH-TIekg9VxQ.roa (hash: BNmjLGfRynwPkim2jPmJ7ZmYJ2M4K6NMjQ6A9ZIWsHE=)
2: u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl (hash: 4RH0B795vqL0fZIacvHf9gvJ+Op11pN8yu4bRa8/Ogw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:93:ea:05:c9:02:fb:fe:c0:ce:7d:12:93:18:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Validity
Not Before: May 10 15:00:49 2025 GMT
Not After : May 11 15:00:49 2025 GMT
Subject: CN=ca3c8270864a063677c3209d233756616d4a149b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:e5:1f:35:ff:92:0d:e7:cb:e4:f0:ad:57:
ac:80:c5:27:27:5c:d7:8e:37:27:3c:d0:aa:30:60:
6a:eb:7d:f4:87:28:bd:bc:7f:cc:ee:26:fb:43:f0:
4b:35:fe:0e:86:c6:1f:1d:83:3b:40:6c:e7:7f:fe:
92:12:8f:83:8f:6c:13:61:14:15:e8:14:fb:29:9b:
1d:ae:db:2c:82:01:be:57:89:32:4c:bd:06:34:20:
c3:ae:cd:8b:cb:7d:ca:d7:12:6b:61:16:ee:5d:e5:
c3:f3:15:2f:6f:c1:56:fa:09:43:31:90:b5:72:ea:
6a:10:6b:b9:4b:e4:70:d2:fd:8d:74:1c:d0:c5:97:
9d:62:b2:e7:4b:95:cd:79:fc:8f:06:d5:a4:35:85:
75:bb:58:f0:6d:16:a4:d2:40:e4:cf:d0:46:e6:9b:
22:1f:f8:7a:c7:fc:67:7a:70:70:98:0e:33:fa:ce:
16:40:4c:1b:89:53:0a:d3:b8:01:a4:73:4f:1b:4c:
0e:72:a1:8f:d4:85:55:51:59:07:86:ef:8f:2d:d5:
8b:9e:5f:bb:91:d5:18:77:d3:f9:e8:66:0b:36:52:
2e:7c:ce:e4:03:66:3d:04:a3:8a:09:45:ee:3c:20:
dc:92:0a:da:64:4d:3a:cb:a7:65:15:43:53:3b:68:
d3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3C:82:70:86:4A:06:36:77:C3:20:9D:23:37:56:61:6D:4A:14:9B
X509v3 Authority Key Identifier:
keyid:BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9d:78:cd:b2:fb:79:0c:ad:01:3b:e7:6b:27:98:df:95:bf:
c5:96:05:62:cf:91:4b:0c:b0:21:ff:3b:88:7e:34:50:77:a2:
d8:4b:e1:dd:1b:69:4b:d5:0a:b5:92:86:2a:c0:96:73:1f:e1:
64:e4:fb:e2:69:4e:8b:8d:d4:3a:a1:5f:b3:ef:d6:dc:fd:ff:
c0:52:82:f7:7d:f9:52:98:8e:5f:be:b2:5c:4f:49:d7:f7:98:
a1:d7:37:6c:81:bf:c0:60:0f:31:3a:ab:f1:3a:7d:16:e1:60:
18:13:4b:25:34:fa:51:59:a1:83:b5:8c:af:4d:bc:b2:cc:11:
33:39:c0:b5:a2:f5:52:0f:28:4a:b9:79:4c:d2:12:5b:1b:7d:
94:47:1d:6f:a2:e5:3f:e5:8a:51:f4:27:e0:e5:f6:9b:79:70:
6e:7d:2e:10:4f:57:7c:34:eb:16:24:bd:73:9d:5b:11:1b:78:
e3:fc:e8:d0:11:da:21:1a:6a:5b:6f:84:04:de:ad:0f:c5:cc:
9e:aa:89:f3:37:34:30:16:1b:c7:11:bb:c0:ec:1a:06:ba:79:
7a:ce:b0:56:14:3a:06:fe:06:11:90:68:1b:fd:15:33:40:33:
7b:79:62:ae:b4:74:8c:d7:98:08:ec:11:5b:dc:c3:15:c3:87:
6b:85:12:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6tpPqBckC+/7Azn0SkxiDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiOTM2OTMzZGMzYWEwM2IzZGFhMDZlNWIzODczZjM1YmRh
YjU1ZDIwHhcNMjUwNTEwMTUwMDQ5WhcNMjUwNTExMTUwMDQ5WjAzMTEwLwYDVQQD
EyhjYTNjODI3MDg2NGEwNjM2NzdjMzIwOWQyMzM3NTY2MTZkNGExNDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEXlHzX/kg3ny+TwrVesgMUnJ1zX
jjcnPNCqMGBq6330hyi9vH/M7ib7Q/BLNf4OhsYfHYM7QGznf/6SEo+Dj2wTYRQV
6BT7KZsdrtssggG+V4kyTL0GNCDDrs2Ly33K1xJrYRbuXeXD8xUvb8FW+glDMZC1
cupqEGu5S+Rw0v2NdBzQxZedYrLnS5XNefyPBtWkNYV1u1jwbRak0kDkz9BG5psi
H/h6x/xnenBwmA4z+s4WQEwbiVMK07gBpHNPG0wOcqGP1IVVUVkHhu+PLdWLnl+7
kdUYd9P56GYLNlIufM7kA2Y9BKOKCUXuPCDckgraZE06y6dlFUNTO2jT6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMo8gnCGSgY2d8MgnSM3VmFtShSbMB8GA1UdIwQY
MBaAFLuTaTPcOqA7PaoG5bOHPzW9q1XSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTVOcE05dzZvRHM5cWdibHM0Y19OYjJyVmRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wY2E1OWItMzJkMS00NmEyLWJlNDgt
MGMzM2UxMjY0ZDdmLzEvdTVOcE05dzZvRHM5cWdibHM0Y19OYjJyVmRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8wY2E1OWItMzJkMS00NmEyLWJlNDgtMGMzM2UxMjY0ZDdm
LzEvdTVOcE05dzZvRHM5cWdibHM0Y19OYjJyVmRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZ14zbL7
eQytATvnayeY35W/xZYFYs+RSwywIf87iH40UHei2Evh3RtpS9UKtZKGKsCWcx/h
ZOT74mlOi43UOqFfs+/W3P3/wFKC9335UpiOX76yXE9J1/eYodc3bIG/wGAPMTqr
8Tp9FuFgGBNLJTT6UVmhg7WMr028sswRMznAtaL1Ug8oSrl5TNISWxt9lEcdb6Ll
P+WKUfQn4OX2m3lwbn0uEE9XfDTrFiS9c51bERt44/zo0BHaIRpqW2+EBN6tD8XM
nqqJ8zc0MBYbxxG7wOwaBrp5es6wVhQ6Bv4GEZBoG/0VM0Aze3lirrR0jNeYCOwR
W9zDFcOHa4USfw==
-----END CERTIFICATE-----
Generated at Sat May 10 16:37:07 2025 by rpki-client