Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
File: rh6ygNFyKEakQSTExi0AWfYa8kI.mft (raw, json)
Hash identifier: 7NGEKOFFRA6BPrL7b+x6BkTSJ7VmtmO8SJczgypxaaY=
Subject key identifier: 5C:80:DB:E8:09:4A:4D:D0:34:90:2D:EE:0A:D9:C9:09:0D:19:34:44
Authority key identifier: AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42
Certificate issuer: /CN=ae1eb280d1722846a44124c4c62d0059f61af242
Certificate serial: 0196C2027029076B9799F0D895622EE22600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 01:01:01 +0000
Manifest this update: Mon 12 May 2025 01:01:01 +0000
Manifest next update: Tue 13 May 2025 01:01:01 +0000
Files and hashes: 1: AkkqTkgoNjucTbIenc-XdoQnIZI.roa (hash: 22rbMnk8MBt5UQAAhQP9wIF7s9K2LwR7KpEuXLLCYQA=)
2: rh6ygNFyKEakQSTExi0AWfYa8kI.crl (hash: b5cAV8O6GEDzjeLDdPzA9r0eR56PXBEMTZNUrYXAW2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:70:29:07:6b:97:99:f0:d8:95:62:2e:e2:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1eb280d1722846a44124c4c62d0059f61af242
Validity
Not Before: May 12 01:01:01 2025 GMT
Not After : May 13 01:01:01 2025 GMT
Subject: CN=5c80dbe8094a4dd034902dee0ad9c9090d193444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e8:98:41:50:13:94:31:56:d9:32:01:91:9d:
81:bd:ba:20:21:aa:5f:20:3c:5f:09:0e:f7:3e:fc:
0a:52:d4:65:85:e0:0c:cb:30:c5:c8:9a:c5:51:a3:
3c:c9:5d:04:b9:80:e0:93:1c:d4:c3:be:09:6e:be:
b9:ca:96:f8:84:3c:f6:86:ad:c6:96:8f:62:61:04:
ca:e8:7a:de:5e:ac:b2:55:b9:31:85:88:c7:19:c0:
aa:86:96:29:1c:a1:c4:69:3a:4f:cb:5c:90:e6:89:
db:43:0a:1f:12:99:07:86:b9:55:01:99:e8:9b:2e:
a5:8c:66:b0:06:7f:84:42:21:a8:70:ee:24:f7:ef:
9b:c6:e8:38:eb:ed:d7:2d:17:d4:17:b8:35:00:32:
8b:40:74:1d:4f:82:bf:df:ae:44:b4:b8:64:ff:5b:
e7:75:0a:b4:3f:92:f4:2b:7e:26:89:8d:63:33:40:
ff:b5:8d:89:21:ae:4e:cd:00:e3:78:3b:2d:f2:dc:
27:1e:d8:25:29:f3:03:fa:30:0f:b9:76:51:bd:c1:
d0:0d:db:c4:d8:b2:b6:25:49:42:3b:e4:a5:23:96:
93:95:22:3f:65:c9:b9:64:2f:bb:a5:81:b4:c0:70:
46:76:12:03:99:8d:c6:54:d2:f3:7a:70:88:db:30:
d8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:80:DB:E8:09:4A:4D:D0:34:90:2D:EE:0A:D9:C9:09:0D:19:34:44
X509v3 Authority Key Identifier:
keyid:AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5e:78:b1:9f:9c:ba:6e:54:20:af:a3:63:79:7e:f5:97:f5:
3f:1f:b3:79:88:01:e0:13:47:c2:83:42:77:95:26:89:05:48:
a0:6d:3a:0a:3c:63:b4:1e:3b:fc:17:58:46:c2:a6:c1:a6:7f:
58:92:df:1a:66:7e:38:9d:ef:a5:02:a8:6c:7d:d1:fd:a7:39:
7b:10:42:04:d6:71:37:9c:84:70:75:7a:7b:e9:c8:71:c0:30:
aa:f0:93:43:fc:22:29:03:4f:b7:d9:1f:7b:c6:36:36:cd:2b:
f7:fc:82:20:67:02:a2:d7:1d:17:de:ba:67:42:9d:36:8e:83:
b6:64:10:eb:f0:11:81:d3:5e:1c:5b:a1:8d:78:02:ee:87:a4:
26:fd:7d:7f:f8:de:81:0a:3a:f5:75:4f:4e:aa:06:d4:77:c8:
1e:4f:74:3c:a6:ca:94:9d:85:7a:de:2c:3f:8d:d6:fe:d5:71:
fc:5c:08:2a:d6:eb:f4:7f:bf:18:f1:6a:fe:5f:c7:3f:ec:5b:
98:39:96:bc:6a:e2:53:82:42:28:d3:3e:d1:4f:eb:c7:3a:4b:
ca:6f:1a:84:ee:2a:91:f6:5d:76:49:ab:5f:d7:aa:19:af:24:
96:7a:cc:9d:a8:32:32:ee:b3:44:14:c9:26:a5:3e:7a:9a:2f:
b5:71:84:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCAnApB2uXmfDYlWIu4iYAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMWViMjgwZDE3MjI4NDZhNDQxMjRjNGM2MmQwMDU5ZjYx
YWYyNDIwHhcNMjUwNTEyMDEwMTAxWhcNMjUwNTEzMDEwMTAxWjAzMTEwLwYDVQQD
Eyg1YzgwZGJlODA5NGE0ZGQwMzQ5MDJkZWUwYWQ5YzkwOTBkMTkzNDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuiYQVATlDFW2TIBkZ2BvbogIapf
IDxfCQ73PvwKUtRlheAMyzDFyJrFUaM8yV0EuYDgkxzUw74Jbr65ypb4hDz2hq3G
lo9iYQTK6HreXqyyVbkxhYjHGcCqhpYpHKHEaTpPy1yQ5onbQwofEpkHhrlVAZno
my6ljGawBn+EQiGocO4k9++bxug46+3XLRfUF7g1ADKLQHQdT4K/365EtLhk/1vn
dQq0P5L0K34miY1jM0D/tY2JIa5OzQDjeDst8twnHtglKfMD+jAPuXZRvcHQDdvE
2LK2JUlCO+SlI5aTlSI/Zcm5ZC+7pYG0wHBGdhIDmY3GVNLzenCI2zDYNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyA2+gJSk3QNJAt7grZyQkNGTREMB8GA1UdIwQY
MBaAFK4esoDRcihGpEEkxMYtAFn2GvJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmg2eWdORnlLRWFrUVNURXhpMEFXZllhOGtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8xZmRmMDQtOGI0ZS00MzMyLWE0ZGUt
Nzc5M2I5ZWZiMWJkLzEvcmg2eWdORnlLRWFrUVNURXhpMEFXZllhOGtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8xZmRmMDQtOGI0ZS00MzMyLWE0ZGUtNzc5M2I5ZWZiMWJk
LzEvcmg2eWdORnlLRWFrUVNURXhpMEFXZllhOGtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhV54sZ+c
um5UIK+jY3l+9Zf1Px+zeYgB4BNHwoNCd5UmiQVIoG06CjxjtB47/BdYRsKmwaZ/
WJLfGmZ+OJ3vpQKobH3R/ac5exBCBNZxN5yEcHV6e+nIccAwqvCTQ/wiKQNPt9kf
e8Y2Ns0r9/yCIGcCotcdF966Z0KdNo6DtmQQ6/ARgdNeHFuhjXgC7oekJv19f/je
gQo69XVPTqoG1HfIHk90PKbKlJ2Fet4sP43W/tVx/FwIKtbr9H+/GPFq/l/HP+xb
mDmWvGriU4JCKNM+0U/rxzpLym8ahO4qkfZddkmrX9eqGa8klnrMnagyMu6zRBTJ
JqU+epovtXGEvA==
-----END CERTIFICATE-----
Generated at Mon May 12 05:37:07 2025 by rpki-client