Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
File: PNVhnbjXcXN5lW1Op1t22ybRwck.mft (raw, json)
Hash identifier: JIhpn2Sh39zcuLoEs53X/VyT0hNF+oTvpBLgnSEByjc=
Subject key identifier: B0:38:E7:E3:9D:71:0C:30:53:14:85:A7:DD:4E:C5:1E:41:5E:7A:83
Authority key identifier: 3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
Certificate issuer: /CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Certificate serial: 0196D174FB79DB078BAC3E5D8031EE217B09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
Manifest number: 153E
Signing time: Thu 15 May 2025 01:00:26 +0000
Manifest this update: Thu 15 May 2025 01:00:26 +0000
Manifest next update: Fri 16 May 2025 01:00:26 +0000
Files and hashes: 1: 4prfTAA9HBYIWFQscXuDZvPOJfU.roa (hash: zMicpYmGFLFzW1lGiXS7QLLBWvT2YuAYQEgxuNA/2gA=)
2: PNVhnbjXcXN5lW1Op1t22ybRwck.crl (hash: Y+yaPrA8SLvY5LprwuXPThdgsNsRQ/++2H/0/5WNlJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:74:fb:79:db:07:8b:ac:3e:5d:80:31:ee:21:7b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Validity
Not Before: May 15 01:00:26 2025 GMT
Not After : May 16 01:00:26 2025 GMT
Subject: CN=b038e7e39d710c30531485a7dd4ec51e415e7a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:40:0a:b5:88:da:1a:9e:1e:3e:50:f5:e4:
46:78:76:e3:6a:78:8b:7e:47:01:7d:70:56:9b:02:
72:30:81:85:11:9b:43:23:a4:9e:3b:0d:52:84:86:
4c:5c:0b:99:6a:a8:b2:51:2c:0d:4e:c4:28:83:e9:
37:4f:9c:4a:60:eb:38:77:6a:58:4f:dc:3e:9d:e1:
80:34:37:ff:f5:80:5e:a5:16:a9:e0:4f:61:4d:3f:
46:98:d1:2b:68:25:c5:66:52:b0:71:20:8d:8d:b6:
fb:65:da:2b:48:cc:8a:00:bc:df:aa:ce:d7:a6:cf:
43:64:17:f2:df:2b:38:e7:23:d4:73:00:23:90:5b:
b9:0a:cf:98:a3:66:12:cd:ce:37:9b:ec:4d:a0:65:
0c:6a:c6:53:bc:ad:7c:ac:23:8c:25:05:fb:6e:83:
fe:7a:5f:3a:9b:47:1b:6f:fd:73:74:d0:66:75:74:
3f:9b:23:91:0d:08:d0:b2:a9:dc:fc:fd:c5:ae:6e:
3b:73:1f:88:e5:a6:3e:de:98:92:1f:aa:91:38:eb:
bf:7b:7f:ef:77:15:bb:76:a4:50:f4:08:15:ab:88:
ca:10:a5:a2:03:01:fc:fc:f3:e0:3e:44:aa:cf:2c:
d2:5c:a4:82:cc:43:9f:7a:29:8f:95:b5:0b:51:bb:
30:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:38:E7:E3:9D:71:0C:30:53:14:85:A7:DD:4E:C5:1E:41:5E:7A:83
X509v3 Authority Key Identifier:
keyid:3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1e:d5:86:5b:b6:d5:02:fb:2c:16:58:84:cc:e9:9d:53:27:
89:39:12:5e:2a:cb:c4:8a:44:8e:fc:82:7d:20:8b:d5:8f:97:
b2:f6:91:ff:e2:f2:e1:0d:d7:79:0e:55:e4:ad:af:50:b3:24:
11:1e:ca:b5:1d:69:f4:4f:88:14:f5:29:38:dc:a3:a6:03:18:
32:30:b4:b3:b5:5d:f4:ee:94:57:2d:ba:30:c9:11:66:93:16:
a6:14:23:2e:0f:2f:0b:66:4e:12:c4:64:ea:56:54:b5:5c:91:
36:82:79:20:04:37:b7:e5:ce:0e:74:18:d7:e8:af:16:8a:02:
08:8d:b5:f2:59:f5:99:62:ae:40:a0:e3:19:35:ce:f1:ee:9b:
11:0b:fa:21:1f:3e:cf:1f:c2:7b:a2:6d:b5:26:ca:8a:a9:05:
ad:52:18:60:73:89:df:4b:f1:b2:d8:c7:dd:7d:9c:a0:c4:4b:
72:d1:24:ab:c1:68:a0:5d:49:a0:bd:dd:f5:bf:72:1e:b6:73:
0a:49:6f:dc:49:84:46:7a:70:0e:98:64:63:db:24:e2:7c:2c:
2c:8c:a9:cb:22:38:7f:e5:d2:ef:c1:b0:55:c7:ad:de:a4:bc:
85:e7:52:15:1b:15:a1:e6:01:10:9a:b2:ed:a8:9d:88:81:1a:
50:12:e1:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbRdPt52weLrD5dgDHuIXsJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZDU2MTlkYjhkNzcxNzM3OTk1NmQ0ZWE3NWI3NmRiMjZk
MWMxYzkwHhcNMjUwNTE1MDEwMDI2WhcNMjUwNTE2MDEwMDI2WjAzMTEwLwYDVQQD
EyhiMDM4ZTdlMzlkNzEwYzMwNTMxNDg1YTdkZDRlYzUxZTQxNWU3YTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtylACrWI2hqeHj5Q9eRGeHbjaniL
fkcBfXBWmwJyMIGFEZtDI6SeOw1ShIZMXAuZaqiyUSwNTsQog+k3T5xKYOs4d2pY
T9w+neGANDf/9YBepRap4E9hTT9GmNEraCXFZlKwcSCNjbb7ZdorSMyKALzfqs7X
ps9DZBfy3ys45yPUcwAjkFu5Cs+Yo2YSzc43m+xNoGUMasZTvK18rCOMJQX7boP+
el86m0cbb/1zdNBmdXQ/myORDQjQsqnc/P3Frm47cx+I5aY+3piSH6qROOu/e3/v
dxW7dqRQ9AgVq4jKEKWiAwH8/PPgPkSqzyzSXKSCzEOfeimPlbULUbswpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLA45+OdcQwwUxSFp91OxR5BXnqDMB8GA1UdIwQY
MBaAFDzVYZ2413FzeZVtTqdbdtsm0cHJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE5WaG5ialhjWE41bFcxT3AxdDIyeWJSd2NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8xZjM5NDktNDBjYy00MDBhLWI0MTEt
ZTRlYTIwOGE5YTJkLzEvUE5WaG5ialhjWE41bFcxT3AxdDIyeWJSd2NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8xZjM5NDktNDBjYy00MDBhLWI0MTEtZTRlYTIwOGE5YTJk
LzEvUE5WaG5ialhjWE41bFcxT3AxdDIyeWJSd2NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABh7Vhlu2
1QL7LBZYhMzpnVMniTkSXirLxIpEjvyCfSCL1Y+XsvaR/+Ly4Q3XeQ5V5K2vULMk
ER7KtR1p9E+IFPUpONyjpgMYMjC0s7Vd9O6UVy26MMkRZpMWphQjLg8vC2ZOEsRk
6lZUtVyRNoJ5IAQ3t+XODnQY1+ivFooCCI218ln1mWKuQKDjGTXO8e6bEQv6IR8+
zx/Ce6JttSbKiqkFrVIYYHOJ30vxstjH3X2coMRLctEkq8FooF1JoL3d9b9yHrZz
Cklv3EmERnpwDphkY9sk4nwsLIypyyI4f+XS78GwVcet3qS8hedSFRsVoeYBEJqy
7aidiIEaUBLhUw==
-----END CERTIFICATE-----
Generated at Thu May 15 05:56:11 2025 by rpki-client