Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
File: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft (raw, json)
Hash identifier: Uky12IOuJdpLGuHgDMyKChUFUdvD8RefCiWpFKPsyJA=
Subject key identifier: 2A:5E:5D:5D:97:9A:F1:D8:AE:3A:1F:22:D6:27:03:CD:D8:30:A6:EB
Authority key identifier: 44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
Certificate issuer: /CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Certificate serial: 01969E2C35B127578C6CA1236E7AED29D6D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
Manifest number: 02A2
Signing time: Mon 05 May 2025 02:00:19 +0000
Manifest this update: Mon 05 May 2025 02:00:19 +0000
Manifest next update: Tue 06 May 2025 02:00:19 +0000
Files and hashes: 1: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl (hash: sauVSLhCtMiBzicemIGKkDLMpI6TwUo6ZGqM6D616TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:35:b1:27:57:8c:6c:a1:23:6e:7a:ed:29:d6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Validity
Not Before: May 5 02:00:19 2025 GMT
Not After : May 6 02:00:19 2025 GMT
Subject: CN=2a5e5d5d979af1d8ae3a1f22d62703cdd830a6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:73:aa:5f:69:6d:38:d8:15:04:8f:5f:40:39:
c7:21:63:6b:da:5c:4d:90:7c:0c:33:7c:66:bd:6e:
3d:4a:da:e6:6d:df:3b:fc:8d:1c:1e:98:ca:e5:0f:
b2:17:90:9d:3e:78:51:7e:b9:6d:1b:0c:45:89:06:
06:8c:f2:87:9c:41:c1:dd:a1:aa:18:3f:10:9e:fc:
7d:8f:15:fd:5e:47:57:d3:a2:f3:1d:05:a3:c5:39:
07:76:0e:28:e9:55:2a:56:32:0b:32:ef:11:c3:52:
d3:34:a5:ff:3f:9b:64:d8:3e:e4:b9:9b:62:e5:a1:
66:70:5c:04:60:14:32:64:20:c1:0c:ca:4e:88:42:
05:84:d0:66:21:e0:d5:ec:40:2a:26:5f:76:01:44:
81:78:5b:a9:b9:42:2f:3c:91:d5:3f:e1:11:52:45:
34:09:7a:7d:d5:8f:2b:fd:a7:dc:24:f7:80:56:e5:
a8:0b:f6:c1:47:e6:f6:3c:42:62:0c:21:a6:b4:27:
70:1f:f0:af:43:9b:da:16:69:84:d0:0b:05:d5:6e:
1b:d4:37:47:d1:0f:a5:d8:ef:41:2a:4c:56:f2:87:
21:76:cf:1d:b0:86:ba:39:70:bc:89:b1:6a:dc:74:
4a:09:0f:ae:fe:cc:66:20:77:3e:b9:28:f8:06:8d:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5E:5D:5D:97:9A:F1:D8:AE:3A:1F:22:D6:27:03:CD:D8:30:A6:EB
X509v3 Authority Key Identifier:
keyid:44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f0:65:11:d4:14:b9:d3:f3:80:a7:5f:37:39:be:d6:99:32:
fa:53:8c:c7:af:8c:48:78:59:03:69:f3:cb:1a:08:03:4f:b1:
3e:bc:4f:ac:20:83:e0:02:2f:60:4f:d3:06:b2:95:01:cd:1f:
e4:ea:f9:86:5b:79:db:cc:b7:5e:c2:74:32:79:16:93:07:9b:
21:0a:01:be:4f:e2:05:e5:04:87:7a:25:62:c0:7a:35:08:1f:
4d:24:53:63:d3:cb:ef:ab:b5:a1:36:c4:e5:40:4e:47:b4:ad:
58:81:38:60:16:7c:00:b0:67:e8:6e:55:75:be:48:6a:23:c9:
ef:8f:26:a0:0d:cb:7c:21:8b:64:d5:2f:a0:05:60:1e:f9:ea:
d7:0c:00:a2:9f:cc:7c:82:50:7d:f7:12:ef:fc:d9:62:aa:7f:
ea:14:64:d9:84:e2:3e:a7:d7:46:56:44:53:cd:f9:15:c4:0e:
6c:6e:90:65:29:37:82:ef:72:7a:a3:92:49:71:dd:d2:07:47:
0b:55:e7:9e:96:40:58:45:30:2c:37:38:fd:3d:54:8b:b9:d5:
6d:a4:08:40:c1:c3:80:f9:7a:c0:f5:0a:de:33:d9:96:c8:42:
a0:77:ba:7e:75:ed:af:ec:56:45:cb:06:2f:b0:f7:8a:de:6f:
f8:5c:d3:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaeLDWxJ1eMbKEjbnrtKdbSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZWYyMDZmZTMwODVkOTk0M2NiNmEwNjNkYzk3ZTBkZWI3
ZjQzODQwHhcNMjUwNTA1MDIwMDE5WhcNMjUwNTA2MDIwMDE5WjAzMTEwLwYDVQQD
EygyYTVlNWQ1ZDk3OWFmMWQ4YWUzYTFmMjJkNjI3MDNjZGQ4MzBhNmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nOqX2ltONgVBI9fQDnHIWNr2lxN
kHwMM3xmvW49Strmbd87/I0cHpjK5Q+yF5CdPnhRfrltGwxFiQYGjPKHnEHB3aGq
GD8Qnvx9jxX9XkdX06LzHQWjxTkHdg4o6VUqVjILMu8Rw1LTNKX/P5tk2D7kuZti
5aFmcFwEYBQyZCDBDMpOiEIFhNBmIeDV7EAqJl92AUSBeFupuUIvPJHVP+ERUkU0
CXp91Y8r/afcJPeAVuWoC/bBR+b2PEJiDCGmtCdwH/CvQ5vaFmmE0AsF1W4b1DdH
0Q+l2O9BKkxW8ochds8dsIa6OXC8ibFq3HRKCQ+u/sxmIHc+uSj4Bo3BfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpeXV2XmvHYrjofItYnA83YMKbrMB8GA1UdIwQY
MBaAFETvIG/jCF2ZQ8tqBj3Jfg3rf0OEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk84Z2ItTUlYWmxEeTJvR1BjbC1EZXRfUTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82MmI1ZWQtNWY4NC00YmZiLTg1ZmQt
ZmJkNTBjZDg4ZWM0LzEvUk84Z2ItTUlYWmxEeTJvR1BjbC1EZXRfUTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82MmI1ZWQtNWY4NC00YmZiLTg1ZmQtZmJkNTBjZDg4ZWM0
LzEvUk84Z2ItTUlYWmxEeTJvR1BjbC1EZXRfUTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsPBlEdQU
udPzgKdfNzm+1pky+lOMx6+MSHhZA2nzyxoIA0+xPrxPrCCD4AIvYE/TBrKVAc0f
5Or5hlt528y3XsJ0MnkWkwebIQoBvk/iBeUEh3olYsB6NQgfTSRTY9PL76u1oTbE
5UBOR7StWIE4YBZ8ALBn6G5Vdb5IaiPJ748moA3LfCGLZNUvoAVgHvnq1wwAop/M
fIJQffcS7/zZYqp/6hRk2YTiPqfXRlZEU835FcQObG6QZSk3gu9yeqOSSXHd0gdH
C1XnnpZAWEUwLDc4/T1Ui7nVbaQIQMHDgPl6wPUK3jPZlshCoHe6fnXtr+xWRcsG
L7D3it5v+FzT2A==
-----END CERTIFICATE-----
Generated at Mon May 5 09:35:46 2025 by rpki-client