Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
File: 0sHV_U4greXxG2avsQpUyP_ksEA.mft (raw, json)
Hash identifier: Z39SKaCH9tPNQ2j8UY0kAwW+asT9kwYmlBbeeWBrgiw=
Subject key identifier: 41:29:7E:DC:D7:CE:07:35:84:6D:C7:94:93:FE:98:C5:17:A9:5A:83
Authority key identifier: D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
Certificate issuer: /CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Certificate serial: 01969FAD0AE60C496B553F912C7C619534B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
Manifest number: 13E5
Signing time: Mon 05 May 2025 09:00:39 +0000
Manifest this update: Mon 05 May 2025 09:00:39 +0000
Manifest next update: Tue 06 May 2025 09:00:39 +0000
Files and hashes: 1: 0sHV_U4greXxG2avsQpUyP_ksEA.crl (hash: 6iLKlbZ3EeWvBL4R9DuxQnpuN4JTanbCmgw/wcZ1naU=)
2: Eoa2DgYKZQhIPrEs2BVXe4pbre4.roa (hash: Lzu15VnANjg8WWEayf+Lga5VSNyXHu7NEi9f0IPI47U=)
3: N1PB4wkghMthA8l4GP9N1SzOEWE.roa (hash: 8LPlkWhxVtJM+jMtTkRPToXaYbmZ6b57zhGOgt0FEmU=)
4: V7B5ePYrHsO0XNRkMFSzpgb0L6o.roa (hash: mqOCLJjTNfcn+4Yc3m3WAArsC6xNXAO5dY/bAJctVR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ad:0a:e6:0c:49:6b:55:3f:91:2c:7c:61:95:34:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Validity
Not Before: May 5 09:00:39 2025 GMT
Not After : May 6 09:00:39 2025 GMT
Subject: CN=41297edcd7ce0735846dc79493fe98c517a95a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:86:9e:da:26:1e:26:40:a7:29:aa:ff:a1:cd:
85:e8:7f:57:6e:8c:f6:7f:21:03:79:b2:1c:1d:90:
bb:55:21:27:fc:79:cc:22:0f:fc:52:11:b3:d4:e2:
74:dd:04:32:4f:5e:b2:45:98:bf:17:6a:a0:ba:c5:
7a:a8:78:d9:f8:fa:9d:33:a5:8c:02:ea:4d:60:f2:
e0:0d:16:ce:32:71:0d:0b:16:c1:a4:3c:3e:82:b6:
66:6d:92:e8:62:b7:6d:c9:c4:02:e1:44:08:19:5f:
5c:27:0b:83:34:5f:f1:49:d9:17:fb:ae:eb:65:c8:
41:79:9e:c3:c0:d5:22:e6:e1:54:6f:e7:9f:89:ac:
b7:2b:02:94:fd:30:45:d3:5d:aa:46:fa:14:35:18:
a6:2d:b6:6b:65:5c:3e:ea:71:29:bc:26:19:a0:67:
b1:e8:d3:99:2f:26:19:36:9a:7d:6f:03:fe:5f:35:
eb:6c:92:07:c2:8a:c3:dc:76:2c:e3:d4:2f:31:9f:
89:d7:66:29:b4:03:ad:e8:3e:c8:7b:2a:e2:86:0f:
dd:37:8e:83:60:cb:60:2e:4f:38:96:2f:81:86:d4:
0e:11:9c:46:53:90:2e:ab:cb:73:39:62:21:c5:89:
9c:fb:12:73:b6:03:f6:b8:58:e0:90:98:fb:d4:9a:
53:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:29:7E:DC:D7:CE:07:35:84:6D:C7:94:93:FE:98:C5:17:A9:5A:83
X509v3 Authority Key Identifier:
keyid:D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c9:03:45:8f:75:fb:85:19:5d:3c:bd:47:03:ed:79:26:d3:
87:3f:3e:b9:a0:4d:4c:1a:be:1f:22:eb:49:9c:62:b9:aa:15:
72:3c:74:c1:1c:20:00:9b:da:5f:e9:0b:85:16:a8:30:b6:d8:
aa:90:b9:2e:3f:25:ec:da:e2:7e:0f:04:c4:72:16:f4:61:aa:
d5:d7:fd:2c:67:bb:c1:a0:4a:34:b9:e0:33:25:ab:39:7d:dd:
5e:4e:dc:a8:19:29:39:ec:32:ae:ab:d9:f0:70:05:ce:f2:68:
f5:84:3f:5c:38:4d:f0:f4:5a:60:e0:40:53:b6:68:31:f2:a0:
1d:9a:ce:94:97:c7:40:3a:53:93:99:fd:93:fd:9c:e4:82:e4:
81:40:80:15:e6:60:15:1e:30:8e:15:5e:38:ad:02:e3:11:ee:
bf:19:da:69:69:a8:b2:ba:bc:01:a8:cd:52:55:e8:8e:f5:ad:
8c:c1:bb:1b:a3:06:ef:5c:09:91:1b:a3:26:c1:8b:fb:c0:7f:
8b:c9:4a:ca:13:cb:ad:28:e2:21:4c:34:58:90:91:c2:16:98:
e3:d5:1b:7f:26:0f:21:7c:f1:7e:48:12:e4:5a:0e:e6:bf:bf:
c8:28:fe:e6:a9:13:c6:42:25:4a:d7:52:f9:d5:29:69:95:a3:
c8:7c:6e:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafrQrmDElrVT+RLHxhlTS3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYzFkNWZkNGUyMGFkZTVmMTFiNjZhZmIxMGE1NGM4ZmZl
NGIwNDAwHhcNMjUwNTA1MDkwMDM5WhcNMjUwNTA2MDkwMDM5WjAzMTEwLwYDVQQD
Eyg0MTI5N2VkY2Q3Y2UwNzM1ODQ2ZGM3OTQ5M2ZlOThjNTE3YTk1YTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Yae2iYeJkCnKar/oc2F6H9Xboz2
fyEDebIcHZC7VSEn/HnMIg/8UhGz1OJ03QQyT16yRZi/F2qgusV6qHjZ+PqdM6WM
AupNYPLgDRbOMnENCxbBpDw+grZmbZLoYrdtycQC4UQIGV9cJwuDNF/xSdkX+67r
ZchBeZ7DwNUi5uFUb+efiay3KwKU/TBF012qRvoUNRimLbZrZVw+6nEpvCYZoGex
6NOZLyYZNpp9bwP+XzXrbJIHworD3HYs49QvMZ+J12YptAOt6D7Ieyrihg/dN46D
YMtgLk84li+BhtQOEZxGU5Auq8tzOWIhxYmc+xJztgP2uFjgkJj71JpTtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEpftzXzgc1hG3HlJP+mMUXqVqDMB8GA1UdIwQY
MBaAFNLB1f1OIK3l8Rtmr7EKVMj/5LBAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHNIVl9VNGdyZVh4RzJhdnNRcFV5UF9rc0VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC84NjEzYWQtNGY1Zi00NWZkLTg3OTkt
YTA5YTg3NWY1OTAzLzEvMHNIVl9VNGdyZVh4RzJhdnNRcFV5UF9rc0VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC84NjEzYWQtNGY1Zi00NWZkLTg3OTktYTA5YTg3NWY1OTAz
LzEvMHNIVl9VNGdyZVh4RzJhdnNRcFV5UF9rc0VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiskDRY91
+4UZXTy9RwPteSbThz8+uaBNTBq+HyLrSZxiuaoVcjx0wRwgAJvaX+kLhRaoMLbY
qpC5Lj8l7Nrifg8ExHIW9GGq1df9LGe7waBKNLngMyWrOX3dXk7cqBkpOewyrqvZ
8HAFzvJo9YQ/XDhN8PRaYOBAU7ZoMfKgHZrOlJfHQDpTk5n9k/2c5ILkgUCAFeZg
FR4wjhVeOK0C4xHuvxnaaWmosrq8AajNUlXojvWtjMG7G6MG71wJkRujJsGL+8B/
i8lKyhPLrSjiIUw0WJCRwhaY49UbfyYPIXzxfkgS5FoO5r+/yCj+5qkTxkIlStdS
+dUpaZWjyHxuUg==
-----END CERTIFICATE-----
Generated at Mon May 5 11:46:15 2025 by rpki-client