Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
File: r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft (raw, json)
Hash identifier: Zr3r0SWUOmks2tRyTOiByuPGFi4yzDDtskF8OnIsRAQ=
Subject key identifier: FF:6C:0E:8D:67:0E:A7:5B:27:F0:89:D2:B2:A9:5C:98:4D:DC:16:20
Authority key identifier: AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
Certificate issuer: /CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Certificate serial: 0196B0D7FE6B72E4A45FEE41AB529AC7CE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
Manifest number: 152C
Signing time: Thu 08 May 2025 17:01:07 +0000
Manifest this update: Thu 08 May 2025 17:01:07 +0000
Manifest next update: Fri 09 May 2025 17:01:07 +0000
Files and hashes: 1: 4spQ6NxJCHQlIe40OSpahfCWkew.roa (hash: q8IYfG4TfaqBRLC5bxYFRKAEUKhB1rQ/o2LIt/ycHL4=)
2: f_yXJGNzegLxOLz8jRnmFe-XGpI.roa (hash: tOrW/MEZqwnfeildny0YITd6StrSUroZ/b9Bx2DHobc=)
3: r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl (hash: TvBxtaJ9hunPNm0aaavzViYiD42AHHT/OUAf0d+cOKc=)
4: wfzndjh_1PyK6B8Rf4Qnrhzhf1I.roa (hash: conmJC0uHXltpd+fK7k2U4ghVYU0Xoj8HIet8R78GBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:d7:fe:6b:72:e4:a4:5f:ee:41:ab:52:9a:c7:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Validity
Not Before: May 8 17:01:07 2025 GMT
Not After : May 9 17:01:07 2025 GMT
Subject: CN=ff6c0e8d670ea75b27f089d2b2a95c984ddc1620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6f:6e:14:70:d9:ea:60:30:ff:9f:e2:94:86:
ee:fd:f7:f9:39:4c:46:b7:19:5d:d9:93:c6:a3:2f:
cf:99:f0:86:94:19:a4:23:5f:c1:27:41:55:ad:bd:
2f:f4:cb:a8:08:17:74:95:5d:71:3d:5b:a3:05:44:
c3:30:f1:16:1c:a1:17:3a:93:de:6d:6d:7b:4f:3a:
4a:2d:56:63:c0:0f:7a:ea:44:40:d8:f7:5c:bb:5f:
4c:85:ca:23:cb:81:d3:b1:8b:91:b9:21:fe:c5:d0:
4d:18:d8:ae:35:5e:69:82:a3:17:3d:b4:6b:af:83:
8a:70:64:1b:8e:70:ac:dc:33:a9:93:a1:48:8d:81:
39:24:56:79:01:9f:5b:02:e7:82:a2:e4:f8:27:79:
33:b4:99:e2:63:10:a1:88:bb:cd:f0:44:bf:36:73:
31:f9:77:72:ff:71:ba:2d:d4:16:d8:f3:c8:94:0e:
49:6a:c1:04:2b:13:11:a7:67:d2:e3:99:65:76:5a:
0a:18:2b:f3:64:78:38:7c:e2:fe:f6:6a:2a:ab:0c:
2b:74:84:05:17:38:35:c3:c8:b6:7c:d5:e0:66:31:
49:7d:ca:1e:5b:67:79:67:ca:97:01:cb:b2:3d:f0:
33:c7:35:db:fc:eb:d5:f5:d2:e0:2b:9d:87:39:30:
10:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6C:0E:8D:67:0E:A7:5B:27:F0:89:D2:B2:A9:5C:98:4D:DC:16:20
X509v3 Authority Key Identifier:
keyid:AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:37:4c:5c:78:e7:67:23:ef:8d:07:4b:60:08:ad:0d:64:b0:
b2:cc:c6:cb:e4:8b:16:3a:5f:a0:cc:18:2e:03:f8:4f:f1:f9:
05:01:1f:22:f6:5a:ba:7d:a7:16:25:15:d4:32:b6:9b:0a:bd:
b5:59:4e:b5:a0:40:5b:dc:5b:d3:f9:91:7c:3e:e0:ab:4d:67:
48:6c:e4:60:80:a8:a2:82:50:35:b7:8b:27:8a:83:68:b5:3a:
dc:d6:18:a7:7e:50:02:5b:b9:8e:fc:11:ac:ed:18:98:39:97:
60:49:8e:44:71:4f:f6:ce:75:04:e7:bc:8e:c3:f4:21:26:0d:
61:2b:5a:27:9f:bd:bb:1b:be:73:f9:57:1a:db:9e:42:93:4a:
89:c4:6b:40:6a:1d:59:1a:e2:09:81:74:f0:5f:f5:ce:3b:8f:
d3:15:9e:24:b3:77:6c:39:72:6c:fc:dd:99:d4:52:f4:a6:17:
c2:47:a6:02:6b:5c:34:58:73:7e:17:ab:11:e1:fd:a7:17:0d:
76:39:6b:bf:ea:ef:a9:64:5c:13:30:7b:47:de:6c:1a:79:63:
ed:02:8c:49:15:ef:a9:99:0e:9c:bc:a1:4b:21:4b:9c:d3:7e:
5d:d2:52:03:6e:3e:de:6a:6c:66:9b:f8:b7:1b:ca:3e:26:86:
3f:5f:95:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaw1/5rcuSkX+5Bq1Kax86AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNTAzZTViODM1ZjBhODEzODFkMWM0YzEyMzNkMzhmYjdk
ZGYyM2QwHhcNMjUwNTA4MTcwMTA3WhcNMjUwNTA5MTcwMTA3WjAzMTEwLwYDVQQD
EyhmZjZjMGU4ZDY3MGVhNzViMjdmMDg5ZDJiMmE5NWM5ODRkZGMxNjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm9uFHDZ6mAw/5/ilIbu/ff5OUxG
txld2ZPGoy/PmfCGlBmkI1/BJ0FVrb0v9MuoCBd0lV1xPVujBUTDMPEWHKEXOpPe
bW17TzpKLVZjwA966kRA2Pdcu19Mhcojy4HTsYuRuSH+xdBNGNiuNV5pgqMXPbRr
r4OKcGQbjnCs3DOpk6FIjYE5JFZ5AZ9bAueCouT4J3kztJniYxChiLvN8ES/NnMx
+Xdy/3G6LdQW2PPIlA5JasEEKxMRp2fS45lldloKGCvzZHg4fOL+9moqqwwrdIQF
Fzg1w8i2fNXgZjFJfcoeW2d5Z8qXAcuyPfAzxzXb/OvV9dLgK52HOTAQNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9sDo1nDqdbJ/CJ0rKpXJhN3BYgMB8GA1UdIwQY
MBaAFK9QPluDXwqBOB0cTBIz04+33fI9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjFBLVc0TmZDb0U0SFJ4TUVqUFRqN2ZkOGowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8wNjAwZjgtMjk1OC00NDE3LWJiNjct
M2M1ZTE3NDRhY2RkLzEvcjFBLVc0TmZDb0U0SFJ4TUVqUFRqN2ZkOGowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8wNjAwZjgtMjk1OC00NDE3LWJiNjctM2M1ZTE3NDRhY2Rk
LzEvcjFBLVc0TmZDb0U0SFJ4TUVqUFRqN2ZkOGowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkjdMXHjn
ZyPvjQdLYAitDWSwsszGy+SLFjpfoMwYLgP4T/H5BQEfIvZaun2nFiUV1DK2mwq9
tVlOtaBAW9xb0/mRfD7gq01nSGzkYICoooJQNbeLJ4qDaLU63NYYp35QAlu5jvwR
rO0YmDmXYEmORHFP9s51BOe8jsP0ISYNYStaJ5+9uxu+c/lXGtueQpNKicRrQGod
WRriCYF08F/1zjuP0xWeJLN3bDlybPzdmdRS9KYXwkemAmtcNFhzfherEeH9pxcN
djlrv+rvqWRcEzB7R95sGnlj7QKMSRXvqZkOnLyhSyFLnNN+XdJSA24+3mpsZpv4
txvKPiaGP1+VOQ==
-----END CERTIFICATE-----
Generated at Thu May 8 20:42:59 2025 by rpki-client