Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
File: PetYF7vn5aHF-xMFUbhKtIgBb5I.mft (raw, json)
Hash identifier: urZ6qwKekFN9IsPUHf3k4G+wTPL+7399/gCce8wAyD0=
Subject key identifier: 8E:A2:0E:97:B4:7D:6D:B9:4F:B9:B0:AB:9D:22:89:5A:37:D3:AA:3A
Authority key identifier: 3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
Certificate issuer: /CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Certificate serial: 0196BF6F6F82C641784A78C34E58AE08B103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
Manifest number: 0196
Signing time: Sun 11 May 2025 13:01:13 +0000
Manifest this update: Sun 11 May 2025 13:01:13 +0000
Manifest next update: Mon 12 May 2025 13:01:13 +0000
Files and hashes: 1: KWPAsF0vFOD6kPsFU3LMV-L0lSI.roa (hash: VQvFUbsDDfVrBdoP9kicGC0pG5uJaNDDod3tQ4qnm70=)
2: PetYF7vn5aHF-xMFUbhKtIgBb5I.crl (hash: O76APQIagYpbqtqucfJ5vUclZvK5mKvlp0maidMZQ/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:6f:82:c6:41:78:4a:78:c3:4e:58:ae:08:b1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Validity
Not Before: May 11 13:01:13 2025 GMT
Not After : May 12 13:01:13 2025 GMT
Subject: CN=8ea20e97b47d6db94fb9b0ab9d22895a37d3aa3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c2:e8:db:b4:29:6f:47:dc:f1:42:8a:54:3c:
bd:01:1c:69:ec:7c:c1:f4:1d:c1:23:be:1c:5f:04:
78:87:d1:63:45:79:46:a4:ac:7c:70:46:4b:1a:e0:
9e:a2:58:20:ce:9b:e0:d4:8f:91:54:1f:81:10:43:
45:01:25:07:34:40:17:ed:1d:5f:c9:1d:9c:19:ad:
a1:ee:19:3b:d4:e2:e6:31:93:30:9d:5a:d2:f3:d9:
5b:ab:9e:76:bd:ff:5d:28:4d:82:81:74:73:6b:ae:
13:97:c8:c3:39:b6:86:35:07:61:c9:d2:36:81:61:
b8:62:96:b9:55:7a:de:eb:dd:a9:2d:3f:e7:46:f1:
a7:02:2d:8e:81:bd:2e:eb:fa:f8:ea:99:b1:a4:e4:
b9:31:d3:d1:ec:94:3f:d4:b6:95:6a:a4:04:48:22:
06:5d:0e:57:4a:dc:a7:4a:47:b4:7a:c8:83:56:cf:
8f:3d:d5:e8:37:f6:87:05:72:02:ad:f3:4f:34:2a:
e0:a2:e9:64:10:71:d8:6c:c9:c9:2e:ba:55:12:d2:
ca:28:3e:8d:7d:2c:cb:74:d6:84:75:80:80:2a:48:
d4:a7:cc:e0:af:d0:01:92:21:d3:14:fd:bd:e0:06:
8d:36:c4:41:36:ca:c1:6a:d0:bd:ee:0d:bf:07:7f:
18:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A2:0E:97:B4:7D:6D:B9:4F:B9:B0:AB:9D:22:89:5A:37:D3:AA:3A
X509v3 Authority Key Identifier:
keyid:3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f6:ef:41:6e:c2:a9:53:49:68:c4:29:6c:00:3d:9a:1f:43:
b9:7e:ca:e6:10:0a:19:e3:67:88:60:d6:e2:19:3e:32:98:10:
a5:fe:69:88:46:f5:a9:36:fd:ae:16:34:0a:9b:82:be:30:aa:
8d:f1:71:3c:29:23:67:d3:b9:45:ef:89:31:95:26:a6:fc:c3:
9b:c1:1f:0b:62:53:1b:d0:ab:fd:9a:30:e1:83:a4:48:53:51:
38:9f:22:ff:c9:5b:d4:72:5c:d7:57:fa:64:e9:13:fe:50:c2:
d8:20:86:c8:da:01:eb:5b:36:3e:1d:17:b2:5b:39:75:15:b7:
cb:03:13:de:f7:c6:6c:1b:1a:51:48:29:81:34:b4:09:3d:06:
1c:83:15:be:dc:30:43:1c:15:0d:69:f1:89:66:c8:ee:16:9f:
f1:dc:4f:c0:a3:a1:b9:23:46:62:98:77:49:11:70:31:2d:c7:
8f:f1:8b:05:96:1f:ff:e3:ff:95:a1:04:dd:a1:af:30:ed:03:
8f:18:0c:dc:57:6d:d8:b2:42:00:30:84:2c:4c:40:6e:c4:15:
6c:02:ac:f7:d0:44:b8:6d:e9:65:86:80:fe:e9:6b:6e:3e:ad:
11:c5:a4:4b:af:99:a0:7d:2b:b7:e9:e2:97:08:ea:d0:d9:6d:
d4:06:dc:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/b2+CxkF4SnjDTliuCLEDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZWI1ODE3YmJlN2U1YTFjNWZiMTMwNTUxYjg0YWI0ODgw
MTZmOTIwHhcNMjUwNTExMTMwMTEzWhcNMjUwNTEyMTMwMTEzWjAzMTEwLwYDVQQD
Eyg4ZWEyMGU5N2I0N2Q2ZGI5NGZiOWIwYWI5ZDIyODk1YTM3ZDNhYTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsLo27Qpb0fc8UKKVDy9ARxp7HzB
9B3BI74cXwR4h9FjRXlGpKx8cEZLGuCeolggzpvg1I+RVB+BEENFASUHNEAX7R1f
yR2cGa2h7hk71OLmMZMwnVrS89lbq552vf9dKE2CgXRza64Tl8jDObaGNQdhydI2
gWG4Ypa5VXre692pLT/nRvGnAi2Ogb0u6/r46pmxpOS5MdPR7JQ/1LaVaqQESCIG
XQ5XStynSke0esiDVs+PPdXoN/aHBXICrfNPNCrgoulkEHHYbMnJLrpVEtLKKD6N
fSzLdNaEdYCAKkjUp8zgr9ABkiHTFP294AaNNsRBNsrBatC97g2/B38YYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6iDpe0fW25T7mwq50iiVo306o6MB8GA1UdIwQY
MBaAFD3rWBe75+WhxfsTBVG4SrSIAW+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGV0WUY3dm41YUhGLXhNRlViaEt0SWdCYjVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wZTQ5YTEtNzNhOS00NTgxLWI4OGMt
ZjEwNDg2ZTYwYTUzLzEvUGV0WUY3dm41YUhGLXhNRlViaEt0SWdCYjVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wZTQ5YTEtNzNhOS00NTgxLWI4OGMtZjEwNDg2ZTYwYTUz
LzEvUGV0WUY3dm41YUhGLXhNRlViaEt0SWdCYjVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/bvQW7C
qVNJaMQpbAA9mh9DuX7K5hAKGeNniGDW4hk+MpgQpf5piEb1qTb9rhY0CpuCvjCq
jfFxPCkjZ9O5Re+JMZUmpvzDm8EfC2JTG9Cr/Zow4YOkSFNROJ8i/8lb1HJc11f6
ZOkT/lDC2CCGyNoB61s2Ph0Xsls5dRW3ywMT3vfGbBsaUUgpgTS0CT0GHIMVvtww
QxwVDWnxiWbI7haf8dxPwKOhuSNGYph3SRFwMS3Hj/GLBZYf/+P/laEE3aGvMO0D
jxgM3Fdt2LJCADCELExAbsQVbAKs99BEuG3pZYaA/ulrbj6tEcWkS6+ZoH0rt+ni
lwjq0Nlt1Abc3w==
-----END CERTIFICATE-----
Generated at Sun May 11 18:10:58 2025 by rpki-client