Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json)
Hash identifier: xiH7swjDmisjszFGUEKzxueJZaOKGZQfPHqk8GE1ll8=
Subject key identifier: E9:20:C6:3F:7E:B6:EE:63:34:FE:86:3A:19:B7:39:14:1D:FC:C5:49
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 0196B521E02A6335EF45235CBEDA79ED121F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
Manifest number: 1530
Signing time: Fri 09 May 2025 13:00:18 +0000
Manifest this update: Fri 09 May 2025 13:00:18 +0000
Manifest next update: Sat 10 May 2025 13:00:18 +0000
Files and hashes: 1: SNV_1VpgwAmnXneSKWb5jRq8ToE.roa (hash: WATnXIVshclXFF3TBwoPfH1QR7+uJEv7hk540ZBWOkc=)
2: lVzggsEuwHNUmwDhZ4XQcolHpDk.roa (hash: eA/BupKOc3qojEoZ8E13TwJIMViSsM3/KaYEEgTR1Jc=)
3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: 8xWIyFxZVzoTEDr9ine+juFno8lOteomqg6doNcnPMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:21:e0:2a:63:35:ef:45:23:5c:be:da:79:ed:12:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: May 9 13:00:18 2025 GMT
Not After : May 10 13:00:18 2025 GMT
Subject: CN=e920c63f7eb6ee6334fe863a19b739141dfcc549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7c:61:16:9f:91:80:8c:55:32:6a:2b:99:2b:
ab:6c:84:8e:2b:46:3e:ff:dc:6d:71:5f:21:58:5c:
e0:14:6b:10:28:fa:07:d5:36:d1:72:e5:8c:27:71:
93:ab:e4:e6:fc:62:77:5a:8f:39:5d:40:8f:86:ae:
d8:26:5a:bb:66:4d:6a:6f:e2:ba:9a:56:cd:0b:43:
32:4f:a9:05:03:90:fa:16:af:9f:d8:0d:23:e1:d6:
bd:7b:55:bb:2a:eb:f1:26:80:c8:3a:7e:7e:32:a3:
b4:38:63:fe:02:5f:c8:ee:b5:86:a9:2b:6a:35:cb:
30:f9:5a:0f:e1:cb:de:b1:2b:db:4b:2e:75:2f:6c:
90:10:89:fc:f9:2a:0a:b8:43:d7:45:ad:c0:e4:92:
a3:17:65:e1:b3:dc:d0:35:26:82:d9:f5:43:bc:52:
b6:75:d5:44:17:82:39:cb:db:10:38:60:fe:87:82:
9d:16:2d:16:63:6b:86:dd:10:a7:64:f9:38:ae:3d:
65:8b:4c:c2:fb:16:d8:74:62:0e:03:8a:5e:e3:2b:
c8:75:d7:d9:0c:07:ba:1b:f1:c1:13:da:e1:c1:11:
ab:26:1a:69:f4:b9:82:2d:c3:70:25:c5:a6:b8:9b:
76:d5:04:75:f5:a1:32:84:a0:af:38:f5:69:97:89:
19:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:20:C6:3F:7E:B6:EE:63:34:FE:86:3A:19:B7:39:14:1D:FC:C5:49
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:75:a8:5a:de:2b:68:63:d4:0d:4e:d7:ec:bd:a8:e0:8d:0e:
94:19:ea:e5:ae:65:da:72:a6:6c:85:93:6b:21:3b:85:e3:9e:
87:89:8a:3e:78:d8:14:b7:05:2f:0c:e9:b9:31:82:14:32:10:
5f:59:80:80:c0:ca:80:41:62:ac:8d:13:2f:fd:15:6b:37:6b:
a8:81:bc:e7:89:2a:4d:13:8f:c9:14:03:58:88:9a:2e:0e:af:
48:48:2b:af:5e:17:bd:51:1b:90:e8:27:7a:2c:2e:87:4e:db:
c4:53:93:f7:87:69:e1:2a:ae:d5:42:8e:18:95:c8:c1:a6:34:
0f:e8:e7:71:f6:08:2a:8c:a3:a7:88:66:48:c9:a5:f6:52:a7:
93:a5:f0:99:dc:8a:1e:7a:71:a5:1e:15:b6:99:61:de:e0:74:
ab:48:42:33:45:a4:1d:bc:b2:bb:bb:cd:44:48:37:b9:6e:f3:
5b:b8:2e:99:e5:e4:43:72:2d:1c:a3:b2:47:0e:9d:61:c0:f6:
39:f3:1c:fa:94:4b:1f:f9:86:74:3d:9b:25:51:88:83:64:21:
4d:b2:95:c0:1f:9d:19:63:4a:e6:07:f2:17:3a:45:8c:5b:63:
0e:15:e5:78:5a:2b:07:b6:db:2d:aa:6f:84:e6:55:b1:2f:28:
e1:55:20:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa1IeAqYzXvRSNcvtp57RIfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MmNmM2VhM2Y0NjE5YWRkN2IxZjg1ZTVkYmM3NjhjZDNk
MTc0MmQwHhcNMjUwNTA5MTMwMDE4WhcNMjUwNTEwMTMwMDE4WjAzMTEwLwYDVQQD
EyhlOTIwYzYzZjdlYjZlZTYzMzRmZTg2M2ExOWI3MzkxNDFkZmNjNTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXxhFp+RgIxVMmormSurbISOK0Y+
/9xtcV8hWFzgFGsQKPoH1TbRcuWMJ3GTq+Tm/GJ3Wo85XUCPhq7YJlq7Zk1qb+K6
mlbNC0MyT6kFA5D6Fq+f2A0j4da9e1W7KuvxJoDIOn5+MqO0OGP+Al/I7rWGqStq
Ncsw+VoP4cvesSvbSy51L2yQEIn8+SoKuEPXRa3A5JKjF2Xhs9zQNSaC2fVDvFK2
ddVEF4I5y9sQOGD+h4KdFi0WY2uG3RCnZPk4rj1li0zC+xbYdGIOA4pe4yvIddfZ
DAe6G/HBE9rhwRGrJhpp9LmCLcNwJcWmuJt21QR19aEyhKCvOPVpl4kZmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkgxj9+tu5jNP6GOhm3ORQd/MVJMB8GA1UdIwQY
MBaAFKQs8+o/Rhmt17H4Xl28dozT0XQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTIt
Yzc3NzUxNTlmYzgyLzEvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTItYzc3NzUxNTlmYzgy
LzEvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtXWoWt4r
aGPUDU7X7L2o4I0OlBnq5a5l2nKmbIWTayE7heOeh4mKPnjYFLcFLwzpuTGCFDIQ
X1mAgMDKgEFirI0TL/0VazdrqIG854kqTROPyRQDWIiaLg6vSEgrr14XvVEbkOgn
eiwuh07bxFOT94dp4Squ1UKOGJXIwaY0D+jncfYIKoyjp4hmSMml9lKnk6XwmdyK
HnpxpR4Vtplh3uB0q0hCM0WkHbyyu7vNREg3uW7zW7gumeXkQ3ItHKOyRw6dYcD2
OfMc+pRLH/mGdD2bJVGIg2QhTbKVwB+dGWNK5gfyFzpFjFtjDhXleForB7bbLapv
hOZVsS8o4VUgtQ==
-----END CERTIFICATE-----
Generated at Fri May 9 15:25:24 2025 by rpki-client