Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
File: frRWWjLbPJyLiw97TBG9EVTiDek.mft (raw, json)
Hash identifier: pUypy8BIXMBr7oeeMB6f+LU+cNwEr3z0IwcfjOFJ5bI=
Subject key identifier: 8F:02:63:82:23:57:FA:77:A3:62:5F:36:0F:96:B9:88:71:F5:05:15
Authority key identifier: 7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
Certificate issuer: /CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
Certificate serial: 0196BECA3578D85286580251BD606F8CD4C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 10:00:45 +0000
Manifest this update: Sun 11 May 2025 10:00:45 +0000
Manifest next update: Mon 12 May 2025 10:00:45 +0000
Files and hashes: 1: 4BcmRfIKbtyHA5W50P0xfaSluTc.roa (hash: EUIfaPrgoy0kpcCTAuIPs2vRwCWnSayvJLiSWEhojBk=)
2: frRWWjLbPJyLiw97TBG9EVTiDek.crl (hash: 8jRUkXODcNUeRGDsYN2GLRZ6RhT4uGSeFs1KMgLswzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:35:78:d8:52:86:58:02:51:bd:60:6f:8c:d4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
Validity
Not Before: May 11 10:00:45 2025 GMT
Not After : May 12 10:00:45 2025 GMT
Subject: CN=8f0263822357fa77a3625f360f96b98871f50515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:e4:6b:b2:28:05:1c:76:91:83:9f:f3:f7:
6b:3f:83:e5:07:fc:a3:7c:28:bb:0c:2b:bd:8b:87:
50:9c:9d:7d:2f:35:0f:a9:31:e4:2c:6f:be:1e:ff:
c1:1f:eb:47:75:58:1d:67:f6:45:d5:83:95:74:e1:
b8:3e:5a:9e:68:9a:79:3d:10:14:76:d2:cb:f4:6c:
be:f4:a6:bc:5c:f7:bc:ba:67:1d:4a:79:aa:c5:6d:
a2:69:2c:61:bd:cd:c7:7e:96:24:d6:9e:58:6f:d1:
33:b8:5c:84:a6:04:ab:f2:9c:42:35:dd:df:20:8a:
35:c1:0b:7c:11:ea:8c:66:44:3d:10:99:38:c9:8e:
bb:33:c0:21:b5:53:64:70:30:8e:1b:82:0d:e1:45:
64:52:d6:bd:59:00:1e:ad:2f:7f:95:c9:fc:33:8f:
fa:90:90:9c:da:3c:0a:5c:c2:a2:98:8f:59:52:8d:
e5:21:5c:b4:6a:6d:33:ac:d1:f6:21:3a:6e:28:c1:
bd:43:f1:08:21:fb:79:a5:ff:df:7f:02:d7:89:b9:
eb:d3:c0:8f:3f:21:2e:c6:c5:2d:c1:7c:66:52:7b:
c9:5b:bb:8b:b4:e4:20:0d:fe:2b:08:00:1a:e5:84:
05:2a:e6:94:be:c5:48:1d:18:b7:6d:6e:7a:41:70:
36:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:02:63:82:23:57:FA:77:A3:62:5F:36:0F:96:B9:88:71:F5:05:15
X509v3 Authority Key Identifier:
keyid:7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:77:6e:7f:81:a9:7c:68:ca:b2:79:bc:e4:56:d4:db:eb:95:
f6:16:1b:3f:51:f0:5d:b2:21:3a:3d:1b:64:43:31:cc:25:cf:
b6:af:4b:d2:cb:21:6a:59:16:6e:50:c6:a0:6c:6e:d1:57:e2:
d8:42:c5:30:57:49:49:23:5a:27:e6:0c:b2:7b:57:b1:23:c4:
34:ab:c0:cd:2c:87:d7:cc:41:8a:87:c9:cb:74:72:fe:f4:5b:
fb:fe:6a:65:bc:7a:97:fd:61:f7:24:de:35:10:15:a4:73:0a:
c8:02:0b:b0:16:42:95:01:d4:0d:e4:f3:7d:7c:90:91:b8:d9:
be:5d:50:e4:05:15:a4:0b:09:2f:1d:4f:87:ba:b2:0f:e8:d9:
71:9a:42:18:1b:de:3f:77:a9:73:9d:08:51:e3:ee:95:c7:6a:
96:e9:22:a0:05:99:52:22:3e:7e:b7:44:88:bb:0d:5b:1f:01:
2f:b5:02:df:bd:72:4b:ee:97:9c:06:b3:af:29:9f:b0:d5:12:
6a:19:43:66:2c:31:80:b2:ed:4b:26:63:7b:fd:4d:9c:91:22:
af:8f:9a:4c:d9:88:9f:69:d4:c8:5f:97:ec:5f:68:fd:2c:8e:
d5:de:06:d7:14:28:36:ec:04:4f:17:46:a9:d5:a3:be:9a:00:
27:96:ec:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+yjV42FKGWAJRvWBvjNTFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYjQ1NjVhMzJkYjNjOWM4YjhiMGY3YjRjMTFiZDExNTRl
MjBkZTkwHhcNMjUwNTExMTAwMDQ1WhcNMjUwNTEyMTAwMDQ1WjAzMTEwLwYDVQQD
Eyg4ZjAyNjM4MjIzNTdmYTc3YTM2MjVmMzYwZjk2Yjk4ODcxZjUwNTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9Xka7IoBRx2kYOf8/drP4PlB/yj
fCi7DCu9i4dQnJ19LzUPqTHkLG++Hv/BH+tHdVgdZ/ZF1YOVdOG4PlqeaJp5PRAU
dtLL9Gy+9Ka8XPe8umcdSnmqxW2iaSxhvc3HfpYk1p5Yb9EzuFyEpgSr8pxCNd3f
IIo1wQt8EeqMZkQ9EJk4yY67M8AhtVNkcDCOG4IN4UVkUta9WQAerS9/lcn8M4/6
kJCc2jwKXMKimI9ZUo3lIVy0am0zrNH2ITpuKMG9Q/EIIft5pf/ffwLXibnr08CP
PyEuxsUtwXxmUnvJW7uLtOQgDf4rCAAa5YQFKuaUvsVIHRi3bW56QXA2BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8CY4IjV/p3o2JfNg+WuYhx9QUVMB8GA1UdIwQY
MBaAFH60Vloy2zyci4sPe0wRvRFU4g3pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnJSV1dqTGJQSnlMaXc5N1RCRzlFVlRpRGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81YjUzNWUtYjE0My00YjRhLTkwZTgt
MGU3OTQ5OTM1ZDgxLzEvZnJSV1dqTGJQSnlMaXc5N1RCRzlFVlRpRGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC81YjUzNWUtYjE0My00YjRhLTkwZTgtMGU3OTQ5OTM1ZDgx
LzEvZnJSV1dqTGJQSnlMaXc5N1RCRzlFVlRpRGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAknduf4Gp
fGjKsnm85FbU2+uV9hYbP1HwXbIhOj0bZEMxzCXPtq9L0sshalkWblDGoGxu0Vfi
2ELFMFdJSSNaJ+YMsntXsSPENKvAzSyH18xBiofJy3Ry/vRb+/5qZbx6l/1h9yTe
NRAVpHMKyAILsBZClQHUDeTzfXyQkbjZvl1Q5AUVpAsJLx1Ph7qyD+jZcZpCGBve
P3epc50IUePulcdqlukioAWZUiI+frdEiLsNWx8BL7UC371yS+6XnAazrymfsNUS
ahlDZiwxgLLtSyZje/1NnJEir4+aTNmIn2nUyF+X7F9o/SyO1d4G1xQoNuwETxdG
qdWjvpoAJ5bsiA==
-----END CERTIFICATE-----
Generated at Sun May 11 14:50:12 2025 by rpki-client