Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
File: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft (raw, json)
Hash identifier: kf2CVVK8AvvmQu4muknjl4K94beHZDyj5urS7DIDbig=
Subject key identifier: D5:B1:14:4C:EF:0A:98:28:3A:39:4D:11:AC:9C:0F:4B:BE:D9:8D:9C
Authority key identifier: AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
Certificate issuer: /CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Certificate serial: 0196AEE978AF383DBD0E320B64E6935E825D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
Manifest number: 152D
Signing time: Thu 08 May 2025 08:00:58 +0000
Manifest this update: Thu 08 May 2025 08:00:58 +0000
Manifest next update: Fri 09 May 2025 08:00:58 +0000
Files and hashes: 1: P3AaYGSGMDc5V6XvnMWc4NJ8Sbg.roa (hash: chczXDm1de+BLC6EnaRddxxMZYpPZHccFuKW2GUWjQY=)
2: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl (hash: dp1ofp1Tc7jVtCa0u8Hmr8XhLg9alg8TxWwwLos9+0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:e9:78:af:38:3d:bd:0e:32:0b:64:e6:93:5e:82:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Validity
Not Before: May 8 08:00:58 2025 GMT
Not After : May 9 08:00:58 2025 GMT
Subject: CN=d5b1144cef0a98283a394d11ac9c0f4bbed98d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8b:b3:3e:b2:6b:05:eb:f4:17:1d:0f:31:8f:
9a:bd:dd:05:2e:7d:3d:11:cc:b5:02:22:01:22:40:
03:39:29:4b:88:87:3c:76:76:3e:34:58:78:ca:01:
2b:db:47:58:11:a8:dc:cb:34:6a:e1:45:2b:b4:7e:
90:71:c6:a8:ff:fc:da:75:fb:61:56:24:21:60:08:
fe:63:6f:8d:cd:fe:33:bf:ef:06:76:eb:8a:5d:9d:
c1:6a:a5:5b:c2:35:33:69:14:bd:d5:ed:b8:b9:0f:
d7:7f:8f:4f:14:36:ab:2c:7f:5a:ec:2c:c2:ac:9f:
85:a1:0b:bb:e0:7d:46:b2:0d:31:ca:45:bd:17:b7:
d3:c9:af:c8:af:8f:02:43:d7:a2:80:b0:53:4f:24:
72:f6:0f:34:a4:3c:fc:c2:89:65:b1:8f:71:7e:44:
2b:da:1a:d0:55:85:e0:f4:e8:12:d2:c7:f2:3f:51:
b2:e0:97:17:8b:4c:3e:27:22:c4:17:e1:ac:e9:92:
3e:24:e2:46:69:bb:c6:37:6f:58:a0:76:1d:14:f0:
8d:ff:bc:6c:f1:d1:a7:ec:2e:14:62:66:cf:44:9a:
47:66:d9:b6:73:e1:7f:3f:9d:73:e3:8f:a0:88:28:
5c:1a:6f:49:d3:3f:68:5d:94:14:b0:a5:d6:37:33:
d7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B1:14:4C:EF:0A:98:28:3A:39:4D:11:AC:9C:0F:4B:BE:D9:8D:9C
X509v3 Authority Key Identifier:
keyid:AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1f:65:4f:c4:46:3e:8e:bf:35:8f:f1:38:26:aa:8e:7e:69:
cc:a8:8f:f2:70:87:6b:d7:85:34:70:5c:a8:f7:0b:ca:36:db:
83:c1:c4:b8:22:27:67:49:63:29:24:11:c5:aa:7a:ad:ed:a1:
3b:7f:52:d2:23:72:b6:c3:f1:42:f9:c0:0b:e3:7a:70:57:db:
87:d1:db:27:6c:95:5a:f5:45:2b:47:52:0d:6a:2b:90:24:68:
9f:7b:86:ae:1b:53:24:e0:eb:42:73:af:8c:e9:a0:9b:95:98:
da:85:f9:78:ce:3b:31:c4:bd:3a:b8:7c:c5:9c:0a:0b:7e:cd:
be:8b:9a:8d:35:86:16:d0:69:66:94:d7:ce:84:34:b3:ed:9d:
8a:a3:a5:c0:5b:93:c1:45:59:0a:31:47:e0:d7:55:17:19:5a:
5f:7e:da:fc:1f:e3:3a:85:75:82:50:62:7c:5a:c3:ee:28:dd:
dc:0c:0f:3d:ab:48:9a:da:28:a8:a3:1e:37:4b:c1:ba:01:cb:
f1:1c:9c:4e:02:d8:f2:07:89:a0:b5:8d:01:f4:13:33:23:fd:
05:83:b7:75:69:70:9a:e4:14:8f:2c:79:f6:f4:fe:b2:7a:65:
5b:c3:08:21:ed:79:d0:95:94:12:e5:ff:3e:51:7e:ce:45:3f:
7c:4c:61:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZau6XivOD29DjILZOaTXoJdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOWZjZTBiOGI2MzdjMTVmMjMxYWVjZmZiNWM4MGE3NGZm
Y2NiMWQwHhcNMjUwNTA4MDgwMDU4WhcNMjUwNTA5MDgwMDU4WjAzMTEwLwYDVQQD
EyhkNWIxMTQ0Y2VmMGE5ODI4M2EzOTRkMTFhYzljMGY0YmJlZDk4ZDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ouzPrJrBev0Fx0PMY+avd0FLn09
Ecy1AiIBIkADOSlLiIc8dnY+NFh4ygEr20dYEajcyzRq4UUrtH6Qccao//zadfth
ViQhYAj+Y2+Nzf4zv+8GduuKXZ3BaqVbwjUzaRS91e24uQ/Xf49PFDarLH9a7CzC
rJ+FoQu74H1Gsg0xykW9F7fTya/Ir48CQ9eigLBTTyRy9g80pDz8wollsY9xfkQr
2hrQVYXg9OgS0sfyP1Gy4JcXi0w+JyLEF+Gs6ZI+JOJGabvGN29YoHYdFPCN/7xs
8dGn7C4UYmbPRJpHZtm2c+F/P51z44+giChcGm9J0z9oXZQUsKXWNzPXnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWxFEzvCpgoOjlNEaycD0u+2Y2cMB8GA1UdIwQY
MBaAFKyfzguLY3wV8jGuz/tcgKdP/MsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckpfT0M0dGpmQlh5TWE3UC0xeUFwMF84eXgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC80ZDBiMWYtYWM4NS00YTJhLWExYjQt
MDhiMDdlODliNDJhLzEvckpfT0M0dGpmQlh5TWE3UC0xeUFwMF84eXgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC80ZDBiMWYtYWM4NS00YTJhLWExYjQtMDhiMDdlODliNDJh
LzEvckpfT0M0dGpmQlh5TWE3UC0xeUFwMF84eXgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHh9lT8RG
Po6/NY/xOCaqjn5pzKiP8nCHa9eFNHBcqPcLyjbbg8HEuCInZ0ljKSQRxap6re2h
O39S0iNytsPxQvnAC+N6cFfbh9HbJ2yVWvVFK0dSDWorkCRon3uGrhtTJODrQnOv
jOmgm5WY2oX5eM47McS9Orh8xZwKC37NvouajTWGFtBpZpTXzoQ0s+2diqOlwFuT
wUVZCjFH4NdVFxlaX37a/B/jOoV1glBifFrD7ijd3AwPPatImtooqKMeN0vBugHL
8RycTgLY8geJoLWNAfQTMyP9BYO3dWlwmuQUjyx59vT+snplW8MIIe150JWUEuX/
PlF+zkU/fExhDA==
-----END CERTIFICATE-----
Generated at Thu May 8 15:33:29 2025 by rpki-client