Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
File: _caA7hsnw6bwcBPI_CXr_wxn-50.mft (raw, json)
Hash identifier: NTkLlFCs47fJ2WQwQdvkvsvZD/ZhZzF8lxh5Wsdktfc=
Subject key identifier: 17:24:D5:30:F3:E3:43:28:D1:52:8E:6F:E0:CE:BB:31:45:E6:D1:8B
Authority key identifier: FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
Certificate issuer: /CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Certificate serial: 0196A12D42C901C0FF7C77C3E4E6006D6C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
Manifest number: 0C06
Signing time: Mon 05 May 2025 16:00:19 +0000
Manifest this update: Mon 05 May 2025 16:00:19 +0000
Manifest next update: Tue 06 May 2025 16:00:19 +0000
Files and hashes: 1: H5zExKsN_X1SPJQSwEakZzqeC2I.roa (hash: FjXiEi3V3MLLSMvrOdppNODHARmQ2b/yPySFztutI1Q=)
2: _caA7hsnw6bwcBPI_CXr_wxn-50.crl (hash: zxqB/D18HAgkwwBztl2Aemq+jP/ip0K5xRTTBHckftA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:2d:42:c9:01:c0:ff:7c:77:c3:e4:e6:00:6d:6c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Validity
Not Before: May 5 16:00:19 2025 GMT
Not After : May 6 16:00:19 2025 GMT
Subject: CN=1724d530f3e34328d1528e6fe0cebb3145e6d18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:65:12:4c:a3:4c:59:96:5d:f0:79:a1:94:b8:
a4:bc:99:c7:aa:d6:56:c1:f2:a7:70:0f:93:43:3c:
ac:09:c2:30:a6:f9:1e:2d:d2:6a:e1:b5:f1:0b:34:
24:70:ce:ab:4a:84:ba:ce:b4:4e:c3:d5:c4:ba:a4:
b9:71:ac:24:60:f4:0e:6f:06:1b:0f:d5:64:c9:aa:
b5:9f:c4:63:85:31:84:16:5e:29:c5:d5:67:7b:4d:
57:53:9b:80:a2:96:a0:88:2c:45:a8:71:a8:5c:32:
9c:03:fc:e0:ba:d4:28:02:58:aa:82:7d:69:40:6a:
ed:93:ce:bb:31:19:57:e5:c6:c0:ed:ad:44:0b:4c:
3b:eb:bd:10:f0:42:54:8b:95:07:d2:2a:b3:6c:fc:
16:f3:be:a9:fb:76:0f:9e:19:de:d5:18:2f:57:ca:
55:d2:b2:c1:8c:5e:0f:9d:64:6b:7a:02:e1:c3:dc:
93:80:93:5c:1d:7a:09:26:a2:ad:12:b2:fa:c8:6f:
59:88:d1:89:41:b9:ee:14:e8:61:5e:5d:43:46:e0:
8e:8a:27:54:cc:4d:99:f4:e0:73:e6:92:ba:08:72:
b9:98:05:0d:a3:6b:37:30:73:7f:0d:47:79:5e:e2:
73:f8:c2:58:36:7a:e5:c4:91:f1:4c:0d:b0:7c:ce:
69:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:24:D5:30:F3:E3:43:28:D1:52:8E:6F:E0:CE:BB:31:45:E6:D1:8B
X509v3 Authority Key Identifier:
keyid:FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:84:99:9b:a1:03:fa:a6:ff:e6:0c:31:96:e0:ec:e0:de:77:
2d:09:55:77:ec:ce:fc:3f:b9:02:5d:af:dd:52:f4:ea:a3:52:
e7:de:49:ea:52:1e:b9:98:d1:5e:c4:c4:a8:3a:6c:42:64:49:
ae:d1:a6:02:25:03:ca:d5:14:e5:fa:04:f6:b8:a1:fc:fb:e2:
c4:52:6c:f4:02:4b:4b:e4:c4:db:dc:4b:b2:8a:d6:ff:15:70:
d2:a1:07:20:67:57:a0:14:0a:3a:99:e1:4e:b4:5f:9f:86:42:
84:b8:8f:ce:ba:95:90:e3:7e:47:8e:51:85:ba:74:d3:7b:54:
66:52:fe:c4:8d:79:1f:ad:b3:f6:41:67:48:39:dd:89:7e:de:
0b:b5:be:11:45:ea:c7:82:da:eb:99:60:2a:6c:05:be:c8:9f:
75:15:5f:48:25:b6:2d:b9:a6:3f:6e:af:44:75:63:68:cf:ba:
98:6a:f2:25:08:03:38:d2:27:95:10:5c:05:9f:d5:12:fb:cc:
be:16:33:8b:40:57:5b:f6:82:7a:fb:25:9e:5b:6a:05:9f:e8:
d5:fe:27:2b:06:7d:42:95:ee:93:48:37:89:6f:a8:e0:a6:55:
70:e3:7c:aa:c0:33:ef:4e:36:38:5e:7e:12:33:f5:51:96:d5:
6e:92:2c:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZahLULJAcD/fHfD5OYAbWyLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkYzY4MGVlMWIyN2MzYTZmMDcwMTNjOGZjMjVlYmZmMGM2
N2ZiOWQwHhcNMjUwNTA1MTYwMDE5WhcNMjUwNTA2MTYwMDE5WjAzMTEwLwYDVQQD
EygxNzI0ZDUzMGYzZTM0MzI4ZDE1MjhlNmZlMGNlYmIzMTQ1ZTZkMThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2USTKNMWZZd8HmhlLikvJnHqtZW
wfKncA+TQzysCcIwpvkeLdJq4bXxCzQkcM6rSoS6zrROw9XEuqS5cawkYPQObwYb
D9Vkyaq1n8RjhTGEFl4pxdVne01XU5uAopagiCxFqHGoXDKcA/zgutQoAliqgn1p
QGrtk867MRlX5cbA7a1EC0w7670Q8EJUi5UH0iqzbPwW876p+3YPnhne1RgvV8pV
0rLBjF4PnWRregLhw9yTgJNcHXoJJqKtErL6yG9ZiNGJQbnuFOhhXl1DRuCOiidU
zE2Z9OBz5pK6CHK5mAUNo2s3MHN/DUd5XuJz+MJYNnrlxJHxTA2wfM5pGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBck1TDz40Mo0VKOb+DOuzFF5tGLMB8GA1UdIwQY
MBaAFP3GgO4bJ8Om8HATyPwl6/8MZ/udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2NhQTdoc253NmJ3Y0JQSV9DWHJfd3huLTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hMTJlMWMtMWIxMC00OTM4LTk2ZDMt
N2JlZDI2NzQzYmNjLzEvX2NhQTdoc253NmJ3Y0JQSV9DWHJfd3huLTUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9hMTJlMWMtMWIxMC00OTM4LTk2ZDMtN2JlZDI2NzQzYmNj
LzEvX2NhQTdoc253NmJ3Y0JQSV9DWHJfd3huLTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdYSZm6ED
+qb/5gwxluDs4N53LQlVd+zO/D+5Al2v3VL06qNS595J6lIeuZjRXsTEqDpsQmRJ
rtGmAiUDytUU5foE9rih/PvixFJs9AJLS+TE29xLsorW/xVw0qEHIGdXoBQKOpnh
TrRfn4ZChLiPzrqVkON+R45Rhbp003tUZlL+xI15H62z9kFnSDndiX7eC7W+EUXq
x4La65lgKmwFvsifdRVfSCW2LbmmP26vRHVjaM+6mGryJQgDONInlRBcBZ/VEvvM
vhYzi0BXW/aCevslnltqBZ/o1f4nKwZ9QpXuk0g3iW+o4KZVcON8qsAz7042OF5+
EjP1UZbVbpIsug==
-----END CERTIFICATE-----
Generated at Mon May 5 19:16:36 2025 by rpki-client