Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
File: rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft (raw, json)
Hash identifier: kYJtaBGJmd7sALwijJ0yhE7B9Vy0RWfb3Mdv7EsSuY8=
Subject key identifier: 08:E6:D3:86:8B:D2:11:09:86:60:52:88:E1:75:21:E9:F9:D1:55:83
Authority key identifier: AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
Certificate issuer: /CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Certificate serial: 01969FAD20D42E5D6AECD4E246A55F97E7BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
Manifest number: 111B
Signing time: Mon 05 May 2025 09:00:45 +0000
Manifest this update: Mon 05 May 2025 09:00:45 +0000
Manifest next update: Tue 06 May 2025 09:00:45 +0000
Files and hashes: 1: 0_n0dJGdGPC54n6Su3XhjRpEGaE.roa (hash: ecsdCD7tgZtKRsUvKu336lhnysfVM1v2m6QNHH0P3gg=)
2: rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl (hash: 40qMvF9NHdI2cE9x7lv4Pz+HeRMmCXgs5vscLcFc1to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ad:20:d4:2e:5d:6a:ec:d4:e2:46:a5:5f:97:e7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Validity
Not Before: May 5 09:00:45 2025 GMT
Not After : May 6 09:00:45 2025 GMT
Subject: CN=08e6d3868bd2110986605288e17521e9f9d15583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4a:0f:f3:54:45:ff:99:2b:83:9d:33:e2:1d:
25:75:f5:49:96:40:45:cd:85:b5:5e:42:08:47:a9:
3e:47:5e:88:b6:d9:6c:22:f0:33:0e:ba:b6:2f:cc:
ba:05:5f:b1:8b:81:21:49:65:ae:61:87:9d:c8:0b:
64:30:6e:07:8e:c3:04:63:b0:f9:06:c3:c6:2e:88:
c2:d1:4a:54:25:3c:d5:49:73:c4:2e:d0:c5:99:17:
cc:ad:59:f3:0c:da:c7:74:8b:39:17:2b:c9:0b:0e:
a4:97:01:32:8c:1e:9a:0a:b7:83:57:cf:7a:d2:cc:
59:49:c0:0c:07:9b:2a:d0:40:6a:1a:4f:77:6b:5d:
aa:e7:02:23:5d:8a:9c:c1:15:49:ab:49:59:8d:c4:
fd:b7:7d:c3:be:19:0f:67:73:d5:ac:4e:17:8b:bb:
6e:2e:36:30:1e:b6:25:02:0c:60:3a:80:1e:41:56:
24:c8:eb:05:b6:a5:f1:58:3a:d5:9d:c5:59:7f:67:
46:1a:de:a1:45:25:99:d8:e7:12:bd:42:d4:01:33:
35:d5:f9:86:89:4c:cb:5d:68:ab:62:e4:91:7e:6d:
5d:5e:da:94:39:fe:9a:e0:2a:e6:82:62:3a:7c:33:
0c:54:5b:3f:e0:44:bb:f5:61:21:e6:95:c7:cb:42:
f6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E6:D3:86:8B:D2:11:09:86:60:52:88:E1:75:21:E9:F9:D1:55:83
X509v3 Authority Key Identifier:
keyid:AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0c:11:fc:28:66:34:9b:77:8e:2f:67:f4:92:58:23:fa:6d:
73:37:8d:c5:53:17:bf:10:9b:ba:ba:d7:f9:37:67:b6:bf:94:
d8:a2:13:8a:4e:15:a0:7f:05:10:66:96:85:64:8c:3d:24:b2:
96:b0:3b:f2:ec:14:fc:1b:64:66:db:e4:12:7b:3e:ba:5f:e5:
73:66:34:e0:db:77:e5:4b:70:70:49:23:03:88:08:70:81:a8:
d2:1d:23:8c:16:df:f0:2a:da:ca:9c:23:87:b9:6c:33:d7:b9:
68:a9:30:50:ef:6b:aa:4a:f5:2b:aa:5c:5a:af:69:42:f8:0a:
c3:80:e4:ac:cc:d1:70:4b:b6:fe:78:90:a0:19:f9:13:d5:2c:
8d:d5:47:18:7b:b3:92:fe:09:74:a1:46:b8:8e:8e:1e:92:0e:
9d:2a:79:15:f6:59:cf:ed:0b:ad:e3:50:30:af:08:d7:b3:5f:
2d:95:7b:12:f9:41:f8:f9:e6:73:2d:83:a7:e8:2c:67:61:97:
ed:66:8e:11:21:04:d4:cd:46:c8:ba:54:40:93:b0:00:16:2d:
f2:d6:2c:18:d1:86:7f:02:56:99:ea:c8:ad:69:4a:c2:86:bd:
88:4b:ac:14:f5:9a:30:98:b1:ee:d3:dc:83:43:bf:7f:61:64:
1d:8a:b9:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafrSDULl1q7NTiRqVfl+e/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkN2Q4ZGU4Y2EwNjFlYTE2NGU2NzFjMzRlYjMzNzdmNTcz
NmJiYzMwHhcNMjUwNTA1MDkwMDQ1WhcNMjUwNTA2MDkwMDQ1WjAzMTEwLwYDVQQD
EygwOGU2ZDM4NjhiZDIxMTA5ODY2MDUyODhlMTc1MjFlOWY5ZDE1NTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0oP81RF/5krg50z4h0ldfVJlkBF
zYW1XkIIR6k+R16IttlsIvAzDrq2L8y6BV+xi4EhSWWuYYedyAtkMG4HjsMEY7D5
BsPGLojC0UpUJTzVSXPELtDFmRfMrVnzDNrHdIs5FyvJCw6klwEyjB6aCreDV896
0sxZScAMB5sq0EBqGk93a12q5wIjXYqcwRVJq0lZjcT9t33DvhkPZ3PVrE4Xi7tu
LjYwHrYlAgxgOoAeQVYkyOsFtqXxWDrVncVZf2dGGt6hRSWZ2OcSvULUATM11fmG
iUzLXWirYuSRfm1dXtqUOf6a4CrmgmI6fDMMVFs/4ES79WEh5pXHy0L2VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjm04aL0hEJhmBSiOF1Ien50VWDMB8GA1UdIwQY
MBaAFK19jejKBh6hZOZxw06zN39XNrvDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclgyTjZNb0dIcUZrNW5IRFRyTTNmMWMydThNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hMDg1MjAtN2YwNi00ZjEyLTg2NDAt
NDk3ODVmY2RkOWM0LzEvclgyTjZNb0dIcUZrNW5IRFRyTTNmMWMydThNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9hMDg1MjAtN2YwNi00ZjEyLTg2NDAtNDk3ODVmY2RkOWM0
LzEvclgyTjZNb0dIcUZrNW5IRFRyTTNmMWMydThNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANwwR/Chm
NJt3ji9n9JJYI/ptczeNxVMXvxCburrX+Tdntr+U2KITik4VoH8FEGaWhWSMPSSy
lrA78uwU/BtkZtvkEns+ul/lc2Y04Nt35UtwcEkjA4gIcIGo0h0jjBbf8Craypwj
h7lsM9e5aKkwUO9rqkr1K6pcWq9pQvgKw4DkrMzRcEu2/niQoBn5E9UsjdVHGHuz
kv4JdKFGuI6OHpIOnSp5FfZZz+0LreNQMK8I17NfLZV7EvlB+Pnmcy2Dp+gsZ2GX
7WaOESEE1M1GyLpUQJOwABYt8tYsGNGGfwJWmerIrWlKwoa9iEusFPWaMJix7tPc
g0O/f2FkHYq5rw==
-----END CERTIFICATE-----
Generated at Mon May 5 13:37:14 2025 by rpki-client