Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
File: CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft (raw, json)
Hash identifier: Cu+69l71eUH9vfRmGR5XTIo/bXtG1ivcUhx+hketC1E=
Subject key identifier: 21:67:B9:63:E3:FB:6B:8E:57:CC:89:17:DB:5E:BF:5C:65:FA:0E:4B
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial: 0196C53A512FFFAC979F300B8622360A170C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
Manifest number: 14D5
Signing time: Mon 12 May 2025 16:00:55 +0000
Manifest this update: Mon 12 May 2025 16:00:55 +0000
Manifest next update: Tue 13 May 2025 16:00:55 +0000
Files and hashes: 1: 7YGMzeES1KkLAsbbmtI6ZjvO9Q4.roa (hash: l1BU7g4Ila9ufWlHn68dydGGRXENxO9riUoJiMBfymw=)
2: CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl (hash: FQZAgS8XhWGZ/xyOJYtwRqy+LK9pjo6PePZokpePQdg=)
3: UJ4AA8lthTvUaOv8y96F5tCFgzY.roa (hash: tgN2dNaoq5w5rynmNpRaU4NnYl8mkFWnYFqCjapx3rI=)
4: nRz9AftCLig4OmS0E1eBTIrPa5M.roa (hash: ea2h97J02X030CkXXWTZE1BGZvnjhrqY95EK1+tYFdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:51:2f:ff:ac:97:9f:30:0b:86:22:36:0a:17:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
Validity
Not Before: May 12 16:00:55 2025 GMT
Not After : May 13 16:00:55 2025 GMT
Subject: CN=2167b963e3fb6b8e57cc8917db5ebf5c65fa0e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:03:51:52:fd:f1:77:ce:c8:3f:9e:c4:5a:
de:ae:01:92:9b:e7:39:78:32:0e:b3:e3:80:bd:df:
ea:11:eb:52:64:e8:ae:e6:b9:60:f1:c8:04:da:af:
e3:5d:10:68:ff:f3:57:b4:9e:6a:cd:b4:85:b6:a9:
d8:d5:66:a0:9f:a0:dd:12:66:8e:e1:e3:29:6c:ef:
7e:ff:ea:05:34:63:9e:3d:81:be:71:cf:00:35:4d:
37:94:bb:54:0c:f0:03:a1:a5:ed:78:ab:4a:33:2b:
a6:9c:6a:67:92:16:b9:cc:cd:3c:b5:7e:44:c1:47:
19:94:46:bb:de:6d:fe:ac:03:b1:eb:b0:5d:78:ea:
46:bc:e3:68:4f:f6:cd:06:fb:e5:97:5b:d6:c9:27:
9a:1f:8c:ff:06:34:74:22:fb:0a:58:b1:44:ea:64:
dd:4c:1f:cf:2c:a7:c1:02:ed:27:1f:f0:00:07:47:
ff:70:0b:f1:25:b2:16:cf:f6:fe:7f:06:6b:80:bc:
c3:6e:57:85:f7:2f:31:94:4b:c7:28:11:aa:d5:e3:
0b:8f:b2:9e:4f:18:38:9e:ce:3f:7b:d2:87:02:26:
3c:9a:ba:06:a3:97:dd:7b:e2:e3:20:7c:05:4d:51:
0c:b5:66:bc:e6:b2:ce:86:58:3a:ae:c7:46:fb:86:
5e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:67:B9:63:E3:FB:6B:8E:57:CC:89:17:DB:5E:BF:5C:65:FA:0E:4B
X509v3 Authority Key Identifier:
keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:cc:c2:e7:8a:cb:67:7f:ba:5b:a9:c5:97:71:99:c1:c6:70:
37:a8:c4:e4:5a:dd:00:d9:99:b6:ca:dc:25:55:4e:8c:3c:78:
8e:b1:58:79:8a:44:07:de:1f:77:c9:38:93:96:be:f6:27:7a:
f4:52:f0:f5:a7:7d:48:58:02:07:76:2a:22:f2:1a:98:31:e0:
c1:d3:73:db:5e:31:b0:d7:46:2a:dd:ab:2e:db:9b:97:1d:98:
4b:f9:a7:37:db:39:8d:e8:ef:f1:28:fd:d0:96:88:67:22:49:
8c:4e:a4:18:17:82:68:88:5d:1e:04:87:1e:00:28:49:8b:a8:
7e:9f:8f:ec:ba:3a:a0:fa:f3:80:c2:09:df:6f:e9:72:ef:5f:
81:97:e9:79:04:25:e8:74:2b:55:18:c6:0b:44:df:d0:39:5c:
32:c2:97:c3:8b:dc:1e:f1:d2:8b:92:2d:df:d2:5c:9b:54:cb:
fd:a0:bc:b6:07:11:2d:b9:bf:c7:a7:76:f2:ef:80:f1:a1:53:
dc:a9:48:44:75:77:0f:66:61:ec:43:7c:06:8d:cf:4d:b1:80:
ce:a6:37:d6:da:fa:14:36:24:fb:37:7d:52:cc:78:bc:9b:88:
32:b5:87:66:dd:4d:19:9f:b9:cb:4e:23:68:d0:70:a6:af:01:
a9:e8:76:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFOlEv/6yXnzALhiI2ChcMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYjM2NjY4ODkzYTgyNDRkNTUzZWZjYTQ2ODhkMGYxMDE5
ZTRlMjUwHhcNMjUwNTEyMTYwMDU1WhcNMjUwNTEzMTYwMDU1WjAzMTEwLwYDVQQD
EygyMTY3Yjk2M2UzZmI2YjhlNTdjYzg5MTdkYjVlYmY1YzY1ZmEwZTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8oDUVL98XfOyD+exFrergGSm+c5
eDIOs+OAvd/qEetSZOiu5rlg8cgE2q/jXRBo//NXtJ5qzbSFtqnY1Wagn6DdEmaO
4eMpbO9+/+oFNGOePYG+cc8ANU03lLtUDPADoaXteKtKMyumnGpnkha5zM08tX5E
wUcZlEa73m3+rAOx67BdeOpGvONoT/bNBvvll1vWySeaH4z/BjR0IvsKWLFE6mTd
TB/PLKfBAu0nH/AAB0f/cAvxJbIWz/b+fwZrgLzDbleF9y8xlEvHKBGq1eMLj7Ke
Txg4ns4/e9KHAiY8mroGo5fde+LjIHwFTVEMtWa85rLOhlg6rsdG+4ZeLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFnuWPj+2uOV8yJF9tev1xl+g5LMB8GA1UdIwQY
MBaAFAqzZmiJOoJE1VPvykaI0PEBnk4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lNTc1MDMtZjY1OC00M2UyLTkzYTkt
MmFmMDY3YTEzMGFhLzEvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9lNTc1MDMtZjY1OC00M2UyLTkzYTktMmFmMDY3YTEzMGFh
LzEvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2MzC54rL
Z3+6W6nFl3GZwcZwN6jE5FrdANmZtsrcJVVOjDx4jrFYeYpEB94fd8k4k5a+9id6
9FLw9ad9SFgCB3YqIvIamDHgwdNz214xsNdGKt2rLtublx2YS/mnN9s5jejv8Sj9
0JaIZyJJjE6kGBeCaIhdHgSHHgAoSYuofp+P7Lo6oPrzgMIJ32/pcu9fgZfpeQQl
6HQrVRjGC0Tf0DlcMsKXw4vcHvHSi5It39Jcm1TL/aC8tgcRLbm/x6d28u+A8aFT
3KlIRHV3D2Zh7EN8Bo3PTbGAzqY31tr6FDYk+zd9Usx4vJuIMrWHZt1NGZ+5y04j
aNBwpq8Bqeh2eg==
-----END CERTIFICATE-----
Generated at Mon May 12 19:46:05 2025 by rpki-client