Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
File: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft (raw, json)
Hash identifier: NNvOXkNSVMkHI2oEyH+ZUIwF5qvqtc2Gpx/MUO2LVis=
Subject key identifier: D5:0B:4A:73:9D:34:16:10:BB:72:48:65:69:98:F1:71:35:20:38:EA
Authority key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
Certificate issuer: /CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Certificate serial: 0196B85A2BB95A2F6FF09F6643CF35BF63B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
Manifest number: 10E7
Signing time: Sat 10 May 2025 04:00:39 +0000
Manifest this update: Sat 10 May 2025 04:00:39 +0000
Manifest next update: Sun 11 May 2025 04:00:39 +0000
Files and hashes: 1: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl (hash: LSrCwzyFgi+3EUm8VWEPV5qitjjuAWfm1FgGJBNeShw=)
2: O7dVmdulXoSGFdWUdpvv3bkJxU8.roa (hash: hmlWALQMbQbIcNvaSImT+aYBz0m3Sm9TMeYp/ubqBkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:2b:b9:5a:2f:6f:f0:9f:66:43:cf:35:bf:63:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Validity
Not Before: May 10 04:00:39 2025 GMT
Not After : May 11 04:00:39 2025 GMT
Subject: CN=d50b4a739d341610bb7248656998f171352038ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:10:39:b7:93:ce:4c:14:c2:aa:a5:d7:b5:c6:
49:3b:60:68:74:af:24:45:db:ad:ef:8c:15:c1:15:
4b:55:3c:6d:3e:01:5c:ff:d6:eb:19:2e:c5:2f:95:
b6:4b:6b:54:70:21:cb:35:e0:c4:86:a3:08:30:bc:
02:fd:a9:89:d3:60:f6:4e:8b:ed:dc:08:0e:3e:08:
15:a8:b0:b0:ec:bf:7c:77:7c:26:89:b5:9b:89:5c:
51:cb:b3:98:2c:15:dd:21:cd:0d:36:6f:ad:63:ae:
78:8a:96:8f:83:5b:48:16:7d:6c:a6:c3:73:28:41:
f9:7d:f7:69:2b:ee:f9:0d:df:4a:05:db:8b:48:b8:
0f:3d:05:77:78:40:05:ee:d6:26:bb:82:60:96:87:
5d:ef:e2:09:df:43:01:e8:21:12:57:99:2b:fc:a4:
9b:01:97:5e:07:c5:2c:7f:2a:b9:1c:07:fd:c6:3f:
32:8b:d0:45:99:9c:56:a1:99:7b:0c:d9:6f:eb:0e:
9f:d9:94:a5:28:96:3c:5d:20:08:ee:3b:72:b9:24:
48:91:5b:dd:a1:dc:11:33:f8:65:d0:55:c8:5b:51:
ba:38:16:f2:84:b4:ba:38:81:4e:18:f5:ef:40:d5:
20:8c:4c:0d:78:1e:c0:b3:88:dd:68:d9:39:fc:e7:
6a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0B:4A:73:9D:34:16:10:BB:72:48:65:69:98:F1:71:35:20:38:EA
X509v3 Authority Key Identifier:
keyid:DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:af:9e:b8:a2:0d:32:d9:35:7d:66:10:c0:30:49:cd:3f:f3:
58:c7:c8:80:cb:5a:93:06:12:8e:1d:87:cf:5b:50:1e:c4:1d:
d1:a6:98:5c:9e:e3:bb:38:bb:6c:08:8e:af:23:6e:34:e0:06:
79:e3:31:d2:03:f8:e0:9a:7c:c1:00:6d:86:6a:96:b5:4b:eb:
8c:0c:26:8b:e4:a0:65:00:3e:7a:f9:22:b2:77:bb:67:84:2f:
0e:be:7c:f0:f8:6c:f8:bb:cc:d3:d1:fe:b1:28:c0:47:bd:34:
07:d7:ed:5b:a0:a3:a4:3d:3a:31:19:c0:25:db:a0:e8:9d:de:
f3:9f:33:15:45:92:6f:27:72:50:13:44:c9:43:db:eb:6a:07:
86:5b:bb:f9:cb:23:eb:15:76:e9:f7:5b:09:fe:8a:4d:aa:ae:
fa:71:27:82:18:dd:47:b2:b9:b9:4b:4e:15:cb:18:c1:13:e5:
02:49:ea:16:71:a5:cf:04:f3:26:0c:e0:c4:52:3c:06:69:cc:
24:ae:df:b9:d2:a0:68:a5:1c:84:6c:5b:2b:f0:72:94:47:7d:
eb:9d:3a:4f:6d:3b:22:2d:44:2a:a7:34:08:ef:a1:92:16:32:
4c:9b:fc:f9:9b:1e:10:19:1e:c6:d8:ee:21:c4:41:f8:ab:21:
8f:d3:bf:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4Wiu5Wi9v8J9mQ881v2O5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNDg5ZmJlOTg5OTRjYmMwOThjODc2YmE2M2U1NjBhYzE3
ZTViMmYwHhcNMjUwNTEwMDQwMDM5WhcNMjUwNTExMDQwMDM5WjAzMTEwLwYDVQQD
EyhkNTBiNGE3MzlkMzQxNjEwYmI3MjQ4NjU2OTk4ZjE3MTM1MjAzOGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhA5t5POTBTCqqXXtcZJO2BodK8k
Rdut74wVwRVLVTxtPgFc/9brGS7FL5W2S2tUcCHLNeDEhqMIMLwC/amJ02D2Tovt
3AgOPggVqLCw7L98d3wmibWbiVxRy7OYLBXdIc0NNm+tY654ipaPg1tIFn1spsNz
KEH5ffdpK+75Dd9KBduLSLgPPQV3eEAF7tYmu4Jglodd7+IJ30MB6CESV5kr/KSb
AZdeB8Usfyq5HAf9xj8yi9BFmZxWoZl7DNlv6w6f2ZSlKJY8XSAI7jtyuSRIkVvd
odwRM/hl0FXIW1G6OBbyhLS6OIFOGPXvQNUgjEwNeB7As4jdaNk5/OdqEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNULSnOdNBYQu3JIZWmY8XE1IDjqMB8GA1UdIwQY
MBaAFNtIn76YmUy8CYyHa6Y+VgrBflsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjBpZnZwaVpUTHdKaklkcnBqNVdDc0YtV3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82Y2FjNTAtM2YxMy00ZWY5LThiNmQt
ZGVjZWM0MWE3MWQxLzEvMjBpZnZwaVpUTHdKaklkcnBqNVdDc0YtV3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS82Y2FjNTAtM2YxMy00ZWY5LThiNmQtZGVjZWM0MWE3MWQx
LzEvMjBpZnZwaVpUTHdKaklkcnBqNVdDc0YtV3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr6+euKIN
Mtk1fWYQwDBJzT/zWMfIgMtakwYSjh2Hz1tQHsQd0aaYXJ7juzi7bAiOryNuNOAG
eeMx0gP44Jp8wQBthmqWtUvrjAwmi+SgZQA+evkisne7Z4QvDr588Phs+LvM09H+
sSjAR700B9ftW6CjpD06MRnAJdug6J3e858zFUWSbydyUBNEyUPb62oHhlu7+csj
6xV26fdbCf6KTaqu+nEnghjdR7K5uUtOFcsYwRPlAknqFnGlzwTzJgzgxFI8BmnM
JK7fudKgaKUchGxbK/BylEd96506T207Ii1EKqc0CO+hkhYyTJv8+ZseEBkextju
IcRB+Kshj9O/Rg==
-----END CERTIFICATE-----
Generated at Sat May 10 11:31:59 2025 by rpki-client