Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
File: RlDGwCqb3k4XGH8FsOypUEg7-S0.mft (raw, json)
Hash identifier: Kbk5Lp3TS5QQGjbk62HxBTlyEr8GcZVnGgPdyRLpBrI=
Subject key identifier: 3B:AF:BE:15:1B:3F:52:72:D4:80:70:5D:37:7E:46:F0:A7:B2:60:83
Authority key identifier: 46:50:C6:C0:2A:9B:DE:4E:17:18:7F:05:B0:EC:A9:50:48:3B:F9:2D
Certificate issuer: /CN=4650c6c02a9bde4e17187f05b0eca950483bf92d
Certificate serial: 01969FE3E33D76D116760E29E9D25EC66118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 10:00:34 +0000
Manifest this update: Mon 05 May 2025 10:00:34 +0000
Manifest next update: Tue 06 May 2025 10:00:34 +0000
Files and hashes: 1: 3NLIuHMmWgQs4wJxVy9Hy-aW-pg.roa (hash: E1YEQO+V+WEVpKPvVd6pcBugEFAnXKdDCtGzwwDY3UY=)
2: RlDGwCqb3k4XGH8FsOypUEg7-S0.crl (hash: ViHUzoE8uLJu863CNWEJiKx9OlyC7ZeyTrV+kblcj1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e3:e3:3d:76:d1:16:76:0e:29:e9:d2:5e:c6:61:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4650c6c02a9bde4e17187f05b0eca950483bf92d
Validity
Not Before: May 5 10:00:34 2025 GMT
Not After : May 6 10:00:34 2025 GMT
Subject: CN=3bafbe151b3f5272d480705d377e46f0a7b26083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:16:35:63:df:f2:8c:76:71:68:02:3f:24:cc:
71:bd:6c:59:fd:38:ff:7b:22:a3:a1:50:95:94:d1:
15:15:eb:5b:6e:5e:da:ee:b5:89:a1:4f:e0:46:25:
05:b3:71:c6:25:0d:2d:03:7a:89:64:24:50:56:f5:
6e:11:53:06:7b:57:28:d6:03:12:5f:76:f6:87:6a:
81:1b:2d:bd:79:b4:87:8b:61:32:a7:0e:77:c7:39:
4c:f2:76:88:eb:08:ae:33:a5:c0:44:3e:c0:0f:1f:
53:39:e5:7a:2b:12:87:c6:92:04:d0:91:f3:ec:e6:
91:e4:e6:06:fb:cc:6b:5f:9f:57:f8:35:d2:10:cd:
99:82:97:9a:75:c0:06:ac:e2:27:92:90:a7:6e:04:
16:1c:0b:9d:5f:ec:0b:8f:86:3f:98:84:60:f4:d1:
00:10:fb:e3:7c:4a:e5:1c:3c:ef:f6:9e:5c:d5:11:
a7:53:04:99:d9:75:8c:73:0b:66:3c:07:65:6e:b4:
75:57:72:27:82:a0:08:26:f5:50:45:64:33:07:57:
70:52:5f:17:5a:a1:50:3a:e4:ab:d0:9e:a0:9d:c0:
74:16:9e:fb:d7:94:c8:e2:f6:6a:0e:34:99:c2:07:
83:e4:32:84:f0:7e:c5:9e:8b:5e:1d:8d:ba:b4:83:
8b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AF:BE:15:1B:3F:52:72:D4:80:70:5D:37:7E:46:F0:A7:B2:60:83
X509v3 Authority Key Identifier:
keyid:46:50:C6:C0:2A:9B:DE:4E:17:18:7F:05:B0:EC:A9:50:48:3B:F9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c4:c0:64:e5:2a:04:1b:15:e5:1e:14:8e:ca:eb:c6:7f:0e:
79:a5:5e:e0:b5:c2:9d:51:df:97:3a:eb:36:c6:5d:4c:3c:94:
9a:88:fa:6b:9e:96:52:36:41:6f:dc:88:bb:64:46:2f:7d:eb:
1f:ff:74:ad:d2:0f:71:74:6c:e4:39:b9:5e:76:b9:12:93:b8:
47:76:b0:79:79:9e:18:e4:ed:b9:50:45:6b:39:c8:b2:f8:fa:
af:ff:28:b4:c1:c2:fc:35:08:ec:c6:a6:3e:aa:72:60:4e:71:
be:70:b7:c3:d2:db:df:44:99:b7:77:90:8d:88:6e:fa:19:67:
78:fe:cc:61:2a:a8:8e:c5:ad:71:6a:55:6a:0b:e0:6b:f8:23:
4d:0f:e3:08:d7:52:a2:a1:0d:a6:87:9e:c5:29:8b:3e:5a:11:
7a:01:dd:a8:de:bb:7b:c1:70:73:84:85:fc:c3:c1:a2:21:17:
c3:cc:33:81:21:27:af:c9:59:df:64:0f:62:e7:81:e3:23:c5:
e9:1d:55:28:bf:89:b5:74:17:31:e0:8a:04:69:a7:a6:2d:85:
7f:d0:a9:dc:ca:1b:95:c0:7e:03:d8:79:e3:9a:c7:f3:ef:66:
a9:6e:f8:23:e1:d0:1d:6e:58:5d:84:e6:34:8c:9f:6f:d4:2f:
ba:31:78:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaf4+M9dtEWdg4p6dJexmEYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NTBjNmMwMmE5YmRlNGUxNzE4N2YwNWIwZWNhOTUwNDgz
YmY5MmQwHhcNMjUwNTA1MTAwMDM0WhcNMjUwNTA2MTAwMDM0WjAzMTEwLwYDVQQD
EygzYmFmYmUxNTFiM2Y1MjcyZDQ4MDcwNWQzNzdlNDZmMGE3YjI2MDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xY1Y9/yjHZxaAI/JMxxvWxZ/Tj/
eyKjoVCVlNEVFetbbl7a7rWJoU/gRiUFs3HGJQ0tA3qJZCRQVvVuEVMGe1co1gMS
X3b2h2qBGy29ebSHi2Eypw53xzlM8naI6wiuM6XARD7ADx9TOeV6KxKHxpIE0JHz
7OaR5OYG+8xrX59X+DXSEM2ZgpeadcAGrOInkpCnbgQWHAudX+wLj4Y/mIRg9NEA
EPvjfErlHDzv9p5c1RGnUwSZ2XWMcwtmPAdlbrR1V3IngqAIJvVQRWQzB1dwUl8X
WqFQOuSr0J6gncB0Fp7715TI4vZqDjSZwgeD5DKE8H7FnoteHY26tIOLEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDuvvhUbP1Jy1IBwXTd+RvCnsmCDMB8GA1UdIwQY
MBaAFEZQxsAqm95OFxh/BbDsqVBIO/ktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmxER3dDcWIzazRYR0g4RnNPeXBVRWc3LVMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zNzM0MTQtOWNlNC00NmY1LTk0MGUt
NDljMjQyOTJlOWJkLzEvUmxER3dDcWIzazRYR0g4RnNPeXBVRWc3LVMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zNzM0MTQtOWNlNC00NmY1LTk0MGUtNDljMjQyOTJlOWJk
LzEvUmxER3dDcWIzazRYR0g4RnNPeXBVRWc3LVMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8TAZOUq
BBsV5R4Ujsrrxn8OeaVe4LXCnVHflzrrNsZdTDyUmoj6a56WUjZBb9yIu2RGL33r
H/90rdIPcXRs5Dm5Xna5EpO4R3aweXmeGOTtuVBFaznIsvj6r/8otMHC/DUI7Mam
PqpyYE5xvnC3w9Lb30SZt3eQjYhu+hlneP7MYSqojsWtcWpVagvga/gjTQ/jCNdS
oqENpoeexSmLPloRegHdqN67e8Fwc4SF/MPBoiEXw8wzgSEnr8lZ32QPYueB4yPF
6R1VKL+JtXQXMeCKBGmnpi2Ff9Cp3MoblcB+A9h545rH8+9mqW74I+HQHW5YXYTm
NIyfb9QvujF46Q==
-----END CERTIFICATE-----
Generated at Mon May 5 17:41:48 2025 by rpki-client