Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
File: P9oppIwld1jI5RjuXIsDzNoCR8k.mft (raw, json)
Hash identifier: HYEcY3aVrjIAGzTsUApkWpKGtoqWhuwBSb2AbkznNwk=
Subject key identifier: D5:C6:C6:C9:1A:F0:A4:1B:7C:D5:BA:3A:EF:AE:27:94:4F:34:C1:CB
Authority key identifier: 3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
Certificate issuer: /CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Certificate serial: 0196C64CCDADE03EADCFBE3E7E4661327A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 21:00:44 +0000
Manifest this update: Mon 12 May 2025 21:00:44 +0000
Manifest next update: Tue 13 May 2025 21:00:44 +0000
Files and hashes: 1: 8_r7mVCzzc8i5_iqagGhH6oA6lo.roa (hash: NPDOx5bLEHu2ttrvWwMBmay19BA0wMcB6dN9yEUt368=)
2: P9oppIwld1jI5RjuXIsDzNoCR8k.crl (hash: xNppdWbu5jUb/27wF7vGCC7C41+EjPw9zV53aVC6864=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:cd:ad:e0:3e:ad:cf:be:3e:7e:46:61:32:7a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Validity
Not Before: May 12 21:00:44 2025 GMT
Not After : May 13 21:00:44 2025 GMT
Subject: CN=d5c6c6c91af0a41b7cd5ba3aefae27944f34c1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8d:dd:30:9e:40:dd:0f:73:2f:75:0a:20:12:
16:fb:16:38:da:4e:c2:a8:1b:92:67:49:4d:35:17:
67:4b:cd:08:58:07:d1:86:bc:2c:86:7e:ea:85:22:
15:37:0b:16:78:46:2e:55:e2:49:16:7a:64:92:9f:
4f:a7:8e:0a:32:b7:7b:c2:70:1a:ee:dd:55:14:ed:
50:49:d3:a4:f2:7a:b9:e5:9a:30:3c:16:79:6b:d7:
43:c1:e8:45:cd:34:5f:58:3b:d6:b1:93:43:3f:95:
81:24:7c:aa:90:fb:80:c4:69:80:49:f0:e3:0c:71:
87:ac:0a:f2:96:c7:45:dc:62:03:a3:7d:c8:ab:fd:
63:73:01:7a:7d:ee:d0:07:20:75:3e:64:11:21:c7:
db:31:7c:21:8c:44:76:93:ab:e5:fe:d1:66:01:29:
dc:38:a1:a2:11:eb:de:e0:86:48:a9:68:69:bf:af:
20:90:83:6a:5d:0e:cf:3a:33:ab:c8:2f:9c:d3:1f:
a3:57:ed:2c:8c:f5:ab:7e:88:85:8d:00:a4:9b:28:
13:55:8a:c9:a2:36:48:c2:8d:c7:e7:e2:13:a7:d1:
a6:da:76:28:7b:38:84:26:2e:9b:85:f1:68:93:b2:
1f:40:cc:ab:e2:ad:8c:27:9f:5b:b8:90:4a:b0:e0:
52:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C6:C6:C9:1A:F0:A4:1B:7C:D5:BA:3A:EF:AE:27:94:4F:34:C1:CB
X509v3 Authority Key Identifier:
keyid:3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:33:b7:ec:ea:13:88:eb:c4:a4:ec:e3:d5:ee:8e:85:78:2e:
1b:4d:e9:a2:3a:6c:a6:3e:17:75:0b:f6:c0:05:fb:71:a4:3f:
aa:58:90:89:15:f8:6f:74:d0:f5:ae:ee:7f:e6:34:84:ee:c0:
ea:d9:01:de:31:b9:b6:39:b2:a6:29:3e:d6:83:6a:b2:94:29:
6d:cc:c4:94:93:d7:c8:b1:3e:16:a5:b5:ee:60:98:47:80:80:
71:ad:dc:d2:9d:61:40:72:e7:b7:10:1e:a0:95:1e:99:7e:b7:
0d:e6:9a:00:5f:76:87:bc:a4:75:c7:34:e1:d6:1f:4b:df:e6:
7f:c5:42:d3:85:d1:da:d7:36:72:76:6e:a6:7e:bb:78:f7:15:
68:a9:11:fb:22:4f:2e:f8:40:7a:9e:53:54:aa:c8:35:7e:65:
a4:95:04:d5:f4:37:a7:20:55:9e:47:ca:43:a3:93:b0:85:d6:
f3:3b:50:be:d9:c4:a1:27:c2:25:f7:c6:0b:24:16:32:19:57:
e3:ef:89:37:47:61:e4:22:cc:b1:ee:ca:7c:e7:bf:9b:ad:bc:
23:93:19:fb:d7:2e:0d:b0:b1:06:42:68:c8:5a:92:85:0a:f3:
a1:bd:2c:b0:62:0f:71:ef:ec:89:45:e0:b6:bc:93:db:f5:c4:
32:e2:e1:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbGTM2t4D6tz74+fkZhMnpNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZGEyOWE0OGMyNTc3NThjOGU1MThlZTVjOGIwM2NjZGEw
MjQ3YzkwHhcNMjUwNTEyMjEwMDQ0WhcNMjUwNTEzMjEwMDQ0WjAzMTEwLwYDVQQD
EyhkNWM2YzZjOTFhZjBhNDFiN2NkNWJhM2FlZmFlMjc5NDRmMzRjMWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz43dMJ5A3Q9zL3UKIBIW+xY42k7C
qBuSZ0lNNRdnS80IWAfRhrwshn7qhSIVNwsWeEYuVeJJFnpkkp9Pp44KMrd7wnAa
7t1VFO1QSdOk8nq55ZowPBZ5a9dDwehFzTRfWDvWsZNDP5WBJHyqkPuAxGmASfDj
DHGHrArylsdF3GIDo33Iq/1jcwF6fe7QByB1PmQRIcfbMXwhjER2k6vl/tFmASnc
OKGiEeve4IZIqWhpv68gkINqXQ7POjOryC+c0x+jV+0sjPWrfoiFjQCkmygTVYrJ
ojZIwo3H5+ITp9Gm2nYoeziEJi6bhfFok7IfQMyr4q2MJ59buJBKsOBSmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXGxska8KQbfNW6Ou+uJ5RPNMHLMB8GA1UdIwQY
MBaAFD/aKaSMJXdYyOUY7lyLA8zaAkfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlvcHBJd2xkMWpJNVJqdVhJc0R6Tm9DUjhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jMWMwNjMtOWU0OS00MzUzLWI4YmQt
OTM3NGYyMWU2NDg4LzEvUDlvcHBJd2xkMWpJNVJqdVhJc0R6Tm9DUjhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jMWMwNjMtOWU0OS00MzUzLWI4YmQtOTM3NGYyMWU2NDg4
LzEvUDlvcHBJd2xkMWpJNVJqdVhJc0R6Tm9DUjhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDO37OoT
iOvEpOzj1e6OhXguG03pojpspj4XdQv2wAX7caQ/qliQiRX4b3TQ9a7uf+Y0hO7A
6tkB3jG5tjmypik+1oNqspQpbczElJPXyLE+FqW17mCYR4CAca3c0p1hQHLntxAe
oJUemX63DeaaAF92h7ykdcc04dYfS9/mf8VC04XR2tc2cnZupn67ePcVaKkR+yJP
LvhAep5TVKrINX5lpJUE1fQ3pyBVnkfKQ6OTsIXW8ztQvtnEoSfCJffGCyQWMhlX
4++JN0dh5CLMse7KfOe/m628I5MZ+9cuDbCxBkJoyFqShQrzob0ssGIPce/siUXg
tryT2/XEMuLhlg==
-----END CERTIFICATE-----
Generated at Tue May 13 06:45:30 2025 by rpki-client