Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
File: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft (raw, json)
Hash identifier: 937IdNP3DaIjpNJRS7JT7z5yf7T0yEs24NpDdaJUaUs=
Subject key identifier: AD:5B:B8:93:10:BD:85:4B:37:A4:09:07:31:E7:86:72:D6:99:CC:DE
Authority key identifier: A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
Certificate issuer: /CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Certificate serial: 0196C98526B65B56A1260EA4B2564B56C7A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
Manifest number: 153B
Signing time: Tue 13 May 2025 12:01:08 +0000
Manifest this update: Tue 13 May 2025 12:01:08 +0000
Manifest next update: Wed 14 May 2025 12:01:08 +0000
Files and hashes: 1: GSYjq6iczyoVzYDlz3HGUFSrIQ4.roa (hash: XbCa3j6XTEyeRnElswqHZbpKZmfxYHeYOgSyLa4zvQM=)
2: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl (hash: 6JE7xtR+kpEIjq3xJQcRzYTTlFrwmjxSp9FW55gYO2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:85:26:b6:5b:56:a1:26:0e:a4:b2:56:4b:56:c7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Validity
Not Before: May 13 12:01:08 2025 GMT
Not After : May 14 12:01:08 2025 GMT
Subject: CN=ad5bb89310bd854b37a4090731e78672d699ccde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:35:db:5d:4a:a1:44:e7:05:ca:5f:31:76:2d:
9e:fc:7d:7b:f4:20:87:84:b2:58:14:c1:51:58:c1:
31:2a:6b:22:84:c5:c1:10:f5:dc:43:ed:a5:00:fb:
d6:0d:2c:7c:16:1c:68:d7:4a:4e:60:1d:e6:b0:e3:
b9:7e:bd:23:4a:02:07:08:e8:9a:4c:fd:a3:04:23:
61:2c:74:8e:55:4b:f2:29:62:4d:4a:75:d6:e1:00:
64:35:11:0d:0d:24:bf:f5:d8:4a:2a:2b:d4:27:87:
3e:b0:4b:85:ca:97:3f:af:79:05:c8:45:e4:8d:f6:
7b:56:7d:5b:2d:3c:61:e8:72:35:59:25:e8:dc:6e:
39:b7:19:3f:a6:7d:a0:b3:ed:a7:de:09:e0:97:b9:
f4:4d:7e:02:cf:ff:14:17:37:35:4b:7a:a9:54:66:
64:e4:4c:68:09:d1:3f:95:42:61:a3:a8:91:33:f1:
73:be:59:17:7b:e6:ac:ca:44:d8:70:47:87:96:7b:
9d:83:08:8a:5e:b8:5f:d7:17:54:c4:bc:1f:58:50:
d7:5a:e9:55:3b:1d:b2:b8:0e:b1:bd:59:c2:b1:98:
ad:f1:cf:7c:c2:c9:51:5e:0e:b8:9c:3f:ce:c9:6b:
aa:a9:27:2a:df:28:37:2b:bb:08:0e:9f:65:3e:75:
ea:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5B:B8:93:10:BD:85:4B:37:A4:09:07:31:E7:86:72:D6:99:CC:DE
X509v3 Authority Key Identifier:
keyid:A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2c:6e:f1:86:11:04:01:c5:9a:b8:e3:a1:33:db:2c:ff:b2:
79:ed:d1:fd:9d:a3:9c:e2:5c:54:77:b2:be:60:74:9e:8a:ee:
bf:7d:aa:25:4c:b8:02:60:65:ad:58:89:09:d0:32:fe:23:87:
34:22:c9:bd:d9:fe:e5:b6:c0:37:19:ad:ae:5c:e4:e5:71:3b:
99:3c:6c:f6:76:dd:7a:76:1f:e4:9a:2d:82:a2:c7:ab:e2:77:
e8:25:9e:97:4c:84:88:a6:b2:25:ac:1b:1e:2e:ec:34:6f:93:
af:8e:c7:fb:e9:a1:0e:1d:f4:d7:0c:c1:db:b1:25:8e:41:cf:
8f:43:6a:a8:4d:38:61:3d:d2:c0:c3:98:19:54:96:49:0b:61:
0c:9f:a4:54:1f:50:e0:f8:b1:00:33:16:22:ff:ff:1e:47:b9:
17:56:91:76:02:94:50:74:90:67:4b:d2:b0:f2:94:ef:ef:67:
af:0b:c8:8e:59:a5:97:8d:b4:59:00:62:b0:fb:9e:3d:60:79:
f3:44:d5:53:90:eb:e6:b8:4e:5b:6f:a9:6e:37:79:7e:f7:59:
81:12:e8:1a:6b:60:76:e6:d6:5a:13:7d:21:f9:f9:6c:4c:d1:
ec:06:83:b7:a3:47:c8:e8:99:3e:71:99:5f:86:8d:58:33:c6:
5f:99:54:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJhSa2W1ahJg6kslZLVsejMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MmY2NTI0MDg1ZmExMGU4YzA5OGFjMmI1ODI4YTFmODhj
NjkxM2MwHhcNMjUwNTEzMTIwMTA4WhcNMjUwNTE0MTIwMTA4WjAzMTEwLwYDVQQD
EyhhZDViYjg5MzEwYmQ4NTRiMzdhNDA5MDczMWU3ODY3MmQ2OTljY2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjXbXUqhROcFyl8xdi2e/H179CCH
hLJYFMFRWMExKmsihMXBEPXcQ+2lAPvWDSx8Fhxo10pOYB3msOO5fr0jSgIHCOia
TP2jBCNhLHSOVUvyKWJNSnXW4QBkNRENDSS/9dhKKivUJ4c+sEuFypc/r3kFyEXk
jfZ7Vn1bLTxh6HI1WSXo3G45txk/pn2gs+2n3gngl7n0TX4Cz/8UFzc1S3qpVGZk
5ExoCdE/lUJho6iRM/FzvlkXe+asykTYcEeHlnudgwiKXrhf1xdUxLwfWFDXWulV
Ox2yuA6xvVnCsZit8c98wslRXg64nD/OyWuqqScq3yg3K7sIDp9lPnXqiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1buJMQvYVLN6QJBzHnhnLWmczeMB8GA1UdIwQY
MBaAFKUvZSQIX6EOjAmKwrWCih+IxpE8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFM5bEpBaGZvUTZNQ1lyQ3RZS0tINGpHa1R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wZTQ1MDYtMTc0Zi00NDBhLWEzMWMt
YmZmZjUxNDIwNTNmLzEvcFM5bEpBaGZvUTZNQ1lyQ3RZS0tINGpHa1R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8wZTQ1MDYtMTc0Zi00NDBhLWEzMWMtYmZmZjUxNDIwNTNm
LzEvcFM5bEpBaGZvUTZNQ1lyQ3RZS0tINGpHa1R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyxu8YYR
BAHFmrjjoTPbLP+yee3R/Z2jnOJcVHeyvmB0noruv32qJUy4AmBlrViJCdAy/iOH
NCLJvdn+5bbANxmtrlzk5XE7mTxs9nbdenYf5JotgqLHq+J36CWel0yEiKayJawb
Hi7sNG+Tr47H++mhDh301wzB27EljkHPj0NqqE04YT3SwMOYGVSWSQthDJ+kVB9Q
4PixADMWIv//Hke5F1aRdgKUUHSQZ0vSsPKU7+9nrwvIjlmll420WQBisPuePWB5
80TVU5Dr5rhOW2+pbjd5fvdZgRLoGmtgdubWWhN9Ifn5bEzR7AaDt6NHyOiZPnGZ
X4aNWDPGX5lU8Q==
-----END CERTIFICATE-----
Generated at Tue May 13 17:16:12 2025 by rpki-client