Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
File: 1IW26difsBA2mXHtiIVyBZhdSRg.mft (raw, json)
Hash identifier: tOER5V4+LXabLXz/enWJfRTdVvCocqpTxPX0KVuf/JU=
Subject key identifier: 75:AE:99:BB:D3:8D:D2:73:88:9E:E0:C7:BB:63:1F:BE:33:E4:B4:50
Authority key identifier: D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
Certificate issuer: /CN=d485b6e9d89fb010369971ed88857205985d4918
Certificate serial: 0196A878DE0C065E117A88A9A8ABE457DB7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
Manifest number: 1529
Signing time: Wed 07 May 2025 02:00:15 +0000
Manifest this update: Wed 07 May 2025 02:00:15 +0000
Manifest next update: Thu 08 May 2025 02:00:15 +0000
Files and hashes: 1: 1IW26difsBA2mXHtiIVyBZhdSRg.crl (hash: dD5WnG7D0sI0g/DQy6mbKM51rgdwmWXA2V52R5OMKzA=)
2: kFp1ntirY-_nRj5W9JqqX1ydSnU.roa (hash: NWOTQpr3hkXHB9fkn9UXRHKGkCwc9Gafyc4Z5IuHimc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:78:de:0c:06:5e:11:7a:88:a9:a8:ab:e4:57:db:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d485b6e9d89fb010369971ed88857205985d4918
Validity
Not Before: May 7 02:00:15 2025 GMT
Not After : May 8 02:00:15 2025 GMT
Subject: CN=75ae99bbd38dd273889ee0c7bb631fbe33e4b450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:04:47:33:91:56:9c:b3:a8:df:09:ac:c8:3f:
df:6d:0a:3a:de:be:dc:f4:a9:91:05:17:68:11:75:
bc:12:b0:21:5e:54:7a:ac:8c:e6:a9:93:ec:e0:c5:
de:38:6e:08:e5:a8:ca:2b:ee:ab:92:e2:e5:a1:7d:
42:c9:fa:98:51:54:cf:61:40:9e:e9:23:05:61:e9:
44:ed:54:38:fc:48:70:cb:74:4c:28:44:4f:7d:21:
6e:ef:26:19:53:04:ad:6f:d0:e3:b8:f6:84:8c:66:
d6:2b:b5:eb:62:53:38:c8:28:e3:3a:c8:4b:28:34:
c1:82:97:84:58:17:d9:18:c5:c4:2a:a2:2d:e5:c1:
42:49:58:41:cd:49:01:1a:56:61:3c:11:e9:c6:fb:
89:09:4f:6d:a1:f0:e0:91:0d:51:1d:1c:fc:3f:b2:
0f:72:67:1b:ab:32:5e:ab:44:11:ed:ae:06:d8:94:
29:4d:ac:33:0e:7b:70:2b:31:9e:a3:17:60:ad:92:
50:1c:6a:75:2a:d3:13:74:3d:fd:56:cb:4c:64:88:
51:c9:57:d0:18:0e:73:55:27:5b:9b:65:ae:fb:b6:
8f:fc:d4:43:58:ce:98:df:95:01:cb:93:10:66:d8:
fd:3e:32:11:ec:05:f9:27:4b:f1:ac:07:76:2b:f2:
c6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AE:99:BB:D3:8D:D2:73:88:9E:E0:C7:BB:63:1F:BE:33:E4:B4:50
X509v3 Authority Key Identifier:
keyid:D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7c:ee:53:81:22:94:86:16:75:8c:54:98:89:42:57:f7:56:
7a:b3:a4:44:ec:03:76:2f:86:44:9f:e8:86:b4:58:d1:56:22:
61:03:dc:c8:2d:cc:c4:b9:c4:9c:6a:ef:ea:e8:7b:4d:bd:43:
48:11:fa:3b:3a:ef:4e:19:63:4b:ac:bf:69:4f:4c:29:1d:cc:
4f:42:a6:4c:ff:c3:f5:f1:4e:51:c2:95:2e:9e:8a:13:fa:5d:
b5:d3:1c:db:b6:1a:49:c0:29:7e:70:6a:59:02:de:fb:8a:ef:
34:49:88:2a:58:b5:80:d3:70:3c:c3:c7:25:cf:62:4c:47:39:
d2:b7:21:02:13:30:2d:fb:e9:34:5a:25:32:74:b7:c3:9b:1f:
b5:3d:9b:a6:6b:d2:32:73:81:fe:5b:a8:b1:bb:3c:ca:50:2c:
f8:98:70:0e:8e:ea:ed:b9:bf:9e:88:33:6b:03:76:6a:57:ec:
79:35:2f:f8:16:51:2d:d6:5d:f4:da:2e:2a:d8:9d:ca:ae:cd:
36:7d:2e:9c:ae:88:2c:8e:61:6b:8c:88:a5:05:5e:8e:a2:74:
df:8e:6c:9f:92:76:60:eb:a1:fa:1f:01:57:5c:59:37:03:0b:
2c:7b:ac:d2:36:f7:d8:4f:c9:c9:3e:69:17:1e:17:31:33:99:
4e:40:f1:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaoeN4MBl4ReoipqKvkV9t8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ODViNmU5ZDg5ZmIwMTAzNjk5NzFlZDg4ODU3MjA1OTg1
ZDQ5MTgwHhcNMjUwNTA3MDIwMDE1WhcNMjUwNTA4MDIwMDE1WjAzMTEwLwYDVQQD
Eyg3NWFlOTliYmQzOGRkMjczODg5ZWUwYzdiYjYzMWZiZTMzZTRiNDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQRHM5FWnLOo3wmsyD/fbQo63r7c
9KmRBRdoEXW8ErAhXlR6rIzmqZPs4MXeOG4I5ajKK+6rkuLloX1CyfqYUVTPYUCe
6SMFYelE7VQ4/Ehwy3RMKERPfSFu7yYZUwStb9DjuPaEjGbWK7XrYlM4yCjjOshL
KDTBgpeEWBfZGMXEKqIt5cFCSVhBzUkBGlZhPBHpxvuJCU9tofDgkQ1RHRz8P7IP
cmcbqzJeq0QR7a4G2JQpTawzDntwKzGeoxdgrZJQHGp1KtMTdD39VstMZIhRyVfQ
GA5zVSdbm2Wu+7aP/NRDWM6Y35UBy5MQZtj9PjIR7AX5J0vxrAd2K/LGVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWumbvTjdJziJ7gx7tjH74z5LRQMB8GA1UdIwQY
MBaAFNSFtunYn7AQNplx7YiFcgWYXUkYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlXMjZkaWZzQkEybVhIdGlJVnlCWmhkU1JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84NTg5MTAtYzUwMS00NTljLWEzMTMt
N2FjNjgwZWQ1ZGQ3LzEvMUlXMjZkaWZzQkEybVhIdGlJVnlCWmhkU1JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84NTg5MTAtYzUwMS00NTljLWEzMTMtN2FjNjgwZWQ1ZGQ3
LzEvMUlXMjZkaWZzQkEybVhIdGlJVnlCWmhkU1JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHzuU4Ei
lIYWdYxUmIlCV/dWerOkROwDdi+GRJ/ohrRY0VYiYQPcyC3MxLnEnGrv6uh7Tb1D
SBH6OzrvThljS6y/aU9MKR3MT0KmTP/D9fFOUcKVLp6KE/pdtdMc27YaScApfnBq
WQLe+4rvNEmIKli1gNNwPMPHJc9iTEc50rchAhMwLfvpNFolMnS3w5sftT2bpmvS
MnOB/luosbs8ylAs+JhwDo7q7bm/nogzawN2alfseTUv+BZRLdZd9NouKtidyq7N
Nn0unK6ILI5ha4yIpQVejqJ0345sn5J2YOuh+h8BV1xZNwMLLHus0jb32E/JyT5p
Fx4XMTOZTkDxsw==
-----END CERTIFICATE-----
Generated at Wed May 7 05:52:29 2025 by rpki-client