Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier: AEpLgGM4CiF2/VFA8r+JTr+vG6vhcSptLIN5vDs94fk=
Subject key identifier: 25:3C:D0:93:E9:39:08:C9:58:18:CB:E5:4E:74:54:25:AB:89:57:7B
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial: 0196D551F5A33514DA8C34FA23F50AD752C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number: 0366
Signing time: Thu 15 May 2025 19:00:40 +0000
Manifest this update: Thu 15 May 2025 19:00:40 +0000
Manifest next update: Fri 16 May 2025 19:00:40 +0000
Files and hashes: 1: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: X/cuV46OCkma7bkrZnvVorf6sOywN3ncf60rtsl+JjI=)
2: L9TmHTRJ4KmbROihaZqVw4CH0R4.roa (hash: fJF5ITsoVPcI+16TtpbepHN9ZUSlaxu/fL62paN4YkU=)
3: epS9uhPYBS4XHgZYHUSjyRaPT-8.roa (hash: yIRFJuAs5Q1gEW1rNp50YuIW1vM7yb2oOp7wzJTUTIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d5:51:f5:a3:35:14:da:8c:34:fa:23:f5:0a:d7:52:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Validity
Not Before: May 15 19:00:40 2025 GMT
Not After : May 16 19:00:40 2025 GMT
Subject: CN=253cd093e93908c95818cbe54e745425ab89577b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:97:8d:8c:d6:5c:68:68:54:87:03:4c:ed:2c:
23:0b:2e:e7:b1:f5:dc:94:cb:d8:64:cd:b5:87:ff:
bb:f5:7d:6f:be:90:f2:30:2c:2a:d9:cf:9a:40:d8:
7c:98:cd:c1:38:9f:1c:81:a2:d3:be:15:21:ad:b3:
85:ee:ce:7f:38:d6:60:94:05:d2:f6:7f:d1:94:33:
51:a8:f1:c2:21:58:f5:4f:01:45:f8:69:ab:4e:11:
5f:54:ae:f3:f4:b4:69:5d:68:93:90:76:37:3b:eb:
8d:4d:dd:04:c7:6d:c7:cd:5d:15:8b:e6:e9:1e:4a:
c3:26:93:8f:c1:6f:c5:9e:46:de:17:83:ee:1e:c8:
3f:2b:e1:85:1d:65:bd:ec:0f:c9:9c:c6:ce:d7:9a:
57:22:62:2b:8e:49:00:b2:53:a7:bb:94:2f:5c:04:
82:28:6b:88:15:d5:40:9e:1b:a7:46:73:38:95:cb:
9a:fe:60:51:64:3a:47:f8:78:75:58:35:00:33:c8:
9a:c2:5b:e8:1e:0e:3e:98:e9:25:0a:1f:5c:f3:f4:
64:e8:cb:ca:b2:08:7d:36:bb:41:6f:d8:ad:25:d4:
fb:20:ef:5d:6d:47:68:d0:5b:d6:6c:fc:5c:2f:d7:
d1:f8:6c:4a:b0:a3:66:2a:b3:ab:3b:e8:1e:bf:37:
d2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3C:D0:93:E9:39:08:C9:58:18:CB:E5:4E:74:54:25:AB:89:57:7B
X509v3 Authority Key Identifier:
keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:42:81:63:8b:22:05:c2:86:cd:37:a2:3a:45:29:2e:18:bb:
e6:2f:92:2e:c7:8d:42:c7:e6:fa:19:bb:ac:c9:95:10:5f:24:
7a:ee:60:61:70:a1:9f:a8:5f:61:a6:e6:13:e7:2e:d0:4f:a0:
6b:5b:22:cb:ba:88:98:0c:2d:1e:08:a3:07:e6:83:cf:b9:a0:
92:58:f2:84:b8:89:5e:14:4b:df:be:66:d0:71:5f:ef:88:bd:
a8:6f:71:50:1b:4d:bd:1d:5a:63:05:48:60:ed:2f:e9:54:26:
22:8a:7f:65:ea:bd:2a:05:0e:61:52:db:d3:9f:dd:f3:47:a4:
6d:b4:ad:5f:a9:53:3b:29:d8:cd:6b:8d:2f:12:be:d7:07:7d:
24:8c:bb:91:e7:88:ba:b7:9d:90:8c:89:4e:aa:a1:31:ba:78:
84:7d:fb:e7:bf:c9:ce:4d:99:38:4b:bd:12:c7:ad:4b:5f:fc:
7d:0e:7f:54:25:28:5f:f2:f8:03:9b:b3:1a:ec:bf:69:fe:42:
5c:60:35:36:a4:4b:17:aa:9d:fd:ab:03:21:58:9d:66:82:f5:
f9:20:8e:8d:b1:e0:65:a1:86:c6:9a:65:14:61:02:5f:6e:68:
ea:48:b7:4b:f2:61:be:4d:e2:c4:f0:36:b2:9e:5e:b3:0c:39:
98:bc:70:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbVUfWjNRTajDT6I/UK11LDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDJiYzNlMzk3Mjg5Y2U5YzNhYTAyZTE1NmUyMGMwM2Q0
ZDczNDIwHhcNMjUwNTE1MTkwMDQwWhcNMjUwNTE2MTkwMDQwWjAzMTEwLwYDVQQD
EygyNTNjZDA5M2U5MzkwOGM5NTgxOGNiZTU0ZTc0NTQyNWFiODk1NzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpeNjNZcaGhUhwNM7SwjCy7nsfXc
lMvYZM21h/+79X1vvpDyMCwq2c+aQNh8mM3BOJ8cgaLTvhUhrbOF7s5/ONZglAXS
9n/RlDNRqPHCIVj1TwFF+GmrThFfVK7z9LRpXWiTkHY3O+uNTd0Ex23HzV0Vi+bp
HkrDJpOPwW/FnkbeF4PuHsg/K+GFHWW97A/JnMbO15pXImIrjkkAslOnu5QvXASC
KGuIFdVAnhunRnM4lcua/mBRZDpH+Hh1WDUAM8iawlvoHg4+mOklCh9c8/Rk6MvK
sgh9NrtBb9itJdT7IO9dbUdo0FvWbPxcL9fR+GxKsKNmKrOrO+gevzfS6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCU80JPpOQjJWBjL5U50VCWriVd7MB8GA1UdIwQY
MBaAFAjSvD45conOnDqgLhVuIMA9TXNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS85MTMwODktODk4Ni00MmE2LTg4MWUt
MmUwZWI0ZjQ2ZmE0LzEvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS85MTMwODktODk4Ni00MmE2LTg4MWUtMmUwZWI0ZjQ2ZmE0
LzEvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwkKBY4si
BcKGzTeiOkUpLhi75i+SLseNQsfm+hm7rMmVEF8keu5gYXChn6hfYabmE+cu0E+g
a1siy7qImAwtHgijB+aDz7mgkljyhLiJXhRL375m0HFf74i9qG9xUBtNvR1aYwVI
YO0v6VQmIop/Zeq9KgUOYVLb05/d80ekbbStX6lTOynYzWuNLxK+1wd9JIy7keeI
uredkIyJTqqhMbp4hH3757/Jzk2ZOEu9EsetS1/8fQ5/VCUoX/L4A5uzGuy/af5C
XGA1NqRLF6qd/asDIVidZoL1+SCOjbHgZaGGxpplFGECX25o6ki3S/Jhvk3ixPA2
sp5esww5mLxw9Q==
-----END CERTIFICATE-----
Generated at Fri May 16 02:40:55 2025 by rpki-client