Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
File: iVVHgNslskPAotNhl5sTCn8Txg0.mft (raw, json)
Hash identifier: y70hOo17IE58upfIZp45Jl519E5pdnjq5xXDYgqOEVM=
Subject key identifier: 06:A9:DF:1E:34:53:69:E7:E8:AB:50:21:D6:7A:60:AB:2A:68:85:2A
Authority key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
Certificate issuer: /CN=89554780db25b243c0a2d361979b130a7f13c60d
Certificate serial: 0196BA487319B534D570CC8C52766CF15129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
Manifest number: 0A5B
Signing time: Sat 10 May 2025 13:00:32 +0000
Manifest this update: Sat 10 May 2025 13:00:32 +0000
Manifest next update: Sun 11 May 2025 13:00:32 +0000
Files and hashes: 1: Io8_rALEkRmJyvwQSYZoU_nTQg0.roa (hash: IdvBLL1znSmthNlumpub/fXZwL7C6UNAlVvYWPg9Tzc=)
2: fp-LIMQ80k5YBVtTaX91n-J89eo.roa (hash: ItqEQhJ82EwpqjGgmH+0CXCKGMVgFNbNle1pM5dmqlE=)
3: iVVHgNslskPAotNhl5sTCn8Txg0.crl (hash: IW9bUatDgSp4pH83Z2phMC+j+cGFOOiiE9omkcqQA98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:73:19:b5:34:d5:70:cc:8c:52:76:6c:f1:51:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89554780db25b243c0a2d361979b130a7f13c60d
Validity
Not Before: May 10 13:00:32 2025 GMT
Not After : May 11 13:00:32 2025 GMT
Subject: CN=06a9df1e345369e7e8ab5021d67a60ab2a68852a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:3d:7a:db:36:e9:a7:dd:a1:8c:35:1b:e5:
f3:fe:29:58:bd:58:ea:c8:ec:33:39:e6:7e:36:cf:
c2:e1:91:07:de:d2:40:fa:f1:02:a1:6b:b3:e6:cf:
6b:6b:f2:35:c2:f3:4b:fd:0e:68:17:0d:66:25:88:
9a:b8:62:07:59:81:f3:3d:cf:5e:b4:7b:4c:e0:08:
a5:d1:66:2f:22:c2:4d:58:75:06:6d:cb:cc:cf:0f:
a8:48:5d:b5:0a:03:6c:d7:4b:8f:fe:7f:a1:df:45:
b3:0b:70:00:94:e9:23:cf:87:e1:c4:d9:5f:85:e8:
b8:ab:c2:58:01:1d:20:1c:fc:57:da:9f:08:53:f8:
f7:e8:92:0f:f5:a4:b7:57:d8:80:6f:cf:02:f4:3b:
e8:bc:c2:a9:25:ae:aa:e0:d9:6e:e6:9b:c0:e0:a8:
f8:2f:a6:38:3f:29:29:49:15:97:5a:7b:7a:ae:01:
16:d5:59:a4:2c:23:eb:18:8e:b9:33:d5:d7:9b:3a:
a1:ad:93:33:e9:2c:b6:3d:99:9a:34:03:5b:67:75:
a0:e9:1d:24:0f:5c:a8:7a:38:1a:93:bc:4d:bc:1e:
ff:b8:97:ca:dc:ad:7d:83:72:84:dc:cf:c8:12:cb:
13:a0:b9:4f:11:a9:1b:19:f5:f9:78:43:68:3a:cb:
af:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A9:DF:1E:34:53:69:E7:E8:AB:50:21:D6:7A:60:AB:2A:68:85:2A
X509v3 Authority Key Identifier:
keyid:89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:74:19:6a:a7:49:e5:32:67:0a:02:b9:4c:6c:90:3b:17:4d:
a7:2f:82:c1:0a:0a:16:34:c2:b9:9b:15:2d:4b:e7:07:2b:ca:
96:8c:d8:13:dc:06:8a:2e:0d:1a:50:7b:8e:94:ab:09:53:8e:
c0:27:cb:15:cb:d5:a2:a6:fb:9d:18:3c:08:58:6b:4b:13:db:
a8:95:bd:8b:a1:74:dc:05:51:f2:1f:49:ba:6a:64:55:b8:6c:
30:dc:ca:0d:20:18:6f:89:74:83:dd:25:12:30:ce:ab:8a:59:
ac:76:22:34:3c:21:de:10:89:27:7e:14:f2:f0:9d:81:51:91:
9e:32:93:3c:08:b1:c7:37:ef:d1:93:a6:ef:90:fe:93:c6:46:
2b:cc:61:5a:30:a2:96:7e:53:34:f1:54:32:61:93:fb:4b:78:
1b:d0:9a:87:b8:a2:aa:3a:c6:35:08:b6:ef:6c:a1:ac:53:3c:
7b:b2:5e:f4:ea:b2:5e:42:a0:65:31:2a:6f:bf:c0:35:50:c7:
5c:98:07:14:a1:40:2f:22:ab:96:ce:8f:8b:bd:84:7c:3a:5d:
1f:eb:47:e2:0a:ca:0f:d7:57:bc:b3:d1:70:f5:09:4a:d6:9f:
59:f4:ba:18:a9:be:77:37:13:24:53:96:12:48:eb:92:db:98:
42:14:41:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6SHMZtTTVcMyMUnZs8VEpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NTU0NzgwZGIyNWIyNDNjMGEyZDM2MTk3OWIxMzBhN2Yx
M2M2MGQwHhcNMjUwNTEwMTMwMDMyWhcNMjUwNTExMTMwMDMyWjAzMTEwLwYDVQQD
EygwNmE5ZGYxZTM0NTM2OWU3ZThhYjUwMjFkNjdhNjBhYjJhNjg4NTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMs9ets26afdoYw1G+Xz/ilYvVjq
yOwzOeZ+Ns/C4ZEH3tJA+vECoWuz5s9ra/I1wvNL/Q5oFw1mJYiauGIHWYHzPc9e
tHtM4Ail0WYvIsJNWHUGbcvMzw+oSF21CgNs10uP/n+h30WzC3AAlOkjz4fhxNlf
hei4q8JYAR0gHPxX2p8IU/j36JIP9aS3V9iAb88C9DvovMKpJa6q4Nlu5pvA4Kj4
L6Y4PykpSRWXWnt6rgEW1VmkLCPrGI65M9XXmzqhrZMz6Sy2PZmaNANbZ3Wg6R0k
D1yoejgak7xNvB7/uJfK3K19g3KE3M/IEssToLlPEakbGfX5eENoOsuvnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAap3x40U2nn6KtQIdZ6YKsqaIUqMB8GA1UdIwQY
MBaAFIlVR4DbJbJDwKLTYZebEwp/E8YNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVZWSGdOc2xza1BBb3ROaGw1c1RDbjhUeGcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zZTIwNzctYmMxMC00NjIxLWFiMGIt
ZGJhNGM5Yjg3MDZiLzEvaVZWSGdOc2xza1BBb3ROaGw1c1RDbjhUeGcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zZTIwNzctYmMxMC00NjIxLWFiMGItZGJhNGM5Yjg3MDZi
LzEvaVZWSGdOc2xza1BBb3ROaGw1c1RDbjhUeGcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXQZaqdJ
5TJnCgK5TGyQOxdNpy+CwQoKFjTCuZsVLUvnByvKlozYE9wGii4NGlB7jpSrCVOO
wCfLFcvVoqb7nRg8CFhrSxPbqJW9i6F03AVR8h9JumpkVbhsMNzKDSAYb4l0g90l
EjDOq4pZrHYiNDwh3hCJJ34U8vCdgVGRnjKTPAixxzfv0ZOm75D+k8ZGK8xhWjCi
ln5TNPFUMmGT+0t4G9Cah7iiqjrGNQi272yhrFM8e7Je9OqyXkKgZTEqb7/ANVDH
XJgHFKFALyKrls6Pi72EfDpdH+tH4grKD9dXvLPRcPUJStafWfS6GKm+dzcTJFOW
EkjrktuYQhRBpQ==
-----END CERTIFICATE-----
Generated at Sat May 10 17:11:23 2025 by rpki-client