Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
File: cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft (raw, json)
Hash identifier: gsbVUJWtzMLSghd0AmicnUUkPnkyGt+OdKMu3jHSMZA=
Subject key identifier: 9D:EF:7B:10:CE:5A:88:C4:F8:B2:D6:8A:D0:87:B7:C3:75:34:03:21
Authority key identifier: 72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF
Certificate issuer: /CN=72bd0e36e1c202304a35133b11666625e5d6e5ef
Certificate serial: 0196AE0DA43AA3806848E79519854BDE743B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
Manifest number: 08CD
Signing time: Thu 08 May 2025 04:00:51 +0000
Manifest this update: Thu 08 May 2025 04:00:51 +0000
Manifest next update: Fri 09 May 2025 04:00:51 +0000
Files and hashes: 1: YJ__Jpr1denKLIU4A4wwpaBEGuM.roa (hash: HQMvWJSgBySt+TDaIiCe+VSZte2lW30WZtz1IJWSvxM=)
2: cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl (hash: w6a9QZC0afygBpPNl6tNN8J6rD6zSK4UrkNWGDF+Gn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0d:a4:3a:a3:80:68:48:e7:95:19:85:4b:de:74:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd0e36e1c202304a35133b11666625e5d6e5ef
Validity
Not Before: May 8 04:00:51 2025 GMT
Not After : May 9 04:00:51 2025 GMT
Subject: CN=9def7b10ce5a88c4f8b2d68ad087b7c375340321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f9:7a:a3:72:07:b5:ba:f5:e3:ef:d4:ab:c8:
99:b0:60:7e:2b:58:45:83:5d:63:a1:4a:5e:09:51:
5f:fb:cb:ea:15:23:60:fc:69:dd:42:cf:fb:d9:6f:
c8:59:02:61:4f:97:0f:75:ba:8a:da:ac:55:7d:40:
c9:f8:dc:74:11:c8:02:99:b6:1f:01:c6:d8:44:03:
ec:ae:9e:46:2a:41:0b:f2:49:65:d8:a2:92:09:50:
8f:c5:0b:9d:4e:1a:e7:88:3f:8e:3e:66:de:be:09:
02:df:9b:d2:f5:40:67:02:46:34:cf:aa:76:d4:24:
ac:cd:67:72:10:4b:82:88:44:4f:e4:5b:85:e5:02:
71:38:3d:21:35:67:7e:e5:24:de:2c:9d:49:7e:88:
f5:d9:be:31:20:0e:cd:fc:0c:be:2d:e9:89:5a:60:
de:94:43:ec:b5:05:9e:2d:a3:41:03:c5:d1:55:8a:
5c:7f:3d:16:53:b8:6c:c2:88:78:d1:e9:fb:14:fe:
9d:f3:3e:81:39:13:e2:62:04:de:33:4a:a2:55:04:
24:3a:e9:98:4d:63:9f:81:a9:10:65:c2:39:ff:1f:
21:80:1e:47:22:42:a2:92:6d:18:58:4d:77:97:76:
e4:48:3e:bd:90:48:15:dc:f3:8b:de:fa:a7:ea:6f:
ed:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EF:7B:10:CE:5A:88:C4:F8:B2:D6:8A:D0:87:B7:C3:75:34:03:21
X509v3 Authority Key Identifier:
keyid:72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d1:86:cc:04:19:73:4b:7a:01:3e:2a:16:0e:e1:f5:71:d1:
a5:75:ff:5a:fc:9b:73:92:ec:40:db:1d:de:98:60:52:8e:dd:
3f:ca:f2:ce:f5:33:9a:1a:5b:14:27:aa:7d:ea:84:1a:e2:5e:
1f:fc:11:15:72:a7:99:c3:b6:50:f6:f8:ca:d0:0c:09:a9:96:
ab:d1:3c:1f:08:ab:56:2b:17:c3:8f:17:67:25:70:19:63:f1:
54:1c:8d:6e:26:10:b1:5d:b3:be:fe:f0:dc:7b:91:59:ef:9d:
08:51:0e:99:a2:76:97:56:ff:41:99:13:08:0e:f5:52:3d:1f:
2b:98:1d:f6:d3:99:df:d7:bd:64:8a:85:77:2c:27:ed:77:34:
0d:4c:29:84:68:09:68:7d:34:b0:d8:aa:67:a8:e7:3d:5c:a7:
44:f6:d6:71:df:1a:74:e4:96:fb:02:46:80:71:b2:d7:67:79:
1f:f1:a1:5b:bb:43:cd:c6:5a:ba:dd:d0:a0:2b:0c:02:42:c4:
8b:c8:0b:c6:3b:01:82:31:16:bd:bf:d9:f8:e3:81:e3:c5:f2:
8d:20:cd:f5:ce:4e:d7:3f:8c:0a:11:0d:19:37:a9:3b:6b:3e:
3a:90:6c:05:80:41:73:3d:4f:be:7f:94:4c:c3:29:ef:b6:77:
ea:72:f6:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZauDaQ6o4BoSOeVGYVL3nQ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYmQwZTM2ZTFjMjAyMzA0YTM1MTMzYjExNjY2NjI1ZTVk
NmU1ZWYwHhcNMjUwNTA4MDQwMDUxWhcNMjUwNTA5MDQwMDUxWjAzMTEwLwYDVQQD
Eyg5ZGVmN2IxMGNlNWE4OGM0ZjhiMmQ2OGFkMDg3YjdjMzc1MzQwMzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/l6o3IHtbr14+/Uq8iZsGB+K1hF
g11joUpeCVFf+8vqFSNg/GndQs/72W/IWQJhT5cPdbqK2qxVfUDJ+Nx0EcgCmbYf
AcbYRAPsrp5GKkEL8kll2KKSCVCPxQudThrniD+OPmbevgkC35vS9UBnAkY0z6p2
1CSszWdyEEuCiERP5FuF5QJxOD0hNWd+5STeLJ1Jfoj12b4xIA7N/Ay+LemJWmDe
lEPstQWeLaNBA8XRVYpcfz0WU7hswoh40en7FP6d8z6BORPiYgTeM0qiVQQkOumY
TWOfgakQZcI5/x8hgB5HIkKikm0YWE13l3bkSD69kEgV3POL3vqn6m/tQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3vexDOWojE+LLWitCHt8N1NAMhMB8GA1UdIwQY
MBaAFHK9DjbhwgIwSjUTOxFmZiXl1uXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3IwT051SENBakJLTlJNN0VXWm1KZVhXNWU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81MjQ3NmQtYTc5NC00N2Q1LThmNTAt
YWVkYTgyNDY3OGQ0LzEvY3IwT051SENBakJLTlJNN0VXWm1KZVhXNWU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC81MjQ3NmQtYTc5NC00N2Q1LThmNTAtYWVkYTgyNDY3OGQ0
LzEvY3IwT051SENBakJLTlJNN0VXWm1KZVhXNWU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdGGzAQZ
c0t6AT4qFg7h9XHRpXX/Wvybc5LsQNsd3phgUo7dP8ryzvUzmhpbFCeqfeqEGuJe
H/wRFXKnmcO2UPb4ytAMCamWq9E8HwirVisXw48XZyVwGWPxVByNbiYQsV2zvv7w
3HuRWe+dCFEOmaJ2l1b/QZkTCA71Uj0fK5gd9tOZ39e9ZIqFdywn7Xc0DUwphGgJ
aH00sNiqZ6jnPVynRPbWcd8adOSW+wJGgHGy12d5H/GhW7tDzcZaut3QoCsMAkLE
i8gLxjsBgjEWvb/Z+OOB48XyjSDN9c5O1z+MChENGTepO2s+OpBsBYBBcz1Pvn+U
TMMp77Z36nL21Q==
-----END CERTIFICATE-----
Generated at Thu May 8 14:45:41 2025 by rpki-client