Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
File: 01CzV9ze5o--vcVVPbMknG6Clsc.mft (raw, json)
Hash identifier: k0f9bHT7CzdE9NdQubVyHSPH/q2ITFMFngSW8v/H3UQ=
Subject key identifier: 2F:6E:EB:64:6B:25:58:5B:7F:3B:4B:65:69:D1:37:E4:3B:24:A1:18
Authority key identifier: D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
Certificate issuer: /CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Certificate serial: 01969F3F8C33DBEED87BD6F1C4A2D04243F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
Manifest number: 042E
Signing time: Mon 05 May 2025 07:01:04 +0000
Manifest this update: Mon 05 May 2025 07:01:04 +0000
Manifest next update: Tue 06 May 2025 07:01:04 +0000
Files and hashes: 1: 01CzV9ze5o--vcVVPbMknG6Clsc.crl (hash: 0wswA80ahJ8O5hHJ8w+JLz9a4tFikv+D8yVu1zL5ZY8=)
2: WJYo92ZVpAUd1BuZPEnAl356iuU.roa (hash: zcoBYroeH3hhjkU4dDCY2xfjvG2eq71PoTaXan33w2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:8c:33:db:ee:d8:7b:d6:f1:c4:a2:d0:42:43:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Validity
Not Before: May 5 07:01:04 2025 GMT
Not After : May 6 07:01:04 2025 GMT
Subject: CN=2f6eeb646b25585b7f3b4b6569d137e43b24a118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:62:f9:d4:ae:dd:8b:e7:4b:89:c4:ea:d8:6e:
1c:3c:f5:e5:85:58:3b:61:9c:4f:7a:3a:4b:a6:8b:
46:eb:07:5c:f4:ef:f3:0e:1d:60:bb:f5:e9:4e:04:
cf:7f:d8:2d:85:57:b1:34:a7:6c:61:0b:6a:40:81:
d2:9b:9a:fe:7c:45:60:ef:c4:ef:35:a6:c7:9d:0d:
0e:ac:02:29:85:3c:6c:a1:35:d6:74:5e:a8:a5:e1:
ba:52:ed:49:71:02:49:9a:ef:58:18:af:68:49:95:
a5:2d:31:e5:7a:fa:af:e9:36:f8:0a:bc:f8:2d:91:
bf:ba:44:f2:8c:01:cb:28:e5:a5:6c:74:b9:20:1f:
ff:4d:bd:53:58:bd:43:01:38:2d:2e:db:80:4d:e8:
b3:10:a9:20:c6:4a:1c:e8:0b:e3:69:0b:31:be:80:
fe:3a:ee:a5:0a:b3:67:22:03:ba:d2:8d:1f:0a:73:
ed:b7:08:24:1d:ec:ef:1f:ca:ae:4e:c0:82:58:de:
e7:a8:f5:82:80:49:bc:a9:46:f6:54:50:40:28:30:
46:36:c5:d1:ac:3c:ad:bc:df:3e:43:cf:98:56:d7:
94:f4:41:5e:27:3a:b8:11:99:29:95:5f:32:b4:49:
e5:ef:56:f8:cc:67:58:77:10:00:f5:de:3c:e8:60:
cd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6E:EB:64:6B:25:58:5B:7F:3B:4B:65:69:D1:37:E4:3B:24:A1:18
X509v3 Authority Key Identifier:
keyid:D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:49:ac:80:b8:73:a1:73:28:a7:aa:db:ee:bc:c6:4b:27:97:
12:4c:4a:8d:8f:a4:39:15:f3:71:7e:5d:ee:da:3d:d4:b3:dd:
0c:0f:4a:20:07:92:d2:ae:99:a3:fe:18:70:1e:90:93:b1:61:
7a:a0:32:ac:93:1d:49:50:6e:7e:d3:1f:84:6c:70:32:e1:de:
01:d4:89:94:be:7f:b5:b6:41:6c:1a:32:e2:be:74:93:b2:0e:
30:d7:a1:82:67:e2:3f:97:02:94:d1:a5:43:7e:50:7e:5b:d3:
3f:cc:72:04:c1:88:b9:8c:e3:36:b8:cf:c6:a9:02:8a:32:5c:
74:87:6d:de:b2:0a:37:15:ad:e7:29:f3:6b:79:19:11:c5:35:
62:d3:15:1e:63:62:67:63:75:65:0e:86:b1:cc:9e:df:dc:8e:
87:79:89:10:b9:b0:62:20:1a:66:ee:1f:11:66:07:f5:25:00:
f6:73:8b:66:9f:5a:97:10:83:bf:4f:3c:1a:e8:b6:1e:55:11:
1d:23:1d:0b:75:43:cf:24:ba:bb:e6:ba:ab:85:f0:80:8a:d0:
71:bf:cb:48:5c:fb:f7:20:9d:8d:d6:eb:26:67:bf:1e:6e:86:
a8:f1:6a:77:64:94:18:23:d8:48:ab:86:1e:aa:04:dd:64:61:
75:75:8e:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafP4wz2+7Ye9bxxKLQQkP3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTBiMzU3ZGNkZWU2OGZiZWJkYzU1NTNkYjMyNDljNmU4
Mjk2YzcwHhcNMjUwNTA1MDcwMTA0WhcNMjUwNTA2MDcwMTA0WjAzMTEwLwYDVQQD
EygyZjZlZWI2NDZiMjU1ODViN2YzYjRiNjU2OWQxMzdlNDNiMjRhMTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mL51K7di+dLicTq2G4cPPXlhVg7
YZxPejpLpotG6wdc9O/zDh1gu/XpTgTPf9gthVexNKdsYQtqQIHSm5r+fEVg78Tv
NabHnQ0OrAIphTxsoTXWdF6opeG6Uu1JcQJJmu9YGK9oSZWlLTHlevqv6Tb4Crz4
LZG/ukTyjAHLKOWlbHS5IB//Tb1TWL1DATgtLtuATeizEKkgxkoc6AvjaQsxvoD+
Ou6lCrNnIgO60o0fCnPttwgkHezvH8quTsCCWN7nqPWCgEm8qUb2VFBAKDBGNsXR
rDytvN8+Q8+YVteU9EFeJzq4EZkplV8ytEnl71b4zGdYdxAA9d486GDNLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9u62RrJVhbfztLZWnRN+Q7JKEYMB8GA1UdIwQY
MBaAFNNQs1fc3uaPvr3FVT2zJJxugpbHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYjU2OTYtZTc3Ni00MDIxLWJhZGYt
ZmZlZDUzZjQ1ZGVkLzEvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wYjU2OTYtZTc3Ni00MDIxLWJhZGYtZmZlZDUzZjQ1ZGVk
LzEvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHEmsgLhz
oXMop6rb7rzGSyeXEkxKjY+kORXzcX5d7to91LPdDA9KIAeS0q6Zo/4YcB6Qk7Fh
eqAyrJMdSVBuftMfhGxwMuHeAdSJlL5/tbZBbBoy4r50k7IOMNehgmfiP5cClNGl
Q35QflvTP8xyBMGIuYzjNrjPxqkCijJcdIdt3rIKNxWt5ynza3kZEcU1YtMVHmNi
Z2N1ZQ6Gscye39yOh3mJELmwYiAaZu4fEWYH9SUA9nOLZp9alxCDv088Gui2HlUR
HSMdC3VDzyS6u+a6q4XwgIrQcb/LSFz79yCdjdbrJme/Hm6GqPFqd2SUGCPYSKuG
HqoE3WRhdXWOKQ==
-----END CERTIFICATE-----
Generated at Mon May 5 11:23:05 2025 by rpki-client