Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
File: rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft (raw, json)
Hash identifier: qrqucIzwSKBENLv3wvy2ytWAnd61Tz6xh/8ryDZOPcA=
Subject key identifier: 91:37:F6:1C:3A:99:7B:70:24:82:E2:CC:8E:6B:83:84:EE:02:5F:8B
Authority key identifier: AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4
Certificate issuer: /CN=adc647ba017c8a4599c009be04d81b268eca62f4
Certificate serial: 0196C795FCAD47B6DDB9E8104CAD5A7850F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
Manifest number: 0457
Signing time: Tue 13 May 2025 03:00:17 +0000
Manifest this update: Tue 13 May 2025 03:00:17 +0000
Manifest next update: Wed 14 May 2025 03:00:17 +0000
Files and hashes: 1: OV34MDvIRVxone0w5cHEhw4n-7g.roa (hash: iRvnIoP0GpD7jIp3Sl87VKOE59U8AR417l/5lvVpf0w=)
2: rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl (hash: 2BRzS5wL8zCL/3lr8LcgM2KOJySU3lN+86UpryZMJ28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:95:fc:ad:47:b6:dd:b9:e8:10:4c:ad:5a:78:50:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc647ba017c8a4599c009be04d81b268eca62f4
Validity
Not Before: May 13 03:00:17 2025 GMT
Not After : May 14 03:00:17 2025 GMT
Subject: CN=9137f61c3a997b702482e2cc8e6b8384ee025f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:93:d5:ce:38:11:cb:3d:df:00:c0:6b:6b:18:
3a:d5:2b:eb:ff:e4:0e:a2:25:ea:85:f8:de:b4:f9:
0b:0b:26:96:0b:dc:3e:89:0a:29:aa:31:50:e9:82:
66:3c:f2:5a:64:7e:f1:09:52:fe:61:0f:97:80:29:
d1:a1:ff:6b:c7:13:70:43:1b:62:1b:e9:33:af:b7:
78:a9:1f:6f:cb:b8:c4:18:58:f9:0b:ab:52:6b:37:
1d:9f:d4:98:b1:64:9e:a3:e3:12:79:44:b4:83:65:
cc:a8:ae:11:bf:3b:3a:38:94:7d:a4:f2:7c:31:95:
15:47:2b:76:4b:cc:20:46:73:07:0f:f8:d6:55:81:
7f:21:8b:59:ea:72:42:1a:20:2e:97:78:16:d7:8b:
9d:77:f9:b6:a4:e6:ce:33:7a:ec:96:58:ff:28:54:
ce:2a:d6:c5:7c:46:97:5b:36:4e:c0:f2:a4:c1:d3:
28:5d:2f:6f:c8:16:72:59:e8:75:78:7e:28:df:5c:
d7:57:7f:13:76:ce:f9:35:39:40:4d:c9:2d:35:a9:
16:74:03:c6:4d:ac:88:5a:4d:04:e7:f5:71:df:da:
15:aa:3c:6a:69:0d:fa:76:62:da:01:d1:78:1f:4c:
c1:24:ac:ea:0d:f9:26:4b:d9:4b:1e:37:56:25:e3:
09:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:37:F6:1C:3A:99:7B:70:24:82:E2:CC:8E:6B:83:84:EE:02:5F:8B
X509v3 Authority Key Identifier:
keyid:AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0b:7a:a2:94:0e:d1:32:55:35:87:0f:ea:e0:8a:a4:d0:76:
fe:9e:c1:63:19:6d:f8:67:c5:0b:f9:6a:3d:fd:2a:d8:b1:85:
01:c5:5f:80:03:49:0b:5a:50:55:54:4b:16:53:46:9c:e6:d9:
8e:84:0d:8f:34:67:b3:2b:3d:81:ac:5b:3c:c3:b9:ca:da:1b:
7f:38:26:51:44:89:dd:2e:67:a0:a5:c5:01:50:4d:83:3e:93:
6f:52:09:fb:07:a7:ab:ad:22:77:03:56:5c:12:65:a6:f1:88:
2e:a1:5d:f4:85:35:cd:fc:59:11:39:da:9a:98:58:78:c5:0a:
44:de:d4:f5:4b:6c:30:0b:4b:6a:aa:48:de:6e:6a:17:cf:74:
ba:00:99:c1:0b:a7:5f:a7:b1:ff:83:1d:18:36:f1:59:ef:72:
dc:f1:48:f0:7d:09:5f:6e:94:a6:4b:ac:9e:4f:49:fd:39:c6:
99:9a:fa:c9:7f:23:44:ae:0d:74:87:8a:e8:01:5b:d3:38:b6:
b1:1f:44:44:90:6f:e7:d4:40:ef:fd:c5:d2:f8:f4:1f:ca:66:
11:fa:99:cc:c1:88:14:e9:2e:59:58:6a:fd:51:2f:7b:12:a8:
ed:b2:ab:99:f7:ff:14:59:50:b3:e8:2c:aa:a5:52:a5:4f:cc:
0e:e4:73:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbHlfytR7bduegQTK1aeFDwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYzY0N2JhMDE3YzhhNDU5OWMwMDliZTA0ZDgxYjI2OGVj
YTYyZjQwHhcNMjUwNTEzMDMwMDE3WhcNMjUwNTE0MDMwMDE3WjAzMTEwLwYDVQQD
Eyg5MTM3ZjYxYzNhOTk3YjcwMjQ4MmUyY2M4ZTZiODM4NGVlMDI1ZjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZPVzjgRyz3fAMBraxg61Svr/+QO
oiXqhfjetPkLCyaWC9w+iQopqjFQ6YJmPPJaZH7xCVL+YQ+XgCnRof9rxxNwQxti
G+kzr7d4qR9vy7jEGFj5C6tSazcdn9SYsWSeo+MSeUS0g2XMqK4Rvzs6OJR9pPJ8
MZUVRyt2S8wgRnMHD/jWVYF/IYtZ6nJCGiAul3gW14udd/m2pObOM3rsllj/KFTO
KtbFfEaXWzZOwPKkwdMoXS9vyBZyWeh1eH4o31zXV38Tds75NTlATcktNakWdAPG
TayIWk0E5/Vx39oVqjxqaQ36dmLaAdF4H0zBJKzqDfkmS9lLHjdWJeMJXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJE39hw6mXtwJILizI5rg4TuAl+LMB8GA1UdIwQY
MBaAFK3GR7oBfIpFmcAJvgTYGyaOymL0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmNaSHVnRjhpa1dad0FtLUJOZ2JKbzdLWXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lMWQ0YjctNzQ2Yy00MjZmLWE2YzUt
ZGQ1ZjU1MDEwYTA2LzEvcmNaSHVnRjhpa1dad0FtLUJOZ2JKbzdLWXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9lMWQ0YjctNzQ2Yy00MjZmLWE2YzUtZGQ1ZjU1MDEwYTA2
LzEvcmNaSHVnRjhpa1dad0FtLUJOZ2JKbzdLWXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKgt6opQO
0TJVNYcP6uCKpNB2/p7BYxlt+GfFC/lqPf0q2LGFAcVfgANJC1pQVVRLFlNGnObZ
joQNjzRnsys9gaxbPMO5ytobfzgmUUSJ3S5noKXFAVBNgz6Tb1IJ+wenq60idwNW
XBJlpvGILqFd9IU1zfxZETnamphYeMUKRN7U9UtsMAtLaqpI3m5qF890ugCZwQun
X6ex/4MdGDbxWe9y3PFI8H0JX26Upkusnk9J/TnGmZr6yX8jRK4NdIeK6AFb0zi2
sR9ERJBv59RA7/3F0vj0H8pmEfqZzMGIFOkuWVhq/VEvexKo7bKrmff/FFlQs+gs
qqVSpU/MDuRzVA==
-----END CERTIFICATE-----
Generated at Tue May 13 09:33:09 2025 by rpki-client