Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
File: p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft (raw, json)
Hash identifier: gExYACxegLn+/z+r9uXcBF/NCbTofmeH3CqFfGpavK8=
Subject key identifier: C6:6F:FB:DD:0B:6C:55:D4:A6:A9:2D:8F:15:BF:E3:0C:C4:B1:FB:91
Authority key identifier: A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
Certificate issuer: /CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Certificate serial: 0196A0F67FD5FDFF0D3E1F6F5D6449050A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
Manifest number: 11F3
Signing time: Mon 05 May 2025 15:00:31 +0000
Manifest this update: Mon 05 May 2025 15:00:31 +0000
Manifest next update: Tue 06 May 2025 15:00:31 +0000
Files and hashes: 1: AGh_BXwDaFnqdr1rluMLMPMOrnM.roa (hash: L7VSHEAFfvwnZGbHuhPcAH6Mmh4M0FtFsSBsZ0VnfV0=)
2: p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl (hash: zOYu6NzlFu02jnawaVU/WVg/ty7Zu5wNUGey6QFkC+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:7f:d5:fd:ff:0d:3e:1f:6f:5d:64:49:05:0a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Validity
Not Before: May 5 15:00:31 2025 GMT
Not After : May 6 15:00:31 2025 GMT
Subject: CN=c66ffbdd0b6c55d4a6a92d8f15bfe30cc4b1fb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:40:cf:fe:31:64:3d:67:a1:ad:28:60:af:45:
f1:44:7b:c0:32:d0:af:40:0c:0d:f9:0e:46:45:a7:
af:e3:55:10:e7:02:8e:97:59:b7:5f:2d:01:84:38:
5c:a6:51:1e:76:a7:8a:e8:77:bf:84:12:41:a7:2a:
ff:20:35:ce:45:c1:ff:f9:3c:83:48:60:a8:2b:9a:
2c:68:e5:34:a0:e3:f4:27:44:06:80:4b:81:51:5d:
b3:ae:70:72:5b:93:c0:a0:37:ed:c3:2f:e6:d7:78:
8e:57:d8:4c:4d:e8:c9:c1:8d:3b:95:f2:1e:f4:ff:
c2:53:03:62:de:ea:b9:00:a9:a1:c6:9d:af:cc:3e:
a4:fc:d1:5d:44:bc:ff:eb:81:a4:95:98:de:68:d6:
8f:3f:d0:88:15:ca:99:9e:a9:7b:df:2a:ab:44:9a:
e7:46:7d:5d:ae:c8:a7:c6:4f:a2:5b:8f:69:21:18:
2f:71:ff:0e:0d:d7:f2:fe:3a:60:d4:de:aa:66:e3:
20:0d:2e:aa:f6:45:fc:1c:c5:f8:1f:54:4e:a5:f6:
87:98:72:75:b6:f9:9e:c2:bd:d1:7f:5c:ae:4d:b0:
e0:f7:c9:99:17:8e:50:2f:04:a7:92:73:23:c9:96:
c2:04:5c:ec:ce:ae:ff:05:c8:ed:57:b1:a9:bd:aa:
f8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6F:FB:DD:0B:6C:55:D4:A6:A9:2D:8F:15:BF:E3:0C:C4:B1:FB:91
X509v3 Authority Key Identifier:
keyid:A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:54:06:8b:b8:b5:be:d1:9b:bb:2c:a1:96:40:b3:58:ea:82:
34:c2:0f:4f:c1:86:51:36:a1:b3:e6:1f:56:2a:de:fc:fa:77:
9d:cf:4b:01:49:3b:1d:f3:ec:4d:69:f7:c8:51:36:48:dc:c1:
c8:43:36:db:62:67:ef:30:5d:8a:ec:e8:c7:0d:8b:2c:54:73:
a5:5c:15:73:18:de:cd:9e:13:27:c2:5a:6a:b3:2f:80:be:86:
b5:ec:67:29:06:b9:c3:45:3d:73:84:47:d5:14:ba:b5:8f:2a:
12:1e:c0:f6:03:d7:82:4b:84:2d:b7:3f:f4:4f:13:f1:3c:a0:
50:71:53:2e:54:07:a1:a7:b4:35:ef:ac:86:d8:d0:1d:4e:17:
c4:9f:95:6c:97:11:cf:12:95:24:05:59:1c:7f:fb:dd:7b:47:
dd:9f:80:c2:6c:ba:e3:41:17:13:8f:8c:5c:19:30:d5:b2:79:
18:62:15:b1:96:e8:df:3b:bc:14:91:27:e2:3c:84:3c:3a:7b:
9c:53:b8:4a:89:03:4d:72:39:3f:4d:8a:92:21:17:0c:6e:a1:
ee:fc:77:48:86:12:31:72:96:8b:7b:9d:c1:00:21:87:e5:fc:
cd:37:00:eb:fc:28:0d:d5:e7:fb:dd:d1:e0:c1:cb:10:f1:af:
21:18:f7:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZag9n/V/f8NPh9vXWRJBQoTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3Y2E5YWRhNDQ1MjRmYzUzNmZhM2VjYWJmNzU4ZGYyNjQw
N2M4YjEwHhcNMjUwNTA1MTUwMDMxWhcNMjUwNTA2MTUwMDMxWjAzMTEwLwYDVQQD
EyhjNjZmZmJkZDBiNmM1NWQ0YTZhOTJkOGYxNWJmZTMwY2M0YjFmYjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkDP/jFkPWehrShgr0XxRHvAMtCv
QAwN+Q5GRaev41UQ5wKOl1m3Xy0BhDhcplEedqeK6He/hBJBpyr/IDXORcH/+TyD
SGCoK5osaOU0oOP0J0QGgEuBUV2zrnByW5PAoDftwy/m13iOV9hMTejJwY07lfIe
9P/CUwNi3uq5AKmhxp2vzD6k/NFdRLz/64GklZjeaNaPP9CIFcqZnql73yqrRJrn
Rn1drsinxk+iW49pIRgvcf8ODdfy/jpg1N6qZuMgDS6q9kX8HMX4H1ROpfaHmHJ1
tvmewr3Rf1yuTbDg98mZF45QLwSnknMjyZbCBFzszq7/BcjtV7Gpvar4KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZv+90LbFXUpqktjxW/4wzEsfuRMB8GA1UdIwQY
MBaAFKfKmtpEUk/FNvo+yr91jfJkB8ixMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDhxYTJrUlNUOFUyLWo3S3YzV044bVFIeUxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mN2VjNzAtMGRlZC00MmNhLTlkMDAt
OWQ5ZTFiNmJlZWU5LzEvcDhxYTJrUlNUOFUyLWo3S3YzV044bVFIeUxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9mN2VjNzAtMGRlZC00MmNhLTlkMDAtOWQ5ZTFiNmJlZWU5
LzEvcDhxYTJrUlNUOFUyLWo3S3YzV044bVFIeUxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFQGi7i1
vtGbuyyhlkCzWOqCNMIPT8GGUTahs+YfVire/Pp3nc9LAUk7HfPsTWn3yFE2SNzB
yEM222Jn7zBdiuzoxw2LLFRzpVwVcxjezZ4TJ8JaarMvgL6GtexnKQa5w0U9c4RH
1RS6tY8qEh7A9gPXgkuELbc/9E8T8TygUHFTLlQHoae0Ne+shtjQHU4XxJ+VbJcR
zxKVJAVZHH/73XtH3Z+Awmy640EXE4+MXBkw1bJ5GGIVsZbo3zu8FJEn4jyEPDp7
nFO4SokDTXI5P02KkiEXDG6h7vx3SIYSMXKWi3udwQAhh+X8zTcA6/woDdXn+93R
4MHLEPGvIRj3/Q==
-----END CERTIFICATE-----
Generated at Mon May 5 20:12:28 2025 by rpki-client