Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
File: CEIhaO2oQjBU2C6wGMOD4tvor98.mft (raw, json)
Hash identifier: fcZXZOMGVfyNBFtnR3tPhX2+0nJuD+bXKd4rvjrAHCc=
Subject key identifier: 3F:8B:D3:08:2E:1C:C0:92:CE:A4:F1:97:C3:D2:A6:65:0B:D1:68:D9
Authority key identifier: 08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF
Certificate issuer: /CN=08422168eda8423054d82eb018c383e2dbe8afdf
Certificate serial: 0196941673E56748C0083D2CFCD8B0509314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
Manifest number: 1248
Signing time: Sat 03 May 2025 03:00:21 +0000
Manifest this update: Sat 03 May 2025 03:00:21 +0000
Manifest next update: Sun 04 May 2025 03:00:21 +0000
Files and hashes: 1: CEIhaO2oQjBU2C6wGMOD4tvor98.crl (hash: PgMDsbGIUV3Jt7U4vXFgSdgTs0E9Ud/vGDjdoGXII4c=)
2: ESQpVAiSLlfE8UMM75aY_vsPDNc.roa (hash: ubyXNF+odFgCxSHtSbasAdaDvs7x7Wh5p2HTa/QrZgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:16:73:e5:67:48:c0:08:3d:2c:fc:d8:b0:50:93:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08422168eda8423054d82eb018c383e2dbe8afdf
Validity
Not Before: May 3 03:00:21 2025 GMT
Not After : May 4 03:00:21 2025 GMT
Subject: CN=3f8bd3082e1cc092cea4f197c3d2a6650bd168d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:57:b8:40:dd:e6:5d:17:bd:58:d0:58:fc:7d:
82:75:03:3a:81:37:be:8f:39:fb:4c:5c:f0:94:c4:
6c:1b:cb:77:89:4e:8a:7b:f3:97:05:d0:05:4a:3d:
64:75:75:17:a1:10:2e:da:5b:b1:35:90:44:db:c0:
ac:f8:d8:47:01:ea:31:5b:93:26:dd:75:8d:75:ac:
2e:ab:fa:99:4e:4e:53:d6:03:f9:29:4c:7f:34:37:
ec:d7:af:20:a3:3d:f8:36:11:77:a8:42:64:94:1d:
d5:cd:21:ff:64:64:a6:ef:dd:f4:94:ba:c8:1a:b9:
72:ae:a3:7a:5c:5f:4a:d8:8c:e3:9f:92:8c:9f:a5:
b6:ed:e0:03:91:c8:31:0a:1b:3c:58:19:d7:a0:33:
35:dd:67:cb:f9:2c:4b:61:21:4a:6d:97:bb:fc:5b:
ad:71:3c:bb:a1:9e:fd:c8:9b:6b:76:f8:dc:24:19:
4d:25:f9:55:4d:6c:34:17:bc:c4:67:ad:92:5e:c6:
60:8b:5b:f9:ff:d2:49:14:bb:bb:09:ab:bd:30:f1:
ab:01:a8:aa:17:5c:c4:d5:18:6a:19:ff:16:25:f0:
ec:02:1b:b0:89:dc:ab:3e:ab:5c:03:a9:3b:a8:72:
b5:38:d9:89:4a:90:fc:09:49:6d:58:62:ba:63:49:
10:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8B:D3:08:2E:1C:C0:92:CE:A4:F1:97:C3:D2:A6:65:0B:D1:68:D9
X509v3 Authority Key Identifier:
keyid:08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a3:ca:b3:39:58:a0:85:cd:27:71:fc:c7:3e:67:f3:3c:ce:
db:b9:19:1a:2c:aa:2b:6a:6a:47:75:6e:2f:e9:81:ca:6a:2f:
fe:32:6d:fa:b6:1c:b1:19:b9:2c:fb:d9:bf:43:bb:71:f3:a4:
64:20:6b:5a:b7:16:a5:55:83:12:d4:01:e1:2e:d1:44:d2:75:
9b:ba:0a:9f:83:c1:85:e8:c6:32:98:8c:ec:75:94:10:f7:73:
90:56:a1:7c:0a:39:38:69:25:42:98:40:de:90:37:dc:94:fe:
7d:f6:1a:de:52:8e:01:2d:19:a1:18:e4:93:f4:ca:6d:d9:9e:
99:a5:57:14:d0:52:2d:16:b8:94:1c:0f:b3:7a:8f:b6:6b:8d:
9e:ee:8c:df:6b:4f:e8:22:43:4e:c3:4d:a3:91:fb:e8:f2:1c:
bc:fe:ae:9d:3f:f8:44:5d:31:a4:2e:b9:d8:92:fc:2f:fa:c0:
71:ee:d9:16:18:72:16:ff:a0:c1:16:40:96:b7:81:58:4b:08:
94:b6:3f:d4:a0:ea:65:09:13:cd:05:42:73:bc:17:54:9a:03:
7a:45:07:c4:64:70:1f:95:64:2e:b3:c3:8a:57:e5:45:b9:4c:
16:fa:67:7b:28:b6:47:51:c2:cd:33:cc:38:07:b7:79:db:78:
91:8b:69:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaUFnPlZ0jACD0s/NiwUJMUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NDIyMTY4ZWRhODQyMzA1NGQ4MmViMDE4YzM4M2UyZGJl
OGFmZGYwHhcNMjUwNTAzMDMwMDIxWhcNMjUwNTA0MDMwMDIxWjAzMTEwLwYDVQQD
EygzZjhiZDMwODJlMWNjMDkyY2VhNGYxOTdjM2QyYTY2NTBiZDE2OGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxle4QN3mXRe9WNBY/H2CdQM6gTe+
jzn7TFzwlMRsG8t3iU6Ke/OXBdAFSj1kdXUXoRAu2luxNZBE28Cs+NhHAeoxW5Mm
3XWNdawuq/qZTk5T1gP5KUx/NDfs168goz34NhF3qEJklB3VzSH/ZGSm7930lLrI
GrlyrqN6XF9K2Izjn5KMn6W27eADkcgxChs8WBnXoDM13WfL+SxLYSFKbZe7/Fut
cTy7oZ79yJtrdvjcJBlNJflVTWw0F7zEZ62SXsZgi1v5/9JJFLu7Cau9MPGrAaiq
F1zE1RhqGf8WJfDsAhuwidyrPqtcA6k7qHK1ONmJSpD8CUltWGK6Y0kQ+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+L0wguHMCSzqTxl8PSpmUL0WjZMB8GA1UdIwQY
MBaAFAhCIWjtqEIwVNgusBjDg+Lb6K/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0VJaGFPMm9RakJVMkM2d0dNT0Q0dHZvcjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85NjBhMmItMzM3ZC00ZDAyLWJhODEt
NmUxOWY2NzlhNjIzLzEvQ0VJaGFPMm9RakJVMkM2d0dNT0Q0dHZvcjk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS85NjBhMmItMzM3ZC00ZDAyLWJhODEtNmUxOWY2NzlhNjIz
LzEvQ0VJaGFPMm9RakJVMkM2d0dNT0Q0dHZvcjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6PKszlY
oIXNJ3H8xz5n8zzO27kZGiyqK2pqR3VuL+mBymov/jJt+rYcsRm5LPvZv0O7cfOk
ZCBrWrcWpVWDEtQB4S7RRNJ1m7oKn4PBhejGMpiM7HWUEPdzkFahfAo5OGklQphA
3pA33JT+ffYa3lKOAS0ZoRjkk/TKbdmemaVXFNBSLRa4lBwPs3qPtmuNnu6M32tP
6CJDTsNNo5H76PIcvP6unT/4RF0xpC652JL8L/rAce7ZFhhyFv+gwRZAlreBWEsI
lLY/1KDqZQkTzQVCc7wXVJoDekUHxGRwH5VkLrPDilflRblMFvpneyi2R1HCzTPM
OAe3edt4kYtppg==
-----END CERTIFICATE-----
Generated at Sat May 3 07:06:16 2025 by rpki-client