Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
File: PesQRGPpILRVQravGifVlQ6G6aA.mft (raw, json)
Hash identifier: QKBSBzRxhRpSia+q+bROZpaDg7yFWu3jtnnKSfSgqAk=
Subject key identifier: BA:68:9D:F5:93:D1:07:0F:A0:63:80:F0:89:6D:32:8E:58:45:D0:DE
Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
Certificate issuer: /CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Certificate serial: 01967A8DF1D2E759E6F206184107FF5CB8D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
Manifest number: 12E2
Signing time: Mon 28 Apr 2025 04:00:44 +0000
Manifest this update: Mon 28 Apr 2025 04:00:44 +0000
Manifest next update: Tue 29 Apr 2025 04:00:44 +0000
Files and hashes: 1: 1-gBlmRElwFozsXlk-zODgtGpAuA.roa (hash: xVfyWKViH35Kce9xfyzBsAu8tiyl2DKuvLolO3h9f4s=)
2: 3X_OCsm4wSXVQQmIGXvbWiOwwPk.roa (hash: uAifQhxv7JsH18zEmjWnpWg6H+QdTkCHwp4ioEB51v8=)
3: CGYCoXePbFBrriJrNgrZF9Uefow.roa (hash: KPb5usKgdYQ3JpgKFKA1WlcbtVkuv48+f5lB1B8M9IA=)
4: PesQRGPpILRVQravGifVlQ6G6aA.crl (hash: MymEJufMdEVRTDqZmy4Pkf1vFHqQ4cxFGrwDQapt75M=)
5: PyMiLV0wnNJXQTQMDEPMVXWx9ZQ.roa (hash: gY7gqfT3zhDP3uAkWWCqVVxfWQ7GvCSgS8lQh0U5EGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:f1:d2:e7:59:e6:f2:06:18:41:07:ff:5c:b8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Validity
Not Before: Apr 28 04:00:44 2025 GMT
Not After : Apr 29 04:00:44 2025 GMT
Subject: CN=ba689df593d1070fa06380f0896d328e5845d0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:22:61:1b:46:79:f7:c2:6e:a0:83:65:47:
2f:73:c7:6e:2a:26:00:8c:39:40:77:26:35:97:e4:
38:97:8f:08:1d:95:2b:41:24:1a:1d:64:e6:3a:88:
32:37:29:79:35:d6:7d:a7:6e:03:6a:95:90:75:64:
3e:5e:9c:86:b1:5f:61:7d:1a:e9:24:86:47:e8:8b:
33:3e:86:88:11:8c:18:dd:fb:ee:a7:bb:71:0a:b8:
97:0d:19:d6:39:40:41:a4:67:aa:c7:80:93:5a:a6:
47:f2:13:39:a8:1c:13:4d:d8:cf:c6:73:b6:e7:37:
7a:1e:53:45:ce:10:03:3a:ba:4b:37:54:eb:2c:13:
2c:de:dd:0d:e9:e7:9a:72:1a:2d:0f:0d:3e:83:9d:
83:0c:e9:52:86:bb:0b:17:ef:a1:23:f3:bf:62:87:
28:63:3a:d7:90:b6:47:00:84:1d:db:48:a9:21:3b:
bc:fc:91:27:47:92:48:f2:ce:b9:32:85:9b:11:0b:
51:06:b9:ed:20:e3:4b:e8:3e:57:0a:23:b0:36:12:
79:97:d7:5c:a0:a2:fd:6e:cf:4b:51:f9:98:c9:a8:
a1:90:c8:09:d2:c3:9c:ed:1f:da:3e:c4:eb:72:2b:
ca:69:87:a7:18:47:db:53:7f:23:d7:5d:13:6a:e7:
14:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:68:9D:F5:93:D1:07:0F:A0:63:80:F0:89:6D:32:8E:58:45:D0:DE
X509v3 Authority Key Identifier:
keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c6:68:7f:13:51:ac:2e:56:d9:06:e1:7d:4f:af:d3:fa:22:
77:b1:be:e9:22:ab:b4:1b:a5:3c:35:6b:d6:1b:31:12:77:f7:
dc:5e:ae:73:39:5a:83:86:8e:4f:59:2e:53:18:0b:19:c9:54:
af:ee:e3:97:80:54:67:13:d2:09:6c:33:02:45:b1:4f:1e:c4:
62:0b:46:c8:8d:78:77:90:47:ea:9f:62:43:6a:6f:83:1d:f9:
02:3e:21:17:d4:79:d5:79:3f:28:5b:32:5a:fe:9d:30:5e:14:
d9:fe:42:98:62:45:ce:fb:01:5f:1c:00:f7:d4:9d:f8:b6:45:
8d:5f:58:37:45:4c:55:d6:2d:1a:fa:c6:96:7e:06:1f:73:27:
ed:57:e6:79:f3:29:43:bd:18:5c:77:09:e0:ef:10:8e:93:8a:
89:af:04:b9:31:b2:af:4b:b7:94:a1:63:00:46:2a:0f:73:56:
a7:9d:f7:1d:8f:d3:37:f0:3b:1f:41:78:c5:77:c5:87:26:b8:
2c:b0:0c:0b:1c:2e:be:3f:31:f9:14:73:95:b7:9f:44:00:d2:
2d:fa:0c:9c:7e:42:c2:fe:25:e1:cc:87:f1:42:8a:b3:94:c0:
54:3f:cf:8f:26:a2:1f:93:16:63:b0:ef:77:7b:b1:42:a8:8d:
d1:ad:65:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6jfHS51nm8gYYQQf/XLjZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZWIxMDQ0NjNlOTIwYjQ1NTQyYjZhZjFhMjdkNTk1MGU4
NmU5YTAwHhcNMjUwNDI4MDQwMDQ0WhcNMjUwNDI5MDQwMDQ0WjAzMTEwLwYDVQQD
EyhiYTY4OWRmNTkzZDEwNzBmYTA2MzgwZjA4OTZkMzI4ZTU4NDVkMGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHQiYRtGeffCbqCDZUcvc8duKiYA
jDlAdyY1l+Q4l48IHZUrQSQaHWTmOogyNyl5NdZ9p24DapWQdWQ+XpyGsV9hfRrp
JIZH6IszPoaIEYwY3fvup7txCriXDRnWOUBBpGeqx4CTWqZH8hM5qBwTTdjPxnO2
5zd6HlNFzhADOrpLN1TrLBMs3t0N6eeachotDw0+g52DDOlShrsLF++hI/O/Yoco
YzrXkLZHAIQd20ipITu8/JEnR5JI8s65MoWbEQtRBrntIONL6D5XCiOwNhJ5l9dc
oKL9bs9LUfmYyaihkMgJ0sOc7R/aPsTrcivKaYenGEfbU38j110TaucUAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLponfWT0QcPoGOA8IltMo5YRdDeMB8GA1UdIwQY
MBaAFD3rEERj6SC0VUK2rxon1ZUOhumgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9jNjg2YjMtZTdhOS00ZjljLTg0MmMt
MTE5ZDhiZjcxN2JiLzEvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9jNjg2YjMtZTdhOS00ZjljLTg0MmMtMTE5ZDhiZjcxN2Ji
LzEvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPsZofxNR
rC5W2QbhfU+v0/oid7G+6SKrtBulPDVr1hsxEnf33F6uczlag4aOT1kuUxgLGclU
r+7jl4BUZxPSCWwzAkWxTx7EYgtGyI14d5BH6p9iQ2pvgx35Aj4hF9R51Xk/KFsy
Wv6dMF4U2f5CmGJFzvsBXxwA99Sd+LZFjV9YN0VMVdYtGvrGln4GH3Mn7VfmefMp
Q70YXHcJ4O8QjpOKia8EuTGyr0u3lKFjAEYqD3NWp533HY/TN/A7H0F4xXfFhya4
LLAMCxwuvj8x+RRzlbefRADSLfoMnH5Cwv4l4cyH8UKKs5TAVD/PjyaiH5MWY7Dv
d3uxQqiN0a1lcw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:08:13 2025 by rpki-client