Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
File: r0eMzcBICmtDus2KruAHmxbsLmg.mft (raw, json)
Hash identifier: MbYUrZTUhvfYvZLLKq1F2mCrgywHDie56dDIu/fkTPs=
Subject key identifier: D5:2E:AD:91:42:30:DA:3A:5A:F6:34:BB:30:8C:F3:D8:6D:A8:7C:58
Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
Certificate issuer: /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Certificate serial: 019687369A3A24C58DDC673E29F455B58957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
Manifest number: 0799
Signing time: Wed 30 Apr 2025 15:00:24 +0000
Manifest this update: Wed 30 Apr 2025 15:00:24 +0000
Manifest next update: Thu 01 May 2025 15:00:24 +0000
Files and hashes: 1: DTxczwIBr_nfZRTIPgBtQYWGTi8.roa (hash: +VMycRtyrx3wbrRNOQ5x4frKIMykN9VHtpPYdKmVF5w=)
2: r0eMzcBICmtDus2KruAHmxbsLmg.crl (hash: sOadLO5s+RihlKwkdqCKBHDInL6Dcb5j8IYXEZY5YCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:36:9a:3a:24:c5:8d:dc:67:3e:29:f4:55:b5:89:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Validity
Not Before: Apr 30 15:00:24 2025 GMT
Not After : May 1 15:00:24 2025 GMT
Subject: CN=d52ead914230da3a5af634bb308cf3d86da87c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d0:a6:df:1b:f8:27:fc:c4:5e:81:17:eb:0c:
d0:18:18:b2:2e:99:69:2c:e5:d1:4e:77:61:ac:f3:
f8:0e:59:a5:3d:15:df:d0:8b:dd:fb:29:8c:06:c6:
2c:f0:7e:a0:c3:f3:15:aa:51:8f:14:fc:ed:42:ae:
46:b6:9a:83:fe:7c:4a:df:75:a3:75:7b:0a:19:3d:
28:ab:07:ec:1c:25:25:5f:dd:86:f8:3e:50:fe:b1:
d7:35:78:04:92:91:1e:cd:12:7a:d5:d6:66:5b:3c:
88:f2:4c:7e:66:d2:9d:1c:c5:af:c3:09:ac:49:ef:
15:2e:e1:80:54:02:1d:19:94:4e:26:9f:9a:b6:a2:
7f:ec:92:8a:cd:1f:c8:c9:27:7a:82:02:41:33:31:
38:86:24:ba:d7:7e:86:42:78:5f:ee:90:5d:df:11:
db:d3:75:d0:52:15:9d:b9:a8:05:fa:04:bf:86:4f:
66:c9:1b:1c:ec:ee:3d:5f:0d:74:54:a6:15:a4:f3:
f0:69:68:5e:02:6b:97:46:de:1d:d4:d9:a5:2a:68:
87:8c:09:83:c1:9b:b0:be:6e:8d:e8:64:5e:b0:be:
b1:96:2b:ac:ea:ae:af:a5:9b:12:b3:54:9d:dc:7f:
78:2f:15:9f:08:c6:2f:b3:4b:11:4b:2d:0b:35:ba:
c9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2E:AD:91:42:30:DA:3A:5A:F6:34:BB:30:8C:F3:D8:6D:A8:7C:58
X509v3 Authority Key Identifier:
keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:df:6b:fe:b2:36:c2:bf:b8:38:84:95:f6:c8:54:e8:5f:3e:
2c:35:2b:1d:3f:97:0b:e3:22:f0:7b:89:91:09:9c:ca:d1:8c:
88:af:66:1e:eb:b8:b7:96:31:21:43:96:fb:da:ff:bf:02:a7:
af:00:74:53:9a:34:24:fe:97:19:81:04:61:0e:82:da:9e:73:
c1:77:e5:dc:7d:1a:da:87:00:c6:24:50:5c:0e:b2:fc:1b:59:
1e:64:26:ae:57:8d:9c:42:f7:eb:46:ea:6f:38:0e:1c:f3:6c:
da:6e:98:91:66:53:5f:cb:58:1d:97:7f:45:c8:2b:ff:4c:21:
b5:95:3b:1c:81:f4:76:d2:0f:e7:a0:6d:e0:52:fd:dc:82:54:
e5:00:53:70:35:0c:e1:d7:03:d7:ba:e6:60:b7:74:4a:34:15:
35:8a:c2:4d:33:61:2c:23:c6:6d:8e:94:71:7a:9c:d5:27:12:
80:c2:5e:2d:46:d2:1b:5e:b1:6c:e7:ab:56:38:ad:3a:b5:a3:
d7:7d:ac:14:84:d4:e2:fc:db:cb:01:c6:0a:7e:2d:05:e3:2b:
a6:ca:28:50:82:f8:88:c7:69:ac:82:33:aa:78:80:e6:9b:7b:
87:ce:49:c5:e5:15:33:60:ab:c5:28:0f:12:9e:99:ff:9c:a4:
24:0b:3d:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaHNpo6JMWN3Gc+KfRVtYlXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNDc4Y2NkYzA0ODBhNmI0M2JhY2Q4YWFlZTAwNzliMTZl
YzJlNjgwHhcNMjUwNDMwMTUwMDI0WhcNMjUwNTAxMTUwMDI0WjAzMTEwLwYDVQQD
EyhkNTJlYWQ5MTQyMzBkYTNhNWFmNjM0YmIzMDhjZjNkODZkYTg3YzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdCm3xv4J/zEXoEX6wzQGBiyLplp
LOXRTndhrPP4DlmlPRXf0Ivd+ymMBsYs8H6gw/MVqlGPFPztQq5GtpqD/nxK33Wj
dXsKGT0oqwfsHCUlX92G+D5Q/rHXNXgEkpEezRJ61dZmWzyI8kx+ZtKdHMWvwwms
Se8VLuGAVAIdGZROJp+atqJ/7JKKzR/IySd6ggJBMzE4hiS6136GQnhf7pBd3xHb
03XQUhWduagF+gS/hk9myRsc7O49Xw10VKYVpPPwaWheAmuXRt4d1NmlKmiHjAmD
wZuwvm6N6GResL6xlius6q6vpZsSs1Sd3H94LxWfCMYvs0sRSy0LNbrJhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUurZFCMNo6WvY0uzCM89htqHxYMB8GA1UdIwQY
MBaAFK9HjM3ASAprQ7rNiq7gB5sW7C5oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85OTA1MDYtNDFiYy00MDk4LWFmN2Yt
Y2M4YmYzZmJlZjk5LzEvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85OTA1MDYtNDFiYy00MDk4LWFmN2YtY2M4YmYzZmJlZjk5
LzEvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf99r/rI2
wr+4OISV9shU6F8+LDUrHT+XC+Mi8HuJkQmcytGMiK9mHuu4t5YxIUOW+9r/vwKn
rwB0U5o0JP6XGYEEYQ6C2p5zwXfl3H0a2ocAxiRQXA6y/BtZHmQmrleNnEL360bq
bzgOHPNs2m6YkWZTX8tYHZd/Rcgr/0whtZU7HIH0dtIP56Bt4FL93IJU5QBTcDUM
4dcD17rmYLd0SjQVNYrCTTNhLCPGbY6UcXqc1ScSgMJeLUbSG16xbOerVjitOrWj
132sFITU4vzbywHGCn4tBeMrpsooUIL4iMdprIIzqniA5pt7h85JxeUVM2CrxSgP
Ep6Z/5ykJAs9rw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:29:42 2025 by rpki-client