Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json)
Hash identifier: BfH/VOXBt/AImbgEhlZj+GS5yhlDPG++23ZQP6tlv8o=
Subject key identifier: 2C:66:0D:14:D2:BF:E5:71:68:4A:B4:28:41:07:16:5E:0D:FF:59:68
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 019672D47C827B223C8D04FFC2ED89AC19AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
Manifest number: 1211
Signing time: Sat 26 Apr 2025 16:00:50 +0000
Manifest this update: Sat 26 Apr 2025 16:00:50 +0000
Manifest next update: Sun 27 Apr 2025 16:00:50 +0000
Files and hashes: 1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: Ud9EzHxx6M4LIoIcY2vXkPGPn8fesMzOOOidJ2UYusY=)
2: JLTWHRuvioIZeiPuQHITq0nguEU.roa (hash: bk5yHjHsl6C1xvyULuJt1KQ0iqgopaEeKAR0yVznkzo=)
3: plwZ9l0lVtWa8erZq6nE-HfiL5Y.roa (hash: pvnWu+3SngeR8hyMQVNUkiZf5MAZJKgs78KtEduSXvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d4:7c:82:7b:22:3c:8d:04:ff:c2:ed:89:ac:19:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: Apr 26 16:00:50 2025 GMT
Not After : Apr 27 16:00:50 2025 GMT
Subject: CN=2c660d14d2bfe571684ab4284107165e0dff5968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3a:10:d7:54:88:ef:41:e0:62:11:79:48:d9:
bb:ab:b4:6d:76:eb:51:6c:9a:57:d4:1e:bb:ed:28:
49:90:51:9e:43:d4:26:7b:d0:72:a0:ef:44:11:d4:
5f:65:eb:bc:b4:9f:39:21:71:78:6a:09:53:74:96:
32:62:cd:f3:ec:78:89:ec:20:64:e6:2d:f7:1a:cc:
c1:97:16:83:22:8e:0e:46:a4:a2:e9:67:8f:23:3c:
c8:9f:72:94:97:82:67:8b:a5:51:e5:fd:25:6d:46:
ae:c6:65:80:98:6a:b5:f6:f6:bd:7e:c4:15:c0:67:
a6:d6:c8:b9:f3:d7:be:0c:7a:17:44:7f:c6:a6:27:
8c:67:b9:70:72:a9:bc:af:d9:d3:be:ae:59:61:8f:
04:db:a5:de:53:51:41:7e:25:ed:0d:e9:0b:9a:95:
6d:fc:af:73:0f:ff:93:ec:ba:76:b8:31:ba:b5:52:
c7:62:08:6a:64:5b:a3:d1:f5:1a:95:b0:ce:b7:78:
0b:c2:ca:96:38:aa:1e:5e:07:a1:8a:bd:65:61:bf:
4d:3e:8d:38:d2:68:c1:c0:d0:fe:aa:41:fc:29:43:
5c:d5:f4:a4:3d:0a:4b:d1:b0:dc:13:7a:45:47:dd:
37:66:b2:9c:67:ea:7d:a0:5d:99:cb:d4:d8:31:6b:
88:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:66:0D:14:D2:BF:E5:71:68:4A:B4:28:41:07:16:5E:0D:FF:59:68
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:11:1f:40:5e:01:35:6f:db:98:e2:11:23:81:a8:c9:51:7c:
38:a4:80:9b:62:88:ac:60:73:75:6c:e4:92:62:cf:73:4c:69:
b4:3c:b1:f3:9c:b3:ef:bf:a5:67:39:b3:39:91:d8:d3:91:13:
4d:fc:19:59:55:54:81:06:7c:fa:f8:cb:36:ee:5c:7c:55:9f:
45:35:28:36:15:36:66:15:25:ec:f0:59:5b:4c:d1:f3:74:a8:
f1:dc:5e:63:ee:51:7e:b8:d3:11:49:ad:20:d1:54:0b:c3:ba:
26:e1:e4:43:82:bc:12:2a:a3:f3:72:95:d0:a8:00:67:b1:9b:
b4:8a:76:9c:aa:2e:ff:e5:da:87:c1:a4:50:04:20:3b:70:e2:
e6:83:33:34:9d:c9:dc:6d:a2:a9:db:a5:04:5d:a2:2b:12:62:
2d:a3:a6:49:27:ce:9a:95:76:3e:a0:ce:1e:d3:06:f5:6d:50:
8b:26:36:2a:12:83:fd:fb:48:24:86:83:0b:7a:ba:0f:f4:f4:
e8:4c:93:e0:fd:e4:aa:fb:db:24:67:85:29:b6:b0:1c:ae:eb:
84:c6:b4:a3:9b:40:4d:fa:61:c7:4f:92:7e:e8:df:c3:11:8a:
b3:a3:da:04:a9:ef:6b:66:62:7d:1c:59:64:1d:58:de:2d:8a:
cf:f0:7f:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZy1HyCeyI8jQT/wu2JrBmvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZWU1ZTcxNDA5YjIxZmQ1YzgyMGYzZDNhYzNmZGMwZmNl
NzVhMGIwHhcNMjUwNDI2MTYwMDUwWhcNMjUwNDI3MTYwMDUwWjAzMTEwLwYDVQQD
EygyYzY2MGQxNGQyYmZlNTcxNjg0YWI0Mjg0MTA3MTY1ZTBkZmY1OTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzoQ11SI70HgYhF5SNm7q7RtdutR
bJpX1B677ShJkFGeQ9Qme9ByoO9EEdRfZeu8tJ85IXF4aglTdJYyYs3z7HiJ7CBk
5i33GszBlxaDIo4ORqSi6WePIzzIn3KUl4Jni6VR5f0lbUauxmWAmGq19va9fsQV
wGem1si589e+DHoXRH/GpieMZ7lwcqm8r9nTvq5ZYY8E26XeU1FBfiXtDekLmpVt
/K9zD/+T7Lp2uDG6tVLHYghqZFuj0fUalbDOt3gLwsqWOKoeXgehir1lYb9NPo04
0mjBwND+qkH8KUNc1fSkPQpL0bDcE3pFR903ZrKcZ+p9oF2Zy9TYMWuI3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxmDRTSv+VxaEq0KEEHFl4N/1loMB8GA1UdIwQY
MBaAFCPuXnFAmyH9XIIPPTrD/cD851oLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNGI5M2MtYTAzZC00YWRhLTgzZmMt
YmM2MzdhODUxMmIxLzEvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zNGI5M2MtYTAzZC00YWRhLTgzZmMtYmM2MzdhODUxMmIx
LzEvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhEfQF4B
NW/bmOIRI4GoyVF8OKSAm2KIrGBzdWzkkmLPc0xptDyx85yz77+lZzmzOZHY05ET
TfwZWVVUgQZ8+vjLNu5cfFWfRTUoNhU2ZhUl7PBZW0zR83So8dxeY+5RfrjTEUmt
INFUC8O6JuHkQ4K8Eiqj83KV0KgAZ7GbtIp2nKou/+Xah8GkUAQgO3Di5oMzNJ3J
3G2iqdulBF2iKxJiLaOmSSfOmpV2PqDOHtMG9W1QiyY2KhKD/ftIJIaDC3q6D/T0
6EyT4P3kqvvbJGeFKbawHK7rhMa0o5tATfphx0+SfujfwxGKs6PaBKnva2ZifRxZ
ZB1Y3i2Kz/B/qQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:03:00 2025 by rpki-client