Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
File: cIYS6HA6ZgiJyg9FfPG02KDVO00.mft (raw, json)
Hash identifier: kcT3qIt4/jOyIeSNsSfYMCb9JR5ZK8WUxj7XWKX/DHI=
Subject key identifier: AB:D6:8C:03:6C:CA:E4:A7:39:B4:B3:9E:DE:2D:E1:AF:F3:C0:C8:24
Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Certificate serial: 0196760BEEFD1BD841DC6CF31F656B810697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
Manifest number: 0BB3
Signing time: Sun 27 Apr 2025 07:00:15 +0000
Manifest this update: Sun 27 Apr 2025 07:00:15 +0000
Manifest next update: Mon 28 Apr 2025 07:00:15 +0000
Files and hashes: 1: DmXSHAWyzkOoxqiFMJESxxoNQRE.roa (hash: JS4gdknzcsCYuR0k7tQp82qH1Pua7AKi87dIAAaokTc=)
2: cIYS6HA6ZgiJyg9FfPG02KDVO00.crl (hash: 1YxIozn9VHmu42mVh4lskJN75tPWxXrvmtEHLgC2PZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0b:ee:fd:1b:d8:41:dc:6c:f3:1f:65:6b:81:06:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Validity
Not Before: Apr 27 07:00:15 2025 GMT
Not After : Apr 28 07:00:15 2025 GMT
Subject: CN=abd68c036ccae4a739b4b39ede2de1aff3c0c824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c1:eb:6e:96:e8:71:57:0b:66:18:ae:2f:f5:
e3:49:ea:16:b3:4c:be:82:a5:38:6c:91:4b:4b:79:
0d:dd:68:7e:50:ed:52:91:01:ef:28:2d:1e:4b:0c:
65:1e:77:c3:75:2e:c8:ab:f7:a9:b3:59:c5:5a:58:
1d:87:e4:b1:20:b3:13:72:2a:ad:4b:26:aa:af:83:
27:98:39:49:20:21:e2:f1:7b:12:1c:12:d8:6b:05:
30:a2:dd:c5:ab:8c:e5:82:f0:eb:c1:22:59:9d:8b:
68:32:9e:33:38:84:cc:ef:20:03:c6:1b:2a:7a:bf:
c3:6c:d2:84:a7:cf:52:20:c9:e1:02:85:4b:d1:f9:
73:f2:d1:d6:9c:d5:ad:23:df:8b:06:dd:cf:b4:41:
c6:00:4c:92:b8:87:4e:9a:b7:dd:1e:70:c5:1f:7a:
d5:98:b1:d2:c5:b4:77:4f:bb:39:82:e3:29:25:30:
d3:3a:5e:57:ab:1e:04:47:4b:c7:96:0c:58:d5:e9:
90:dc:a5:98:8f:2d:c8:0b:34:a5:9e:a6:86:a8:c8:
ab:a8:20:f6:64:8e:73:40:c2:c4:75:2c:f1:76:59:
11:c3:d7:c1:a5:b4:50:33:b2:09:10:c4:14:92:43:
09:cd:6b:09:7c:c9:af:39:ab:56:19:50:59:51:b6:
ff:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D6:8C:03:6C:CA:E4:A7:39:B4:B3:9E:DE:2D:E1:AF:F3:C0:C8:24
X509v3 Authority Key Identifier:
keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d6:7a:bb:34:0a:8b:60:38:e9:23:67:71:6b:c4:5e:87:15:
12:ba:78:f4:a9:0a:bd:92:cc:e8:91:26:9c:80:4f:1d:60:dd:
da:3a:e9:ce:5e:08:f8:30:98:cb:5e:fb:a3:0a:00:03:2e:46:
35:d4:91:29:f6:9f:b2:a2:75:9f:ac:52:d6:68:b7:4e:d3:d5:
78:23:05:85:a7:c6:33:12:25:45:bb:87:df:cc:d4:6d:49:4e:
d4:21:6c:c5:9b:cf:b5:40:e6:6c:7c:e6:fd:ea:6e:c7:22:a9:
1b:42:47:85:e1:00:17:6c:a0:fa:ec:5d:7d:93:8e:c8:75:7b:
c8:32:72:97:e6:a9:f5:fe:91:c9:60:93:70:4c:7a:a7:6d:62:
b7:29:e7:e7:f2:44:15:1d:2d:2c:53:73:61:22:2b:36:1b:c6:
83:39:f0:0e:e5:0b:16:00:80:c5:03:8b:66:39:f4:42:17:cd:
80:b7:6f:d3:0e:34:43:1d:08:86:12:65:82:e8:41:12:75:06:
1b:d4:a9:39:4b:06:51:71:ef:a7:95:d5:42:46:f2:c2:8b:5f:
fe:ff:72:87:a6:68:d1:28:fb:4c:f2:bd:04:c9:fd:21:0b:57:
53:14:1c:ee:82:2b:94:fc:f8:eb:99:56:df:c9:fa:b4:28:6c:
a0:83:a0:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2C+79G9hB3GzzH2VrgQaXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwODYxMmU4NzAzYTY2MDg4OWNhMGY0NTdjZjFiNGQ4YTBk
NTNiNGQwHhcNMjUwNDI3MDcwMDE1WhcNMjUwNDI4MDcwMDE1WjAzMTEwLwYDVQQD
EyhhYmQ2OGMwMzZjY2FlNGE3MzliNGIzOWVkZTJkZTFhZmYzYzBjODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsHrbpbocVcLZhiuL/XjSeoWs0y+
gqU4bJFLS3kN3Wh+UO1SkQHvKC0eSwxlHnfDdS7Iq/eps1nFWlgdh+SxILMTciqt
Syaqr4MnmDlJICHi8XsSHBLYawUwot3Fq4zlgvDrwSJZnYtoMp4zOITM7yADxhsq
er/DbNKEp89SIMnhAoVL0flz8tHWnNWtI9+LBt3PtEHGAEySuIdOmrfdHnDFH3rV
mLHSxbR3T7s5guMpJTDTOl5Xqx4ER0vHlgxY1emQ3KWYjy3ICzSlnqaGqMirqCD2
ZI5zQMLEdSzxdlkRw9fBpbRQM7IJEMQUkkMJzWsJfMmvOatWGVBZUbb/TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvWjANsyuSnObSznt4t4a/zwMgkMB8GA1UdIwQY
MBaAFHCGEuhwOmYIicoPRXzxtNig1TtNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yMmIwZmUtOWRjOC00YmVmLWEyOTkt
MzAwOTdhMjQ2YTljLzEvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yMmIwZmUtOWRjOC00YmVmLWEyOTktMzAwOTdhMjQ2YTlj
LzEvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNZ6uzQK
i2A46SNncWvEXocVErp49KkKvZLM6JEmnIBPHWDd2jrpzl4I+DCYy177owoAAy5G
NdSRKfafsqJ1n6xS1mi3TtPVeCMFhafGMxIlRbuH38zUbUlO1CFsxZvPtUDmbHzm
/epuxyKpG0JHheEAF2yg+uxdfZOOyHV7yDJyl+ap9f6RyWCTcEx6p21itynn5/JE
FR0tLFNzYSIrNhvGgznwDuULFgCAxQOLZjn0QhfNgLdv0w40Qx0IhhJlguhBEnUG
G9SpOUsGUXHvp5XVQkbywotf/v9yh6Zo0Sj7TPK9BMn9IQtXUxQc7oIrlPz465lW
38n6tChsoIOgAQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 18:12:26 2025 by rpki-client