Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
File: U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft (raw, json)
Hash identifier: 5BWIuFVWVCFEm1V00eWR5Jl0XUI5A4xeV7uE1K2TIaE=
Subject key identifier: 60:DC:85:16:18:C0:F3:36:46:BE:47:FE:CD:EC:8E:20:7B:17:24:59
Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Certificate serial: 019677FB83B63AF2179CD35D3898D90FB214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 16:01:34 +0000
Manifest this update: Sun 27 Apr 2025 16:01:34 +0000
Manifest next update: Mon 28 Apr 2025 16:01:34 +0000
Files and hashes: 1: CMb4sSALz-KpBLSc_havR1--Rcg.roa (hash: tSEX+cRvKAqr6srk3pPXDdRAbuuNHsu00QGpp8uCSYw=)
2: Lf-7J_CEiQS4b7WeR5Eaw4iyRLQ.roa (hash: 99fN5956ngv/TFkL8FxEzwLHD53MuB+d8ra8OJh/4dM=)
3: U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl (hash: Ahzvr0PhIaPMgXjbYCrem5kBIduB/RImyBIFjCKif8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:83:b6:3a:f2:17:9c:d3:5d:38:98:d9:0f:b2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Validity
Not Before: Apr 27 16:01:34 2025 GMT
Not After : Apr 28 16:01:34 2025 GMT
Subject: CN=60dc851618c0f33646be47fecdec8e207b172459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:fd:65:9c:11:1c:da:3f:a1:ec:d6:dc:99:
0d:cf:13:e2:14:d6:38:4a:17:02:11:1f:23:0a:79:
7c:ee:8a:c3:95:bb:de:0f:62:39:83:7e:7b:d0:41:
e3:8f:5c:8e:09:a4:6d:54:fe:1c:76:1f:e1:aa:76:
b1:02:c0:cb:c7:93:12:ce:34:37:4c:d3:e1:93:94:
c9:2e:c8:d3:71:78:70:4a:fb:9e:db:6e:6e:8d:98:
56:b9:44:8c:19:dc:6c:5e:2f:81:28:d8:a2:90:a6:
bd:21:c0:2b:e0:87:3a:41:d5:96:3d:8c:5f:a2:fb:
dc:28:3c:d2:aa:0c:f3:f6:33:17:31:52:27:1c:48:
e0:2d:49:84:01:e8:d0:db:b4:db:17:8f:3b:f3:7b:
b8:2c:e9:90:78:6f:21:13:65:47:b3:63:83:10:96:
26:43:7f:d0:1d:29:58:96:38:a0:32:b0:57:e1:10:
cc:ed:07:a1:df:46:00:ff:a8:95:0e:f4:3a:f1:3d:
f5:2e:b0:b8:53:c3:0a:03:79:61:19:9b:e9:79:23:
91:b5:28:70:64:68:14:2f:e9:27:d7:46:b6:03:df:
30:c5:05:df:d3:3d:04:8b:f6:79:25:ae:8b:4a:0b:
aa:55:74:9e:3c:e9:f0:20:b1:93:f1:5e:8b:a8:bb:
7b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DC:85:16:18:C0:F3:36:46:BE:47:FE:CD:EC:8E:20:7B:17:24:59
X509v3 Authority Key Identifier:
keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d8:c9:de:8e:8d:63:7f:8a:c3:e9:ed:0b:c6:6b:c5:a1:30:
e8:5a:e3:0a:e3:5a:2a:24:dd:14:9e:fa:fb:ed:ba:6b:2e:50:
6f:85:58:ae:69:2f:e9:83:69:11:da:d6:8a:f2:2b:e6:99:d8:
67:89:ff:74:52:6a:90:e5:c2:de:d5:58:3a:cc:8a:77:2c:05:
dc:31:85:32:d7:b7:81:d0:1a:7a:e9:68:aa:db:a4:2d:4b:c9:
b9:f0:41:bc:32:53:01:f5:cd:07:ae:b4:a7:1b:91:e8:17:73:
d1:df:17:7f:65:65:70:76:a2:61:d8:a9:9d:c3:e0:f8:87:66:
7d:ce:50:01:41:76:d0:18:6b:7f:79:fa:c2:e9:8d:04:b2:56:
ba:b6:28:93:05:5c:34:8f:b1:9e:ff:ef:28:1f:13:0d:4e:5d:
24:a9:70:e3:bc:ff:2c:ac:3c:15:b4:5a:15:cf:49:a9:65:3f:
31:2f:6b:2a:d8:0c:52:9b:1e:39:b4:ef:35:d4:a8:64:53:80:
ec:6b:87:b1:d1:0f:b1:a0:86:70:f2:7e:de:72:53:4d:57:d9:
65:68:22:75:d1:e2:43:0f:96:0f:67:df:bb:c0:da:59:b9:3a:
82:73:e4:91:f4:17:ae:a3:1e:ec:c9:3b:32:4a:fe:b6:5b:17:
a0:c1:ef:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+4O2OvIXnNNdOJjZD7IUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZjM5ZDJmMjBlMmQ5YjRmOTZjYmQxMzM3ZWEzMmRhNTE4
ZDhlYzgwHhcNMjUwNDI3MTYwMTM0WhcNMjUwNDI4MTYwMTM0WjAzMTEwLwYDVQQD
Eyg2MGRjODUxNjE4YzBmMzM2NDZiZTQ3ZmVjZGVjOGUyMDdiMTcyNDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqj9ZZwRHNo/oezW3JkNzxPiFNY4
ShcCER8jCnl87orDlbveD2I5g3570EHjj1yOCaRtVP4cdh/hqnaxAsDLx5MSzjQ3
TNPhk5TJLsjTcXhwSvue225ujZhWuUSMGdxsXi+BKNiikKa9IcAr4Ic6QdWWPYxf
ovvcKDzSqgzz9jMXMVInHEjgLUmEAejQ27TbF48783u4LOmQeG8hE2VHs2ODEJYm
Q3/QHSlYljigMrBX4RDM7Qeh30YA/6iVDvQ68T31LrC4U8MKA3lhGZvpeSORtShw
ZGgUL+kn10a2A98wxQXf0z0Ei/Z5Ja6LSguqVXSePOnwILGT8V6LqLt74QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDchRYYwPM2Rr5H/s3sjiB7FyRZMB8GA1UdIwQY
MBaAFFPznS8g4tm0+Wy9EzfqMtpRjY7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xZDhmY2EtYjQ2Mi00MzEzLWE1MjMt
ZTQxMWI0M2RjNjhhLzEvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xZDhmY2EtYjQ2Mi00MzEzLWE1MjMtZTQxMWI0M2RjNjhh
LzEvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNjJ3o6N
Y3+Kw+ntC8ZrxaEw6FrjCuNaKiTdFJ76++26ay5Qb4VYrmkv6YNpEdrWivIr5pnY
Z4n/dFJqkOXC3tVYOsyKdywF3DGFMte3gdAaeuloqtukLUvJufBBvDJTAfXNB660
pxuR6Bdz0d8Xf2VlcHaiYdipncPg+Idmfc5QAUF20Bhrf3n6wumNBLJWurYokwVc
NI+xnv/vKB8TDU5dJKlw47z/LKw8FbRaFc9JqWU/MS9rKtgMUpseObTvNdSoZFOA
7GuHsdEPsaCGcPJ+3nJTTVfZZWgiddHiQw+WD2ffu8DaWbk6gnPkkfQXrqMe7Mk7
Mkr+tlsXoMHv9A==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:47:58 2025 by rpki-client