Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
File: rAmEUBCEpHIgxczPVHi4l8KCLH8.mft (raw, json)
Hash identifier: bXh0Sudw1yd3dMJq1NNNtXAmm1CIoae98d4t7vgs5vM=
Subject key identifier: C0:31:3B:CE:09:BA:91:EA:66:1D:CC:9E:C8:FC:DF:A6:AD:DD:F5:C5
Authority key identifier: AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
Certificate issuer: /CN=ac0984501084a47220c5cccf5478b897c2822c7f
Certificate serial: 0196767A2582482821B1B0FEA9BC3FBDA930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 09:00:38 +0000
Manifest this update: Sun 27 Apr 2025 09:00:38 +0000
Manifest next update: Mon 28 Apr 2025 09:00:38 +0000
Files and hashes: 1: WTZTgFi28jLlym6OE35mFLAhldM.roa (hash: jSGkSx+xIVrc/nZDnmv+Qse1KJ3JV2HCFfbdRdP+Xro=)
2: rAmEUBCEpHIgxczPVHi4l8KCLH8.crl (hash: MITpUUCnNhc/iCAXs+AmX7OlsrbO1f4LALKHc5+VHPU=)
3: woxyfr4YHK9ZGgB6eP_og7DkRmY.roa (hash: 8ItNkdXM0aYCSxvQ5MhcZhdiy0lnPAozqUHboW5SaAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:25:82:48:28:21:b1:b0:fe:a9:bc:3f:bd:a9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0984501084a47220c5cccf5478b897c2822c7f
Validity
Not Before: Apr 27 09:00:38 2025 GMT
Not After : Apr 28 09:00:38 2025 GMT
Subject: CN=c0313bce09ba91ea661dcc9ec8fcdfa6adddf5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3f:93:70:91:4a:37:01:37:2e:4f:ff:52:09:
6f:56:49:54:58:ad:3c:c6:a0:b5:8b:e4:d0:35:dc:
86:c7:66:49:a3:03:14:40:db:e3:2c:fc:72:86:91:
da:bf:e6:b8:bf:17:f4:36:5a:46:33:54:dc:9b:cb:
46:72:d6:21:43:18:e7:53:a1:77:09:b5:d2:23:82:
de:92:3a:99:68:74:86:89:ad:46:e7:d1:48:35:40:
72:67:8d:99:f0:59:eb:36:6d:ed:41:1e:b1:36:dc:
72:18:9d:de:9e:32:46:61:87:2c:e5:40:26:73:35:
0d:3a:81:13:ff:b6:da:29:98:63:05:a1:2d:6f:b0:
aa:5b:be:3b:5b:65:79:08:b1:0c:db:05:1b:46:92:
6c:13:1a:89:7f:6a:f3:89:e0:4e:ba:9f:d8:0c:71:
5c:d4:9e:ae:58:8d:7e:16:d4:4e:5a:e1:5f:2f:f1:
35:25:42:6d:62:99:8e:52:90:d6:d5:ba:71:d0:f7:
4c:a4:f5:7b:76:f2:6e:fd:1a:8c:c5:35:3f:a1:78:
ab:63:52:02:89:b5:d4:36:43:36:25:2d:e2:41:75:
99:b3:6b:c6:52:1f:33:9c:8d:db:7e:77:d8:16:f1:
ea:ff:6a:11:41:ad:10:bf:b4:05:bf:61:f0:2e:b4:
67:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:31:3B:CE:09:BA:91:EA:66:1D:CC:9E:C8:FC:DF:A6:AD:DD:F5:C5
X509v3 Authority Key Identifier:
keyid:AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:07:6f:d3:aa:86:10:2c:a7:fd:70:30:24:2a:08:5c:2b:1b:
31:6a:ef:ab:5c:56:c4:6b:6b:63:87:2a:45:76:d1:39:f0:b8:
90:b5:0b:60:f7:52:1f:63:72:80:38:00:f6:59:77:dd:21:b4:
32:67:bf:c7:ed:41:cd:b5:3c:8a:31:a0:b8:cf:1a:c3:28:d2:
12:f5:88:1d:5f:74:ca:4a:80:78:bf:0c:b1:3d:63:a6:59:15:
9d:db:aa:0c:c7:d2:a4:3f:3a:25:bc:e7:1d:c2:08:d9:d6:c2:
a0:ba:46:5a:67:8b:ae:8b:58:47:4e:8e:0e:ee:76:e4:97:f5:
34:0b:83:d1:45:e5:8c:89:79:c7:6c:7f:98:bb:6e:3b:6d:2e:
60:91:d8:20:99:4f:2e:8a:9a:b9:10:58:3e:75:60:d3:17:70:
33:a3:2b:5e:37:99:b7:aa:44:8d:58:6c:b4:2d:2f:c4:23:93:
66:2f:7c:e5:07:79:5a:2e:44:a1:1e:11:2a:74:9e:51:30:ff:
b6:6c:1d:9d:93:94:22:b6:da:4a:fd:42:ba:24:f5:da:d6:96:
de:9d:59:68:49:6a:8c:ef:c9:eb:95:df:b9:2d:2e:e2:62:47:
ff:d4:cc:c5:64:5b:53:26:f7:60:e5:fc:be:1a:8c:56:0e:66:
9b:e3:d2:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2eiWCSCghsbD+qbw/vakwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMDk4NDUwMTA4NGE0NzIyMGM1Y2NjZjU0NzhiODk3YzI4
MjJjN2YwHhcNMjUwNDI3MDkwMDM4WhcNMjUwNDI4MDkwMDM4WjAzMTEwLwYDVQQD
EyhjMDMxM2JjZTA5YmE5MWVhNjYxZGNjOWVjOGZjZGZhNmFkZGRmNWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj+TcJFKNwE3Lk//UglvVklUWK08
xqC1i+TQNdyGx2ZJowMUQNvjLPxyhpHav+a4vxf0NlpGM1Tcm8tGctYhQxjnU6F3
CbXSI4LekjqZaHSGia1G59FINUByZ42Z8FnrNm3tQR6xNtxyGJ3enjJGYYcs5UAm
czUNOoET/7baKZhjBaEtb7CqW747W2V5CLEM2wUbRpJsExqJf2rzieBOup/YDHFc
1J6uWI1+FtROWuFfL/E1JUJtYpmOUpDW1bpx0PdMpPV7dvJu/RqMxTU/oXirY1IC
ibXUNkM2JS3iQXWZs2vGUh8znI3bfnfYFvHq/2oRQa0Qv7QFv2HwLrRnvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAxO84JupHqZh3Mnsj836at3fXFMB8GA1UdIwQY
MBaAFKwJhFAQhKRyIMXMz1R4uJfCgix/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckFtRVVCQ0VwSElneGN6UFZIaTRsOEtDTEg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yOTNlYzItYjE0NC00YmNjLThhNDgt
NGJjNzAzNGYyOGQ4LzEvckFtRVVCQ0VwSElneGN6UFZIaTRsOEtDTEg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yOTNlYzItYjE0NC00YmNjLThhNDgtNGJjNzAzNGYyOGQ4
LzEvckFtRVVCQ0VwSElneGN6UFZIaTRsOEtDTEg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFwdv06qG
ECyn/XAwJCoIXCsbMWrvq1xWxGtrY4cqRXbROfC4kLULYPdSH2NygDgA9ll33SG0
Mme/x+1BzbU8ijGguM8awyjSEvWIHV90ykqAeL8MsT1jplkVnduqDMfSpD86Jbzn
HcII2dbCoLpGWmeLrotYR06ODu525Jf1NAuD0UXljIl5x2x/mLtuO20uYJHYIJlP
LoqauRBYPnVg0xdwM6MrXjeZt6pEjVhstC0vxCOTZi985Qd5Wi5EoR4RKnSeUTD/
tmwdnZOUIrbaSv1CuiT12taW3p1ZaElqjO/J65XfuS0u4mJH/9TMxWRbUyb3YOX8
vhqMVg5mm+PSFA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:56:29 2025 by rpki-client