Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
File: _ASHoE9apEK-UZoXyyuyLXg98js.mft (raw, json)
Hash identifier: I8O86XQU3r7yAoMIPpqFcTdGNNncyVY6JqaG2TeR/kY=
Subject key identifier: F9:F6:B2:3B:A8:5D:B6:1E:A7:A1:59:58:30:1D:8D:21:64:41:6B:4F
Authority key identifier: FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
Certificate issuer: /CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Certificate serial: 019673E7043100DCEE0D0124603B471D0254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
Manifest number: 108F
Signing time: Sat 26 Apr 2025 21:00:41 +0000
Manifest this update: Sat 26 Apr 2025 21:00:41 +0000
Manifest next update: Sun 27 Apr 2025 21:00:41 +0000
Files and hashes: 1: TWYnB52Oavk9789kFBH_TtsFA20.roa (hash: Lo6TIcgKkzIrKcc1K5udX1XvguvwpolYTItBn5Pxknw=)
2: _ASHoE9apEK-UZoXyyuyLXg98js.crl (hash: Bqn//U0WYW4UmCmJKuQ13uR2fONYR4kQr0q7ax51V/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e7:04:31:00:dc:ee:0d:01:24:60:3b:47:1d:02:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Validity
Not Before: Apr 26 21:00:41 2025 GMT
Not After : Apr 27 21:00:41 2025 GMT
Subject: CN=f9f6b23ba85db61ea7a15958301d8d2164416b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:a1:a5:f9:7b:bf:3e:4e:e2:db:d1:bd:38:
c2:ab:40:64:18:6a:ec:d8:dd:44:ed:90:d4:d1:4f:
2d:15:eb:ea:0c:9c:d4:6a:f8:18:84:22:88:2e:93:
32:f8:5f:82:85:19:46:cd:1f:6c:9c:02:22:ff:3c:
5b:ba:83:2a:e0:c3:7e:4f:46:67:18:be:fa:5e:bb:
f5:92:7a:f6:23:42:f9:3b:f2:95:e6:f5:36:d2:7a:
c5:fd:21:e1:55:e4:5d:7e:23:4f:76:20:5b:be:be:
51:9d:f5:7f:b4:b6:37:45:a2:74:e5:46:bc:ee:76:
3d:0e:db:80:46:31:01:be:0c:eb:18:f2:bf:26:a7:
29:2b:76:24:f1:4e:ee:34:72:57:26:0b:a3:f4:e8:
be:4b:8f:b0:c3:7b:b1:14:03:4b:f1:e6:1c:80:95:
ca:7c:80:02:29:97:d7:67:ab:d7:4a:f0:1b:45:24:
9f:de:4c:90:e5:b3:e3:58:0c:dc:d2:c8:69:9b:46:
61:02:1e:5c:06:f1:18:8d:50:e0:98:45:b5:33:9b:
e6:ee:41:83:3b:23:3d:65:12:a5:58:ad:d1:d2:79:
d8:fd:fe:08:50:f8:b3:2c:f6:3e:a7:1d:a4:d5:62:
e4:5e:2f:5b:63:8c:b8:e4:37:6d:cd:15:26:82:6d:
4c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F6:B2:3B:A8:5D:B6:1E:A7:A1:59:58:30:1D:8D:21:64:41:6B:4F
X509v3 Authority Key Identifier:
keyid:FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:4a:ad:d9:3c:5d:32:4f:ef:f9:70:4f:c3:fc:45:5c:44:46:
15:39:6c:b6:60:a9:ff:5e:66:70:ad:2d:66:d5:79:46:a6:bd:
18:80:bd:ea:3b:38:38:5d:99:28:aa:4e:31:70:fc:82:d6:89:
c1:b4:b0:0f:4f:52:13:95:d5:1e:87:eb:34:c1:db:27:f1:22:
82:dd:c2:54:ba:9a:dd:ee:7c:0c:b9:d3:f2:94:60:96:84:37:
e4:d9:c1:b7:71:fa:ba:90:21:c1:3a:83:6f:ce:b7:59:a1:05:
53:2d:f1:46:42:c3:2c:2f:62:26:19:49:72:46:3f:08:ab:fb:
90:a0:d1:4f:3a:01:51:d5:d9:14:bb:40:d5:b3:42:a9:fa:cb:
59:89:80:1d:7e:e3:a9:8b:db:4d:10:7d:8c:68:62:c6:ac:1f:
c8:45:da:8a:49:ea:9b:10:89:5e:a8:62:f8:a9:17:e5:d0:06:
61:49:b2:17:41:c1:e4:ff:16:66:68:37:be:2b:4e:a0:3b:3f:
4d:d8:32:bf:12:36:4f:1c:4f:2f:da:d6:18:5a:b9:06:5b:a6:
c6:65:0e:8f:dc:5b:8a:d2:5a:6b:17:50:03:a2:7b:0b:73:43:
58:1f:d5:7d:2b:a1:56:f0:8e:9a:56:df:f9:23:54:5a:80:bb:
1f:8a:28:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZz5wQxANzuDQEkYDtHHQJUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMDQ4N2EwNGY1YWE0NDJiZTUxOWExN2NiMmJiMjJkNzgz
ZGYyM2IwHhcNMjUwNDI2MjEwMDQxWhcNMjUwNDI3MjEwMDQxWjAzMTEwLwYDVQQD
EyhmOWY2YjIzYmE4NWRiNjFlYTdhMTU5NTgzMDFkOGQyMTY0NDE2YjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv6hpfl7vz5O4tvRvTjCq0BkGGrs
2N1E7ZDU0U8tFevqDJzUavgYhCKILpMy+F+ChRlGzR9snAIi/zxbuoMq4MN+T0Zn
GL76Xrv1knr2I0L5O/KV5vU20nrF/SHhVeRdfiNPdiBbvr5RnfV/tLY3RaJ05Ua8
7nY9DtuARjEBvgzrGPK/JqcpK3Yk8U7uNHJXJguj9Oi+S4+ww3uxFANL8eYcgJXK
fIACKZfXZ6vXSvAbRSSf3kyQ5bPjWAzc0shpm0ZhAh5cBvEYjVDgmEW1M5vm7kGD
OyM9ZRKlWK3R0nnY/f4IUPizLPY+px2k1WLkXi9bY4y45DdtzRUmgm1M9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPn2sjuoXbYep6FZWDAdjSFkQWtPMB8GA1UdIwQY
MBaAFPwEh6BPWqRCvlGaF8srsi14PfI7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0FTSG9FOWFwRUstVVpvWHl5dXlMWGc5OGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83ODFhNjEtN2QwMy00YThlLTkwYmEt
MWIzYTM2ZTFhY2E4LzEvX0FTSG9FOWFwRUstVVpvWHl5dXlMWGc5OGpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC83ODFhNjEtN2QwMy00YThlLTkwYmEtMWIzYTM2ZTFhY2E4
LzEvX0FTSG9FOWFwRUstVVpvWHl5dXlMWGc5OGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJEqt2Txd
Mk/v+XBPw/xFXERGFTlstmCp/15mcK0tZtV5Rqa9GIC96js4OF2ZKKpOMXD8gtaJ
wbSwD09SE5XVHofrNMHbJ/Eigt3CVLqa3e58DLnT8pRgloQ35NnBt3H6upAhwTqD
b863WaEFUy3xRkLDLC9iJhlJckY/CKv7kKDRTzoBUdXZFLtA1bNCqfrLWYmAHX7j
qYvbTRB9jGhixqwfyEXaiknqmxCJXqhi+KkX5dAGYUmyF0HB5P8WZmg3vitOoDs/
TdgyvxI2TxxPL9rWGFq5BlumxmUOj9xbitJaaxdQA6J7C3NDWB/VfSuhVvCOmlbf
+SNUWoC7H4ookg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:36:35 2025 by rpki-client