Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json)
Hash identifier: Fo15urqi3Vc+3yvYqMpdy2va0+XTCXLg6W7WijD65Oo=
Subject key identifier: 5D:A5:16:B3:B4:ED:85:B0:C4:45:26:3D:98:39:89:A9:AD:B2:FD:A2
Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Certificate serial: 019675D51DB16EF9BCA68B2FA20A92F6B075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
Manifest number: 0BEF
Signing time: Sun 27 Apr 2025 06:00:22 +0000
Manifest this update: Sun 27 Apr 2025 06:00:22 +0000
Manifest next update: Mon 28 Apr 2025 06:00:22 +0000
Files and hashes: 1: 5kFz87V3cREdddc3AsaZImesrc4.roa (hash: GMf/VeYSaAQLAvigW84goiaYuSw8QRXcx94y9RzK0U8=)
2: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: Hman5aSoNLlhWw7v1NhvgsIxBQ1WZdjDMoG+1plqqdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:1d:b1:6e:f9:bc:a6:8b:2f:a2:0a:92:f6:b0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Validity
Not Before: Apr 27 06:00:22 2025 GMT
Not After : Apr 28 06:00:22 2025 GMT
Subject: CN=5da516b3b4ed85b0c445263d983989a9adb2fda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2f:2e:1f:76:e6:5d:88:46:a1:03:7a:26:eb:
1f:5a:61:f3:75:50:76:26:19:ec:fb:ba:13:69:cd:
5a:8b:66:a1:f2:b2:28:68:fe:1b:39:5f:d8:e7:9c:
2a:33:81:3f:90:c2:24:58:c2:1c:bb:1f:39:87:71:
f8:a9:d1:f0:a9:b6:e0:24:03:70:60:c0:f9:03:aa:
64:bb:b7:81:6b:de:43:78:20:1e:43:bc:c0:81:2d:
2d:b1:f5:42:35:31:fa:bd:e3:02:9c:16:b7:b5:2b:
9d:56:1c:38:a0:00:b0:81:89:fa:65:51:08:d6:32:
9f:34:4f:32:56:84:16:6e:43:0f:ed:c9:36:8c:10:
2c:46:e9:e4:bb:ac:fe:da:77:13:25:47:d3:96:33:
c5:e4:ac:90:be:32:2f:87:7d:c2:68:fd:cf:01:0c:
be:80:24:0a:85:2b:25:9d:63:4a:c2:d8:cf:25:45:
55:7f:d3:3e:60:fc:06:e0:96:57:a5:d6:bf:5d:e2:
b6:a4:3c:85:6b:83:a7:ca:35:26:cd:a1:1b:f9:29:
ec:f9:0e:ab:dd:10:12:c3:e2:92:df:c2:7f:e2:f0:
f7:be:87:ce:b7:5e:e4:8b:a8:d4:9f:b7:b1:1d:a6:
dd:ad:fc:e7:38:7d:fc:71:5a:70:83:ed:70:db:9d:
7b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A5:16:B3:B4:ED:85:B0:C4:45:26:3D:98:39:89:A9:AD:B2:FD:A2
X509v3 Authority Key Identifier:
keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d0:e2:53:55:6a:53:8c:41:59:81:dc:9f:71:6d:73:3c:8e:
f8:a9:e0:d3:43:26:56:6f:ea:a8:f8:e0:14:96:5f:da:89:fa:
00:6c:49:d3:df:62:ae:6a:21:c2:e2:d9:8c:8d:ef:e5:0e:b1:
aa:ab:2f:b6:15:be:cc:16:98:71:84:18:2d:49:d1:c8:36:77:
07:3e:79:e0:7a:23:f7:bb:39:1d:f1:f8:11:03:11:92:ad:71:
53:a5:89:86:03:60:75:1e:7c:9c:29:82:30:38:60:bc:eb:f7:
2e:97:a7:b4:7b:95:2c:fd:9c:90:5e:9d:2f:14:51:d3:f6:e2:
9f:bc:77:0e:7b:55:7f:0c:c0:16:b8:f3:b2:99:3a:f7:9e:03:
25:2f:1d:d8:93:40:df:6d:75:74:06:9c:66:b4:59:d6:66:74:
13:7e:d3:c5:d3:7e:d6:e8:92:f6:a0:d8:b7:f8:2c:cb:1a:98:
34:76:7c:ae:6a:9c:cc:aa:82:30:f8:b5:44:38:9a:da:d9:fb:
7e:3e:48:64:22:65:ea:1c:57:5f:81:41:2b:83:73:8a:85:1f:
91:23:5d:3f:63:78:46:f2:92:c4:17:e5:7a:b8:9e:dd:75:2f:
65:bb:cb:d9:97:2b:4d:91:b7:fb:7a:bb:ad:0b:c2:ec:7e:75:
6d:c2:57:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ11R2xbvm8posvogqS9rB1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NThiNTRiZmVlOTg5NmM0YWRhN2RjMThiM2I3Zjk3MTlk
YTA0NmIwHhcNMjUwNDI3MDYwMDIyWhcNMjUwNDI4MDYwMDIyWjAzMTEwLwYDVQQD
Eyg1ZGE1MTZiM2I0ZWQ4NWIwYzQ0NTI2M2Q5ODM5ODlhOWFkYjJmZGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS8uH3bmXYhGoQN6JusfWmHzdVB2
Jhns+7oTac1ai2ah8rIoaP4bOV/Y55wqM4E/kMIkWMIcux85h3H4qdHwqbbgJANw
YMD5A6pku7eBa95DeCAeQ7zAgS0tsfVCNTH6veMCnBa3tSudVhw4oACwgYn6ZVEI
1jKfNE8yVoQWbkMP7ck2jBAsRunku6z+2ncTJUfTljPF5KyQvjIvh33CaP3PAQy+
gCQKhSslnWNKwtjPJUVVf9M+YPwG4JZXpda/XeK2pDyFa4OnyjUmzaEb+Sns+Q6r
3RASw+KS38J/4vD3vofOt17ki6jUn7exHabdrfznOH38cVpwg+1w2517qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2lFrO07YWwxEUmPZg5iamtsv2iMB8GA1UdIwQY
MBaAFAlYtUv+6YlsStp9wYs7f5cZ2gRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hNjBmODYtOGI5NC00MTBhLWJmZDEt
ZmY0YzcxODMwMjRmLzEvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9hNjBmODYtOGI5NC00MTBhLWJmZDEtZmY0YzcxODMwMjRm
LzEvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr9DiU1Vq
U4xBWYHcn3FtczyO+Kng00MmVm/qqPjgFJZf2on6AGxJ099irmohwuLZjI3v5Q6x
qqsvthW+zBaYcYQYLUnRyDZ3Bz554Hoj97s5HfH4EQMRkq1xU6WJhgNgdR58nCmC
MDhgvOv3LpentHuVLP2ckF6dLxRR0/bin7x3DntVfwzAFrjzspk6954DJS8d2JNA
3211dAacZrRZ1mZ0E37TxdN+1uiS9qDYt/gsyxqYNHZ8rmqczKqCMPi1RDia2tn7
fj5IZCJl6hxXX4FBK4NzioUfkSNdP2N4RvKSxBflerie3XUvZbvL2ZcrTZG3+3q7
rQvC7H51bcJX6w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:41:33 2025 by rpki-client