Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
File: RcXBJi6D17-pAsLIYqFfHkLSVZE.mft (raw, json)
Hash identifier: OWtDrPcLq2wSkVgu7w99cXhxVdMwbRtt0vyRl7bUEgU=
Subject key identifier: AE:57:77:05:0D:B4:46:8D:BB:61:D2:A4:5B:E6:10:57:6B:3E:EE:36
Authority key identifier: 45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
Certificate issuer: /CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Certificate serial: 01967C451766F50F813190AF96F3C63FC4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
Manifest number: 04E3
Signing time: Mon 28 Apr 2025 12:00:24 +0000
Manifest this update: Mon 28 Apr 2025 12:00:24 +0000
Manifest next update: Tue 29 Apr 2025 12:00:24 +0000
Files and hashes: 1: 85JP1EmlrjP9cMbgQ-NLAJZsWYU.roa (hash: MO0sgGxlXYh61dJ8SPvOD77mPT9iIScGfPHBaJnXid0=)
2: RcXBJi6D17-pAsLIYqFfHkLSVZE.crl (hash: QaeU2nQ7mylQU2+bX6nLIEtAmKVq/USnKHJQPznvpD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:17:66:f5:0f:81:31:90:af:96:f3:c6:3f:c4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Validity
Not Before: Apr 28 12:00:24 2025 GMT
Not After : Apr 29 12:00:24 2025 GMT
Subject: CN=ae5777050db4468dbb61d2a45be610576b3eee36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:5a:c0:5a:b3:fd:f5:7f:fc:d5:d2:7a:0f:
7b:6b:5e:ab:75:b1:16:6d:6d:cd:a8:89:c8:7d:e3:
0b:d4:2e:af:3e:98:00:b3:35:50:d7:ac:cf:23:25:
d9:eb:83:45:ab:5a:8e:dd:c2:57:ca:c9:2d:b0:97:
f8:8a:7c:6e:8e:7c:c5:bb:72:fc:f5:25:81:c3:a2:
50:13:73:e4:9a:ae:84:ce:51:2f:e7:50:c0:7d:05:
46:da:65:b8:bc:ad:ae:74:13:8f:12:d4:8b:cb:cf:
ba:69:f2:db:7a:37:ca:a5:04:99:50:28:ae:14:57:
41:61:43:00:f7:79:77:da:46:55:cf:7c:67:7c:4a:
2e:0c:05:82:61:c8:7e:34:a6:dc:a9:b0:45:0d:6a:
51:7b:94:88:d9:e2:1b:12:fa:bf:9c:ff:cd:9e:0c:
96:e5:93:79:8e:a5:95:fd:71:4a:d7:af:6b:fc:01:
af:5a:84:97:63:d4:e7:7a:ea:95:06:2f:12:43:5e:
10:d6:ae:1b:62:28:c3:b7:2b:fb:e2:76:f4:2c:7e:
fe:c3:3b:cd:c7:41:bc:89:c7:ef:d6:d8:04:4a:56:
f0:b9:68:44:36:9d:f7:ee:09:a3:11:78:77:51:87:
08:1a:26:86:05:63:f8:34:ab:71:cf:80:87:06:84:
6f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:57:77:05:0D:B4:46:8D:BB:61:D2:A4:5B:E6:10:57:6B:3E:EE:36
X509v3 Authority Key Identifier:
keyid:45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:3a:ed:d7:de:d5:cd:0b:8d:f4:99:2b:63:4b:21:98:ac:d5:
f3:2b:85:75:91:3c:f5:13:b0:62:ea:c8:7d:61:3c:c7:ee:c0:
71:d7:b4:96:f5:86:ae:f3:42:ac:7b:c3:50:80:92:22:3b:0b:
61:25:e2:cb:da:43:41:fa:7f:74:14:2e:e3:ec:ca:ff:62:a6:
ad:bc:5a:d5:2e:ab:13:39:13:dc:9c:d2:61:4f:c0:89:96:8c:
5e:dd:f9:8c:c8:8e:2e:71:8a:ad:91:ba:80:18:a0:a8:c0:47:
12:81:ec:51:c0:cc:1d:69:b6:a0:0a:c3:6f:04:c4:74:d0:fd:
ca:37:9d:00:0e:49:3e:bc:36:84:77:d5:c3:ef:a0:af:e9:2f:
d2:00:13:be:c0:b6:eb:67:9b:11:89:23:cb:e0:70:a4:31:0e:
25:33:68:a6:9a:91:7b:b3:e1:4e:62:cd:fc:04:bb:06:8c:e2:
7a:19:1b:bf:ac:2b:44:8a:20:27:1e:8f:87:19:48:99:cb:a5:
8a:95:1d:e8:b1:23:97:b7:7b:ea:09:11:8e:b8:a3:d9:90:50:
01:aa:f3:9c:3b:f1:9a:cf:50:32:35:ab:b9:e6:18:fd:d8:d7:
00:67:e1:fa:f4:38:b2:b4:36:12:fe:9a:c6:b8:16:a6:96:15:
59:58:d7:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8RRdm9Q+BMZCvlvPGP8T9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YzVjMTI2MmU4M2Q3YmZhOTAyYzJjODYyYTE1ZjFlNDJk
MjU1OTEwHhcNMjUwNDI4MTIwMDI0WhcNMjUwNDI5MTIwMDI0WjAzMTEwLwYDVQQD
EyhhZTU3NzcwNTBkYjQ0NjhkYmI2MWQyYTQ1YmU2MTA1NzZiM2VlZTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+VawFqz/fV//NXSeg97a16rdbEW
bW3NqInIfeML1C6vPpgAszVQ16zPIyXZ64NFq1qO3cJXysktsJf4inxujnzFu3L8
9SWBw6JQE3Pkmq6EzlEv51DAfQVG2mW4vK2udBOPEtSLy8+6afLbejfKpQSZUCiu
FFdBYUMA93l32kZVz3xnfEouDAWCYch+NKbcqbBFDWpRe5SI2eIbEvq/nP/NngyW
5ZN5jqWV/XFK169r/AGvWoSXY9TneuqVBi8SQ14Q1q4bYijDtyv74nb0LH7+wzvN
x0G8icfv1tgESlbwuWhENp337gmjEXh3UYcIGiaGBWP4NKtxz4CHBoRvAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5XdwUNtEaNu2HSpFvmEFdrPu42MB8GA1UdIwQY
MBaAFEXFwSYug9e/qQLCyGKhXx5C0lWRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmNYQkppNkQxNy1wQXNMSVlxRmZIa0xTVlpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9mNjg2YjItZmYzMy00MWUxLTliMWMt
ZjEwNjAzYjM3NjhkLzEvUmNYQkppNkQxNy1wQXNMSVlxRmZIa0xTVlpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9mNjg2YjItZmYzMy00MWUxLTliMWMtZjEwNjAzYjM3Njhk
LzEvUmNYQkppNkQxNy1wQXNMSVlxRmZIa0xTVlpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjrt197V
zQuN9JkrY0shmKzV8yuFdZE89ROwYurIfWE8x+7Acde0lvWGrvNCrHvDUICSIjsL
YSXiy9pDQfp/dBQu4+zK/2Kmrbxa1S6rEzkT3JzSYU/AiZaMXt35jMiOLnGKrZG6
gBigqMBHEoHsUcDMHWm2oArDbwTEdND9yjedAA5JPrw2hHfVw++gr+kv0gATvsC2
62ebEYkjy+BwpDEOJTNoppqRe7PhTmLN/AS7Boziehkbv6wrRIogJx6PhxlImcul
ipUd6LEjl7d76gkRjrij2ZBQAarznDvxms9QMjWrueYY/djXAGfh+vQ4srQ2Ev6a
xrgWppYVWVjXxQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:49:36 2025 by rpki-client