Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
File: PN4kcMhWOUlIej54dDxUTJnsimQ.mft (raw, json)
Hash identifier: g1g6M36ZRKLko269Vu8zA4vAJjMzmet9YqFgTQFccCg=
Subject key identifier: 43:34:77:30:DB:2E:FF:BB:9F:8B:0E:39:20:B5:87:BE:7F:B7:16:0A
Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64
Certificate serial: 019684A3D038BD0BD90C21A8A4BB24FDAF51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
Manifest number: 0799
Signing time: Wed 30 Apr 2025 03:00:50 +0000
Manifest this update: Wed 30 Apr 2025 03:00:50 +0000
Manifest next update: Thu 01 May 2025 03:00:50 +0000
Files and hashes: 1: MR6yCa9ahiYB6kt7eFUEnhRZgj0.roa (hash: Q5fLGdiN5URjuSRi8W7fkSayIUiVGY1nf+0ovyfMZAw=)
2: PN4kcMhWOUlIej54dDxUTJnsimQ.crl (hash: HCjQDFZLiWAX37McKnpOJwXAuXcXgJVjmR+pKAfse/4=)
3: sFFOUDvWTzfSymlwSYpDyp4rZVo.roa (hash: hd1EPhU6XZRPUxka9ECqkCcKF9k2GizgSrw0eDBr9g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:d0:38:bd:0b:d9:0c:21:a8:a4:bb:24:fd:af:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64
Validity
Not Before: Apr 30 03:00:50 2025 GMT
Not After : May 1 03:00:50 2025 GMT
Subject: CN=43347730db2effbb9f8b0e3920b587be7fb7160a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:03:99:a9:5e:eb:ab:4d:5f:9a:6b:cc:86:a8:
90:5d:44:c2:30:83:a0:94:0d:2d:b9:55:c5:cb:7f:
78:a2:d7:1b:06:aa:15:5a:9b:28:5f:e8:ab:99:8e:
aa:b6:f0:7a:63:01:e1:32:48:da:d3:c1:27:f9:82:
cd:58:e3:4a:2e:8c:14:f8:13:6e:f9:29:dd:62:e1:
ce:97:93:39:01:0a:9e:26:02:c8:0d:ce:c2:d5:02:
aa:d5:61:f1:4d:93:22:fa:42:60:5f:c8:d6:ff:50:
0f:61:b8:a0:39:a6:10:95:d9:9a:a3:0c:8f:c0:75:
fe:5f:b7:8f:cd:88:2b:db:13:b2:9c:27:63:f9:4b:
3c:d3:94:21:59:3c:da:c9:ba:96:24:dc:67:1b:05:
65:e7:78:d3:51:20:56:b1:b0:16:80:48:8c:9a:a3:
92:35:05:a4:a3:fe:18:b5:1e:ca:32:a2:30:77:7e:
e4:44:5b:ed:5b:f3:09:ed:c3:e5:ad:9a:cd:64:e0:
b3:ac:e3:15:0c:4e:b9:bc:d4:12:52:2a:cf:b0:d7:
a3:b6:c3:73:74:3f:d3:91:c8:db:7b:05:16:fb:e4:
7e:72:05:31:be:11:53:1e:e6:df:71:bd:03:52:14:
7c:10:91:4a:68:e5:34:54:1b:07:37:9c:05:43:d9:
94:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:34:77:30:DB:2E:FF:BB:9F:8B:0E:39:20:B5:87:BE:7F:B7:16:0A
X509v3 Authority Key Identifier:
keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7c:50:a1:31:77:c0:87:60:ed:bd:a9:0c:ca:6a:4f:86:38:
31:89:93:e0:a1:0c:a5:f6:bf:c8:d0:16:f5:1b:fd:74:46:78:
f7:6e:45:8b:4d:43:39:1f:db:fb:8d:e7:ea:ff:16:3a:2f:86:
d6:bd:61:34:c4:fd:39:cf:59:b4:44:a0:c1:a1:59:6a:b1:6a:
8a:22:c0:2f:b5:c0:8e:42:a1:77:dd:8f:83:0d:8f:9c:3b:d9:
89:3e:d6:6b:6b:e4:cc:df:ad:38:51:21:e1:dc:0f:a6:2f:97:
ef:18:f3:37:eb:78:41:5e:39:6a:56:b6:dd:f5:c1:fb:9f:d6:
ac:6b:33:0b:48:da:17:50:b7:ab:b7:36:88:fd:5d:84:83:bc:
96:96:d0:76:ec:91:88:a0:99:bd:0f:83:64:8f:38:4e:11:21:
6c:2e:8c:7d:09:ae:a5:f3:c9:eb:80:c2:e0:c6:a5:d8:0d:cf:
64:c9:04:57:36:3f:4d:ca:04:a6:9a:88:a0:20:e2:7f:4c:e5:
e1:80:3b:d2:35:ce:d2:be:8d:ff:e3:53:ce:e0:91:07:82:80:
8d:88:88:9e:e4:a9:d6:b1:5e:98:63:dd:82:50:08:8c:4d:83:
4f:ab:10:6c:5d:af:9c:c3:d1:bf:8f:24:42:78:b7:16:60:ea:
bd:a8:6c:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaEo9A4vQvZDCGopLsk/a9RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZGUyNDcwYzg1NjM5NDk0ODdhM2U3ODc0M2M1NDRjOTll
YzhhNjQwHhcNMjUwNDMwMDMwMDUwWhcNMjUwNTAxMDMwMDUwWjAzMTEwLwYDVQQD
Eyg0MzM0NzczMGRiMmVmZmJiOWY4YjBlMzkyMGI1ODdiZTdmYjcxNjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywOZqV7rq01fmmvMhqiQXUTCMIOg
lA0tuVXFy394otcbBqoVWpsoX+irmY6qtvB6YwHhMkja08En+YLNWONKLowU+BNu
+SndYuHOl5M5AQqeJgLIDc7C1QKq1WHxTZMi+kJgX8jW/1APYbigOaYQldmaowyP
wHX+X7ePzYgr2xOynCdj+Us805QhWTzaybqWJNxnGwVl53jTUSBWsbAWgEiMmqOS
NQWko/4YtR7KMqIwd37kRFvtW/MJ7cPlrZrNZOCzrOMVDE65vNQSUirPsNejtsNz
dD/TkcjbewUW++R+cgUxvhFTHubfcb0DUhR8EJFKaOU0VBsHN5wFQ9mUCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEM0dzDbLv+7n4sOOSC1h75/txYKMB8GA1UdIwQY
MBaAFDzeJHDIVjlJSHo+eHQ8VEyZ7IpkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mYTc5Y2YtOGM0Yy00MDk0LWExZjUt
NDQxNzFiMmY1OTllLzEvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9mYTc5Y2YtOGM0Yy00MDk0LWExZjUtNDQxNzFiMmY1OTll
LzEvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHxQoTF3
wIdg7b2pDMpqT4Y4MYmT4KEMpfa/yNAW9Rv9dEZ4925Fi01DOR/b+43n6v8WOi+G
1r1hNMT9Oc9ZtESgwaFZarFqiiLAL7XAjkKhd92Pgw2PnDvZiT7Wa2vkzN+tOFEh
4dwPpi+X7xjzN+t4QV45ala23fXB+5/WrGszC0jaF1C3q7c2iP1dhIO8lpbQduyR
iKCZvQ+DZI84ThEhbC6MfQmupfPJ64DC4Mal2A3PZMkEVzY/TcoEppqIoCDif0zl
4YA70jXO0r6N/+NTzuCRB4KAjYiInuSp1rFemGPdglAIjE2DT6sQbF2vnMPRv48k
Qni3FmDqvahs7g==
-----END CERTIFICATE-----
Generated at Wed Apr 30 12:49:00 2025 by rpki-client