Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
File: cK01PMGg0W1ejhSjdXWm89YFY_g.mft (raw, json)
Hash identifier: xqUo43KvpWx0+0xmZe5BIOJYAkgga61gAsl44W7dxWU=
Subject key identifier: 38:70:DA:8B:3A:5D:C2:C3:E8:97:F4:92:B5:E6:B2:F0:84:82:27:93
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Certificate issuer: /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial: 01967D20F08DE14D97B465F74E9166A515C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 16:00:32 +0000
Manifest this update: Mon 28 Apr 2025 16:00:32 +0000
Manifest next update: Tue 29 Apr 2025 16:00:32 +0000
Files and hashes: 1: 5O-Lg4XDVCjsXNfMtLLsnISMRVo.roa (hash: VmXDM+lE33fYX4GAlA3VUKdsqtXyObkMk9hssfXkX7Q=)
2: CY-tvdBWBt7wOg3GB0icUZ8MPCA.roa (hash: Ejbz7aRM11I5vJNNpK3p8qUEl2ngpQB+ME89yYTVcX4=)
3: cK01PMGg0W1ejhSjdXWm89YFY_g.crl (hash: 8q8mVMPOIwNiheKYJ9vBtsLBqcnSCLhEn+W2Xdqov+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:20:f0:8d:e1:4d:97:b4:65:f7:4e:91:66:a5:15:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Validity
Not Before: Apr 28 16:00:32 2025 GMT
Not After : Apr 29 16:00:32 2025 GMT
Subject: CN=3870da8b3a5dc2c3e897f492b5e6b2f084822793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a9:a4:0c:f2:fd:da:58:63:8f:5a:af:0b:25:
3e:92:af:3a:c0:74:6a:91:da:ef:d3:66:61:86:10:
fe:c2:df:61:3d:4d:12:a9:7b:41:9f:ca:a2:4c:ec:
cd:30:03:cd:02:4b:1a:65:c3:48:88:77:06:e8:b0:
de:a5:ab:39:f5:42:21:f2:a7:3f:b9:b2:0e:38:b1:
50:92:7a:23:66:14:db:08:a4:13:6b:56:4a:e3:e5:
84:0d:e2:b4:6c:de:15:4e:57:c5:e5:70:31:f2:d2:
2d:7e:ce:0d:c7:ad:04:ec:6c:d8:07:18:dd:94:cf:
74:2c:bf:42:9f:4a:3f:d8:ae:ec:5c:26:ed:14:c6:
b7:55:85:61:b1:eb:33:b9:60:d5:3f:33:f6:b7:7c:
0e:7e:26:a1:53:0f:0d:a2:2c:ca:3f:df:75:52:67:
bf:a0:dc:60:0c:83:19:c0:0e:7e:11:ff:e8:8d:c8:
fd:ef:aa:37:89:44:e1:e5:e6:48:bd:d9:33:3d:f6:
15:b9:cd:62:59:35:d4:64:5c:4a:05:2a:95:99:c1:
55:39:fb:56:8d:dd:8a:41:9a:50:72:0c:ff:79:31:
ec:f9:8d:73:fc:f7:29:dd:20:3c:b1:6a:8e:33:53:
ff:1e:00:64:a6:90:44:05:28:8f:72:63:f9:3c:e9:
6e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:70:DA:8B:3A:5D:C2:C3:E8:97:F4:92:B5:E6:B2:F0:84:82:27:93
X509v3 Authority Key Identifier:
keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:c4:60:33:b0:53:8b:a1:94:a3:36:88:70:ff:d6:3f:c2:cd:
e8:14:9b:dd:cf:81:e4:d5:fe:0c:fc:09:04:83:3b:4d:96:a6:
04:12:b5:9d:69:bd:16:db:49:2a:bb:83:98:d1:d6:03:43:48:
a5:15:46:67:c3:ed:01:fc:65:1e:c4:17:70:e7:8e:ac:b9:24:
24:08:95:fd:08:aa:81:d6:6c:0b:9d:be:aa:5f:3b:6d:c1:8b:
61:57:a8:75:e1:64:f9:d8:93:8e:96:ce:9c:a4:fe:4f:9f:83:
9b:e7:67:65:8c:69:80:f0:76:99:87:9a:c0:43:fb:ff:6a:08:
69:9d:fa:2b:39:eb:04:1f:eb:c2:ae:14:bd:3a:2f:9d:0f:19:
d0:f0:e9:49:83:c2:e3:24:a4:2c:ff:d3:70:1f:a2:99:62:d4:
c0:05:98:ac:d0:dd:ac:02:3d:57:52:ae:87:93:6c:1c:b2:4d:
b3:6f:6f:62:79:47:b2:c6:93:3f:18:08:ab:02:be:0e:f1:df:
4f:ee:63:e6:8f:56:0a:05:72:c5:89:fa:ed:90:b7:c4:da:b9:
35:64:c1:3b:77:9e:e3:6f:bc:b5:50:b2:e3:72:a9:9a:be:ad:
29:2a:e8:c7:cd:ff:07:c6:a2:43:27:b2:67:d8:43:3c:63:54:
2b:89:a2:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9IPCN4U2XtGX3TpFmpRXEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYWQzNTNjYzFhMGQxNmQ1ZThlMTRhMzc1NzVhNmYzZDYw
NTYzZjgwHhcNMjUwNDI4MTYwMDMyWhcNMjUwNDI5MTYwMDMyWjAzMTEwLwYDVQQD
EygzODcwZGE4YjNhNWRjMmMzZTg5N2Y0OTJiNWU2YjJmMDg0ODIyNzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KmkDPL92lhjj1qvCyU+kq86wHRq
kdrv02ZhhhD+wt9hPU0SqXtBn8qiTOzNMAPNAksaZcNIiHcG6LDepas59UIh8qc/
ubIOOLFQknojZhTbCKQTa1ZK4+WEDeK0bN4VTlfF5XAx8tItfs4Nx60E7GzYBxjd
lM90LL9Cn0o/2K7sXCbtFMa3VYVhseszuWDVPzP2t3wOfiahUw8NoizKP991Ume/
oNxgDIMZwA5+Ef/ojcj976o3iUTh5eZIvdkzPfYVuc1iWTXUZFxKBSqVmcFVOftW
jd2KQZpQcgz/eTHs+Y1z/Pcp3SA8sWqOM1P/HgBkppBEBSiPcmP5POluawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhw2os6XcLD6Jf0krXmsvCEgieTMB8GA1UdIwQY
MBaAFHCtNTzBoNFtXo4Uo3V1pvPWBWP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMjZkOWMtZDg1MS00YTY5LTk1Zjkt
MTUwNGVhNTNlMjU1LzEvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMjZkOWMtZDg1MS00YTY5LTk1ZjktMTUwNGVhNTNlMjU1
LzEvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvMRgM7BT
i6GUozaIcP/WP8LN6BSb3c+B5NX+DPwJBIM7TZamBBK1nWm9FttJKruDmNHWA0NI
pRVGZ8PtAfxlHsQXcOeOrLkkJAiV/QiqgdZsC52+ql87bcGLYVeodeFk+diTjpbO
nKT+T5+Dm+dnZYxpgPB2mYeawEP7/2oIaZ36KznrBB/rwq4UvTovnQ8Z0PDpSYPC
4ySkLP/TcB+imWLUwAWYrNDdrAI9V1Kuh5NsHLJNs29vYnlHssaTPxgIqwK+DvHf
T+5j5o9WCgVyxYn67ZC3xNq5NWTBO3ee42+8tVCy43Kpmr6tKSrox83/B8aiQyey
Z9hDPGNUK4mi5w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:21:12 2025 by rpki-client