Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
File: pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft (raw, json)
Hash identifier: +i7R4Ijsgovmp2QPO0eDI88lSga02xvUdJfBo47APu0=
Subject key identifier: 47:39:13:DA:65:00:DC:D6:68:B7:54:BE:F3:D2:23:0F:24:48:7B:3B
Authority key identifier: A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
Certificate issuer: /CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Certificate serial: 019676B0CAF4462E9B6ECD246B6961C2F382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
Manifest number: 14A3
Signing time: Sun 27 Apr 2025 10:00:19 +0000
Manifest this update: Sun 27 Apr 2025 10:00:19 +0000
Manifest next update: Mon 28 Apr 2025 10:00:19 +0000
Files and hashes: 1: LnuT6eEdb88-TghvQ_FZnRefVyk.roa (hash: XQk1e8dAGrgYT1azOGp5hpmR57maWf6UhLO79IbQj1k=)
2: pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl (hash: 1oRBG+DG3RW5XhhlyjpBR0ea1dR+omeY0G1PCLq3qIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:ca:f4:46:2e:9b:6e:cd:24:6b:69:61:c2:f3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Validity
Not Before: Apr 27 10:00:19 2025 GMT
Not After : Apr 28 10:00:19 2025 GMT
Subject: CN=473913da6500dcd668b754bef3d2230f24487b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:aa:90:13:22:c7:05:9a:2a:67:e9:0a:22:c0:
79:f2:dc:81:7c:5a:85:52:ac:fb:33:ee:06:38:31:
2a:91:46:fe:73:42:c5:12:30:9e:d8:08:04:8a:f2:
50:02:21:98:f3:74:c9:11:35:2c:3c:af:fd:5b:49:
24:54:3f:26:fb:92:28:56:0c:bf:95:0e:f8:d5:f6:
e2:97:aa:1d:d2:fa:33:15:f8:dc:9f:cd:3d:48:61:
10:02:b3:54:e9:4c:eb:25:b5:22:53:bb:53:61:e9:
68:6d:20:c3:cd:33:5e:ab:eb:82:28:0b:d9:6b:ae:
3b:79:6d:07:7e:33:5f:93:55:95:6a:47:ac:cb:14:
c1:91:78:ae:33:69:e2:06:54:95:20:49:ee:26:ec:
6b:55:d0:02:a8:4e:52:b6:3f:a3:1e:dd:f6:b5:c8:
21:fd:50:84:11:36:65:6c:03:46:05:fb:7b:90:b9:
6e:c3:41:57:52:b6:5a:05:ed:1f:8e:26:5d:4b:27:
6b:61:09:9a:04:ad:e7:1f:22:44:a5:10:d7:c5:cf:
5c:9c:57:da:92:eb:0b:f0:70:24:e5:91:ed:f7:13:
c7:b5:dd:1f:ec:18:a5:52:3e:c1:94:59:ee:f2:f3:
8b:bc:9e:14:3f:8d:f1:d1:f3:91:39:c1:11:b9:62:
f5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:39:13:DA:65:00:DC:D6:68:B7:54:BE:F3:D2:23:0F:24:48:7B:3B
X509v3 Authority Key Identifier:
keyid:A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a9:0e:22:2d:43:24:4e:90:50:09:c5:17:8d:55:b3:c5:45:
cd:5d:14:00:55:b8:e7:90:d7:5f:b2:bc:47:ea:08:e1:90:76:
fc:1b:5f:ba:1b:b4:88:5e:b7:7a:ce:17:c2:af:3e:2c:ff:e5:
5e:e1:93:eb:29:a9:19:7c:c2:38:1a:27:12:62:28:af:95:e2:
df:54:85:30:ba:f5:ba:71:6a:27:82:bf:8d:c3:23:ac:82:12:
43:b1:08:59:56:e5:10:51:53:37:bf:e8:96:e5:2a:69:57:8f:
a7:b0:74:ac:b1:ff:d6:bb:6f:a6:d1:c5:c1:3d:6f:8d:69:56:
e2:5d:8f:e3:0c:fd:ac:f1:0e:24:c5:78:be:6f:6a:b6:db:fd:
17:8c:ea:b8:1a:0a:18:c2:09:21:af:a4:38:fd:ad:b0:8f:64:
52:2d:bf:6c:a0:5b:b8:74:69:46:54:6e:55:55:67:6c:4b:ce:
5f:17:7f:d8:f2:45:16:53:0d:b5:6c:ad:32:82:a3:55:1f:ab:
bb:29:53:c2:60:81:02:1c:7a:68:74:7f:fb:40:d3:91:f5:1b:
43:70:9b:09:99:15:96:ef:a4:6a:ac:3d:bc:ad:22:47:a9:98:
64:e6:b0:2c:1d:ca:11:8b:9b:ed:9d:b8:82:75:7a:14:e5:a8:
7a:1a:b7:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2sMr0Ri6bbs0ka2lhwvOCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NDBiODVmMGY3YmE2Mzg1Y2Q0ZmVlOGEwZWMwNGU4MTg0
MTU0MmMwHhcNMjUwNDI3MTAwMDE5WhcNMjUwNDI4MTAwMDE5WjAzMTEwLwYDVQQD
Eyg0NzM5MTNkYTY1MDBkY2Q2NjhiNzU0YmVmM2QyMjMwZjI0NDg3YjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqqQEyLHBZoqZ+kKIsB58tyBfFqF
Uqz7M+4GODEqkUb+c0LFEjCe2AgEivJQAiGY83TJETUsPK/9W0kkVD8m+5IoVgy/
lQ741fbil6od0vozFfjcn809SGEQArNU6UzrJbUiU7tTYelobSDDzTNeq+uCKAvZ
a647eW0HfjNfk1WVakesyxTBkXiuM2niBlSVIEnuJuxrVdACqE5Stj+jHt32tcgh
/VCEETZlbANGBft7kLluw0FXUrZaBe0fjiZdSydrYQmaBK3nHyJEpRDXxc9cnFfa
kusL8HAk5ZHt9xPHtd0f7BilUj7BlFnu8vOLvJ4UP43x0fOROcERuWL1FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEc5E9plANzWaLdUvvPSIw8kSHs7MB8GA1UdIwQY
MBaAFKRAuF8Pe6Y4XNT+6KDsBOgYQVQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8yMWVjMGYtYTFlYy00YWQ0LWE3NDkt
ZGRjZmUzNmY0MzNiLzEvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8yMWVjMGYtYTFlYy00YWQ0LWE3NDktZGRjZmUzNmY0MzNi
LzEvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKkOIi1D
JE6QUAnFF41Vs8VFzV0UAFW455DXX7K8R+oI4ZB2/Btfuhu0iF63es4Xwq8+LP/l
XuGT6ympGXzCOBonEmIor5Xi31SFMLr1unFqJ4K/jcMjrIISQ7EIWVblEFFTN7/o
luUqaVePp7B0rLH/1rtvptHFwT1vjWlW4l2P4wz9rPEOJMV4vm9qttv9F4zquBoK
GMIJIa+kOP2tsI9kUi2/bKBbuHRpRlRuVVVnbEvOXxd/2PJFFlMNtWytMoKjVR+r
uylTwmCBAhx6aHR/+0DTkfUbQ3CbCZkVlu+kaqw9vK0iR6mYZOawLB3KEYub7Z24
gnV6FOWoehq3XQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:43:48 2025 by rpki-client