Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft
File: w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft (raw, json)
Hash identifier: fYDK4Bd0P7j6klT7RYGrAzojdgUxhqldDSd4RVqPb0s=
Subject key identifier: 2C:67:E5:AD:EC:97:84:E8:06:02:57:27:E5:81:07:21:B3:C9:38:DA
Authority key identifier: C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
Certificate issuer: /CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Certificate serial: 01967D57F7F5991AEF9C9B006FA8F698AF38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft
Manifest number: 07C5
Signing time: Mon 28 Apr 2025 17:00:39 +0000
Manifest this update: Mon 28 Apr 2025 17:00:39 +0000
Manifest next update: Tue 29 Apr 2025 17:00:39 +0000
Files and hashes: 1: 51OLTqaBTBByy9gOLIgNu920H_0.roa (hash: f+5TLveLESfMgvIovIhrV24hB2qzaX+2AMAYZWFWLxU=)
2: A_80I8l-ocpCY06eF37LKFTYtjc.roa (hash: +AOaCtSgkr8g5uGaIXewy8J0yDJiPD9RKEE+8bkd4mM=)
3: YwgsZ3h3nxuVcF4obS67Yf-OPdY.roa (hash: vY9JibP4vAmSnxyLLJ2Y9k7+pockWEXGTncYKQRaeHM=)
4: w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl (hash: vPGO8tTVKYh07N9WXbwfWe0NJpDLwKZ2dydJ+BLqiak=)
5: ymt9m8t916HfzE2dDMrSbVzjGNQ.roa (hash: RKU18Ug3MIC4PR8xDDXo0qG3ZhoSZmVX9c0pIDSEpi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:57:f7:f5:99:1a:ef:9c:9b:00:6f:a8:f6:98:af:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Validity
Not Before: Apr 28 17:00:39 2025 GMT
Not After : Apr 29 17:00:39 2025 GMT
Subject: CN=2c67e5adec9784e806025727e5810721b3c938da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:d5:3e:db:a5:8a:b6:76:1e:72:f6:37:f1:
47:2b:e8:fe:27:dd:99:15:71:c5:80:7f:62:1e:9f:
bf:fd:d6:20:68:a6:e9:49:29:57:a2:c8:5e:44:40:
c1:50:aa:df:09:b7:fd:58:b7:59:45:05:e6:e1:36:
7b:fb:f3:8a:4b:ed:d3:5f:90:a1:41:b3:5e:fb:a8:
ae:1d:44:31:92:6f:15:18:de:77:b5:00:11:62:ec:
df:19:44:78:7e:ab:89:d0:b1:54:cb:e7:c4:ee:ce:
59:4e:46:40:f3:92:e4:93:3e:d0:fb:77:e1:66:30:
1a:25:25:88:be:94:73:37:16:0a:c6:45:a8:a3:45:
78:18:d5:cb:39:77:6a:2d:b9:c4:81:13:b3:98:4c:
b0:ae:44:45:54:63:13:51:8d:a8:03:83:82:c8:94:
96:59:fb:68:af:b7:31:66:ea:81:6f:f6:2c:22:17:
62:03:0f:57:46:ca:0d:81:bb:67:07:32:59:bf:69:
7c:69:58:84:d3:90:1e:9b:9b:3e:ef:1f:53:f9:ad:
eb:77:84:6e:b0:74:9f:11:52:4f:53:2a:91:33:c6:
54:df:e4:2d:d3:05:ef:ef:a7:b9:58:c9:c4:d1:17:
c9:8d:23:9c:ac:8e:69:df:0e:af:5e:0a:fb:19:e9:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:67:E5:AD:EC:97:84:E8:06:02:57:27:E5:81:07:21:B3:C9:38:DA
X509v3 Authority Key Identifier:
keyid:C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:fe:18:d9:39:b0:26:92:87:25:4f:6c:b1:a5:31:3c:9f:f1:
80:3a:30:a1:e6:8c:1c:5c:e1:74:cf:36:59:cb:0a:68:dc:4e:
b7:b6:40:ed:75:fc:7c:3b:2e:f2:ad:2c:a2:3e:9c:1d:4f:50:
7f:a0:ac:8f:42:f4:db:5a:79:df:3d:1c:95:17:ae:b5:b6:23:
2e:d6:f0:4c:2b:97:10:c3:e6:6b:96:9c:ce:a3:26:16:96:0b:
32:9a:ed:e5:34:c0:27:1e:1e:77:19:50:f1:0c:d7:00:04:7e:
83:97:e7:7a:2f:c8:8a:d1:fb:c8:cb:50:74:32:9e:c8:8f:6b:
2c:2f:a2:f6:bf:7d:00:3f:bd:83:10:b1:16:29:b2:bc:99:0f:
cb:f3:5a:48:63:16:d9:fa:bd:92:eb:8b:b8:2c:97:6b:cb:eb:
dc:50:fa:24:42:ce:02:3c:92:b7:39:01:72:10:b3:92:5d:3c:
ce:ff:2c:ba:1a:1d:e2:b4:8d:03:6a:76:17:fa:2d:89:bd:4d:
8f:3b:e1:78:47:0e:46:be:ae:0a:c5:37:ef:14:16:1e:66:eb:
7d:5c:d6:8a:ab:38:a5:35:c7:92:f1:42:21:c5:27:67:33:3c:
02:2f:ce:52:cd:43:3c:43:d8:6c:93:5d:ff:ea:5d:d0:90:9a:
bf:2f:69:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9V/f1mRrvnJsAb6j2mK84MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNzNmYWU5OWQ2NTEyOTg4NDVkMjJmODlkOGQyYjJlMWQx
M2JjMDQwHhcNMjUwNDI4MTcwMDM5WhcNMjUwNDI5MTcwMDM5WjAzMTEwLwYDVQQD
EygyYzY3ZTVhZGVjOTc4NGU4MDYwMjU3MjdlNTgxMDcyMWIzYzkzOGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUDVPtulirZ2HnL2N/FHK+j+J92Z
FXHFgH9iHp+//dYgaKbpSSlXosheREDBUKrfCbf9WLdZRQXm4TZ7+/OKS+3TX5Ch
QbNe+6iuHUQxkm8VGN53tQARYuzfGUR4fquJ0LFUy+fE7s5ZTkZA85Lkkz7Q+3fh
ZjAaJSWIvpRzNxYKxkWoo0V4GNXLOXdqLbnEgROzmEywrkRFVGMTUY2oA4OCyJSW
Wftor7cxZuqBb/YsIhdiAw9XRsoNgbtnBzJZv2l8aViE05Aem5s+7x9T+a3rd4Ru
sHSfEVJPUyqRM8ZU3+Qt0wXv76e5WMnE0RfJjSOcrI5p3w6vXgr7GenulwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxn5a3sl4ToBgJXJ+WBByGzyTjaMB8GA1UdIwQY
MBaAFMNz+umdZRKYhF0i+J2NKy4dE7wEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNQNjZaMWxFcGlFWFNMNG5ZMHJMaDBUdkFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84Y2U3OTUtM2ZhOS00Y2I3LTgzMWEt
MWRlNTZlNDc1ZmJmLzEvdzNQNjZaMWxFcGlFWFNMNG5ZMHJMaDBUdkFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC84Y2U3OTUtM2ZhOS00Y2I3LTgzMWEtMWRlNTZlNDc1ZmJm
LzEvdzNQNjZaMWxFcGlFWFNMNG5ZMHJMaDBUdkFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaf4Y2Tmw
JpKHJU9ssaUxPJ/xgDowoeaMHFzhdM82WcsKaNxOt7ZA7XX8fDsu8q0soj6cHU9Q
f6Csj0L021p53z0clReutbYjLtbwTCuXEMPma5aczqMmFpYLMprt5TTAJx4edxlQ
8QzXAAR+g5fnei/IitH7yMtQdDKeyI9rLC+i9r99AD+9gxCxFimyvJkPy/NaSGMW
2fq9kuuLuCyXa8vr3FD6JELOAjyStzkBchCzkl08zv8suhod4rSNA2p2F/otib1N
jzvheEcORr6uCsU37xQWHmbrfVzWiqs4pTXHkvFCIcUnZzM8Ai/OUs1DPEPYbJNd
/+pd0JCavy9pnA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:35:01 2025 by rpki-client