Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
File: 78NgXDK7yF0jXwqc6PRfB5a3I8s.mft (raw, json)
Hash identifier: hDnVjrB3hLAb4XnwdrRljOkdJS7AM5rz6R9sCl26QlU=
Subject key identifier: 40:1A:97:49:98:78:43:FF:9B:04:2B:A5:BB:78:07:77:2D:B2:7F:F7
Authority key identifier: EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
Certificate issuer: /CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Certificate serial: 0196857F83562AAE3E329EF043D4BCDF1FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
Manifest number: 0889
Signing time: Wed 30 Apr 2025 07:00:48 +0000
Manifest this update: Wed 30 Apr 2025 07:00:48 +0000
Manifest next update: Thu 01 May 2025 07:00:48 +0000
Files and hashes: 1: 33DDywxXELna01DvyBG6K4OCumY.roa (hash: EsYBtIHA+hqoobRdv5KvY0vtx5XM1QlHRSf1TKnaAQU=)
2: 78NgXDK7yF0jXwqc6PRfB5a3I8s.crl (hash: lrJ6dEwv/MXaw4yB8hx7Kb8HqGjsByFPssYQds4jL9M=)
3: BtJ6S27OWJSmoj7NYzTUN0_iFUM.roa (hash: WITF2/BxKRtye2S81kXXKd8taTnYKpq4xKx/Xf8lw7Q=)
4: nO178ZXZFGT-qdK_Xds7cj8ID2A.roa (hash: R+EUO1OAijizTswHRqjO5HgUg8gwhN35ZvzlFNDGCnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:83:56:2a:ae:3e:32:9e:f0:43:d4:bc:df:1f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Validity
Not Before: Apr 30 07:00:48 2025 GMT
Not After : May 1 07:00:48 2025 GMT
Subject: CN=401a9749987843ff9b042ba5bb7807772db27ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:c9:28:7c:06:37:88:51:a8:e6:c7:c7:ff:
fe:80:82:00:b0:83:18:6d:b3:18:61:51:e2:13:bd:
27:26:c0:a6:24:b5:40:5c:e2:41:5a:f0:e7:62:73:
fd:ed:a3:48:83:34:d2:e9:eb:b1:aa:c6:a2:b4:c2:
6a:51:1e:cb:36:bf:dd:9d:97:b8:5a:11:85:12:e9:
e6:07:9d:ea:66:31:2e:50:9d:68:92:c7:df:56:a9:
e4:94:78:18:e2:64:d9:9b:1f:a3:88:99:b2:9f:5f:
6b:aa:c6:cd:e8:25:49:22:ab:1a:e9:b6:d9:ad:30:
be:f5:c9:e9:76:9f:18:f9:dc:0e:d4:b1:60:34:d3:
05:f0:a5:32:99:ee:25:ab:5a:41:86:cd:52:82:4e:
95:b8:b4:27:d0:3e:bc:70:a8:47:f1:61:58:d6:5e:
b6:d4:1f:43:1a:b2:3c:78:a6:2f:81:fc:d9:1a:c3:
ec:a2:08:e4:6f:81:11:90:d2:71:4a:58:6a:f7:ad:
44:6e:21:35:a3:8d:67:89:d6:7b:d6:2e:14:22:2d:
d9:f6:90:fd:1b:dc:5b:84:72:62:fa:b8:49:50:71:
3e:53:28:41:db:e9:14:8e:c6:d7:e6:cd:34:7e:7f:
68:7b:e6:08:b0:be:51:fe:ee:df:83:7b:5f:14:6d:
da:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1A:97:49:98:78:43:FF:9B:04:2B:A5:BB:78:07:77:2D:B2:7F:F7
X509v3 Authority Key Identifier:
keyid:EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:df:44:75:4e:f5:9c:cf:13:d4:ac:f9:64:32:c9:5d:81:ce:
6c:af:3e:3e:bb:84:be:af:70:e2:49:93:66:8c:65:c7:d7:e3:
f5:4e:cd:ec:a9:86:79:7b:1c:49:7d:0b:05:cf:75:fd:c9:e4:
ef:e8:7f:5c:1c:0a:48:00:c4:5d:fc:37:1f:f3:e3:1f:a4:27:
22:27:26:1a:8a:89:21:dd:43:4c:2e:fe:75:d0:5d:1d:7d:80:
9d:1f:cb:32:9d:75:2b:2c:13:8b:12:7d:2e:0a:5c:45:5d:bf:
de:09:fc:ae:1c:90:a5:df:51:73:61:8a:d5:63:ce:66:25:a0:
fa:b5:fc:e7:5e:85:6b:84:98:d0:20:ed:84:ca:12:81:2a:2a:
aa:bb:c9:99:fa:35:f2:06:04:a7:99:a6:0d:40:c5:84:25:ef:
19:84:a3:7e:16:42:94:f1:1f:f9:b2:9a:24:ec:9c:ce:a4:ea:
d7:31:0a:f5:fb:75:08:fa:19:61:2d:ba:e3:41:13:5e:1f:8d:
8a:da:e4:6a:a4:9c:f8:a0:61:85:b1:f4:13:a1:cc:a5:60:10:
42:3c:8b:69:46:f8:b5:1e:2f:cc:d3:e9:f7:2b:17:c0:9a:5c:
aa:e3:d5:a5:bf:61:7d:7a:6d:17:2f:3d:ca:d5:7c:21:19:1f:
52:18:5d:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFf4NWKq4+Mp7wQ9S83x+nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYzM2MDVjMzJiYmM4NWQyMzVmMGE5Y2U4ZjQ1ZjA3OTZi
NzIzY2IwHhcNMjUwNDMwMDcwMDQ4WhcNMjUwNTAxMDcwMDQ4WjAzMTEwLwYDVQQD
Eyg0MDFhOTc0OTk4Nzg0M2ZmOWIwNDJiYTViYjc4MDc3NzJkYjI3ZmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8bJKHwGN4hRqObHx//+gIIAsIMY
bbMYYVHiE70nJsCmJLVAXOJBWvDnYnP97aNIgzTS6euxqsaitMJqUR7LNr/dnZe4
WhGFEunmB53qZjEuUJ1oksffVqnklHgY4mTZmx+jiJmyn19rqsbN6CVJIqsa6bbZ
rTC+9cnpdp8Y+dwO1LFgNNMF8KUyme4lq1pBhs1Sgk6VuLQn0D68cKhH8WFY1l62
1B9DGrI8eKYvgfzZGsPsogjkb4ERkNJxSlhq961EbiE1o41nidZ71i4UIi3Z9pD9
G9xbhHJi+rhJUHE+UyhB2+kUjsbX5s00fn9oe+YIsL5R/u7fg3tfFG3aHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAal0mYeEP/mwQrpbt4B3ctsn/3MB8GA1UdIwQY
MBaAFO/DYFwyu8hdI18KnOj0XweWtyPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzhOZ1hESzd5RjBqWHdxYzZQUmZCNWEzSThzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9lNjIxNjktNDg2ZC00MDU0LWIxMjEt
ZjJjOGJhMDIxY2E4LzEvNzhOZ1hESzd5RjBqWHdxYzZQUmZCNWEzSThzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9lNjIxNjktNDg2ZC00MDU0LWIxMjEtZjJjOGJhMDIxY2E4
LzEvNzhOZ1hESzd5RjBqWHdxYzZQUmZCNWEzSThzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu99EdU71
nM8T1Kz5ZDLJXYHObK8+PruEvq9w4kmTZoxlx9fj9U7N7KmGeXscSX0LBc91/cnk
7+h/XBwKSADEXfw3H/PjH6QnIicmGoqJId1DTC7+ddBdHX2AnR/LMp11KywTixJ9
LgpcRV2/3gn8rhyQpd9Rc2GK1WPOZiWg+rX8516Fa4SY0CDthMoSgSoqqrvJmfo1
8gYEp5mmDUDFhCXvGYSjfhZClPEf+bKaJOyczqTq1zEK9ft1CPoZYS2640ETXh+N
itrkaqSc+KBhhbH0E6HMpWAQQjyLaUb4tR4vzNPp9ysXwJpcquPVpb9hfXptFy89
ytV8IRkfUhhdZQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 09:36:10 2025 by rpki-client