Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
File: 29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json)
Hash identifier: mVV2ggTMwMxXgpU+wLebPJujWb33/IXAAw5YGJM4DKQ=
Subject key identifier: DE:AE:9F:85:91:8A:97:E7:75:54:FD:DE:ED:4B:0C:9D:04:92:AF:A8
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial: 0196715388C769F9838273B9ACD9AD0E3B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
Manifest number: 1511
Signing time: Sat 26 Apr 2025 09:00:22 +0000
Manifest this update: Sat 26 Apr 2025 09:00:22 +0000
Manifest next update: Sun 27 Apr 2025 09:00:22 +0000
Files and hashes: 1: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: Zk0rDS3+vjTRCB7C+cH8XAtBA92KAoNTziXumJseSBc=)
2: 9jFcc2sIX-Fs3ktxs-58gEPmasY.roa (hash: HePH1DofBb+MqG0ob+GiLGVr062e3DxtUkrb0KPep7A=)
3: H91ljrtEOQ88LobyOBXsYKfsM_I.roa (hash: OrACEmPH7XE22MmlMeWAN/5nVKUIlnVGt10JM2JOUl8=)
4: fcd14E2UvKzJ6kaKcrYKQVlljT8.roa (hash: KoJteDfILqkEJ6UJs3cPi3xqWQVLa33IGp0XJE/3JLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:53:88:c7:69:f9:83:82:73:b9:ac:d9:ad:0e:3b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Validity
Not Before: Apr 26 09:00:22 2025 GMT
Not After : Apr 27 09:00:22 2025 GMT
Subject: CN=deae9f85918a97e77554fddeed4b0c9d0492afa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:d2:cc:ba:5b:ef:aa:52:94:b4:35:3c:ec:
c1:3e:d5:52:a9:7f:5e:77:39:83:10:75:a5:0e:80:
1c:46:a7:6c:32:5e:72:dd:e9:59:14:c8:65:b0:70:
1a:51:63:b5:0d:dd:3a:02:85:5c:93:9a:10:c9:da:
22:e0:6d:55:fc:6b:78:51:1d:85:66:35:38:36:ec:
96:04:56:0b:35:ac:49:18:4e:0e:05:c8:88:8d:11:
4d:d5:cb:29:70:ec:e3:5a:c0:4b:73:0b:98:d5:2d:
07:c6:0f:d2:02:a4:68:02:1c:19:3d:87:e7:b7:e8:
15:9e:ba:75:45:a9:b3:ca:21:2f:5a:e8:7e:52:e4:
53:64:72:bb:01:35:f6:23:ef:ef:c1:78:4b:e7:eb:
06:e4:b0:cb:df:b4:84:22:02:85:04:ad:76:02:d5:
69:65:66:ef:0e:4a:56:1f:17:e7:25:ea:e5:24:7b:
71:ca:3f:85:81:f9:e6:9f:c0:79:a3:1b:e6:56:08:
d5:d8:53:e8:56:c6:6b:4f:05:b7:bf:fd:e3:0b:ee:
62:fd:90:e5:0a:d8:9b:da:5e:ad:08:74:49:d0:80:
c3:83:71:49:7b:1f:67:ed:61:b4:ca:9e:54:19:f1:
d6:6a:ef:5c:ea:88:7a:00:6a:df:97:10:a2:90:c2:
ef:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AE:9F:85:91:8A:97:E7:75:54:FD:DE:ED:4B:0C:9D:04:92:AF:A8
X509v3 Authority Key Identifier:
keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:04:89:12:ba:6b:40:84:88:ba:c1:ee:68:2c:b6:7d:be:6f:
8c:fb:9c:72:62:82:51:49:85:78:bf:e5:6c:20:60:af:67:83:
f1:ec:34:f1:bc:21:86:7b:f5:75:bc:bf:44:f7:3a:e5:8c:33:
b0:dd:02:ac:64:35:93:ec:fc:c0:f9:1c:fa:e2:4e:db:a7:cb:
5c:95:0c:e3:d8:9a:12:70:4f:1d:d9:f3:e7:bb:2f:aa:66:b1:
0f:2b:ea:fd:d1:2c:5d:db:ba:59:da:29:82:38:73:18:d1:f7:
f3:f0:b1:c5:3b:fb:c7:98:1e:cb:d6:83:8e:59:c8:12:07:7b:
bc:30:91:56:c3:ea:d1:94:6b:15:a7:29:16:43:f7:46:20:5f:
98:61:e7:9e:ac:66:bd:0a:2d:42:72:b5:75:83:a2:bb:b1:4a:
6d:4a:bb:af:0c:f2:d2:71:bb:03:59:c0:49:de:29:10:b7:24:
af:74:d0:d8:1b:f4:a3:d8:22:da:74:27:7b:c0:85:37:9f:da:
b8:d7:ae:82:3a:47:fc:b7:6b:8e:1f:ce:b9:be:78:b5:1c:b8:
49:01:d7:d9:07:d7:39:08:c8:a6:04:35:a2:83:a6:37:99:e4:
69:d0:be:8e:a8:98:d7:90:92:b9:31:db:a5:10:a0:02:37:00:
b9:fb:1f:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZxU4jHafmDgnO5rNmtDjuEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZDdmYzUwNTQ4Mjg3ZGVhZWE3Y2U5MjA5OWU0N2EwNGE3
MGQ0NTEwHhcNMjUwNDI2MDkwMDIyWhcNMjUwNDI3MDkwMDIyWjAzMTEwLwYDVQQD
EyhkZWFlOWY4NTkxOGE5N2U3NzU1NGZkZGVlZDRiMGM5ZDA0OTJhZmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugbSzLpb76pSlLQ1POzBPtVSqX9e
dzmDEHWlDoAcRqdsMl5y3elZFMhlsHAaUWO1Dd06AoVck5oQydoi4G1V/Gt4UR2F
ZjU4NuyWBFYLNaxJGE4OBciIjRFN1cspcOzjWsBLcwuY1S0Hxg/SAqRoAhwZPYfn
t+gVnrp1RamzyiEvWuh+UuRTZHK7ATX2I+/vwXhL5+sG5LDL37SEIgKFBK12AtVp
ZWbvDkpWHxfnJerlJHtxyj+Fgfnmn8B5oxvmVgjV2FPoVsZrTwW3v/3jC+5i/ZDl
Ctib2l6tCHRJ0IDDg3FJex9n7WG0yp5UGfHWau9c6oh6AGrflxCikMLvrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6un4WRipfndVT93u1LDJ0Ekq+oMB8GA1UdIwQY
MBaAFNvX/FBUgoferqfOkgmeR6BKcNRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjlmOFVGU0NoOTZ1cDg2U0NaNUhvRXB3MUZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82MDZlYTktNDgzNC00YjYzLTllMGEt
ZjI1NjA0YzRiZTgyLzEvMjlmOFVGU0NoOTZ1cDg2U0NaNUhvRXB3MUZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS82MDZlYTktNDgzNC00YjYzLTllMGEtZjI1NjA0YzRiZTgy
LzEvMjlmOFVGU0NoOTZ1cDg2U0NaNUhvRXB3MUZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQSJErpr
QISIusHuaCy2fb5vjPuccmKCUUmFeL/lbCBgr2eD8ew08bwhhnv1dby/RPc65Ywz
sN0CrGQ1k+z8wPkc+uJO26fLXJUM49iaEnBPHdnz57svqmaxDyvq/dEsXdu6Wdop
gjhzGNH38/CxxTv7x5gey9aDjlnIEgd7vDCRVsPq0ZRrFacpFkP3RiBfmGHnnqxm
vQotQnK1dYOiu7FKbUq7rwzy0nG7A1nASd4pELckr3TQ2Bv0o9gi2nQne8CFN5/a
uNeugjpH/Ldrjh/Oub54tRy4SQHX2QfXOQjIpgQ1ooOmN5nkadC+jqiY15CSuTHb
pRCgAjcAufsf4Q==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:11:18 2025 by rpki-client