Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
File: pPhiddwhxh2gzs0Sfpd0zKoysLs.mft (raw, json)
Hash identifier: +zIpznc4/ffpC0QJ1DECs5nsrbw7slX2PcOZ2xmajhM=
Subject key identifier: B1:1F:E2:DD:DA:A1:0C:04:37:CF:34:64:FA:E6:7F:39:90:F3:5A:41
Authority key identifier: A4:F8:62:75:DC:21:C6:1D:A0:CE:CD:12:7E:97:74:CC:AA:32:B0:BB
Certificate issuer: /CN=a4f86275dc21c61da0cecd127e9774ccaa32b0bb
Certificate serial: 0196914C3A43CEC05D997692AB9B1DB697B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
Manifest number: 151E
Signing time: Fri 02 May 2025 14:00:13 +0000
Manifest this update: Fri 02 May 2025 14:00:13 +0000
Manifest next update: Sat 03 May 2025 14:00:13 +0000
Files and hashes: 1: a0SjSsK93R47m4eRP1Kso9k59CQ.roa (hash: 4DqaXQky67MktM88+QkXZEvBSJRKln9MtvLpFVmXjJ0=)
2: pPhiddwhxh2gzs0Sfpd0zKoysLs.crl (hash: mkxiPJlJpKA/WCu9ImsBGuSdsJfxBd8/phGq2guA9WY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:4c:3a:43:ce:c0:5d:99:76:92:ab:9b:1d:b6:97:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f86275dc21c61da0cecd127e9774ccaa32b0bb
Validity
Not Before: May 2 14:00:13 2025 GMT
Not After : May 3 14:00:13 2025 GMT
Subject: CN=b11fe2dddaa10c0437cf3464fae67f3990f35a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2d:4e:a6:fd:06:f6:90:66:50:f6:db:48:40:
ae:6a:5f:e1:98:01:25:55:62:a5:9f:ab:87:15:ce:
76:bd:db:ad:58:b7:85:09:55:c4:a1:5b:28:04:95:
88:f6:87:c3:fc:60:31:57:06:af:7a:34:d3:b8:27:
e4:53:d5:60:d5:b9:89:8d:f7:cd:05:2a:c0:aa:f6:
28:ae:7a:73:c7:7a:cd:f5:d6:15:3f:4e:bf:ca:f6:
a1:94:fb:f9:32:ca:35:78:76:95:cf:bb:ba:f3:23:
b7:34:a3:9c:35:2f:5c:6f:56:e8:6e:4f:ac:bb:83:
e0:92:a9:a3:39:01:e0:91:dc:1d:92:ef:26:57:8d:
06:da:cf:cd:84:8b:06:4d:b8:9c:54:fb:8f:22:db:
1d:03:bf:06:a2:74:c1:bd:a2:c4:4f:70:10:f8:00:
57:31:f7:c8:9f:23:17:aa:82:88:03:0c:96:93:e4:
92:e1:3a:c5:a4:fb:90:fc:0f:80:7d:69:6e:6c:23:
c7:82:4f:ad:6c:e6:95:ed:fa:2c:ed:76:e4:20:b3:
1d:d3:f9:9e:e4:c7:d9:7a:32:6f:6b:58:ef:92:b5:
9d:42:3f:6c:18:cf:e9:d4:53:a8:1c:cb:eb:e8:59:
cd:89:41:30:3d:36:bb:c4:7e:3e:2e:fa:8c:e2:d2:
22:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1F:E2:DD:DA:A1:0C:04:37:CF:34:64:FA:E6:7F:39:90:F3:5A:41
X509v3 Authority Key Identifier:
keyid:A4:F8:62:75:DC:21:C6:1D:A0:CE:CD:12:7E:97:74:CC:AA:32:B0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:43:98:cf:39:27:60:7e:2e:40:93:12:fb:0c:90:a6:1f:fa:
7d:cc:01:5d:2d:bc:30:8d:69:b0:42:7e:92:12:8d:e1:d1:b0:
49:9b:29:6c:4f:e0:16:8e:57:28:7f:53:97:98:53:3b:bc:db:
f2:ae:1d:bb:ca:7e:83:bd:42:55:23:e8:b1:b2:2b:f9:44:cb:
d5:e6:09:04:8b:32:a8:d1:7b:97:e7:f6:e8:54:5d:d8:75:35:
52:8f:40:87:ee:db:ab:2d:ea:e0:9d:b9:5b:84:2e:19:8c:11:
91:5d:d8:89:37:6a:e8:45:a4:8a:7e:f5:78:02:1d:34:36:28:
a3:98:c9:ce:a1:02:99:c6:ab:d0:97:22:0d:04:80:c0:dc:4c:
c7:2c:82:b3:a4:94:c0:76:81:6b:8a:69:f8:e4:47:9c:57:de:
06:37:a1:2c:13:6c:b9:a1:89:9c:19:14:91:0b:39:95:bc:ab:
59:8a:77:dd:37:dc:f5:1b:33:1b:97:58:0b:ba:34:5e:c2:44:
f6:54:fb:c6:c5:bd:46:53:fd:c7:49:79:3c:1a:d5:c2:19:fd:
f8:05:74:6f:b5:de:4f:fe:a6:27:24:a9:ee:50:33:ef:ac:a6:
90:25:77:63:4b:c5:de:60:aa:89:bf:7b:57:d9:6e:9b:4e:4a:
6d:6f:b4:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaRTDpDzsBdmXaSq5sdtpe3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0Zjg2Mjc1ZGMyMWM2MWRhMGNlY2QxMjdlOTc3NGNjYWEz
MmIwYmIwHhcNMjUwNTAyMTQwMDEzWhcNMjUwNTAzMTQwMDEzWjAzMTEwLwYDVQQD
EyhiMTFmZTJkZGRhYTEwYzA0MzdjZjM0NjRmYWU2N2YzOTkwZjM1YTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy1Opv0G9pBmUPbbSECual/hmAEl
VWKln6uHFc52vdutWLeFCVXEoVsoBJWI9ofD/GAxVwavejTTuCfkU9Vg1bmJjffN
BSrAqvYornpzx3rN9dYVP06/yvahlPv5Mso1eHaVz7u68yO3NKOcNS9cb1bobk+s
u4PgkqmjOQHgkdwdku8mV40G2s/NhIsGTbicVPuPItsdA78GonTBvaLET3AQ+ABX
MffInyMXqoKIAwyWk+SS4TrFpPuQ/A+AfWlubCPHgk+tbOaV7fos7XbkILMd0/me
5MfZejJva1jvkrWdQj9sGM/p1FOoHMvr6FnNiUEwPTa7xH4+LvqM4tIijwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEf4t3aoQwEN880ZPrmfzmQ81pBMB8GA1UdIwQY
MBaAFKT4YnXcIcYdoM7NEn6XdMyqMrC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBoaWRkd2h4aDJnenMwU2ZwZDB6S295c0xzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YThiZjItNmNiMy00OWFlLTllMzIt
ODgyOWVlNjYxYzY0LzEvcFBoaWRkd2h4aDJnenMwU2ZwZDB6S295c0xzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83YThiZjItNmNiMy00OWFlLTllMzItODgyOWVlNjYxYzY0
LzEvcFBoaWRkd2h4aDJnenMwU2ZwZDB6S295c0xzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0OYzzkn
YH4uQJMS+wyQph/6fcwBXS28MI1psEJ+khKN4dGwSZspbE/gFo5XKH9Tl5hTO7zb
8q4du8p+g71CVSPosbIr+UTL1eYJBIsyqNF7l+f26FRd2HU1Uo9Ah+7bqy3q4J25
W4QuGYwRkV3YiTdq6EWkin71eAIdNDYoo5jJzqECmcar0JciDQSAwNxMxyyCs6SU
wHaBa4pp+ORHnFfeBjehLBNsuaGJnBkUkQs5lbyrWYp33Tfc9RszG5dYC7o0XsJE
9lT7xsW9RlP9x0l5PBrVwhn9+AV0b7XeT/6mJySp7lAz76ymkCV3Y0vF3mCqib97
V9lum05KbW+0Wg==
-----END CERTIFICATE-----
Generated at Sat May 3 00:05:43 2025 by rpki-client