Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
File: R6guVXeaHqTvmWf4IdXMBbe9mek.mft (raw, json)
Hash identifier: p+cYM+LmRuKCPPzxeN95dW0U4kTi3Hx9E67MqNNVK8c=
Subject key identifier: C0:EA:FA:12:A6:92:7E:1A:6D:41:13:02:C6:4C:B9:C4:78:BA:D2:F9
Authority key identifier: 47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
Certificate issuer: /CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Certificate serial: 01968134DFE1CF6FD2A360B83AE379D8CB3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 11:00:48 +0000
Manifest this update: Tue 29 Apr 2025 11:00:48 +0000
Manifest next update: Wed 30 Apr 2025 11:00:48 +0000
Files and hashes: 1: CFUwFBzQtfgbafFzZOyLhQjWkGM.roa (hash: 97CGeBu3yLbE5oYRJj25Ylb6GhnLEinlvUvhqt045H4=)
2: R6guVXeaHqTvmWf4IdXMBbe9mek.crl (hash: THnd73c0FFG77whufrFJqfq9I41gHoV7+0QSaiiiRzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:df:e1:cf:6f:d2:a3:60:b8:3a:e3:79:d8:cb:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Validity
Not Before: Apr 29 11:00:48 2025 GMT
Not After : Apr 30 11:00:48 2025 GMT
Subject: CN=c0eafa12a6927e1a6d411302c64cb9c478bad2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cd:b2:6d:d1:88:24:8b:4f:74:16:28:4d:ad:
05:5e:78:d6:9c:8b:0f:af:79:72:06:b0:e3:3e:0d:
82:c1:c1:5a:38:12:07:d8:be:89:af:6c:e6:45:84:
cf:12:c7:54:ef:12:4f:17:2d:80:07:29:2b:e3:e1:
5f:b7:76:36:9e:49:b8:8f:47:a5:2b:20:f1:2e:b7:
8f:f9:91:d1:22:46:78:ac:bd:1c:c8:36:e7:b0:72:
af:36:8c:ae:8f:f6:02:c4:67:48:65:9c:fc:df:e5:
76:17:3e:bf:e9:22:06:15:2c:03:59:45:8a:f2:92:
23:87:71:36:51:ca:be:69:92:ed:93:df:4c:3f:86:
97:0e:70:11:83:e0:22:76:ac:25:99:8f:9a:9a:07:
14:de:15:3d:40:40:1f:a5:58:1b:61:76:74:18:1b:
0b:78:43:a4:87:5f:e4:a5:c0:52:1a:dd:bd:6a:58:
23:12:89:8f:65:d4:b9:a5:85:c4:6f:5c:0b:16:3c:
11:12:02:59:52:71:15:ab:05:cb:2e:f4:ed:d1:7b:
54:08:aa:e5:cb:2d:81:c2:37:a9:a1:96:2c:a0:d2:
ca:89:5b:d0:00:13:7d:60:57:92:f2:fb:a3:90:9e:
7c:65:e2:65:5c:cb:58:15:84:bf:e5:b2:0c:0d:d3:
85:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EA:FA:12:A6:92:7E:1A:6D:41:13:02:C6:4C:B9:C4:78:BA:D2:F9
X509v3 Authority Key Identifier:
keyid:47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8f:aa:00:9f:8e:4e:e3:25:3a:21:8c:1b:ea:33:cf:61:de:
61:fb:cd:48:f9:33:04:8b:95:da:ae:45:60:52:22:7c:64:d1:
20:4f:01:71:f7:0e:e1:ec:23:c3:77:f3:62:a1:87:2d:ff:d0:
34:02:b9:c7:70:ae:c1:2c:c3:e2:d7:de:49:64:4c:8d:c3:ed:
f6:e8:a5:37:d1:00:46:44:e1:53:fd:33:5f:ea:29:a2:2f:c1:
14:d2:d7:45:96:70:f7:e0:01:24:ff:d9:12:7d:a5:29:af:40:
35:15:90:cd:24:73:1a:ed:fb:6c:1a:d7:99:9a:e3:84:f3:ab:
c3:35:b8:9a:29:17:74:1e:dc:c6:5e:2a:1a:8d:b3:c7:f9:34:
72:ad:fb:bc:99:0b:f7:28:eb:49:b0:b6:c2:1e:da:05:80:80:
dc:3a:b4:eb:0d:d3:ee:08:18:4e:65:81:bf:47:68:69:da:01:
12:3f:69:a5:6b:c1:8a:80:69:a9:87:bd:b2:9d:31:fe:d8:23:
e7:89:a2:1a:d7:d6:1e:19:df:f5:a5:b3:9a:9b:5d:89:0f:e6:
64:c0:44:9b:af:4e:a7:e9:46:d9:dd:b8:56:1f:73:a3:b9:b6:
d7:3d:ac:76:4f:16:ec:98:43:40:22:26:b6:a8:36:f2:ff:30:
52:8a:16:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaBNN/hz2/So2C4OuN52Ms/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YTgyZTU1Nzc5YTFlYTRlZjk5NjdmODIxZDVjYzA1Yjdi
ZDk5ZTkwHhcNMjUwNDI5MTEwMDQ4WhcNMjUwNDMwMTEwMDQ4WjAzMTEwLwYDVQQD
EyhjMGVhZmExMmE2OTI3ZTFhNmQ0MTEzMDJjNjRjYjljNDc4YmFkMmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc2ybdGIJItPdBYoTa0FXnjWnIsP
r3lyBrDjPg2CwcFaOBIH2L6Jr2zmRYTPEsdU7xJPFy2ABykr4+Fft3Y2nkm4j0el
KyDxLreP+ZHRIkZ4rL0cyDbnsHKvNoyuj/YCxGdIZZz83+V2Fz6/6SIGFSwDWUWK
8pIjh3E2Ucq+aZLtk99MP4aXDnARg+AidqwlmY+amgcU3hU9QEAfpVgbYXZ0GBsL
eEOkh1/kpcBSGt29algjEomPZdS5pYXEb1wLFjwREgJZUnEVqwXLLvTt0XtUCKrl
yy2BwjepoZYsoNLKiVvQABN9YFeS8vujkJ58ZeJlXMtYFYS/5bIMDdOF0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDq+hKmkn4abUETAsZMucR4utL5MB8GA1UdIwQY
MBaAFEeoLlV3mh6k75ln+CHVzAW3vZnpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjZndVZYZWFIcVR2bVdmNElkWE1CYmU5bWVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81OWFmYWItZTBhOC00MmQwLTg3M2It
NjAwNWMwMTExZjFlLzEvUjZndVZYZWFIcVR2bVdmNElkWE1CYmU5bWVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81OWFmYWItZTBhOC00MmQwLTg3M2ItNjAwNWMwMTExZjFl
LzEvUjZndVZYZWFIcVR2bVdmNElkWE1CYmU5bWVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiY+qAJ+O
TuMlOiGMG+ozz2HeYfvNSPkzBIuV2q5FYFIifGTRIE8BcfcO4ewjw3fzYqGHLf/Q
NAK5x3CuwSzD4tfeSWRMjcPt9uilN9EARkThU/0zX+opoi/BFNLXRZZw9+ABJP/Z
En2lKa9ANRWQzSRzGu37bBrXmZrjhPOrwzW4mikXdB7cxl4qGo2zx/k0cq37vJkL
9yjrSbC2wh7aBYCA3Dq06w3T7ggYTmWBv0doadoBEj9ppWvBioBpqYe9sp0x/tgj
54miGtfWHhnf9aWzmptdiQ/mZMBEm69Op+lG2d24Vh9zo7m21z2sdk8W7JhDQCIm
tqg28v8wUooWSA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 14:32:41 2025 by rpki-client