Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
File: piqMeh9qTJSeAntTadl9dXbhR_g.mft (raw, json)
Hash identifier: hs2JP4MkMSy4atCT1b4YOCiwmBv/xx4oxbrnIOUEEis=
Subject key identifier: AD:04:F5:4A:36:5C:D8:81:BC:D7:F0:30:9B:B0:24:C1:12:C8:7A:42
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Certificate issuer: /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial: 019683912768751357CC106CB9A0EC1A711B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
Manifest number: 0959
Signing time: Tue 29 Apr 2025 22:00:50 +0000
Manifest this update: Tue 29 Apr 2025 22:00:50 +0000
Manifest next update: Wed 30 Apr 2025 22:00:50 +0000
Files and hashes: 1: BxgD-RrZabBuEEfFQkOR7JzPkYA.roa (hash: Dbgg4n4USIHYY1LVI9yt8KqtluJXraRBx7hK71/1AxU=)
2: _HboziFCCXY6Aftni-9e_QXHS7Y.roa (hash: 1Dtm7p4VO9zPNWsz+P/VL1I6c+v4X7GMgtJoAtf8pBU=)
3: piqMeh9qTJSeAntTadl9dXbhR_g.crl (hash: 1QyiwhcglOBC7YgwgQVkojwvtbRWdehzA1mQS0CdsTc=)
4: y3UMX5qqKpS7PayD_PFfS-9xYiA.roa (hash: 1x0+PMsy7NMRlTF0Iq4hoHsB7a+mNEhOddx/6ZAYPrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:27:68:75:13:57:cc:10:6c:b9:a0:ec:1a:71:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Validity
Not Before: Apr 29 22:00:50 2025 GMT
Not After : Apr 30 22:00:50 2025 GMT
Subject: CN=ad04f54a365cd881bcd7f0309bb024c112c87a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:56:1d:a4:05:ca:29:f4:47:1d:0a:29:55:e0:
32:b4:c6:87:58:96:1d:ee:bb:91:41:da:14:83:0f:
65:d9:28:6a:24:83:87:c0:4e:6e:7f:fa:81:bc:46:
06:8f:43:92:c0:e3:fb:1f:56:5f:35:9a:62:86:11:
4c:96:cc:37:12:05:1a:32:a0:c2:6d:00:cb:1a:ee:
e5:9d:12:b8:bd:40:2d:e9:06:6d:f4:68:cf:68:2e:
2a:5f:9c:68:66:fc:86:bd:4e:91:51:86:ab:32:59:
5a:9c:dc:03:9b:09:5e:1c:4f:cc:4c:d1:32:5c:3f:
13:b2:4c:1c:33:57:86:1e:37:4c:c9:ad:76:73:d7:
48:39:61:39:32:58:ed:e4:a0:2e:ed:56:9f:d8:f1:
8c:10:ba:c9:3b:fd:41:c0:6d:3f:d4:6b:52:61:1b:
80:6f:6c:aa:e5:03:3d:3f:26:7e:ac:b0:47:09:9b:
3a:ed:3c:8a:60:4f:67:36:1f:7e:4e:c8:9c:de:20:
8c:08:84:7a:8b:33:24:7b:15:9d:11:ac:f6:a6:71:
80:da:39:14:47:39:0d:b0:ae:34:aa:c0:8b:d6:16:
ad:e9:75:22:f5:c6:70:35:bc:21:b4:42:ea:65:80:
ff:c7:93:25:a4:e7:b8:a2:a6:ff:9f:cf:d5:54:ea:
56:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:04:F5:4A:36:5C:D8:81:BC:D7:F0:30:9B:B0:24:C1:12:C8:7A:42
X509v3 Authority Key Identifier:
keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:fe:12:b4:3d:d7:49:a7:b5:aa:cb:3d:7f:2f:f3:ff:af:6d:
e1:f8:b6:d9:51:2d:78:e4:ba:5e:4c:69:c3:8c:70:75:47:50:
eb:55:dc:9c:8f:c4:33:d1:92:73:26:8e:62:74:99:5e:f8:b2:
21:6e:94:0a:87:c7:9e:9f:88:93:47:a8:9c:1c:b2:87:dd:8c:
7f:cd:1c:09:2d:24:ca:b0:3f:82:55:b6:23:e4:f3:0c:cc:e1:
d1:e9:71:ef:25:9a:69:4b:e6:72:94:3e:0b:1a:b9:a0:fa:93:
19:f1:35:d5:24:61:7d:1e:a0:4c:d3:55:dd:35:1b:5b:bc:ab:
35:60:f4:b8:ba:02:1b:d6:39:58:2a:31:d9:5f:2e:91:2d:7d:
d7:de:a4:85:81:23:44:f6:1f:22:ce:f2:c2:76:05:11:3b:20:
d2:52:68:8f:6b:c6:a4:85:a1:b7:10:54:6b:a2:eb:67:25:b7:
c4:d3:29:ab:fa:9b:f2:56:ec:f0:7a:22:91:c8:74:41:b8:82:
52:93:ea:5d:e0:e3:ea:f8:31:ae:17:4f:57:0c:a5:33:a0:04:
a1:28:5d:92:e0:c0:bf:34:f5:85:84:75:94:4b:f6:65:5d:4f:
54:67:d8:c8:95:7d:4b:96:aa:80:30:8d:87:46:7b:0b:b0:be:
5a:fb:08:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDkSdodRNXzBBsuaDsGnEbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MmE4YzdhMWY2YTRjOTQ5ZTAyN2I1MzY5ZDk3ZDc1NzZl
MTQ3ZjgwHhcNMjUwNDI5MjIwMDUwWhcNMjUwNDMwMjIwMDUwWjAzMTEwLwYDVQQD
EyhhZDA0ZjU0YTM2NWNkODgxYmNkN2YwMzA5YmIwMjRjMTEyYzg3YTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/VYdpAXKKfRHHQopVeAytMaHWJYd
7ruRQdoUgw9l2ShqJIOHwE5uf/qBvEYGj0OSwOP7H1ZfNZpihhFMlsw3EgUaMqDC
bQDLGu7lnRK4vUAt6QZt9GjPaC4qX5xoZvyGvU6RUYarMllanNwDmwleHE/MTNEy
XD8TskwcM1eGHjdMya12c9dIOWE5Mljt5KAu7Vaf2PGMELrJO/1BwG0/1GtSYRuA
b2yq5QM9PyZ+rLBHCZs67TyKYE9nNh9+Tsic3iCMCIR6izMkexWdEaz2pnGA2jkU
RzkNsK40qsCL1hat6XUi9cZwNbwhtELqZYD/x5MlpOe4oqb/n8/VVOpWhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0E9Uo2XNiBvNfwMJuwJMESyHpCMB8GA1UdIwQY
MBaAFKYqjHofakyUngJ7U2nZfXV24Uf4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGlxTWVoOXFUSlNlQW50VGFkbDlkWGJoUl9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mYzAyMmQtZjhlNS00YTZlLThiMWYt
NThjODVkNDMzNmJjLzEvcGlxTWVoOXFUSlNlQW50VGFkbDlkWGJoUl9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mYzAyMmQtZjhlNS00YTZlLThiMWYtNThjODVkNDMzNmJj
LzEvcGlxTWVoOXFUSlNlQW50VGFkbDlkWGJoUl9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKP4StD3X
Sae1qss9fy/z/69t4fi22VEteOS6Xkxpw4xwdUdQ61XcnI/EM9GScyaOYnSZXviy
IW6UCofHnp+Ik0eonByyh92Mf80cCS0kyrA/glW2I+TzDMzh0elx7yWaaUvmcpQ+
Cxq5oPqTGfE11SRhfR6gTNNV3TUbW7yrNWD0uLoCG9Y5WCox2V8ukS19196khYEj
RPYfIs7ywnYFETsg0lJoj2vGpIWhtxBUa6LrZyW3xNMpq/qb8lbs8Hoikch0QbiC
UpPqXeDj6vgxrhdPVwylM6AEoShdkuDAvzT1hYR1lEv2ZV1PVGfYyJV9S5aqgDCN
h0Z7C7C+WvsIdw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 05:41:09 2025 by rpki-client