Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File: v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier: BG5a1ucHY483a2IOkxmHrSR9w1/WbOrdel/eFHIBoJs=
Subject key identifier: 34:D4:D1:C4:19:B2:52:0A:A4:04:89:48:96:DD:69:E7:C8:35:09:38
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial: 0196729D755FC4BD665602DF71F534F00338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number: 13E6
Signing time: Sat 26 Apr 2025 15:00:43 +0000
Manifest this update: Sat 26 Apr 2025 15:00:43 +0000
Manifest next update: Sun 27 Apr 2025 15:00:43 +0000
Files and hashes: 1: V8R9NuBsBMtjM8dngpbvo3MJx5s.roa (hash: kncxVZkCgNT2UYYst35neieskR5Qm/mNu8V3+IA6Ku8=)
2: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: skvAfwxRTYXMFeUK1IGOxzOCOw22Yv0llZu/RW8Bfss=)
3: yd8_f-atyxFNKtcv_cFVTfpnZt4.roa (hash: pN1o2J3yJeBV6MHLs3BSzPMoqupOmN0yj1atUVgcuyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:75:5f:c4:bd:66:56:02:df:71:f5:34:f0:03:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Validity
Not Before: Apr 26 15:00:43 2025 GMT
Not After : Apr 27 15:00:43 2025 GMT
Subject: CN=34d4d1c419b2520aa404894896dd69e7c8350938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c9:74:ea:7d:fb:65:cc:e7:96:b5:62:f2:be:
2a:af:62:03:10:44:2c:66:1e:b3:46:d4:3a:38:b7:
34:6b:9a:7b:50:6a:1c:41:64:32:30:d1:d9:7b:51:
59:c8:cd:a1:eb:eb:35:ac:9b:0e:4b:8e:e2:4b:5a:
1b:5a:50:76:2f:9c:ce:7f:54:06:52:5d:79:89:7f:
23:1f:0b:07:21:d0:11:df:68:ca:bf:50:d2:e1:95:
a8:e4:1f:91:d6:92:a7:1a:93:37:b9:7d:ea:bb:ff:
db:09:ba:68:7c:11:19:89:53:1c:8b:c8:a7:f1:36:
a0:44:2d:74:6e:c3:67:1c:b7:7a:79:f7:8d:8d:fc:
13:80:de:f6:38:94:5a:64:b9:b9:25:0f:a2:bb:c6:
3e:fd:77:b0:44:eb:8c:5d:a8:b9:10:e3:85:64:ed:
3e:63:db:b7:68:c8:48:b2:94:30:08:06:a1:1d:70:
83:11:35:9b:a3:ff:6f:f6:a1:98:81:94:59:65:76:
8c:34:f5:6a:21:b2:eb:06:d4:28:30:52:df:d5:65:
03:9b:f7:71:62:ed:a8:18:e1:16:d2:ce:92:05:0e:
e1:a8:fc:95:af:c4:20:59:3c:47:83:47:88:0b:96:
a5:66:42:ca:70:88:cc:fe:97:cf:b0:e7:c4:8c:7b:
88:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D4:D1:C4:19:B2:52:0A:A4:04:89:48:96:DD:69:E7:C8:35:09:38
X509v3 Authority Key Identifier:
keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:62:2e:d8:1a:95:7f:1b:18:7d:97:ee:fb:ec:9a:bb:2a:94:
a8:e9:5f:6c:b6:00:b8:fe:cd:8f:70:e8:b4:fe:2c:58:4d:15:
e9:bb:82:4a:93:a9:ed:a5:8a:20:cb:4a:f2:08:b0:86:c7:8d:
a1:54:3b:c7:5f:23:4b:4f:d8:85:64:d8:42:74:c7:bf:d5:63:
de:37:3f:27:4b:7c:45:ed:74:d3:6c:6e:d2:30:3e:96:8f:3e:
7f:55:cd:ce:f3:af:e6:6b:78:81:0d:d8:41:c6:a5:b1:9e:87:
86:eb:b7:22:25:20:46:d1:7a:d9:c5:a7:13:08:24:83:e0:c8:
32:99:29:45:3a:bf:df:b9:51:9f:ee:95:dd:06:0e:88:f7:fb:
7e:d8:bc:ab:7f:2a:e9:91:c9:6f:50:9a:f7:32:49:9c:f3:01:
80:f2:3b:df:c2:8b:dc:20:55:4c:76:34:4b:7b:2d:e9:cc:5b:
b7:c9:37:87:98:77:df:2d:c3:03:95:80:fa:98:15:a2:1f:16:
9f:17:b0:be:b2:00:2f:f9:f5:94:23:77:e7:ab:c4:5a:b2:a5:
1e:93:eb:bf:67:4f:30:09:3c:8a:f4:e9:3a:33:f3:8c:df:8c:
6b:b0:99:44:43:03:ad:a3:ed:07:25:99:88:3e:a1:b6:e9:6e:
67:c4:da:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZynXVfxL1mVgLfcfU08AM4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNmMxZGY2NjIzNzRkNGFlY2QwYzhiM2Y4NDMxMmRmNDIx
MjU1OTkwHhcNMjUwNDI2MTUwMDQzWhcNMjUwNDI3MTUwMDQzWjAzMTEwLwYDVQQD
EygzNGQ0ZDFjNDE5YjI1MjBhYTQwNDg5NDg5NmRkNjllN2M4MzUwOTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8l06n37ZcznlrVi8r4qr2IDEEQs
Zh6zRtQ6OLc0a5p7UGocQWQyMNHZe1FZyM2h6+s1rJsOS47iS1obWlB2L5zOf1QG
Ul15iX8jHwsHIdAR32jKv1DS4ZWo5B+R1pKnGpM3uX3qu//bCbpofBEZiVMci8in
8TagRC10bsNnHLd6efeNjfwTgN72OJRaZLm5JQ+iu8Y+/XewROuMXai5EOOFZO0+
Y9u3aMhIspQwCAahHXCDETWbo/9v9qGYgZRZZXaMNPVqIbLrBtQoMFLf1WUDm/dx
Yu2oGOEW0s6SBQ7hqPyVr8QgWTxHg0eIC5alZkLKcIjM/pfPsOfEjHuIVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTU0cQZslIKpASJSJbdaefINQk4MB8GA1UdIwQY
MBaAFL9sHfZiN01K7NDIs/hDEt9CElWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZDIyMGItNWY3MC00OWMyLTljYzct
OTA4NDE5ZDM5NDAxLzEvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mZDIyMGItNWY3MC00OWMyLTljYzctOTA4NDE5ZDM5NDAx
LzEvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxGIu2BqV
fxsYfZfu++yauyqUqOlfbLYAuP7Nj3DotP4sWE0V6buCSpOp7aWKIMtK8giwhseN
oVQ7x18jS0/YhWTYQnTHv9Vj3jc/J0t8Re1002xu0jA+lo8+f1XNzvOv5mt4gQ3Y
QcalsZ6Hhuu3IiUgRtF62cWnEwgkg+DIMpkpRTq/37lRn+6V3QYOiPf7fti8q38q
6ZHJb1Ca9zJJnPMBgPI738KL3CBVTHY0S3st6cxbt8k3h5h33y3DA5WA+pgVoh8W
nxewvrIAL/n1lCN356vEWrKlHpPrv2dPMAk8ivTpOjPzjN+Ma7CZREMDraPtByWZ
iD6htuluZ8TagA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:19:24 2025 by rpki-client