Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
File: 00vPISevCy4KJGrkV0MEx653Fek.mft (raw, json)
Hash identifier: EOGzEZDAVN+BGapmpbJAaiHjrufcVDjkUA0OHjz2Kkw=
Subject key identifier: F9:62:0F:6F:7E:6A:3B:41:A1:1E:06:81:D5:14:28:C7:9A:A9:39:3D
Authority key identifier: D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
Certificate issuer: /CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Certificate serial: 019677FB76FE482CA060CDB0502FFF41D50F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 16:01:30 +0000
Manifest this update: Sun 27 Apr 2025 16:01:30 +0000
Manifest next update: Mon 28 Apr 2025 16:01:30 +0000
Files and hashes: 1: 00vPISevCy4KJGrkV0MEx653Fek.crl (hash: 41XNRJFsD6IBFOHFXWvhbNr3Vnk1PQ4FKG4uyj6pAyo=)
2: SqjmPfaLrtBpjmBn0-LK2-XYK6E.roa (hash: oP41hXDxiX++ad4HH6tMbCxCouHbTfiMX6JPBOFqfjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:76:fe:48:2c:a0:60:cd:b0:50:2f:ff:41:d5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Validity
Not Before: Apr 27 16:01:30 2025 GMT
Not After : Apr 28 16:01:30 2025 GMT
Subject: CN=f9620f6f7e6a3b41a11e0681d51428c79aa9393d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:17:7a:6f:0b:60:49:86:46:f8:68:a2:39:54:
18:d8:61:0f:8c:55:0c:22:0a:00:71:21:cf:4a:7c:
c9:5b:24:be:9f:3f:8e:e0:e5:42:73:2f:ad:cb:32:
fb:27:21:da:0e:5d:ff:c9:50:06:3f:5e:d5:42:ae:
00:78:12:28:66:4c:84:de:36:73:29:62:f7:43:38:
09:9e:17:eb:18:7f:8b:e6:c7:d3:96:46:4b:b2:7c:
4c:43:ad:84:d8:92:29:c2:e9:66:e6:37:d0:6b:7a:
80:cd:66:5a:fa:f2:ef:38:60:bd:c4:4c:7e:7f:d5:
42:81:0f:c4:ef:64:fb:bc:59:3b:68:5b:3a:85:7e:
a0:0e:07:a2:a2:d6:f3:7c:99:1c:ea:dd:54:f8:35:
6b:71:8f:f1:11:f5:03:0f:3a:b2:9b:6c:fa:4e:e4:
57:01:67:6c:cc:ff:c2:6b:7f:a8:a0:2e:ed:23:2b:
7d:bc:87:de:a1:5b:e0:28:49:65:ef:16:f5:9f:da:
04:2b:50:5a:9f:60:f2:39:44:5f:8f:c2:fd:ae:3c:
3f:68:ff:90:11:c4:fd:51:8c:fc:de:3c:5e:99:97:
ed:c4:3e:00:eb:65:29:a2:90:9c:ac:ef:af:af:19:
d5:81:a0:26:dc:e4:7d:11:6d:7b:58:f5:11:db:59:
3d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:62:0F:6F:7E:6A:3B:41:A1:1E:06:81:D5:14:28:C7:9A:A9:39:3D
X509v3 Authority Key Identifier:
keyid:D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:0c:de:6b:55:2a:8c:c5:e8:aa:ee:14:48:63:8c:ce:05:ac:
6c:85:f6:d1:bd:9e:11:12:5b:6c:c2:75:94:ad:5d:c7:84:9b:
bf:f1:02:89:81:7a:e5:4b:f6:54:fa:32:0f:96:4b:3f:4c:51:
93:ac:08:f1:dd:34:6c:6d:df:be:30:b2:2d:31:1b:a3:4a:62:
b6:c6:b7:df:ba:bc:68:d3:d3:f2:c6:9d:23:d4:56:c1:c2:b9:
ac:72:cf:3c:f3:6d:3f:46:96:ed:4f:e0:27:07:14:48:51:40:
45:ab:24:f8:51:44:94:2d:ab:c2:21:61:5f:1d:76:b1:1e:1d:
2f:c2:40:39:a7:c5:88:23:21:b5:52:eb:62:f4:3d:e6:b8:9d:
66:4e:f7:96:8b:f3:aa:10:33:6e:10:46:8f:7c:8c:3a:e9:d8:
91:34:b2:39:bd:4a:bf:ed:82:dc:41:30:51:bc:94:05:8b:58:
e4:19:37:bb:1b:1b:a7:a8:6d:0e:57:a4:11:79:17:4c:dd:be:
02:8a:1d:5f:dd:7b:64:5d:81:f4:c4:4a:7a:67:05:a3:c9:2e:
6f:44:0b:c0:bd:2a:e7:03:cf:16:89:b9:b1:bf:b6:73:fa:24:
46:ea:7e:25:08:92:54:5a:e9:42:3b:11:f2:6f:b4:77:a3:63:
01:6f:ec:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+3b+SCygYM2wUC//QdUPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNGJjZjIxMjdhZjBiMmUwYTI0NmFlNDU3NDMwNGM3YWU3
NzE1ZTkwHhcNMjUwNDI3MTYwMTMwWhcNMjUwNDI4MTYwMTMwWjAzMTEwLwYDVQQD
EyhmOTYyMGY2ZjdlNmEzYjQxYTExZTA2ODFkNTE0MjhjNzlhYTkzOTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Rd6bwtgSYZG+GiiOVQY2GEPjFUM
IgoAcSHPSnzJWyS+nz+O4OVCcy+tyzL7JyHaDl3/yVAGP17VQq4AeBIoZkyE3jZz
KWL3QzgJnhfrGH+L5sfTlkZLsnxMQ62E2JIpwulm5jfQa3qAzWZa+vLvOGC9xEx+
f9VCgQ/E72T7vFk7aFs6hX6gDgeiotbzfJkc6t1U+DVrcY/xEfUDDzqym2z6TuRX
AWdszP/Ca3+ooC7tIyt9vIfeoVvgKEll7xb1n9oEK1Ban2DyOURfj8L9rjw/aP+Q
EcT9UYz83jxemZftxD4A62UpopCcrO+vrxnVgaAm3OR9EW17WPUR21k9pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPliD29+ajtBoR4GgdUUKMeaqTk9MB8GA1UdIwQY
MBaAFNNLzyEnrwsuCiRq5FdDBMeudxXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDB2UElTZXZDeTRLSkdya1YwTUV4NjUzRmVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wYTRiYzQtZGE0Yi00ZjE4LWI0YmUt
YWZjMWVlNDYxMWExLzEvMDB2UElTZXZDeTRLSkdya1YwTUV4NjUzRmVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wYTRiYzQtZGE0Yi00ZjE4LWI0YmUtYWZjMWVlNDYxMWEx
LzEvMDB2UElTZXZDeTRLSkdya1YwTUV4NjUzRmVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQzea1Uq
jMXoqu4USGOMzgWsbIX20b2eERJbbMJ1lK1dx4Sbv/ECiYF65Uv2VPoyD5ZLP0xR
k6wI8d00bG3fvjCyLTEbo0pitsa337q8aNPT8sadI9RWwcK5rHLPPPNtP0aW7U/g
JwcUSFFARask+FFElC2rwiFhXx12sR4dL8JAOafFiCMhtVLrYvQ95ridZk73lovz
qhAzbhBGj3yMOunYkTSyOb1Kv+2C3EEwUbyUBYtY5Bk3uxsbp6htDlekEXkXTN2+
AoodX917ZF2B9MRKemcFo8kub0QLwL0q5wPPFom5sb+2c/okRup+JQiSVFrpQjsR
8m+0d6NjAW/s2Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:16:47 2025 by rpki-client