Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
File: rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json)
Hash identifier: wEjNxZ/vsMm99sbKyQKjyW5C030BFtgQPUUF7d6Z2s4=
Subject key identifier: 7E:8A:6C:AC:B2:30:D1:D1:95:ED:A1:60:D4:B5:73:9F:C1:3C:32:1E
Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
Certificate issuer: /CN=af121cd6e11da095f856d79deec469d0c6358494
Certificate serial: 0196846C5B6A99CC14E14AE6769E45D562E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
Manifest number: 1056
Signing time: Wed 30 Apr 2025 02:00:15 +0000
Manifest this update: Wed 30 Apr 2025 02:00:15 +0000
Manifest next update: Thu 01 May 2025 02:00:15 +0000
Files and hashes: 1: GLfBevz3wo4dWS7xfj6ER67qM3I.roa (hash: q4r6hj69iY9YNJGXRxob1aI8UDhv8Z84d+2MRw6HY98=)
2: dwfEfRg8877Atw4vgQddrhHW_dc.roa (hash: SdtTc5eD1TxuTF/mYnxmN25vPFVewXwZEmOu76MAXN0=)
3: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: YFqiZqXUTvGCZcZsW9Exdzypv3WvM3ayz8sOicVOaoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:5b:6a:99:cc:14:e1:4a:e6:76:9e:45:d5:62:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494
Validity
Not Before: Apr 30 02:00:15 2025 GMT
Not After : May 1 02:00:15 2025 GMT
Subject: CN=7e8a6cacb230d1d195eda160d4b5739fc13c321e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b8:34:f7:1d:7e:d3:73:1a:12:7b:08:59:c0:
13:19:56:41:39:ea:d9:61:06:bc:ab:d4:d1:0f:99:
60:36:dd:a2:95:a4:5d:b6:82:ce:cb:00:ac:87:c3:
27:5e:79:4c:3c:de:7f:23:2e:c2:44:49:49:d0:b6:
da:97:3c:4e:31:2b:25:58:d8:4e:bb:28:5f:ab:bf:
f3:51:48:3e:54:d5:20:16:b1:1f:d2:3c:2e:91:e3:
e7:84:78:46:12:b4:44:69:ce:65:d5:29:e6:bb:14:
12:91:13:d3:f6:fd:9b:4d:b9:40:76:e1:c4:d7:58:
f9:b9:d6:1a:58:cc:e2:89:7b:b9:36:cd:21:6e:7e:
9a:85:e3:12:9c:11:17:f3:c5:a1:a0:9f:bb:73:52:
59:c6:af:ae:49:07:62:28:27:02:16:e1:d8:e9:9d:
6e:11:da:9a:83:f6:18:69:9e:01:4d:18:1d:e9:d0:
dd:a8:34:fa:1a:44:11:d9:ca:eb:41:60:8d:32:81:
ee:2e:3a:1c:fb:4b:a3:74:64:f9:ec:39:7c:70:ef:
5e:ca:e8:35:c2:ba:8c:e7:cf:d3:1c:a6:38:8c:85:
53:e2:ed:c2:d4:82:44:da:7f:be:5b:fd:df:3e:63:
a1:b4:c0:fc:cd:f5:fa:73:26:fe:37:8c:71:ef:57:
13:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8A:6C:AC:B2:30:D1:D1:95:ED:A1:60:D4:B5:73:9F:C1:3C:32:1E
X509v3 Authority Key Identifier:
keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:6e:26:63:7d:a1:c8:7b:16:af:c3:b6:24:8c:b6:eb:d4:b9:
aa:13:cc:4d:12:1a:0e:1c:28:ad:14:91:38:76:23:5e:8a:7c:
c8:e6:79:15:52:c8:e1:bd:c4:d3:d0:b5:b3:41:25:7d:19:a9:
70:e2:dd:5f:d5:68:70:2e:9f:61:d9:1e:87:17:b1:d6:bb:08:
47:8a:18:04:86:db:7d:51:db:5e:89:53:24:fa:b1:62:95:f0:
d7:aa:eb:fe:7b:df:ba:0b:f9:e1:95:11:20:cc:01:09:bc:5e:
65:92:5c:18:7d:12:24:4b:d2:0e:f5:77:f7:ab:34:6b:6a:0c:
b0:a8:fc:05:57:6a:16:ae:cf:e9:1f:e1:73:c3:f8:30:03:41:
05:ca:84:0a:e5:db:3f:ef:be:0a:49:68:ac:40:1d:4b:f5:99:
dd:92:7d:0f:31:c0:fb:22:4e:4f:6f:5c:b6:b0:ea:23:c8:d9:
30:a8:fe:cc:41:b5:57:1d:46:80:85:87:a3:6a:ad:12:f5:4a:
0a:75:b2:c0:4e:7f:6c:a7:d0:86:9a:ac:cf:fc:47:5e:ca:eb:
b5:e7:44:66:5d:d7:99:b7:6b:bf:39:5b:08:e8:24:d2:ce:89:
6b:2a:e9:4b:77:50:2f:81:7d:d1:13:04:e8:8b:46:c7:c8:7c:
3d:66:6b:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaEbFtqmcwU4Urmdp5F1WLiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMTIxY2Q2ZTExZGEwOTVmODU2ZDc5ZGVlYzQ2OWQwYzYz
NTg0OTQwHhcNMjUwNDMwMDIwMDE1WhcNMjUwNTAxMDIwMDE1WjAzMTEwLwYDVQQD
Eyg3ZThhNmNhY2IyMzBkMWQxOTVlZGExNjBkNGI1NzM5ZmMxM2MzMjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbg09x1+03MaEnsIWcATGVZBOerZ
YQa8q9TRD5lgNt2ilaRdtoLOywCsh8MnXnlMPN5/Iy7CRElJ0LbalzxOMSslWNhO
uyhfq7/zUUg+VNUgFrEf0jwukePnhHhGErREac5l1SnmuxQSkRPT9v2bTblAduHE
11j5udYaWMziiXu5Ns0hbn6aheMSnBEX88WhoJ+7c1JZxq+uSQdiKCcCFuHY6Z1u
Edqag/YYaZ4BTRgd6dDdqDT6GkQR2crrQWCNMoHuLjoc+0ujdGT57Dl8cO9eyug1
wrqM58/THKY4jIVT4u3C1IJE2n++W/3fPmOhtMD8zfX6cyb+N4xx71cTVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6KbKyyMNHRle2hYNS1c5/BPDIeMB8GA1UdIwQY
MBaAFK8SHNbhHaCV+FbXne7EadDGNYSUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9mZDYwNjktNDE3OS00NWJlLWI4MmEt
YWYzZjc5NGFlNjA3LzEvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9mZDYwNjktNDE3OS00NWJlLWI4MmEtYWYzZjc5NGFlNjA3
LzEvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArG4mY32h
yHsWr8O2JIy269S5qhPMTRIaDhworRSROHYjXop8yOZ5FVLI4b3E09C1s0ElfRmp
cOLdX9VocC6fYdkehxex1rsIR4oYBIbbfVHbXolTJPqxYpXw16rr/nvfugv54ZUR
IMwBCbxeZZJcGH0SJEvSDvV396s0a2oMsKj8BVdqFq7P6R/hc8P4MANBBcqECuXb
P+++CklorEAdS/WZ3ZJ9DzHA+yJOT29ctrDqI8jZMKj+zEG1Vx1GgIWHo2qtEvVK
CnWywE5/bKfQhpqsz/xHXsrrtedEZl3XmbdrvzlbCOgk0s6JayrpS3dQL4F90RME
6ItGx8h8PWZrqg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 05:47:24 2025 by rpki-client