Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
File: U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft (raw, json)
Hash identifier: 8O5Muo2xRrUyrNGLh7awrgolR3iVM+fBwEF1mhv6U7o=
Subject key identifier: 41:25:64:7F:62:32:58:13:57:C4:77:68:9B:41:02:2C:FD:A9:22:12
Authority key identifier: 53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
Certificate issuer: /CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Certificate serial: 01967BD8287B31BCF091AFF3B41D187EA6E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
Manifest number: 6A
Signing time: Mon 28 Apr 2025 10:01:25 +0000
Manifest this update: Mon 28 Apr 2025 10:01:25 +0000
Manifest next update: Tue 29 Apr 2025 10:01:25 +0000
Files and hashes: 1: U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl (hash: Sa5Gs9QbrHSpuLBrm1CPS2bA3izhFH+4VCU/Jl/Grfc=)
2: d_MgrBI_XqLm3vPMbVfOHRCRjlM.roa (hash: 8wS5nxJpvzUto4TBQuuJYHRS4iSYHZpu3buUsV2eb9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d8:28:7b:31:bc:f0:91:af:f3:b4:1d:18:7e:a6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Validity
Not Before: Apr 28 10:01:25 2025 GMT
Not After : Apr 29 10:01:25 2025 GMT
Subject: CN=4125647f6232581357c477689b41022cfda92212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:23:21:1d:4d:e4:51:80:0e:da:e2:8d:ed:a7:
e2:89:d8:69:2f:74:c9:20:aa:74:92:55:cb:d7:3f:
e1:35:cb:3d:e7:56:17:12:62:c2:a1:73:d8:b5:17:
3c:65:b5:94:5b:12:f2:0e:bc:01:ad:9e:58:20:3f:
1f:6f:fc:fa:c3:db:94:1b:16:43:98:43:c3:b1:f7:
c1:fe:a5:c9:61:2b:c3:91:8e:1d:93:86:23:37:e2:
0b:66:69:dc:d3:93:a5:54:c0:83:ce:57:91:6b:fd:
70:eb:a9:d8:5c:11:73:19:96:cb:aa:45:35:8f:fc:
cd:f7:0c:db:f5:bb:50:44:32:23:7a:75:b6:67:2a:
87:70:28:79:df:86:78:f4:b8:b6:4e:e0:65:47:dc:
b8:7e:bb:b1:b3:19:56:49:77:de:b8:3a:ba:45:d9:
52:67:00:13:34:eb:56:32:ea:30:91:0d:a6:ad:ca:
28:5b:f5:e9:e4:b7:d1:bb:8d:e1:d4:a2:4c:7c:81:
f3:0f:14:ff:b1:0a:90:cd:bb:5c:44:b5:b7:1f:83:
3e:54:57:c9:4c:ff:94:7d:11:f4:0e:76:b5:07:13:
9a:fd:ef:bc:3c:e2:88:46:f4:85:ad:c2:f5:9a:89:
75:62:40:c1:19:88:7b:81:24:11:db:91:4d:ba:5c:
f8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:25:64:7F:62:32:58:13:57:C4:77:68:9B:41:02:2C:FD:A9:22:12
X509v3 Authority Key Identifier:
keyid:53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4d:9a:f8:78:2c:4c:ce:f7:7d:63:16:c5:05:85:4f:ce:0b:
6a:20:ae:e5:ef:7a:7f:80:3b:72:b2:b2:1e:6f:1e:23:99:9f:
5b:c6:be:d2:6e:ee:ce:39:6d:c5:44:8e:a7:52:3a:68:f0:8c:
f2:39:4c:65:78:8a:46:ae:82:f0:2f:f4:55:77:ed:2c:6a:c5:
b1:9d:34:e9:ae:e4:d9:97:71:84:24:7c:c3:80:dc:67:d4:74:
c0:f9:3d:94:d2:ba:46:e2:1f:93:4f:f1:1b:5b:95:b8:bd:ae:
c3:f6:31:4a:2c:aa:7a:fb:08:cc:8d:f7:ff:41:fc:bb:32:52:
04:6a:4a:e3:52:69:a8:15:f3:83:47:59:7a:32:1f:1f:0f:dd:
93:7a:c5:c4:00:49:bd:81:9e:e2:31:03:3b:f8:22:97:da:a4:
20:8d:3e:1b:3f:35:97:9e:9a:20:b3:d1:8d:50:7c:57:fe:ec:
9a:6c:c9:79:17:4f:38:77:63:bd:e5:cd:b5:d0:38:15:a2:42:
f2:96:25:89:92:36:c6:be:06:f6:01:d9:38:52:34:02:b3:3e:
0d:17:0e:10:ed:78:27:97:52:59:bd:83:ba:4c:bd:35:64:0b:
64:11:ce:58:94:a6:10:f2:97:1c:de:cd:6f:9d:d9:16:3e:af:
41:9d:97:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ72Ch7Mbzwka/ztB0YfqblMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNzAwNzMxYzVhZGM3MGJjYjcxM2U1N2E1MWE0MDNlNjRl
ZDkxYzgwHhcNMjUwNDI4MTAwMTI1WhcNMjUwNDI5MTAwMTI1WjAzMTEwLwYDVQQD
Eyg0MTI1NjQ3ZjYyMzI1ODEzNTdjNDc3Njg5YjQxMDIyY2ZkYTkyMjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiMhHU3kUYAO2uKN7afiidhpL3TJ
IKp0klXL1z/hNcs951YXEmLCoXPYtRc8ZbWUWxLyDrwBrZ5YID8fb/z6w9uUGxZD
mEPDsffB/qXJYSvDkY4dk4YjN+ILZmnc05OlVMCDzleRa/1w66nYXBFzGZbLqkU1
j/zN9wzb9btQRDIjenW2ZyqHcCh534Z49Li2TuBlR9y4fruxsxlWSXfeuDq6RdlS
ZwATNOtWMuowkQ2mrcooW/Xp5LfRu43h1KJMfIHzDxT/sQqQzbtcRLW3H4M+VFfJ
TP+UfRH0Dna1BxOa/e+8POKIRvSFrcL1mol1YkDBGYh7gSQR25FNulz45wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEElZH9iMlgTV8R3aJtBAiz9qSISMB8GA1UdIwQY
MBaAFFNwBzHFrccLy3E+V6UaQD5k7ZHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC84M2NmNzMtYjdjZS00NDQwLWE0YWQt
N2M1MjNiNThkZWNmLzEvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC84M2NmNzMtYjdjZS00NDQwLWE0YWQtN2M1MjNiNThkZWNm
LzEvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ02a+Hgs
TM73fWMWxQWFT84LaiCu5e96f4A7crKyHm8eI5mfW8a+0m7uzjltxUSOp1I6aPCM
8jlMZXiKRq6C8C/0VXftLGrFsZ006a7k2ZdxhCR8w4DcZ9R0wPk9lNK6RuIfk0/x
G1uVuL2uw/YxSiyqevsIzI33/0H8uzJSBGpK41JpqBXzg0dZejIfHw/dk3rFxABJ
vYGe4jEDO/gil9qkII0+Gz81l56aILPRjVB8V/7smmzJeRdPOHdjveXNtdA4FaJC
8pYliZI2xr4G9gHZOFI0ArM+DRcOEO14J5dSWb2Duky9NWQLZBHOWJSmEPKXHN7N
b53ZFj6vQZ2XZQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 19:57:37 2025 by rpki-client