Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
File: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft (raw, json)
Hash identifier: 2Sye0F0I/JoAXVtBRX8jZDaH/Q2BDLi+s1/UPoAtBXs=
Subject key identifier: 6D:FA:75:45:99:67:35:1F:02:38:1D:CD:FA:B3:90:27:DD:9D:FA:1D
Authority key identifier: 53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
Certificate issuer: /CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Certificate serial: 0196759E8CD524F24A9B2105F9F9D035BF17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
Manifest number: 14F7
Signing time: Sun 27 Apr 2025 05:00:47 +0000
Manifest this update: Sun 27 Apr 2025 05:00:47 +0000
Manifest next update: Mon 28 Apr 2025 05:00:47 +0000
Files and hashes: 1: SIEblnDTmxDkNQuR8GrQyNScjq8.roa (hash: 994/huZNdlRSyw8MDRW+EKE0ylyI66j7DW5sNtIspOA=)
2: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl (hash: Wb9Zt2S/1SP1Q+f/H/sd9LNjpLYbHmrL7yG2Tu2BjNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:8c:d5:24:f2:4a:9b:21:05:f9:f9:d0:35:bf:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Validity
Not Before: Apr 27 05:00:47 2025 GMT
Not After : Apr 28 05:00:47 2025 GMT
Subject: CN=6dfa75459967351f02381dcdfab39027dd9dfa1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cd:36:d5:fc:6b:90:12:d4:c8:ff:af:1c:66:
ca:88:b3:b9:e1:85:c4:50:db:4e:dd:bd:60:e8:3b:
40:17:ea:44:bd:cf:d3:1f:85:ea:85:49:99:43:d5:
0e:45:83:45:aa:b7:c5:2a:6e:f8:b4:f3:e8:0d:d9:
bf:dd:d4:05:e0:45:b7:32:19:d4:c2:0c:0c:f0:e1:
92:87:ba:72:ef:f0:1c:ff:03:ad:15:1a:7d:18:ec:
fc:61:1f:41:8a:dd:a4:f7:fd:42:90:8d:e9:d0:e7:
a9:b0:86:f7:2b:7a:a8:81:ad:8f:3d:02:91:d6:44:
c6:1f:71:03:c2:0f:38:fd:32:ca:09:f4:2c:0d:6b:
d2:0a:c8:64:9a:3e:79:a1:ca:8f:49:e0:57:eb:f9:
20:72:ae:4f:fe:5c:94:3c:4c:71:9c:f2:77:39:e4:
06:ad:6a:33:14:a0:1f:1d:e9:75:fc:a4:c9:73:7e:
b2:ea:cc:78:fc:32:c5:8d:31:2e:01:87:7f:52:cd:
db:ea:5e:f1:c7:c9:67:56:4c:30:53:96:be:39:69:
82:78:bd:95:51:c0:69:fa:e5:b2:27:0e:5f:7a:01:
af:f2:bc:34:35:48:a2:87:c9:3a:67:06:42:80:74:
6b:e7:bd:43:3d:42:4d:2e:b3:c4:93:2b:87:fc:2d:
06:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FA:75:45:99:67:35:1F:02:38:1D:CD:FA:B3:90:27:DD:9D:FA:1D
X509v3 Authority Key Identifier:
keyid:53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:ba:db:3f:57:7f:6b:c6:8c:fd:48:de:a0:62:65:dd:2d:6b:
6f:60:42:00:f1:9e:6e:69:9c:5c:0a:df:35:0f:cb:28:7a:a9:
42:7a:0b:20:e0:a4:f3:83:91:03:c4:ee:16:d9:64:02:49:3e:
63:d6:79:b1:60:b1:e6:49:4d:26:23:9a:d1:ac:d6:5c:50:2b:
89:2c:8f:7c:5e:c4:e1:c9:62:d8:33:2f:05:ae:70:59:b3:00:
dc:05:03:46:ed:10:18:43:03:fd:b8:da:95:80:60:87:43:f7:
99:64:c8:7e:8d:76:99:f6:38:70:ea:1e:56:ff:57:eb:36:38:
f7:7a:69:5b:55:61:64:72:30:58:5c:17:e0:80:0b:b1:6e:7d:
45:4f:f6:07:d9:2b:31:4f:08:62:33:c8:92:99:88:37:a6:d4:
3e:ba:5a:f9:c0:9a:84:a2:27:56:95:dd:67:4f:e6:fa:6d:07:
a4:63:0e:aa:bc:f6:99:9e:75:20:3e:ee:a5:20:cc:0b:bc:40:
24:f5:0d:9b:fd:07:c4:b5:93:c9:d9:0a:df:66:98:f6:7f:71:
79:0b:cc:4f:cb:15:12:68:9c:d2:f0:55:1e:91:37:a0:8e:2a:
8f:0f:e3:10:97:84:87:f5:4e:35:02:e2:da:2a:fb:2e:f9:b8:
fc:ea:b4:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1nozVJPJKmyEF+fnQNb8XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZjhiYWNjMzY1OWRjYjMzODlhYTQ3ZTM2NjRhNWY4Mjg0
ZTAwYWYwHhcNMjUwNDI3MDUwMDQ3WhcNMjUwNDI4MDUwMDQ3WjAzMTEwLwYDVQQD
Eyg2ZGZhNzU0NTk5NjczNTFmMDIzODFkY2RmYWIzOTAyN2RkOWRmYTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc021fxrkBLUyP+vHGbKiLO54YXE
UNtO3b1g6DtAF+pEvc/TH4XqhUmZQ9UORYNFqrfFKm74tPPoDdm/3dQF4EW3MhnU
wgwM8OGSh7py7/Ac/wOtFRp9GOz8YR9Bit2k9/1CkI3p0OepsIb3K3qoga2PPQKR
1kTGH3EDwg84/TLKCfQsDWvSCshkmj55ocqPSeBX6/kgcq5P/lyUPExxnPJ3OeQG
rWozFKAfHel1/KTJc36y6sx4/DLFjTEuAYd/Us3b6l7xx8lnVkwwU5a+OWmCeL2V
UcBp+uWyJw5fegGv8rw0NUiih8k6ZwZCgHRr571DPUJNLrPEkyuH/C0GpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG36dUWZZzUfAjgdzfqzkCfdnfodMB8GA1UdIwQY
MBaAFFP4usw2WdyzOJqkfjZkpfgoTgCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVV9pNnpEWlozTE00bXFSLU5tU2wtQ2hPQUs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9iMzVkNmEtOGJkNC00MmJkLWFiZGQt
MTUxMDdiY2E0NWI1LzEvVV9pNnpEWlozTE00bXFSLU5tU2wtQ2hPQUs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9iMzVkNmEtOGJkNC00MmJkLWFiZGQtMTUxMDdiY2E0NWI1
LzEvVV9pNnpEWlozTE00bXFSLU5tU2wtQ2hPQUs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz7rbP1d/
a8aM/UjeoGJl3S1rb2BCAPGebmmcXArfNQ/LKHqpQnoLIOCk84ORA8TuFtlkAkk+
Y9Z5sWCx5klNJiOa0azWXFAriSyPfF7E4cli2DMvBa5wWbMA3AUDRu0QGEMD/bja
lYBgh0P3mWTIfo12mfY4cOoeVv9X6zY493ppW1VhZHIwWFwX4IALsW59RU/2B9kr
MU8IYjPIkpmIN6bUPrpa+cCahKInVpXdZ0/m+m0HpGMOqrz2mZ51ID7upSDMC7xA
JPUNm/0HxLWTydkK32aY9n9xeQvMT8sVEmic0vBVHpE3oI4qjw/jEJeEh/VONQLi
2ir7Lvm4/Oq0Pg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:14:12 2025 by rpki-client