Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
File: RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json)
Hash identifier: jX88GYEbLB2c7UyCVszs4K35cGIlaeVkaFVSgZT9BU0=
Subject key identifier: C4:A0:E3:9E:97:F3:58:C8:93:5B:29:7D:5F:C4:2F:33:A4:BB:47:FF
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial: 0196778D17E1EAE2681D7E971C5DF6F73DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
Manifest number: 097A
Signing time: Sun 27 Apr 2025 14:00:57 +0000
Manifest this update: Sun 27 Apr 2025 14:00:57 +0000
Manifest next update: Mon 28 Apr 2025 14:00:57 +0000
Files and hashes: 1: 0k2RQNwafgZ-e81VbpAz2vrqb3k.roa (hash: F4mQI6q3szQ65tq8yOXleP2UVhZpsKUbEGpteoYml/c=)
2: 8V7ejxEv_GEeH4w675eVpJxAMGA.roa (hash: dpmJ8CsMRM0G3BSxOyWtbvqZ7FYrfuSdRQhIjIL3rWg=)
3: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: r7lEGLnTXF+wmYKnEJoL5N7Qdlb9rEx6c2CoY6cBWnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8d:17:e1:ea:e2:68:1d:7e:97:1c:5d:f6:f7:3d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Validity
Not Before: Apr 27 14:00:57 2025 GMT
Not After : Apr 28 14:00:57 2025 GMT
Subject: CN=c4a0e39e97f358c8935b297d5fc42f33a4bb47ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ed:83:88:a4:5e:d1:9d:99:8a:2e:92:71:da:
e7:1a:ce:ac:25:81:9e:bd:39:66:37:6f:6e:c5:d8:
e7:b6:90:bc:e5:6a:bd:53:aa:80:17:c3:e2:fa:a1:
8f:a5:da:60:8e:c1:b2:11:c3:94:47:e4:15:2c:b4:
68:66:12:f0:87:94:56:60:12:da:d6:94:a1:bf:e6:
9e:76:40:c9:e6:d9:7e:84:81:fd:1c:4c:c7:68:02:
57:95:4a:6e:ac:26:49:0a:17:69:70:20:1c:83:b7:
b5:76:50:ba:b4:4a:47:7d:7b:39:a8:2d:fe:e6:92:
6d:83:12:21:47:b5:f8:3a:8d:16:ad:ee:49:27:f5:
dc:68:81:dd:a8:7f:da:80:87:3f:97:b2:19:b8:a1:
ea:57:12:78:9d:07:1b:6a:4e:9b:7d:4e:e8:a2:d3:
29:ea:98:f2:35:8f:d1:9f:5d:e1:49:b2:36:6c:b3:
fd:40:2f:b0:68:11:b8:c3:42:af:d3:29:9e:5e:05:
38:2c:be:a0:86:ad:06:26:cf:d4:c9:7e:f1:f9:7e:
c2:74:49:bd:86:9c:4e:88:ec:18:34:77:fb:00:06:
b3:d6:70:65:31:ec:34:7c:9a:65:c0:ff:bc:7c:03:
16:fc:9e:51:8f:18:9e:da:5c:a1:3f:e3:e1:01:ed:
9b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A0:E3:9E:97:F3:58:C8:93:5B:29:7D:5F:C4:2F:33:A4:BB:47:FF
X509v3 Authority Key Identifier:
keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a2:18:0b:bb:66:64:67:b1:a5:7c:2e:05:86:3e:6e:bb:8a:
74:e8:6c:a3:8b:36:2a:72:8c:b9:96:1e:64:1c:f2:1a:39:e7:
1d:2b:ff:b6:90:db:ac:87:ac:f1:12:df:f8:92:ff:c3:46:66:
d3:5a:23:18:2f:37:dd:71:77:43:bc:a1:4c:17:57:2b:68:fb:
49:1a:f7:36:b0:03:f2:83:4e:49:79:42:24:fc:c0:47:35:15:
94:97:dd:2d:ba:66:9e:95:26:3a:33:da:84:d1:fa:86:7a:85:
94:3f:3e:c8:08:f8:69:95:5d:c4:b0:8c:a1:7a:51:4e:40:54:
5c:96:a1:f1:84:42:0b:a8:69:16:1e:a3:de:8f:ce:17:db:89:
d4:1a:ff:ab:e7:9b:6c:94:98:5a:a6:b4:4e:e2:7c:ee:93:0a:
86:e0:83:9d:02:95:71:64:00:88:db:9f:07:99:7f:2e:50:95:
39:5c:1d:74:db:ca:65:91:1c:92:04:94:8f:3f:44:01:d8:4b:
40:2c:01:ed:69:53:f4:7f:7e:35:5e:b8:41:c9:53:b6:05:6d:
89:c9:e7:ea:04:af:22:64:fd:dd:cd:ed:11:72:a7:49:89:f8:
2f:3f:42:c2:e3:16:8c:96:10:d7:5d:06:2c:2c:86:dc:02:bd:
22:6d:42:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3jRfh6uJoHX6XHF329z3vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NDM0ZmQ5OGMxMWQ4ZDcyZGYzODBjYTgzZWRmNzlmY2Mw
MDg1OWYwHhcNMjUwNDI3MTQwMDU3WhcNMjUwNDI4MTQwMDU3WjAzMTEwLwYDVQQD
EyhjNGEwZTM5ZTk3ZjM1OGM4OTM1YjI5N2Q1ZmM0MmYzM2E0YmI0N2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+2DiKRe0Z2Zii6ScdrnGs6sJYGe
vTlmN29uxdjntpC85Wq9U6qAF8Pi+qGPpdpgjsGyEcOUR+QVLLRoZhLwh5RWYBLa
1pShv+aedkDJ5tl+hIH9HEzHaAJXlUpurCZJChdpcCAcg7e1dlC6tEpHfXs5qC3+
5pJtgxIhR7X4Oo0Wre5JJ/XcaIHdqH/agIc/l7IZuKHqVxJ4nQcbak6bfU7ootMp
6pjyNY/Rn13hSbI2bLP9QC+waBG4w0Kv0ymeXgU4LL6ghq0GJs/UyX7x+X7CdEm9
hpxOiOwYNHf7AAaz1nBlMew0fJplwP+8fAMW/J5Rjxie2lyhP+PhAe2bxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSg456X81jIk1spfV/ELzOku0f/MB8GA1UdIwQY
MBaAFERDT9mMEdjXLfOAyoPt95/MAIWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkVOUDJZd1IyTmN0ODRES2ctMzNuOHdBaFo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jZjUyMGMtMjg5My00MmJmLWE4MGYt
MjM3YmIzMGQ3MzA1LzEvUkVOUDJZd1IyTmN0ODRES2ctMzNuOHdBaFo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9jZjUyMGMtMjg5My00MmJmLWE4MGYtMjM3YmIzMGQ3MzA1
LzEvUkVOUDJZd1IyTmN0ODRES2ctMzNuOHdBaFo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKIYC7tm
ZGexpXwuBYY+bruKdOhso4s2KnKMuZYeZBzyGjnnHSv/tpDbrIes8RLf+JL/w0Zm
01ojGC833XF3Q7yhTBdXK2j7SRr3NrAD8oNOSXlCJPzARzUVlJfdLbpmnpUmOjPa
hNH6hnqFlD8+yAj4aZVdxLCMoXpRTkBUXJah8YRCC6hpFh6j3o/OF9uJ1Br/q+eb
bJSYWqa0TuJ87pMKhuCDnQKVcWQAiNufB5l/LlCVOVwddNvKZZEckgSUjz9EAdhL
QCwB7WlT9H9+NV64QclTtgVticnn6gSvImT93c3tEXKnSYn4Lz9CwuMWjJYQ110G
LCyG3AK9Im1CXA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:24:07 2025 by rpki-client