Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
File: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft (raw, json)
Hash identifier: 7XIj6gsmml8fkFNxzGHTK6oPWj3wuFsNo0tveK1dGRg=
Subject key identifier: 2B:DA:83:E4:B9:93:A6:20:05:C9:35:2E:57:D8:10:EC:3D:30:B2:30
Authority key identifier: D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
Certificate issuer: /CN=d16bdf54381f63074adf9a1bd9777877a720046c
Certificate serial: 01968BEF70998EC84FAD4FE631264BBD8529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
Manifest number: 020F
Signing time: Thu 01 May 2025 13:00:46 +0000
Manifest this update: Thu 01 May 2025 13:00:46 +0000
Manifest next update: Fri 02 May 2025 13:00:46 +0000
Files and hashes: 1: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl (hash: XoKZPcrRFg+TaD3iawBifyE1RHFoy2tH1TCoyFx9UMU=)
2: fMqs9FskGDIW9ZbaQwk0qUEC3ks.roa (hash: CtgaQ4J8AgrMFT4kVvGV6ADv6GPEnX8MMv9l/y32iWU=)
3: idiMTHuxguw5KJd3P5FoGJbinyo.roa (hash: n+9BnqU/yI6WzHcfhLc6mXo8IOBS4JMkN/uhkjIXEGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:ef:70:99:8e:c8:4f:ad:4f:e6:31:26:4b:bd:85:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bdf54381f63074adf9a1bd9777877a720046c
Validity
Not Before: May 1 13:00:46 2025 GMT
Not After : May 2 13:00:46 2025 GMT
Subject: CN=2bda83e4b993a62005c9352e57d810ec3d30b230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3e:9e:f3:2f:a6:42:96:73:2a:7b:b1:a2:b5:
14:d4:21:0c:78:5d:e2:b3:19:a6:db:50:59:aa:84:
37:17:63:6c:2e:97:71:c4:f2:5e:fb:ef:a7:df:86:
b1:82:21:cd:22:b0:dd:67:10:85:ba:a4:bb:c0:4d:
4a:ed:70:0c:8b:33:49:a0:34:05:ed:90:0a:8e:d7:
8f:09:b4:f9:04:32:7b:41:a3:52:d2:ca:97:21:fe:
97:49:a1:1b:a7:95:0f:19:7b:1b:b9:92:bc:9c:39:
1d:98:af:6c:38:47:2c:bc:17:ad:b6:c5:8c:a6:be:
a1:27:67:32:96:bb:11:8d:42:19:a5:0f:a3:1a:3b:
15:7c:5b:10:40:fc:e8:96:98:50:27:94:4e:ce:a1:
9c:8c:68:94:13:8a:f1:c4:8d:3e:7e:57:be:c6:2c:
ff:d8:4d:79:17:0c:5c:24:6c:c2:53:0a:a9:f4:94:
37:f2:eb:43:a7:42:1b:8d:52:45:ca:36:92:29:c5:
af:04:40:f7:e7:f1:c8:eb:ae:60:cf:07:2f:48:e2:
fd:6e:a8:26:21:ab:e9:7a:fb:5a:87:04:3f:92:66:
17:4f:65:25:51:96:0a:c8:30:6a:28:73:68:86:20:
4a:b5:be:31:6e:86:a7:0a:7d:51:22:c5:9d:af:67:
ce:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DA:83:E4:B9:93:A6:20:05:C9:35:2E:57:D8:10:EC:3D:30:B2:30
X509v3 Authority Key Identifier:
keyid:D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:87:63:74:26:c6:08:53:16:d3:b2:8c:3d:59:22:b7:7f:8f:
11:c1:d4:ef:f5:24:f6:17:d9:10:00:e7:e3:2f:37:0c:af:fc:
19:da:d4:11:62:25:38:4c:75:fc:f0:34:09:fd:6b:83:fb:ce:
3f:40:cc:30:2a:ee:d0:2e:39:8b:c9:8a:42:7f:2a:38:9b:91:
c0:88:34:bb:30:1e:07:d6:6c:1e:95:8a:03:07:01:e8:21:99:
7a:c3:ac:a1:e5:7d:ad:c2:c9:72:bc:d9:66:12:b7:fd:6f:c1:
e0:11:78:f5:7b:64:82:a5:f8:00:94:cb:55:47:f1:e8:55:bd:
f1:4c:4a:90:61:2b:e3:ca:c0:e7:10:26:cb:76:9c:40:c2:3e:
bc:5f:07:81:d5:e8:a8:74:bd:ca:36:7b:4f:40:0f:e0:00:0f:
61:90:1b:4d:a1:41:be:df:9a:6e:93:19:7a:01:db:19:eb:78:
d4:de:4b:cf:6a:79:36:94:b4:6d:ea:5a:aa:d5:7f:98:1e:ef:
e8:36:2c:7a:29:fb:2a:9d:96:d0:d7:43:70:47:38:24:8c:28:
89:d1:2c:97:42:32:ad:7c:73:d2:46:8a:31:1f:3e:59:1b:64:
ec:11:b2:2b:bd:dc:9f:b9:52:6d:5f:35:17:50:cf:c6:24:9d:
6a:f1:b1:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaL73CZjshPrU/mMSZLvYUpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNmJkZjU0MzgxZjYzMDc0YWRmOWExYmQ5Nzc3ODc3YTcy
MDA0NmMwHhcNMjUwNTAxMTMwMDQ2WhcNMjUwNTAyMTMwMDQ2WjAzMTEwLwYDVQQD
EygyYmRhODNlNGI5OTNhNjIwMDVjOTM1MmU1N2Q4MTBlYzNkMzBiMjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5T6e8y+mQpZzKnuxorUU1CEMeF3i
sxmm21BZqoQ3F2NsLpdxxPJe+++n34axgiHNIrDdZxCFuqS7wE1K7XAMizNJoDQF
7ZAKjtePCbT5BDJ7QaNS0sqXIf6XSaEbp5UPGXsbuZK8nDkdmK9sOEcsvBettsWM
pr6hJ2cylrsRjUIZpQ+jGjsVfFsQQPzolphQJ5ROzqGcjGiUE4rxxI0+fle+xiz/
2E15FwxcJGzCUwqp9JQ38utDp0IbjVJFyjaSKcWvBED35/HI665gzwcvSOL9bqgm
IavpevtahwQ/kmYXT2UlUZYKyDBqKHNohiBKtb4xboanCn1RIsWdr2fOxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvag+S5k6YgBck1LlfYEOw9MLIwMB8GA1UdIwQY
MBaAFNFr31Q4H2MHSt+aG9l3eHenIARsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFd2ZlZEZ2ZZd2RLMzVvYjJYZDRkNmNnQkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wZmU4ZWYtNTkxMS00NGM0LWFmYTMt
NzlkZmQxNGMzOTYwLzEvMFd2ZlZEZ2ZZd2RLMzVvYjJYZDRkNmNnQkd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8wZmU4ZWYtNTkxMS00NGM0LWFmYTMtNzlkZmQxNGMzOTYw
LzEvMFd2ZlZEZ2ZZd2RLMzVvYjJYZDRkNmNnQkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4djdCbG
CFMW07KMPVkit3+PEcHU7/Uk9hfZEADn4y83DK/8GdrUEWIlOEx1/PA0Cf1rg/vO
P0DMMCru0C45i8mKQn8qOJuRwIg0uzAeB9ZsHpWKAwcB6CGZesOsoeV9rcLJcrzZ
ZhK3/W/B4BF49XtkgqX4AJTLVUfx6FW98UxKkGEr48rA5xAmy3acQMI+vF8HgdXo
qHS9yjZ7T0AP4AAPYZAbTaFBvt+abpMZegHbGet41N5Lz2p5NpS0bepaqtV/mB7v
6DYsein7Kp2W0NdDcEc4JIwoidEsl0IyrXxz0kaKMR8+WRtk7BGyK73cn7lSbV81
F1DPxiSdavGxyw==
-----END CERTIFICATE-----
Generated at Thu May 1 20:33:57 2025 by rpki-client