Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
File: 240I7cQ5OoZxKW-OrLvs-U12Vio.mft (raw, json)
Hash identifier: wTNE6VHjvK3fUNGBM2EhYILqIFLiGokXs3Yed6AtMPs=
Subject key identifier: 5F:2B:F7:A3:A5:6D:6C:3C:67:E3:72:A5:10:53:81:CE:2D:5E:7A:0E
Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
Certificate issuer: /CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Certificate serial: 0196741E0D4F6552D23F1B575B71256EBEC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
Manifest number: 11E6
Signing time: Sat 26 Apr 2025 22:00:48 +0000
Manifest this update: Sat 26 Apr 2025 22:00:48 +0000
Manifest next update: Sun 27 Apr 2025 22:00:48 +0000
Files and hashes: 1: 240I7cQ5OoZxKW-OrLvs-U12Vio.crl (hash: Dq8w2dA/INJODjsFcXtZoUfsWWwH1iKxV151AXdvwi4=)
2: EAKe9346ONHQ_VuM_WxVCj_cv4Y.roa (hash: 5H5/ZpQAnmY/nM8N1VtyRS6/84qLoSsU0G+AmpT2T/k=)
3: RBJ-L0gnLCM7Rv9f1a6uxn7Yu-0.roa (hash: 4xHToao8czKd/Xx3uSwWIpAVRfAfaES7tBaw71UFRvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:0d:4f:65:52:d2:3f:1b:57:5b:71:25:6e:be:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Validity
Not Before: Apr 26 22:00:48 2025 GMT
Not After : Apr 27 22:00:48 2025 GMT
Subject: CN=5f2bf7a3a56d6c3c67e372a5105381ce2d5e7a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0b:d7:ed:5c:0a:28:33:b3:84:fc:a5:73:75:
89:03:02:96:84:e9:26:fc:51:9e:16:cc:9e:43:03:
c5:8c:6f:c9:3c:2a:06:33:01:25:53:85:d9:78:bb:
b0:64:dd:07:60:5f:f3:47:0c:6b:d0:be:6a:5f:e4:
67:45:cd:18:4d:5c:79:ef:dc:c6:20:01:af:f2:ad:
34:52:b1:bf:d5:d0:af:25:dd:8d:f0:60:02:24:a0:
f1:da:17:37:a8:b1:ad:cb:9b:b5:bc:0a:12:b7:c0:
76:ff:d5:34:73:51:38:a5:75:65:a5:00:87:b9:79:
f8:e5:33:ea:ac:87:28:6e:5e:75:49:e7:0e:16:0c:
88:08:a0:7e:7b:85:82:38:4a:07:ec:a4:d7:23:44:
c7:be:71:f0:42:40:5f:cb:78:f6:e8:3c:74:5d:54:
84:3b:58:be:25:8b:3c:92:10:68:38:1a:76:b2:ae:
1a:ee:99:01:d9:c3:db:0b:ed:e7:f1:2b:fa:ee:de:
d2:1c:5d:86:ae:a2:29:4d:80:db:5f:d6:14:1e:ba:
b6:7d:1e:66:ca:94:c7:58:d8:e2:4a:8c:52:f3:23:
04:3b:06:fa:d4:95:61:3d:ae:d2:81:67:ed:38:a0:
de:90:03:fd:91:da:59:46:bd:cb:fd:8d:4a:30:cb:
bc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2B:F7:A3:A5:6D:6C:3C:67:E3:72:A5:10:53:81:CE:2D:5E:7A:0E
X509v3 Authority Key Identifier:
keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8e:88:e1:76:65:1a:51:ae:f3:b7:87:62:4e:ec:80:35:11:
19:5c:1c:08:0a:cf:54:4b:fc:83:a0:e7:96:b7:60:3e:e8:d3:
6c:d4:4c:ff:83:18:f3:7e:09:e9:c4:c5:08:0a:00:1e:ec:c2:
ac:6e:26:a4:c1:cc:78:33:2b:13:ef:00:70:3e:17:5d:7d:8d:
a8:ef:41:0a:5f:83:d4:68:ca:ea:9c:fb:d6:63:d2:ab:8c:6b:
6f:74:d6:65:57:0f:a9:2c:26:af:77:77:96:6f:a7:cd:98:ab:
4c:e3:3c:0a:d1:40:53:96:45:6f:ca:4d:ef:cb:df:19:1c:04:
f4:03:c1:2d:3b:34:e7:46:44:1f:17:24:91:c8:13:8d:7f:16:
07:37:02:9a:7c:f5:f2:f0:34:53:47:df:61:39:cf:32:00:63:
ba:d8:f4:a1:9d:3a:27:08:fb:b0:64:79:74:ce:55:0b:62:4b:
f6:1f:1e:1c:b9:0b:33:4d:44:fe:bb:ad:a7:90:3a:b1:cb:bc:
0c:63:93:bf:de:f5:18:3f:d7:56:bb:f6:93:4c:52:15:7a:0a:
d1:fb:53:31:48:b6:2a:86:8b:0e:fe:ed:a7:c7:69:29:37:f1:
fc:b8:18:f1:10:5e:dd:3d:79:99:ee:f9:e0:01:3d:d7:b1:85:
7c:bb:d7:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0Hg1PZVLSPxtXW3Elbr7IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOGQwOGVkYzQzOTNhODY3MTI5NmY4ZWFjYmJlY2Y5NGQ3
NjU2MmEwHhcNMjUwNDI2MjIwMDQ4WhcNMjUwNDI3MjIwMDQ4WjAzMTEwLwYDVQQD
Eyg1ZjJiZjdhM2E1NmQ2YzNjNjdlMzcyYTUxMDUzODFjZTJkNWU3YTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgvX7VwKKDOzhPylc3WJAwKWhOkm
/FGeFsyeQwPFjG/JPCoGMwElU4XZeLuwZN0HYF/zRwxr0L5qX+RnRc0YTVx579zG
IAGv8q00UrG/1dCvJd2N8GACJKDx2hc3qLGty5u1vAoSt8B2/9U0c1E4pXVlpQCH
uXn45TPqrIcobl51SecOFgyICKB+e4WCOEoH7KTXI0THvnHwQkBfy3j26Dx0XVSE
O1i+JYs8khBoOBp2sq4a7pkB2cPbC+3n8Sv67t7SHF2GrqIpTYDbX9YUHrq2fR5m
ypTHWNjiSoxS8yMEOwb61JVhPa7SgWftOKDekAP9kdpZRr3L/Y1KMMu8FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8r96OlbWw8Z+NypRBTgc4tXnoOMB8GA1UdIwQY
MBaAFNuNCO3EOTqGcSlvjqy77PlNdlYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83ZDU2MDctMGE4YS00NDQ3LTg2NTEt
YzYzNDlkYjk0OTliLzEvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83ZDU2MDctMGE4YS00NDQ3LTg2NTEtYzYzNDlkYjk0OTli
LzEvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAY6I4XZl
GlGu87eHYk7sgDURGVwcCArPVEv8g6DnlrdgPujTbNRM/4MY834J6cTFCAoAHuzC
rG4mpMHMeDMrE+8AcD4XXX2NqO9BCl+D1GjK6pz71mPSq4xrb3TWZVcPqSwmr3d3
lm+nzZirTOM8CtFAU5ZFb8pN78vfGRwE9APBLTs050ZEHxckkcgTjX8WBzcCmnz1
8vA0U0ffYTnPMgBjutj0oZ06Jwj7sGR5dM5VC2JL9h8eHLkLM01E/rutp5A6scu8
DGOTv971GD/XVrv2k0xSFXoK0ftTMUi2KoaLDv7tp8dpKTfx/LgY8RBe3T15me75
4AE917GFfLvXYw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:21:51 2025 by rpki-client