Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
File: cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft (raw, json)
Hash identifier: 5We1nw+K3jwKUwDe2PdAgztG/bnOCinWGCiLnukg4wY=
Subject key identifier: 38:32:CA:0F:E0:98:ED:78:73:58:68:90:F4:A7:AB:90:BF:58:8C:C3
Authority key identifier: 70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
Certificate issuer: /CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Certificate serial: 019679E957A84E6C5FC2E48CD4EAC1A36A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 01:00:57 +0000
Manifest this update: Mon 28 Apr 2025 01:00:57 +0000
Manifest next update: Tue 29 Apr 2025 01:00:57 +0000
Files and hashes: 1: cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl (hash: 0OCgjlnSV8SveuF9msB056KSb7UIWrY4l0q+wDS3zL8=)
2: iXldcpMNtu5kim9vQXhjht5Ha_0.roa (hash: OZZlPHrzKaaexsTtY7l0u4aOhC15J2UaGXg/fHHU/6k=)
3: o3Ruly6xo3HjQfyltbyyXFgE2AY.roa (hash: 83gTacIwQrempq02V5LTV8DoLs2npW478Kw0EoVa9VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:57:a8:4e:6c:5f:c2:e4:8c:d4:ea:c1:a3:6a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Validity
Not Before: Apr 28 01:00:57 2025 GMT
Not After : Apr 29 01:00:57 2025 GMT
Subject: CN=3832ca0fe098ed7873586890f4a7ab90bf588cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:32:31:26:37:99:dc:5e:2b:12:af:4c:8d:9f:
28:f3:56:dd:13:48:36:10:77:16:29:97:c5:f2:a3:
45:ed:87:0d:18:3a:b1:d4:21:c9:50:35:2d:07:50:
ad:eb:3a:4c:11:ba:83:7a:37:68:4c:15:7c:8a:97:
ed:54:f8:87:59:40:78:7f:05:ee:9a:bd:cd:99:76:
d6:4b:b0:48:e5:78:90:98:a2:94:d5:21:c6:f1:6b:
3e:c6:3a:90:db:bb:24:62:94:61:83:b3:0d:2a:36:
2f:db:48:72:fd:ce:1b:da:5a:4a:90:6f:38:3a:b8:
e1:79:8e:89:28:ca:4c:ce:be:4c:c4:2d:0a:38:64:
22:45:87:c4:f8:d3:df:72:29:65:45:6a:dc:ad:0b:
a7:0c:cf:40:5c:6b:b4:84:3b:f1:d6:d4:5d:90:45:
44:dc:f9:ef:aa:2e:8e:f2:53:a2:4f:e0:46:6a:3b:
2a:47:5d:87:90:f6:d3:e1:8a:dc:61:b1:87:57:51:
6b:35:8a:3a:59:9f:a6:7f:cc:63:03:3d:82:34:14:
f9:09:d7:53:eb:50:49:4a:e4:82:a5:c9:47:37:25:
26:e1:55:8e:68:76:17:7c:3e:42:2e:fc:c2:79:79:
65:08:3e:ba:18:a7:4f:c1:ea:49:78:dd:d7:3d:d3:
e8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:32:CA:0F:E0:98:ED:78:73:58:68:90:F4:A7:AB:90:BF:58:8C:C3
X509v3 Authority Key Identifier:
keyid:70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f8:10:0a:9a:7e:26:a7:31:e6:00:e9:b0:a9:87:c8:f3:fa:
d5:89:2f:78:8b:cd:94:2a:70:a1:d5:dc:23:5c:96:35:5e:87:
9d:c5:a0:94:b2:1a:df:45:b9:17:57:35:f3:1f:e3:57:1d:0c:
d7:27:84:ef:e8:a4:46:49:3f:14:ee:b6:03:a1:10:fb:6a:8b:
b4:62:79:21:3d:a7:da:28:dd:47:20:e4:ef:1e:da:bc:77:e8:
6b:74:02:59:9c:bc:85:d9:2c:d1:c6:39:04:1c:1a:2c:fd:60:
67:57:5a:cb:05:ec:45:03:13:0c:8b:ce:f5:4d:3b:c8:56:29:
2f:b4:21:77:82:5b:e1:bb:f7:d3:cd:bf:d3:e5:3d:b3:cc:ed:
00:2d:3a:2d:33:05:ea:f8:af:60:e0:2c:45:24:a2:bc:c4:4d:
d3:93:a6:8e:83:5e:63:ca:2a:92:6f:44:39:19:c3:4e:ee:fc:
ce:65:26:44:90:35:41:ed:b2:ba:aa:ab:45:b2:f9:a6:c8:a8:
fc:77:0e:f4:61:98:f0:2f:46:50:2b:b4:61:c0:59:03:49:c7:
97:bf:2b:c2:99:83:3a:6a:a2:2b:c8:bb:99:49:54:13:22:6f:
bc:7a:48:c2:a9:50:e4:e7:ad:fb:f2:9e:13:1d:0b:aa:ad:d7:
ed:85:58:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ56VeoTmxfwuSM1OrBo2pXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMGMwMzA5MzBhOWQyZTRkYTg4ZDgxODUyYTQ0YzNmNzhi
ZmI0NDAwHhcNMjUwNDI4MDEwMDU3WhcNMjUwNDI5MDEwMDU3WjAzMTEwLwYDVQQD
EygzODMyY2EwZmUwOThlZDc4NzM1ODY4OTBmNGE3YWI5MGJmNTg4Y2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zIxJjeZ3F4rEq9MjZ8o81bdE0g2
EHcWKZfF8qNF7YcNGDqx1CHJUDUtB1Ct6zpMEbqDejdoTBV8ipftVPiHWUB4fwXu
mr3NmXbWS7BI5XiQmKKU1SHG8Ws+xjqQ27skYpRhg7MNKjYv20hy/c4b2lpKkG84
OrjheY6JKMpMzr5MxC0KOGQiRYfE+NPfcillRWrcrQunDM9AXGu0hDvx1tRdkEVE
3Pnvqi6O8lOiT+BGajsqR12HkPbT4YrcYbGHV1FrNYo6WZ+mf8xjAz2CNBT5CddT
61BJSuSCpclHNyUm4VWOaHYXfD5CLvzCeXllCD66GKdPwepJeN3XPdPoeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgyyg/gmO14c1hokPSnq5C/WIzDMB8GA1UdIwQY
MBaAFHAMAwkwqdLk2ojYGFKkTD94v7RAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0F3RENUQ3AwdVRhaU5nWVVxUk1QM2lfdEVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8wNjhjYjktNmNiYS00NTNkLTg1OGEt
YzViYmY5NWY4NTg0LzEvY0F3RENUQ3AwdVRhaU5nWVVxUk1QM2lfdEVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8wNjhjYjktNmNiYS00NTNkLTg1OGEtYzViYmY5NWY4NTg0
LzEvY0F3RENUQ3AwdVRhaU5nWVVxUk1QM2lfdEVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/gQCpp+
Jqcx5gDpsKmHyPP61YkveIvNlCpwodXcI1yWNV6HncWglLIa30W5F1c18x/jVx0M
1yeE7+ikRkk/FO62A6EQ+2qLtGJ5IT2n2ijdRyDk7x7avHfoa3QCWZy8hdks0cY5
BBwaLP1gZ1daywXsRQMTDIvO9U07yFYpL7Qhd4Jb4bv3082/0+U9s8ztAC06LTMF
6vivYOAsRSSivMRN05OmjoNeY8oqkm9EORnDTu78zmUmRJA1Qe2yuqqrRbL5psio
/HcO9GGY8C9GUCu0YcBZA0nHl78rwpmDOmqiK8i7mUlUEyJvvHpIwqlQ5Oet+/Ke
Ex0Lqq3X7YVYzQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:27:58 2025 by rpki-client