Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
File: RJ5CUryyLqLGz7OSTI-Evd56dHE.mft (raw, json)
Hash identifier: DX6F+JnqnEn5AMCLhOmgHwmEriCTlTrfmrqbO5x//oI=
Subject key identifier: 03:DF:67:DE:97:64:2B:E2:EB:3C:82:3C:3A:B9:2A:85:36:72:B1:05
Authority key identifier: 44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71
Certificate issuer: /CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471
Certificate serial: 0196895C27489B0DAF6BA68346528872CE4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
Manifest number: 151B
Signing time: Thu 01 May 2025 01:00:40 +0000
Manifest this update: Thu 01 May 2025 01:00:40 +0000
Manifest next update: Fri 02 May 2025 01:00:40 +0000
Files and hashes: 1: IuxDHR_CV3eNS1S5clbvfJ1hK_k.roa (hash: Hz3aDArINU9rGaWmuAjDTNSRDFd5qodJqjOuXUvn7hM=)
2: RJ5CUryyLqLGz7OSTI-Evd56dHE.crl (hash: IcQQWhEJ0407wp1rC4No89G8S0LhetxWTV6SqlMyU00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5c:27:48:9b:0d:af:6b:a6:83:46:52:88:72:ce:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471
Validity
Not Before: May 1 01:00:40 2025 GMT
Not After : May 2 01:00:40 2025 GMT
Subject: CN=03df67de97642be2eb3c823c3ab92a853672b105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fa:43:f6:9c:e0:8d:6b:61:af:8f:b3:88:a7:
44:96:51:ce:b7:fe:99:50:bf:e0:19:8d:05:55:02:
cc:3e:f3:4a:30:f0:42:26:4d:4c:e1:29:4f:b1:50:
ab:dc:bc:94:1d:5b:4d:8b:99:b2:cf:4a:41:94:41:
e8:36:1e:76:1d:eb:52:1d:12:39:5f:8f:cb:8e:03:
6f:50:02:34:c4:62:f1:48:c5:97:6d:4c:18:dc:be:
e2:d8:f2:6c:55:b3:70:e5:16:1a:f4:6a:91:0b:de:
a1:5f:49:85:36:73:71:aa:28:d4:4a:62:58:82:11:
0b:67:34:70:80:d4:06:34:15:09:57:b3:5d:16:b6:
45:95:f8:97:55:e9:93:00:9a:98:8f:2d:b5:ec:33:
b2:e3:cb:1d:6b:1f:ed:ac:e5:cc:ad:96:04:f3:e4:
20:2c:ca:2e:ee:e5:69:f9:73:fa:b7:fd:04:92:90:
72:b8:12:f6:07:5e:63:bf:66:db:85:f0:26:99:63:
02:e8:42:1a:c9:0b:10:f0:49:cd:3c:ee:a5:98:56:
5c:21:c0:89:8d:3b:aa:ef:43:3a:fb:50:e4:76:de:
fd:e6:9a:23:bf:71:64:e7:c7:41:a0:2e:bd:8c:b3:
57:8d:53:79:9b:0c:d0:eb:6d:98:b6:3f:77:6f:38:
76:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DF:67:DE:97:64:2B:E2:EB:3C:82:3C:3A:B9:2A:85:36:72:B1:05
X509v3 Authority Key Identifier:
keyid:44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:30:22:95:cc:db:1f:6c:e4:22:18:cc:e8:09:07:fe:9a:cf:
95:05:60:94:c6:40:87:17:bd:c4:65:73:d8:a5:1b:9c:99:7c:
e6:f3:f9:ce:fa:e7:a4:d6:81:c8:95:ad:a2:92:ce:c0:6d:97:
46:f1:d8:f3:4e:58:d2:e5:bb:9f:f0:90:a3:ab:9e:27:03:34:
49:0d:77:6a:4c:a5:cd:0d:59:36:6e:17:81:56:25:b7:f4:04:
6e:ff:6d:bf:1f:f3:ed:c2:a8:24:64:40:25:d6:13:cb:94:37:
df:aa:fd:58:6a:2a:1d:e1:67:82:ec:52:a9:af:d0:0b:f4:c2:
c3:a8:83:06:8c:ba:0d:db:d7:1f:a4:78:85:7d:a0:74:70:9f:
9f:12:17:be:83:5c:85:7e:a6:ff:e1:4f:b2:51:4f:04:47:7e:
c9:25:9f:38:b5:80:32:6e:56:f0:73:2d:7d:fb:06:07:cd:09:
42:c4:ca:8a:c8:fc:5d:b7:ab:b9:dd:09:b8:13:82:01:82:6b:
af:f0:fc:35:5a:b4:21:dc:e4:20:93:6c:14:96:97:75:fb:e8:
d0:7e:b1:d3:ba:81:53:01:f9:3e:26:be:b8:c9:11:7b:49:19:
28:b4:bd:47:fd:99:58:47:cd:74:04:d6:03:94:be:1e:1b:22:
7c:e3:f9:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaJXCdImw2va6aDRlKIcs5LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0OWU0MjUyYmNiMjJlYTJjNmNmYjM5MjRjOGY4NGJkZGU3
YTc0NzEwHhcNMjUwNTAxMDEwMDQwWhcNMjUwNTAyMDEwMDQwWjAzMTEwLwYDVQQD
EygwM2RmNjdkZTk3NjQyYmUyZWIzYzgyM2MzYWI5MmE4NTM2NzJiMTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PpD9pzgjWthr4+ziKdEllHOt/6Z
UL/gGY0FVQLMPvNKMPBCJk1M4SlPsVCr3LyUHVtNi5myz0pBlEHoNh52HetSHRI5
X4/LjgNvUAI0xGLxSMWXbUwY3L7i2PJsVbNw5RYa9GqRC96hX0mFNnNxqijUSmJY
ghELZzRwgNQGNBUJV7NdFrZFlfiXVemTAJqYjy217DOy48sdax/trOXMrZYE8+Qg
LMou7uVp+XP6t/0EkpByuBL2B15jv2bbhfAmmWMC6EIayQsQ8EnNPO6lmFZcIcCJ
jTuq70M6+1Dkdt795pojv3Fk58dBoC69jLNXjVN5mwzQ622Ytj93bzh22QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPfZ96XZCvi6zyCPDq5KoU2crEFMB8GA1UdIwQY
MBaAFESeQlK8si6ixs+zkkyPhL3eenRxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUko1Q1VyeXlMcUxHejdPU1RJLUV2ZDU2ZEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZTk1NTktOGYzYy00NWQwLTg1MWMt
NjhmMjE3NGM3OWVlLzEvUko1Q1VyeXlMcUxHejdPU1RJLUV2ZDU2ZEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZTk1NTktOGYzYy00NWQwLTg1MWMtNjhmMjE3NGM3OWVl
LzEvUko1Q1VyeXlMcUxHejdPU1RJLUV2ZDU2ZEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzAilczb
H2zkIhjM6AkH/prPlQVglMZAhxe9xGVz2KUbnJl85vP5zvrnpNaByJWtopLOwG2X
RvHY805Y0uW7n/CQo6ueJwM0SQ13akylzQ1ZNm4XgVYlt/QEbv9tvx/z7cKoJGRA
JdYTy5Q336r9WGoqHeFnguxSqa/QC/TCw6iDBoy6DdvXH6R4hX2gdHCfnxIXvoNc
hX6m/+FPslFPBEd+ySWfOLWAMm5W8HMtffsGB80JQsTKisj8Xberud0JuBOCAYJr
r/D8NVq0IdzkIJNsFJaXdfvo0H6x07qBUwH5Pia+uMkRe0kZKLS9R/2ZWEfNdATW
A5S+HhsifOP5eg==
-----END CERTIFICATE-----
Generated at Thu May 1 09:32:35 2025 by rpki-client