Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
File: v_0PCtnHhAlsWg-56M9cLwRAQTs.mft (raw, json)
Hash identifier: M8JSvAOfu3xYCLdqZv/qRZUcfbqQaFuX5/ZPfIzMsQE=
Subject key identifier: 4C:35:93:D4:39:3B:02:9A:CD:B5:34:3F:87:72:21:8A:F8:15:76:20
Authority key identifier: BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B
Certificate issuer: /CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
Certificate serial: 0196789F77D528CC3D58EAA8EFD858BBCDB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
Manifest number: 04EC
Signing time: Sun 27 Apr 2025 19:00:38 +0000
Manifest this update: Sun 27 Apr 2025 19:00:38 +0000
Manifest next update: Mon 28 Apr 2025 19:00:38 +0000
Files and hashes: 1: Z2OOQN_xvDinvSk0PjmWHnzGsnE.roa (hash: +MwSX4X4GjxkZcy+4f+CH7/gMqlsDpwDxxCncAgans4=)
2: v_0PCtnHhAlsWg-56M9cLwRAQTs.crl (hash: +L9jrwR4UC9dlP/uLtlUQ67fJBhZbx2znStQdMRcgxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:77:d5:28:cc:3d:58:ea:a8:ef:d8:58:bb:cd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
Validity
Not Before: Apr 27 19:00:38 2025 GMT
Not After : Apr 28 19:00:38 2025 GMT
Subject: CN=4c3593d4393b029acdb5343f8772218af8157620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:38:e9:49:bc:6b:36:e6:e3:c7:05:68:e1:25:
5b:b6:f0:4f:b1:2f:1d:4e:77:3b:7d:4f:23:d1:95:
54:ab:39:46:d8:b5:fe:08:88:58:80:e7:50:4f:44:
ed:df:06:24:2b:a4:ba:53:1f:d5:8a:a1:c7:b8:7a:
d7:b4:34:22:b9:c3:f5:c5:57:fc:d1:9c:8c:7b:9a:
e3:ea:38:80:75:7f:29:45:1f:03:80:11:de:da:44:
e6:5e:ef:2e:ad:72:f8:20:cb:26:30:16:ba:e1:64:
4b:61:46:57:36:5b:06:27:19:a3:af:3f:b1:2d:3a:
8f:d1:f4:fc:fb:ce:26:5c:8e:10:c6:de:a9:1d:f8:
97:0b:8d:ec:53:ef:5b:4a:3c:11:dc:d6:ac:13:83:
0b:4d:19:23:8c:ab:3d:8d:80:ff:f5:e2:67:c2:ad:
c4:b3:0b:82:3b:72:2f:4d:55:e8:5d:ad:1e:f1:29:
62:b3:7d:c8:47:40:d9:1b:c5:6d:98:06:f8:17:a2:
9b:b6:94:96:5a:a4:c2:7d:9f:ce:83:65:6e:d8:88:
8a:e9:d9:dd:f3:90:93:03:b9:d9:86:b1:36:38:73:
cd:22:a4:b8:8b:dc:16:4e:0e:58:3e:2f:b4:85:fb:
5e:fa:eb:55:f6:df:13:68:de:ca:0b:d9:4f:ef:40:
fa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:35:93:D4:39:3B:02:9A:CD:B5:34:3F:87:72:21:8A:F8:15:76:20
X509v3 Authority Key Identifier:
keyid:BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d8:43:6e:28:ad:8a:67:78:f1:10:fb:a6:62:2f:44:8a:92:
94:14:b8:de:54:26:07:3b:1e:6c:6a:f4:bf:e5:81:12:2e:a4:
af:22:2b:3f:46:e4:54:a7:52:53:6d:da:e3:bd:ab:90:28:07:
ea:64:f6:8e:56:2f:17:8a:64:cb:65:92:8b:3b:9a:5f:b8:1e:
df:6b:03:6b:d9:45:57:ed:38:2b:a1:38:95:31:cf:44:c1:89:
3f:ae:53:5b:37:5f:af:d1:0d:56:7c:c6:ca:83:fa:51:e5:b5:
f6:95:45:17:e1:9d:63:74:66:c2:62:ef:54:59:15:25:59:0a:
fa:fb:b9:55:22:3e:2e:9e:b1:77:a1:88:e0:f0:64:c7:19:a7:
d0:d7:84:d6:c7:1a:3d:2a:4e:a5:6e:b2:be:4b:d3:05:aa:4c:
53:62:0d:c3:b1:ee:06:ff:16:04:79:73:a0:53:a5:7b:ef:7e:
a9:90:36:3c:2a:19:6f:a8:ab:c2:1d:e0:28:09:7d:ed:67:ca:
f4:cd:f8:e0:32:3b:9d:86:23:ac:a1:07:7f:ad:31:01:e6:5f:
63:2a:93:5e:fa:d6:02:56:9d:4b:25:64:f1:54:3f:6d:0a:f9:
b1:4e:85:ab:be:17:75:00:1d:cf:e5:9b:35:99:73:85:bd:0a:
14:7e:42:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4n3fVKMw9WOqo79hYu821MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZmQwZjBhZDljNzg0MDk2YzVhMGZiOWU4Y2Y1YzJmMDQ0
MDQxM2IwHhcNMjUwNDI3MTkwMDM4WhcNMjUwNDI4MTkwMDM4WjAzMTEwLwYDVQQD
Eyg0YzM1OTNkNDM5M2IwMjlhY2RiNTM0M2Y4NzcyMjE4YWY4MTU3NjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DjpSbxrNubjxwVo4SVbtvBPsS8d
Tnc7fU8j0ZVUqzlG2LX+CIhYgOdQT0Tt3wYkK6S6Ux/ViqHHuHrXtDQiucP1xVf8
0ZyMe5rj6jiAdX8pRR8DgBHe2kTmXu8urXL4IMsmMBa64WRLYUZXNlsGJxmjrz+x
LTqP0fT8+84mXI4Qxt6pHfiXC43sU+9bSjwR3NasE4MLTRkjjKs9jYD/9eJnwq3E
swuCO3IvTVXoXa0e8Slis33IR0DZG8VtmAb4F6KbtpSWWqTCfZ/Og2Vu2IiK6dnd
85CTA7nZhrE2OHPNIqS4i9wWTg5YPi+0hfte+utV9t8TaN7KC9lP70D6CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEw1k9Q5OwKazbU0P4dyIYr4FXYgMB8GA1UdIwQY
MBaAFL/9DwrZx4QJbFoPuejPXC8EQEE7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdl8wUEN0bkhoQWxzV2ctNTZNOWNMd1JBUVRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lYWVhNTktOTE5ZC00MTM1LTliZGUt
NmRjZjBjOTNjYmRiLzEvdl8wUEN0bkhoQWxzV2ctNTZNOWNMd1JBUVRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lYWVhNTktOTE5ZC00MTM1LTliZGUtNmRjZjBjOTNjYmRi
LzEvdl8wUEN0bkhoQWxzV2ctNTZNOWNMd1JBUVRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArthDbiit
imd48RD7pmIvRIqSlBS43lQmBzsebGr0v+WBEi6kryIrP0bkVKdSU23a472rkCgH
6mT2jlYvF4pky2WSizuaX7ge32sDa9lFV+04K6E4lTHPRMGJP65TWzdfr9ENVnzG
yoP6UeW19pVFF+GdY3RmwmLvVFkVJVkK+vu5VSI+Lp6xd6GI4PBkxxmn0NeE1sca
PSpOpW6yvkvTBapMU2INw7HuBv8WBHlzoFOle+9+qZA2PCoZb6irwh3gKAl97WfK
9M344DI7nYYjrKEHf60xAeZfYyqTXvrWAladSyVk8VQ/bQr5sU6Fq74XdQAdz+Wb
NZlzhb0KFH5C0w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:11:13 2025 by rpki-client