Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
File: 21m85hup0qDjVb4B8TQbjfdq69s.mft (raw, json)
Hash identifier: 7dbjPp4sPAj+YpyhhIWSirVtSGivrhShu9ZA2NEP13E=
Subject key identifier: 17:CD:17:15:EA:15:74:B7:76:D9:85:3A:2A:30:E9:2D:54:93:8E:14
Authority key identifier: DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
Certificate issuer: /CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Certificate serial: 019684DADD1C7846F2A93DEA755704435B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 04:00:58 +0000
Manifest this update: Wed 30 Apr 2025 04:00:58 +0000
Manifest next update: Thu 01 May 2025 04:00:58 +0000
Files and hashes: 1: 21m85hup0qDjVb4B8TQbjfdq69s.crl (hash: F+VtYmMDMGO2nTHL8+ftt23gRYV76FYYS7ZI1HoA4jk=)
2: y6zUASqLMYC9vOre4NE5oaCGRIY.roa (hash: nU1xlMhFlcEyY9/vfWFwqCMNEfoKNvZKlYNQ0axw4og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:dd:1c:78:46:f2:a9:3d:ea:75:57:04:43:5b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Validity
Not Before: Apr 30 04:00:58 2025 GMT
Not After : May 1 04:00:58 2025 GMT
Subject: CN=17cd1715ea1574b776d9853a2a30e92d54938e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:a4:ff:9a:2b:7e:53:f0:88:13:60:7f:dc:
82:bc:86:de:16:de:69:93:fc:44:d0:f3:3f:0d:5d:
64:57:46:3a:ae:56:d0:38:da:c3:df:95:13:39:89:
95:b9:aa:e4:dd:ce:7e:0e:36:38:54:26:62:e4:d5:
20:75:cd:6e:00:df:8a:4e:63:91:d7:13:25:8c:5b:
ca:66:34:18:5f:ce:55:e1:e4:a0:88:a8:0b:af:31:
24:0e:83:cf:96:16:58:2a:c6:60:84:8f:b4:6f:41:
09:21:dc:2e:f6:b9:4a:8b:2c:2d:ef:1e:f7:d2:9a:
cf:07:a5:1f:e9:2f:cd:b9:95:16:5f:a8:0a:22:64:
c3:f0:f1:fb:f4:28:79:b3:bc:99:4e:f7:e4:0d:68:
96:26:6a:59:b6:6e:84:81:d5:0f:2b:c1:46:c5:76:
2f:5c:1a:86:0d:80:7e:68:de:43:18:46:02:d2:62:
28:a6:e1:39:52:71:41:f8:9f:c2:3f:7d:d7:4d:ff:
44:13:f6:f7:ca:9a:fb:af:b6:0c:3e:57:88:b2:8e:
73:e0:25:70:e6:44:01:26:20:52:59:c5:a7:58:2d:
f2:a7:ec:d4:81:74:2d:cc:69:a8:fd:21:21:c4:f5:
c0:62:41:27:0c:6a:d1:23:2d:59:f8:cd:86:fd:0a:
e7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CD:17:15:EA:15:74:B7:76:D9:85:3A:2A:30:E9:2D:54:93:8E:14
X509v3 Authority Key Identifier:
keyid:DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e7:36:87:c7:6a:60:9f:0c:35:fc:73:01:53:56:03:fb:d8:
71:6e:2a:8e:d6:e2:07:cb:1a:04:0c:c7:cd:b8:67:0d:eb:9a:
35:dc:73:a3:78:27:f8:c3:0b:67:dd:3e:6c:f9:eb:5c:f8:14:
be:41:cd:40:24:b6:a2:9e:9d:37:cc:c9:4e:f6:19:15:95:e4:
9e:06:a7:a4:66:75:6e:3c:0a:0c:1f:4e:f7:b2:e6:3d:6c:e0:
eb:7b:22:dd:b1:c4:35:35:d7:8c:93:cb:c1:64:69:0c:fe:cf:
3b:d7:ae:e6:b9:24:2b:84:7f:1d:dc:6f:27:60:d5:59:7f:83:
9d:a8:7b:d4:d4:36:78:66:b1:3b:1b:69:96:b0:1b:ca:cb:c9:
38:fc:bc:41:35:59:b6:cb:e2:8e:86:c5:77:fd:64:38:37:41:
57:55:9a:cc:41:1f:c2:e0:ed:0d:6f:11:61:56:fc:1f:7b:f5:
55:0e:45:b2:89:6a:5d:e8:f8:94:8c:c2:6d:c8:ad:2b:80:62:
8a:87:77:77:59:7a:52:d1:49:99:c6:88:66:49:a1:ec:3b:16:
8c:18:73:79:38:66:39:ac:ab:b7:a9:91:a8:41:da:6a:c7:d6:
76:d9:20:83:77:c6:5d:be:47:0c:cc:07:8c:ab:ed:1c:2b:ea:
c1:0c:f4:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaE2t0ceEbyqT3qdVcEQ1toMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNTliY2U2MWJhOWQyYTBlMzU1YmUwMWYxMzQxYjhkZjc2
YWViZGIwHhcNMjUwNDMwMDQwMDU4WhcNMjUwNTAxMDQwMDU4WjAzMTEwLwYDVQQD
EygxN2NkMTcxNWVhMTU3NGI3NzZkOTg1M2EyYTMwZTkyZDU0OTM4ZTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQWk/5orflPwiBNgf9yCvIbeFt5p
k/xE0PM/DV1kV0Y6rlbQONrD35UTOYmVuark3c5+DjY4VCZi5NUgdc1uAN+KTmOR
1xMljFvKZjQYX85V4eSgiKgLrzEkDoPPlhZYKsZghI+0b0EJIdwu9rlKiywt7x73
0prPB6Uf6S/NuZUWX6gKImTD8PH79Ch5s7yZTvfkDWiWJmpZtm6EgdUPK8FGxXYv
XBqGDYB+aN5DGEYC0mIopuE5UnFB+J/CP33XTf9EE/b3ypr7r7YMPleIso5z4CVw
5kQBJiBSWcWnWC3yp+zUgXQtzGmo/SEhxPXAYkEnDGrRIy1Z+M2G/QrneQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfNFxXqFXS3dtmFOiow6S1Uk44UMB8GA1UdIwQY
MBaAFNtZvOYbqdKg41W+AfE0G433auvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjFtODVodXAwcURqVmI0QjhUUWJqZmRxNjlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85MjA5ZWQtNGI5OC00ODk3LThlOWIt
M2EwNDJmNzdiNzM4LzEvMjFtODVodXAwcURqVmI0QjhUUWJqZmRxNjlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC85MjA5ZWQtNGI5OC00ODk3LThlOWItM2EwNDJmNzdiNzM4
LzEvMjFtODVodXAwcURqVmI0QjhUUWJqZmRxNjlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+c2h8dq
YJ8MNfxzAVNWA/vYcW4qjtbiB8saBAzHzbhnDeuaNdxzo3gn+MMLZ90+bPnrXPgU
vkHNQCS2op6dN8zJTvYZFZXknganpGZ1bjwKDB9O97LmPWzg63si3bHENTXXjJPL
wWRpDP7PO9eu5rkkK4R/HdxvJ2DVWX+Dnah71NQ2eGaxOxtplrAbysvJOPy8QTVZ
tsvijobFd/1kODdBV1WazEEfwuDtDW8RYVb8H3v1VQ5FsolqXej4lIzCbcitK4Bi
iod3d1l6UtFJmcaIZkmh7DsWjBhzeThmOayrt6mRqEHaasfWdtkgg3fGXb5HDMwH
jKvtHCvqwQz0gg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 14:43:53 2025 by rpki-client