Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
File: d73XXy78JE-GoyGxUOYpNqFAKds.mft (raw, json)
Hash identifier: uJtk6n2zQr434RfLPPaYPa3cEXQfYV8g9tOY2gs79wc=
Subject key identifier: 99:2F:EC:4F:EC:64:63:61:86:43:6F:38:90:08:51:DA:E1:81:C0:40
Authority key identifier: 77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
Certificate issuer: /CN=77bdd75f2efc244f86a321b150e62936a14029db
Certificate serial: 0196730B48269465C1D3DDB4DE8D1939FE93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
Manifest number: 150D
Signing time: Sat 26 Apr 2025 17:00:41 +0000
Manifest this update: Sat 26 Apr 2025 17:00:41 +0000
Manifest next update: Sun 27 Apr 2025 17:00:41 +0000
Files and hashes: 1: GAo7ZduAV60PzhY9o_GDH21ot64.roa (hash: L65aKQ/diSXQMwJ1Sh2UT0BCtlwKc371uG33rtI8OVw=)
2: YnJ26bGDXX1huMvr8EfEnzAcB78.roa (hash: k0PljRyemCupKRxSVAifU5D7QGL/CooV0WFr/NbUXsk=)
3: d73XXy78JE-GoyGxUOYpNqFAKds.crl (hash: vd5ATAl5ocJo6TXgAhrFSS6Ku3qhczLZCpxjOGmmVHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:0b:48:26:94:65:c1:d3:dd:b4:de:8d:19:39:fe:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bdd75f2efc244f86a321b150e62936a14029db
Validity
Not Before: Apr 26 17:00:41 2025 GMT
Not After : Apr 27 17:00:41 2025 GMT
Subject: CN=992fec4fec64636186436f38900851dae181c040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f8:ca:c1:74:4d:2c:49:51:78:50:c3:95:3a:
d4:73:47:2c:84:30:4a:61:ae:28:86:ea:37:2d:58:
80:03:38:2a:8d:0a:3d:ea:9d:b7:41:c1:60:80:3b:
6c:c8:7f:1b:28:81:a2:80:05:8e:b0:10:bc:33:3d:
51:98:a3:60:9a:1c:6a:76:65:73:03:7f:9b:18:d3:
4c:e2:44:44:fd:2a:a7:d8:cc:a9:d2:b6:25:58:e7:
5b:a7:42:91:23:1c:46:18:bf:59:73:42:a6:a2:88:
4c:9c:f4:5b:e7:26:ce:7b:93:63:ca:5a:75:72:5a:
ca:38:14:57:5d:49:9e:f0:b5:ef:f4:42:e9:e5:bb:
fe:ef:51:3c:d8:42:68:0e:c7:8e:dd:00:bb:d5:d0:
4d:0c:0c:11:12:2d:12:65:d0:a8:c4:0d:36:8a:70:
b1:66:56:57:7c:61:3f:37:2d:9f:a5:4d:92:93:5e:
9b:49:e0:e3:29:36:2f:be:37:d6:0d:f0:5b:76:9a:
3e:98:b3:5e:d2:07:80:41:67:77:0a:6c:7e:63:f4:
4f:87:12:0a:c6:f4:86:fa:7a:90:4a:6a:c1:4c:7d:
31:d7:ca:20:dd:f2:b1:f8:89:c3:65:35:60:39:06:
c0:3b:6f:89:89:f7:84:1c:d6:40:3b:d6:24:9b:e7:
0b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2F:EC:4F:EC:64:63:61:86:43:6F:38:90:08:51:DA:E1:81:C0:40
X509v3 Authority Key Identifier:
keyid:77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a2:93:ea:ff:2b:59:fc:38:a5:d5:ea:a6:2e:ce:00:6e:4c:
e6:3f:40:a6:31:d2:b4:d2:cd:91:f1:49:d2:71:ad:0e:d4:83:
69:0c:2d:b4:f7:5e:2e:69:1b:e3:b2:d4:68:63:d5:65:da:66:
92:3d:4b:3e:7c:72:fb:0e:d1:83:5d:05:f5:21:c9:db:81:82:
c1:f5:88:25:52:71:c0:dc:c4:75:77:26:90:12:58:87:50:ac:
5f:a2:95:73:86:1d:f0:17:8f:e8:a9:61:0f:4f:76:8d:9d:7c:
ba:ee:15:ef:93:98:89:13:71:e1:75:0e:79:3d:c4:1c:23:1a:
25:a2:79:58:2f:3a:37:88:4c:99:c6:a8:12:60:6f:10:7c:ce:
30:76:c0:76:81:7e:b4:7f:c5:b6:1a:1b:95:c6:98:db:4b:1f:
39:ac:89:8e:7f:5d:15:a0:f2:19:22:78:dd:49:54:3e:02:82:
37:86:de:bf:f8:c9:58:a6:61:13:6b:a7:89:a5:c6:4c:04:fd:
60:40:12:ee:d4:89:d1:cf:9c:49:12:9f:45:d9:15:eb:5f:34:
b3:54:11:75:d8:3f:cc:75:ae:76:98:c5:40:bf:be:7a:95:70:
c4:1e:93:f2:93:bb:92:0b:59:b2:75:e8:e4:cb:99:09:ae:d2:
0e:c1:9f:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzC0gmlGXB09203o0ZOf6TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YmRkNzVmMmVmYzI0NGY4NmEzMjFiMTUwZTYyOTM2YTE0
MDI5ZGIwHhcNMjUwNDI2MTcwMDQxWhcNMjUwNDI3MTcwMDQxWjAzMTEwLwYDVQQD
Eyg5OTJmZWM0ZmVjNjQ2MzYxODY0MzZmMzg5MDA4NTFkYWUxODFjMDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/jKwXRNLElReFDDlTrUc0cshDBK
Ya4ohuo3LViAAzgqjQo96p23QcFggDtsyH8bKIGigAWOsBC8Mz1RmKNgmhxqdmVz
A3+bGNNM4kRE/Sqn2Myp0rYlWOdbp0KRIxxGGL9Zc0KmoohMnPRb5ybOe5Njylp1
clrKOBRXXUme8LXv9ELp5bv+71E82EJoDseO3QC71dBNDAwREi0SZdCoxA02inCx
ZlZXfGE/Ny2fpU2Sk16bSeDjKTYvvjfWDfBbdpo+mLNe0geAQWd3Cmx+Y/RPhxIK
xvSG+nqQSmrBTH0x18og3fKx+InDZTVgOQbAO2+JifeEHNZAO9Ykm+cLOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkv7E/sZGNhhkNvOJAIUdrhgcBAMB8GA1UdIwQY
MBaAFHe9118u/CRPhqMhsVDmKTahQCnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDczWFh5NzhKRS1Hb3lHeFVPWXBOcUZBS2RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8yNmEzNGUtMjA5NC00ZTc2LWExZWEt
MWRlZGJlN2I1YmFmLzEvZDczWFh5NzhKRS1Hb3lHeFVPWXBOcUZBS2RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8yNmEzNGUtMjA5NC00ZTc2LWExZWEtMWRlZGJlN2I1YmFm
LzEvZDczWFh5NzhKRS1Hb3lHeFVPWXBOcUZBS2RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKKT6v8r
Wfw4pdXqpi7OAG5M5j9ApjHStNLNkfFJ0nGtDtSDaQwttPdeLmkb47LUaGPVZdpm
kj1LPnxy+w7Rg10F9SHJ24GCwfWIJVJxwNzEdXcmkBJYh1CsX6KVc4Yd8BeP6Klh
D092jZ18uu4V75OYiRNx4XUOeT3EHCMaJaJ5WC86N4hMmcaoEmBvEHzOMHbAdoF+
tH/FthoblcaY20sfOayJjn9dFaDyGSJ43UlUPgKCN4bev/jJWKZhE2uniaXGTAT9
YEAS7tSJ0c+cSRKfRdkV6180s1QRddg/zHWudpjFQL++epVwxB6T8pO7kgtZsnXo
5MuZCa7SDsGf3A==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:19:34 2025 by rpki-client