Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
File: R8CqLp6CAO7mcCaUKixSSIAvM7g.mft (raw, json)
Hash identifier: Fj5Jy+08w9MnctB+JyYiNJtgMAY1I5uipkasGEAlXJk=
Subject key identifier: 3D:D8:82:93:CE:8B:4B:99:2A:5E:BB:D7:0D:2A:C4:37:91:D4:E9:0F
Authority key identifier: 47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
Certificate issuer: /CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Certificate serial: 019682EC07F491C1C5604AA8CF4AC352B232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
Manifest number: 130A
Signing time: Tue 29 Apr 2025 19:00:28 +0000
Manifest this update: Tue 29 Apr 2025 19:00:28 +0000
Manifest next update: Wed 30 Apr 2025 19:00:28 +0000
Files and hashes: 1: R8CqLp6CAO7mcCaUKixSSIAvM7g.crl (hash: gvxiftDKsjWoKQJDtkey6MATrqx7YbSc+2Ad9Ft6zT0=)
2: qkYxxaIiN3jcZulu8UiMqofxjLE.roa (hash: cRshqAIAXgfUlz/OBpedkq/8h7RRrBNX/FMXdEVJZFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:ec:07:f4:91:c1:c5:60:4a:a8:cf:4a:c3:52:b2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Validity
Not Before: Apr 29 19:00:28 2025 GMT
Not After : Apr 30 19:00:28 2025 GMT
Subject: CN=3dd88293ce8b4b992a5ebbd70d2ac43791d4e90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:72:d3:c0:03:a2:fa:dc:ca:7e:8b:5c:a8:e9:
5c:61:a3:b7:83:65:80:b7:3a:89:cc:8a:9c:e7:0c:
bf:ba:1c:ac:e2:97:77:b6:87:f2:de:9c:19:26:d5:
31:4b:fd:65:c8:c3:94:2c:f5:02:9e:e3:34:0d:91:
67:35:0d:c6:ec:a0:61:cc:8b:f3:14:32:87:ee:da:
6a:c4:dc:9e:0c:88:6b:85:40:8d:0c:7b:0e:3c:6d:
32:b2:50:32:2a:5e:68:50:34:dd:06:dd:3f:33:ac:
c7:96:70:58:f7:33:ad:01:d7:70:dc:b9:5e:cc:3b:
e1:40:62:2c:d9:be:ae:a8:b7:30:2a:03:7b:82:88:
78:5a:27:2a:3a:ba:60:72:5f:f0:99:55:52:08:f4:
11:30:ec:0b:d7:64:6c:f3:93:35:e4:e0:c1:42:0f:
5b:ec:25:87:4c:46:42:fc:17:ce:36:cf:7d:32:d7:
29:9a:02:55:f1:98:8e:f7:55:a3:14:d4:30:2a:27:
69:96:e0:27:fd:70:37:23:2e:04:96:4e:8c:eb:d3:
01:02:b8:6e:f1:db:7b:f6:c0:15:e6:35:d6:8c:3b:
5f:ec:ca:b4:07:e0:9e:66:6f:06:17:2b:6e:f5:6a:
12:50:7c:37:c2:52:33:ab:fb:5e:d3:c6:89:9a:55:
a9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D8:82:93:CE:8B:4B:99:2A:5E:BB:D7:0D:2A:C4:37:91:D4:E9:0F
X509v3 Authority Key Identifier:
keyid:47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:5b:b9:5b:0e:51:f1:a3:48:84:5c:59:8d:0b:8b:65:24:58:
5f:de:80:35:b7:61:6c:31:5c:d5:a5:12:00:0b:58:31:07:63:
13:5b:68:ca:fc:e5:c1:4f:b3:62:f1:17:d6:b7:73:14:d1:fb:
d2:c2:81:7e:79:14:b2:ec:a0:8a:21:00:c5:c2:88:63:d8:7b:
e7:36:17:7d:2e:21:73:52:dc:19:b2:aa:0f:b5:13:84:21:80:
3f:b3:ca:be:af:15:8e:b4:3d:d3:82:ce:b9:30:63:f9:b2:be:
6c:95:6c:fc:9a:4d:bd:40:e2:c1:72:f2:ba:44:6c:e5:7b:92:
31:4d:14:20:38:61:4e:ad:26:e6:2a:0d:c2:18:41:48:e1:11:
72:2d:cc:c5:fa:f6:24:3f:3f:91:ff:6d:d9:ca:5a:25:28:a7:
42:a8:cd:f7:2d:8f:54:9a:c2:c7:8e:3d:00:0d:47:c9:65:db:
bc:9b:a8:33:3b:17:b5:2a:c8:b9:c9:e2:5c:3e:eb:10:c9:fd:
4d:6c:21:66:71:ed:5c:f2:74:34:af:88:35:73:8f:20:31:a1:
29:c1:c1:5f:93:b7:1b:20:70:84:4a:80:e4:70:d5:3d:73:19:
a4:e4:d4:0a:49:4b:6f:fe:ce:9f:a8:1b:fa:ff:05:dc:95:b9:
1e:fe:2a:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaC7Af0kcHFYEqoz0rDUrIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YzBhYTJlOWU4MjAwZWVlNjcwMjY5NDJhMmM1MjQ4ODAy
ZjMzYjgwHhcNMjUwNDI5MTkwMDI4WhcNMjUwNDMwMTkwMDI4WjAzMTEwLwYDVQQD
EygzZGQ4ODI5M2NlOGI0Yjk5MmE1ZWJiZDcwZDJhYzQzNzkxZDRlOTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXLTwAOi+tzKfotcqOlcYaO3g2WA
tzqJzIqc5wy/uhys4pd3tofy3pwZJtUxS/1lyMOULPUCnuM0DZFnNQ3G7KBhzIvz
FDKH7tpqxNyeDIhrhUCNDHsOPG0yslAyKl5oUDTdBt0/M6zHlnBY9zOtAddw3Lle
zDvhQGIs2b6uqLcwKgN7goh4WicqOrpgcl/wmVVSCPQRMOwL12Rs85M15ODBQg9b
7CWHTEZC/BfONs99MtcpmgJV8ZiO91WjFNQwKidpluAn/XA3Iy4Elk6M69MBArhu
8dt79sAV5jXWjDtf7Mq0B+CeZm8GFytu9WoSUHw3wlIzq/te08aJmlWpAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3YgpPOi0uZKl671w0qxDeR1OkPMB8GA1UdIwQY
MBaAFEfAqi6eggDu5nAmlCosUkiALzO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjhDcUxwNkNBTzdtY0NhVUtpeFNTSUF2TTdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My84NDZhZTItN2RkZi00MzMyLWEzNjMt
YzY5Mjc4MjA2NGIwLzEvUjhDcUxwNkNBTzdtY0NhVUtpeFNTSUF2TTdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My84NDZhZTItN2RkZi00MzMyLWEzNjMtYzY5Mjc4MjA2NGIw
LzEvUjhDcUxwNkNBTzdtY0NhVUtpeFNTSUF2TTdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlu5Ww5R
8aNIhFxZjQuLZSRYX96ANbdhbDFc1aUSAAtYMQdjE1toyvzlwU+zYvEX1rdzFNH7
0sKBfnkUsuygiiEAxcKIY9h75zYXfS4hc1LcGbKqD7UThCGAP7PKvq8VjrQ904LO
uTBj+bK+bJVs/JpNvUDiwXLyukRs5XuSMU0UIDhhTq0m5ioNwhhBSOERci3Mxfr2
JD8/kf9t2cpaJSinQqjN9y2PVJrCx449AA1HyWXbvJuoMzsXtSrIucniXD7rEMn9
TWwhZnHtXPJ0NK+INXOPIDGhKcHBX5O3GyBwhEqA5HDVPXMZpOTUCklLb/7On6gb
+v8F3JW5Hv4qMQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:07:04 2025 by rpki-client