Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
File: U1vkU3bViYdFK9Bka5p0z562yy0.mft (raw, json)
Hash identifier: RhtnE3HYuaKC4pyrJtmZ5iMTLRNCaxMgXzdyhysKj6s=
Subject key identifier: 68:85:35:7D:ED:2D:80:9B:10:78:3A:29:28:DD:10:40:95:3E:90:4A
Authority key identifier: 53:5B:E4:53:76:D5:89:87:45:2B:D0:64:6B:9A:74:CF:9E:B6:CB:2D
Certificate issuer: /CN=535be45376d58987452bd0646b9a74cf9eb6cb2d
Certificate serial: 019682B506D61D59CCE0BFBA1FD59871121F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 18:00:23 +0000
Manifest this update: Tue 29 Apr 2025 18:00:23 +0000
Manifest next update: Wed 30 Apr 2025 18:00:23 +0000
Files and hashes: 1: U1vkU3bViYdFK9Bka5p0z562yy0.crl (hash: 3xAz80gX0TR52Zqnvs8+/JWqkKj1/TPNxCqg3pvzeUA=)
2: bldtfvyuIcb6nqjUAl8Ak0zMF30.roa (hash: dx6ZT1WJQ+QEzva9Bd5tv/adJVLszcwVSLKhJy+UO24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:06:d6:1d:59:cc:e0:bf:ba:1f:d5:98:71:12:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535be45376d58987452bd0646b9a74cf9eb6cb2d
Validity
Not Before: Apr 29 18:00:23 2025 GMT
Not After : Apr 30 18:00:23 2025 GMT
Subject: CN=6885357ded2d809b10783a2928dd1040953e904a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:aa:8d:c7:f4:76:65:88:a9:05:6a:4e:0c:
b1:12:d1:2d:4a:cf:01:88:cc:ac:16:6e:a7:72:b8:
2c:2b:f8:3a:2a:b0:74:7e:ca:af:b4:6c:c6:b6:4f:
e4:a3:3d:6d:2c:88:41:cc:fb:62:6c:ac:ef:3e:62:
5e:54:24:75:6b:02:13:64:b4:8b:37:32:63:db:a1:
3c:28:15:f2:3b:b3:5b:e1:21:1d:95:91:96:d2:4d:
26:ad:64:8d:0b:c1:32:40:ad:7e:80:74:16:11:2b:
51:7e:80:0d:24:62:3e:ea:09:d4:90:1e:11:be:c7:
ce:1b:72:f0:91:dc:37:cf:df:57:67:d9:92:df:dd:
f3:51:e9:cf:57:37:7f:5f:90:5e:4f:61:1f:50:6f:
f2:b7:7c:74:ab:dc:01:7b:a4:ad:c6:eb:ed:51:80:
7b:b3:6a:9a:26:77:70:15:3b:06:02:04:7a:9b:eb:
d6:6c:d6:75:4e:86:2a:c1:f4:9c:d2:0f:1c:30:cc:
61:5a:9e:a3:2d:15:d5:8e:66:45:d3:5b:bf:83:f8:
f0:50:3d:8c:da:d9:e2:73:00:b3:26:94:f6:d2:2e:
83:fb:6d:2f:ff:10:da:a2:2e:5b:26:03:fb:7f:a0:
c9:54:d0:c0:0c:b9:eb:21:fd:ea:4f:f9:10:47:b8:
ec:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:85:35:7D:ED:2D:80:9B:10:78:3A:29:28:DD:10:40:95:3E:90:4A
X509v3 Authority Key Identifier:
keyid:53:5B:E4:53:76:D5:89:87:45:2B:D0:64:6B:9A:74:CF:9E:B6:CB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d8:36:fd:37:8f:55:aa:8c:5e:14:f8:19:da:b4:7b:60:55:
4a:be:c2:61:01:b7:39:ac:90:5b:b0:60:70:8e:f3:db:0f:73:
ed:5e:d3:6b:0f:0f:d4:97:fc:46:95:0c:53:61:3e:bf:62:85:
70:29:5b:bb:e3:e6:ca:e6:a4:4e:e4:72:96:a8:03:b6:97:b5:
76:8e:f5:6d:83:f3:b8:da:74:2f:c1:45:35:43:24:f9:f8:60:
2e:d6:40:cc:0d:6e:3c:43:97:14:b6:bc:7f:9f:7d:85:7a:e5:
e1:92:4a:43:52:72:d8:dc:f5:41:fa:70:d4:84:33:44:7e:05:
83:12:30:e4:03:5a:0c:e3:7f:94:01:ec:da:b5:54:b7:d4:76:
b0:7b:7b:f5:34:87:43:51:5e:79:c2:be:49:40:35:22:73:e5:
fc:a8:e7:d1:8e:8b:d5:1c:bc:68:da:2b:65:8d:63:29:80:ef:
98:ea:5c:c3:17:e2:34:b3:f9:1c:4a:a8:07:a6:16:b7:5e:5c:
d9:f0:63:18:26:42:dd:0e:e0:4b:98:e0:6f:87:0e:c7:a7:b1:
5d:e4:0c:61:b2:cf:e3:8d:4d:94:cf:5b:73:da:70:50:64:26:
05:f9:01:02:51:24:2f:f3:1b:60:6b:85:8a:2b:d4:42:a9:10:
18:33:a8:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCtQbWHVnM4L+6H9WYcRIfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNWJlNDUzNzZkNTg5ODc0NTJiZDA2NDZiOWE3NGNmOWVi
NmNiMmQwHhcNMjUwNDI5MTgwMDIzWhcNMjUwNDMwMTgwMDIzWjAzMTEwLwYDVQQD
Eyg2ODg1MzU3ZGVkMmQ4MDliMTA3ODNhMjkyOGRkMTA0MDk1M2U5MDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUuqjcf0dmWIqQVqTgyxEtEtSs8B
iMysFm6ncrgsK/g6KrB0fsqvtGzGtk/koz1tLIhBzPtibKzvPmJeVCR1awITZLSL
NzJj26E8KBXyO7Nb4SEdlZGW0k0mrWSNC8EyQK1+gHQWEStRfoANJGI+6gnUkB4R
vsfOG3Lwkdw3z99XZ9mS393zUenPVzd/X5BeT2EfUG/yt3x0q9wBe6StxuvtUYB7
s2qaJndwFTsGAgR6m+vWbNZ1ToYqwfSc0g8cMMxhWp6jLRXVjmZF01u/g/jwUD2M
2tnicwCzJpT20i6D+20v/xDaoi5bJgP7f6DJVNDADLnrIf3qT/kQR7jsFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGiFNX3tLYCbEHg6KSjdEECVPpBKMB8GA1UdIwQY
MBaAFFNb5FN21YmHRSvQZGuadM+etsstMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTF2a1UzYlZpWWRGSzlCa2E1cDB6NTYyeXkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mYjM5YTgtNjIzYi00NDM1LTk0ZmUt
Y2VjOTJiNTc4MDA2LzEvVTF2a1UzYlZpWWRGSzlCa2E1cDB6NTYyeXkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mYjM5YTgtNjIzYi00NDM1LTk0ZmUtY2VjOTJiNTc4MDA2
LzEvVTF2a1UzYlZpWWRGSzlCa2E1cDB6NTYyeXkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAndg2/TeP
VaqMXhT4Gdq0e2BVSr7CYQG3OayQW7BgcI7z2w9z7V7Taw8P1Jf8RpUMU2E+v2KF
cClbu+PmyuakTuRylqgDtpe1do71bYPzuNp0L8FFNUMk+fhgLtZAzA1uPEOXFLa8
f599hXrl4ZJKQ1Jy2Nz1Qfpw1IQzRH4FgxIw5ANaDON/lAHs2rVUt9R2sHt79TSH
Q1FeecK+SUA1InPl/Kjn0Y6L1Ry8aNorZY1jKYDvmOpcwxfiNLP5HEqoB6YWt15c
2fBjGCZC3Q7gS5jgb4cOx6exXeQMYbLP441NlM9bc9pwUGQmBfkBAlEkL/MbYGuF
iivUQqkQGDOoXw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:16:50 2025 by rpki-client