Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
File: d-g56lm5dYJP1wigrXNVUAF8v3w.mft (raw, json)
Hash identifier: 0HlWjM67hboMiNrDT4ZqsMCJxpiiIu9QbPjWXkX0SEM=
Subject key identifier: 2C:DA:41:18:CF:06:8C:DC:BA:01:9C:DD:26:CD:24:1C:A8:DB:63:D4
Authority key identifier: 77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C
Certificate issuer: /CN=77e839ea59b975824fd708a0ad735550017cbf7c
Certificate serial: 019677C3C3F08C484109A323C58F578034E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
Manifest number: 127D
Signing time: Sun 27 Apr 2025 15:00:40 +0000
Manifest this update: Sun 27 Apr 2025 15:00:40 +0000
Manifest next update: Mon 28 Apr 2025 15:00:40 +0000
Files and hashes: 1: AdtLsSKpD88rZG8vPkZiD9QZ3II.roa (hash: r/TtnbjU6TzYG7n4J08Ln2zhCxACBBJlAa/WOkQ9bLA=)
2: ZZKHxuzT9f9uOTLxBtzMJ_ndYYE.roa (hash: w2L+9XVGxP7AjhXdVbAOAOleu3PnA4M7uTmUbZQNGw0=)
3: d-g56lm5dYJP1wigrXNVUAF8v3w.crl (hash: h5aWdCOJsWG3Knvxad8Mh2rpafpNvM5aOx1tq/tdi3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:c3:f0:8c:48:41:09:a3:23:c5:8f:57:80:34:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e839ea59b975824fd708a0ad735550017cbf7c
Validity
Not Before: Apr 27 15:00:40 2025 GMT
Not After : Apr 28 15:00:40 2025 GMT
Subject: CN=2cda4118cf068cdcba019cdd26cd241ca8db63d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e9:5a:de:cf:1a:14:64:d1:50:ce:67:ce:40:
1e:1d:5f:6c:03:19:a7:9d:8c:9d:17:d8:10:eb:d7:
ce:85:e2:63:e3:15:c6:2d:da:e8:50:02:af:15:aa:
6e:fb:13:ea:cf:7a:80:ae:3a:2b:d0:87:e2:1f:e3:
8b:ed:46:e0:45:10:49:11:b1:23:20:6f:00:c1:46:
03:cb:18:a4:64:96:f4:a7:ab:26:ce:3e:29:61:34:
75:15:7d:90:8b:c9:72:8e:89:27:8f:7c:ce:d2:82:
03:4b:d3:39:65:23:9f:c2:db:5b:d3:9a:7a:f4:63:
ad:2d:44:51:fd:42:c3:00:73:67:e5:59:29:c7:d9:
c2:1f:84:87:57:3d:46:0b:fe:d1:ff:ef:96:f3:3e:
e8:a8:82:86:3d:13:81:19:73:87:cf:ba:80:92:20:
f2:ff:2e:2b:67:d5:f2:30:8d:29:df:c1:05:25:05:
ab:fd:f6:ea:6c:f1:9a:fa:d7:a5:b3:2f:92:5d:be:
c1:b1:2f:f3:fb:61:d5:0c:25:5a:4d:a6:dc:aa:e3:
0f:47:d8:8b:3d:91:30:fc:2a:37:1e:0c:9d:00:6b:
c3:7b:00:89:21:5e:12:ca:b7:85:33:09:30:8a:91:
5f:8d:ab:d6:99:09:a8:16:2c:a4:cf:06:da:1e:78:
6e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DA:41:18:CF:06:8C:DC:BA:01:9C:DD:26:CD:24:1C:A8:DB:63:D4
X509v3 Authority Key Identifier:
keyid:77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a7:72:67:a5:fc:c3:c6:82:81:58:21:8e:3e:cd:b4:ed:82:
14:ab:fe:09:1b:d6:4b:55:61:e5:24:0a:0d:48:01:71:d5:ae:
ec:52:68:8e:f9:54:61:5e:af:fe:d2:3b:9d:f0:34:94:c2:08:
19:7a:5c:ea:c5:e2:ae:d1:85:8a:67:7c:e1:68:f2:d0:e1:08:
38:ca:38:52:63:58:0e:b2:f4:83:d9:10:d3:bd:8a:a8:eb:3b:
98:d0:85:7c:ea:cf:5b:1e:c9:6c:2a:75:3d:19:5c:87:e7:91:
02:e9:a7:ab:9f:53:ea:21:b0:6e:de:79:f1:91:08:d1:94:c9:
ae:69:c3:47:cb:4e:0a:09:e0:24:5a:8f:6e:c6:a0:d8:89:8c:
82:40:cf:00:07:ed:6e:40:fd:ee:90:eb:38:85:2f:7e:63:39:
80:d8:48:2d:f9:c5:fe:7f:47:09:ae:bf:7e:73:66:ca:47:ca:
ca:29:d7:3d:04:7a:32:8c:55:0a:40:93:da:2e:69:a8:ee:fb:
9e:36:c8:12:39:b8:e0:a2:1b:c6:85:48:8d:c9:13:fd:39:fb:
69:dc:30:ad:da:7d:e2:6e:2d:a2:20:6e:3a:db:61:da:c6:e4:
fa:31:5a:80:76:60:02:ab:c7:39:ac:7d:2d:e4:81:91:b6:72:
19:65:c8:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3w8PwjEhBCaMjxY9XgDToMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZTgzOWVhNTliOTc1ODI0ZmQ3MDhhMGFkNzM1NTUwMDE3
Y2JmN2MwHhcNMjUwNDI3MTUwMDQwWhcNMjUwNDI4MTUwMDQwWjAzMTEwLwYDVQQD
EygyY2RhNDExOGNmMDY4Y2RjYmEwMTljZGQyNmNkMjQxY2E4ZGI2M2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ela3s8aFGTRUM5nzkAeHV9sAxmn
nYydF9gQ69fOheJj4xXGLdroUAKvFapu+xPqz3qArjor0IfiH+OL7UbgRRBJEbEj
IG8AwUYDyxikZJb0p6smzj4pYTR1FX2Qi8lyjoknj3zO0oIDS9M5ZSOfwttb05p6
9GOtLURR/ULDAHNn5Vkpx9nCH4SHVz1GC/7R/++W8z7oqIKGPROBGXOHz7qAkiDy
/y4rZ9XyMI0p38EFJQWr/fbqbPGa+telsy+SXb7BsS/z+2HVDCVaTabcquMPR9iL
PZEw/Co3HgydAGvDewCJIV4SyreFMwkwipFfjavWmQmoFiykzwbaHnhu3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzaQRjPBozcugGc3SbNJByo22PUMB8GA1UdIwQY
MBaAFHfoOepZuXWCT9cIoK1zVVABfL98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZC1nNTZsbTVkWUpQMXdpZ3JYTlZVQUY4djN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9hZTViNWYtZTc0OC00ZmQ1LWIxZGUt
Yzc5YTNmYTcxZDM0LzEvZC1nNTZsbTVkWUpQMXdpZ3JYTlZVQUY4djN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9hZTViNWYtZTc0OC00ZmQ1LWIxZGUtYzc5YTNmYTcxZDM0
LzEvZC1nNTZsbTVkWUpQMXdpZ3JYTlZVQUY4djN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6dyZ6X8
w8aCgVghjj7NtO2CFKv+CRvWS1Vh5SQKDUgBcdWu7FJojvlUYV6v/tI7nfA0lMII
GXpc6sXirtGFimd84Wjy0OEIOMo4UmNYDrL0g9kQ072KqOs7mNCFfOrPWx7JbCp1
PRlch+eRAumnq59T6iGwbt558ZEI0ZTJrmnDR8tOCgngJFqPbsag2ImMgkDPAAft
bkD97pDrOIUvfmM5gNhILfnF/n9HCa6/fnNmykfKyinXPQR6MoxVCkCT2i5pqO77
njbIEjm44KIbxoVIjckT/Tn7adwwrdp94m4toiBuOtth2sbk+jFagHZgAqvHOax9
LeSBkbZyGWXIfQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:20:18 2025 by rpki-client