Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
File: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft (raw, json)
Hash identifier: 3Zzb5vfVMhPKrqFCy1yQfLYnYajtoD44ULcah1vM7OI=
Subject key identifier: 48:D7:9E:C7:33:B8:D0:36:B1:1B:BF:B1:2B:4E:0A:09:32:71:9F:BD
Authority key identifier: 44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
Certificate issuer: /CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Certificate serial: 0196778CED502B3A127661D5398395D80DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
Manifest number: 028E
Signing time: Sun 27 Apr 2025 14:00:46 +0000
Manifest this update: Sun 27 Apr 2025 14:00:46 +0000
Manifest next update: Mon 28 Apr 2025 14:00:46 +0000
Files and hashes: 1: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl (hash: M6Hq0/bZjrzSB6YnNH7QT4Gs+OA3Kk8YTnqccfe6HTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:ed:50:2b:3a:12:76:61:d5:39:83:95:d8:0d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Validity
Not Before: Apr 27 14:00:46 2025 GMT
Not After : Apr 28 14:00:46 2025 GMT
Subject: CN=48d79ec733b8d036b11bbfb12b4e0a0932719fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:f0:e5:ae:fd:29:d8:30:85:35:a6:18:c9:
86:c6:cd:05:d9:f5:59:ae:4f:73:5b:f7:89:e0:96:
6b:4e:e9:0c:d2:b1:a3:4d:37:18:08:a1:c9:19:c9:
fc:68:34:1e:da:23:d6:a9:c4:64:7a:ab:5b:f1:8b:
e6:38:ac:a5:6e:3e:3f:63:ce:4a:1e:1c:dc:bb:2b:
e1:bf:e7:f9:d5:0b:60:0f:1f:49:e8:ec:03:8e:06:
e6:65:83:fb:a8:89:f1:89:57:83:69:76:aa:01:0c:
28:7d:c4:f5:41:a0:2c:a8:d0:7d:8b:4b:03:69:91:
84:41:79:30:dd:c9:68:c6:8b:94:ce:c4:07:e3:07:
78:89:88:1f:6d:65:f8:df:db:ec:20:c8:fc:4b:d1:
c7:71:1a:56:19:b0:5f:c5:60:79:30:8f:02:4c:4a:
f4:18:1e:c6:8f:3f:1f:14:e1:37:e2:8d:5f:1b:9f:
e9:53:21:03:5d:ea:1e:74:a4:c0:3b:23:42:25:94:
28:de:93:96:d8:0c:a3:6b:ff:52:76:c4:7a:d7:b3:
b0:3b:0c:13:26:44:5f:11:e9:91:3f:c9:f2:64:44:
f8:92:fa:4c:f2:63:01:7a:27:44:5d:60:1c:1d:e9:
11:3f:1d:31:7a:a1:34:62:25:aa:f0:8e:b0:2e:4a:
66:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D7:9E:C7:33:B8:D0:36:B1:1B:BF:B1:2B:4E:0A:09:32:71:9F:BD
X509v3 Authority Key Identifier:
keyid:44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:36:86:31:6c:84:30:0d:5c:7a:9b:72:d6:fe:3f:0a:ca:5f:
91:68:b8:fd:58:9f:04:b8:d7:11:56:bc:ae:0a:7f:44:4e:b3:
49:f0:91:82:31:76:36:e9:c1:e8:37:3d:fd:72:4c:59:38:9a:
f5:42:0d:4a:08:a9:76:81:98:2f:a4:5b:8a:b4:e3:e3:82:d3:
bd:f0:5e:de:28:3e:11:54:9b:43:66:75:d4:79:3c:59:e7:88:
f3:6f:36:05:6e:77:33:40:44:f4:39:e5:39:70:76:de:a1:cb:
4f:27:3c:a6:67:76:a5:87:6b:81:eb:1c:9e:38:c0:fb:ad:59:
da:2a:ed:48:3e:fd:19:12:62:9b:9a:a4:29:a4:94:f9:77:ef:
ef:d1:12:14:80:78:c6:67:c0:0a:83:4c:03:2f:5e:b2:29:8e:
ea:df:04:10:62:af:d0:01:26:9c:11:b3:de:89:69:aa:74:36:
9a:67:a3:92:8e:0f:ce:13:59:0f:1c:a8:e8:35:53:bd:06:dd:
06:f7:8f:ad:e9:9e:47:ae:06:50:36:d3:58:85:6c:a6:f1:c4:
35:99:b0:67:e5:ff:a9:99:8e:20:c1:c8:6c:cc:50:c8:db:da:
bb:e8:40:87:50:2f:58:2e:73:6e:26:85:ad:f3:ed:4b:52:b3:
5b:d5:ce:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3jO1QKzoSdmHVOYOV2A3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZWYyMDZmZTMwODVkOTk0M2NiNmEwNjNkYzk3ZTBkZWI3
ZjQzODQwHhcNMjUwNDI3MTQwMDQ2WhcNMjUwNDI4MTQwMDQ2WjAzMTEwLwYDVQQD
Eyg0OGQ3OWVjNzMzYjhkMDM2YjExYmJmYjEyYjRlMGEwOTMyNzE5ZmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdPw5a79KdgwhTWmGMmGxs0F2fVZ
rk9zW/eJ4JZrTukM0rGjTTcYCKHJGcn8aDQe2iPWqcRkeqtb8YvmOKylbj4/Y85K
Hhzcuyvhv+f51QtgDx9J6OwDjgbmZYP7qInxiVeDaXaqAQwofcT1QaAsqNB9i0sD
aZGEQXkw3cloxouUzsQH4wd4iYgfbWX439vsIMj8S9HHcRpWGbBfxWB5MI8CTEr0
GB7Gjz8fFOE34o1fG5/pUyEDXeoedKTAOyNCJZQo3pOW2Ayja/9SdsR617OwOwwT
JkRfEemRP8nyZET4kvpM8mMBeidEXWAcHekRPx0xeqE0YiWq8I6wLkpmFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjXnsczuNA2sRu/sStOCgkycZ+9MB8GA1UdIwQY
MBaAFETvIG/jCF2ZQ8tqBj3Jfg3rf0OEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk84Z2ItTUlYWmxEeTJvR1BjbC1EZXRfUTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82MmI1ZWQtNWY4NC00YmZiLTg1ZmQt
ZmJkNTBjZDg4ZWM0LzEvUk84Z2ItTUlYWmxEeTJvR1BjbC1EZXRfUTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82MmI1ZWQtNWY4NC00YmZiLTg1ZmQtZmJkNTBjZDg4ZWM0
LzEvUk84Z2ItTUlYWmxEeTJvR1BjbC1EZXRfUTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDaGMWyE
MA1cepty1v4/CspfkWi4/VifBLjXEVa8rgp/RE6zSfCRgjF2NunB6Dc9/XJMWTia
9UINSgipdoGYL6RbirTj44LTvfBe3ig+EVSbQ2Z11Hk8WeeI8282BW53M0BE9Dnl
OXB23qHLTyc8pmd2pYdrgescnjjA+61Z2irtSD79GRJim5qkKaSU+Xfv79ESFIB4
xmfACoNMAy9esimO6t8EEGKv0AEmnBGz3olpqnQ2mmejko4PzhNZDxyo6DVTvQbd
BvePremeR64GUDbTWIVspvHENZmwZ+X/qZmOIMHIbMxQyNvau+hAh1AvWC5zbiaF
rfPtS1KzW9XOXA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:25:02 2025 by rpki-client