Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
File: rwAta7hamGvIjbzZMyCUVOW14II.mft (raw, json)
Hash identifier: HDu8WSHSX/TtAY6vJ79Xbtp7+EPFGldLmG2/l3ICadY=
Subject key identifier: 39:12:72:B5:D6:A3:D8:89:93:34:F0:D1:19:71:BB:28:B4:F6:CC:CC
Authority key identifier: AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
Certificate issuer: /CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Certificate serial: 019676E7B9D9C4C48D6A9CA491964F54AC81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
Manifest number: 100F
Signing time: Sun 27 Apr 2025 11:00:19 +0000
Manifest this update: Sun 27 Apr 2025 11:00:19 +0000
Manifest next update: Mon 28 Apr 2025 11:00:19 +0000
Files and hashes: 1: FSst80BStcOZoxcVEEn7HUNlaMg.roa (hash: MkzJ0Sac3ZN5iWdcIOjWwvYuR5zj6qypIoySO/md3YQ=)
2: rwAta7hamGvIjbzZMyCUVOW14II.crl (hash: G5wrlE6/nkpVNDzo8INAUG3Q04JZfEiKuer4OFvaKDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:b9:d9:c4:c4:8d:6a:9c:a4:91:96:4f:54:ac:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Validity
Not Before: Apr 27 11:00:19 2025 GMT
Not After : Apr 28 11:00:19 2025 GMT
Subject: CN=391272b5d6a3d8899334f0d11971bb28b4f6cccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cb:6f:a8:05:01:56:9f:5d:93:97:c4:5a:eb:
f9:55:c5:a2:f3:e2:13:75:db:3f:3b:96:9c:bf:05:
4d:00:0d:11:32:65:c9:0d:4c:f6:92:6c:22:a1:6a:
97:99:7a:93:a3:77:3c:04:d8:d2:64:ee:70:a6:9c:
c3:a3:85:b5:3f:64:ce:91:af:37:4c:7a:9c:5e:b1:
94:52:34:59:2a:8c:4e:90:81:f3:b5:1e:f7:47:2f:
5e:43:21:36:0f:2b:d7:3b:53:3e:da:70:fa:8e:7a:
06:25:33:75:fe:ed:1d:4b:b0:4f:52:6c:42:88:03:
c2:e0:ac:10:1b:16:bf:bf:ad:41:b0:c7:62:e4:a0:
df:73:c9:ad:cf:a3:29:ea:78:00:be:4b:c7:12:8f:
1c:c2:6a:4d:94:df:45:b3:05:f7:57:e6:77:33:be:
18:3d:d8:8c:8b:d0:9c:9e:32:d6:ca:d3:f1:6d:e5:
8a:d8:a4:bc:1c:49:b7:dd:87:d4:83:da:1c:0c:1c:
d1:54:92:85:25:57:aa:8b:2d:be:13:6e:09:85:fd:
db:bc:99:84:7d:f6:26:da:43:1e:ee:f2:fa:39:5c:
77:8a:9f:ac:eb:15:95:9a:03:da:dd:45:42:97:f3:
c9:1f:e6:f8:a8:45:3c:54:ca:8c:f7:0d:14:53:8b:
96:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:12:72:B5:D6:A3:D8:89:93:34:F0:D1:19:71:BB:28:B4:F6:CC:CC
X509v3 Authority Key Identifier:
keyid:AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:61:68:34:a0:17:d9:47:c4:07:f9:6f:c3:72:07:17:55:08:
c5:d5:10:f4:f8:08:6d:fd:07:4c:1f:f4:fc:c0:c9:50:cd:84:
32:5e:26:be:78:5f:bd:ef:5e:3c:26:e3:4d:9e:35:26:47:d5:
35:49:de:9f:46:a0:05:1c:74:17:0f:68:a9:aa:96:96:07:ec:
ea:5c:cf:fc:45:13:fd:fd:a7:8a:fc:d1:6b:2f:76:63:3c:e1:
af:7c:c8:a2:af:02:7e:ca:7f:14:11:a2:55:99:f4:b2:e9:f1:
88:0e:b7:a3:ad:fd:cc:b8:e5:ad:64:8b:b4:05:40:17:9a:65:
ee:ce:64:e1:fb:a1:75:c8:e6:31:b4:89:4b:be:75:54:d6:84:
15:ce:cc:8b:50:b2:93:81:f9:bc:92:52:ec:70:99:e3:b5:75:
fa:12:bf:76:9c:0a:0c:93:b3:77:6b:79:c4:52:c3:85:39:bf:
95:9f:e7:40:ab:9b:0a:70:ca:28:bd:0b:62:19:57:0f:67:99:
3e:5d:99:39:22:60:a0:79:66:6d:99:8e:3b:c4:7b:47:b9:b6:
f8:73:ad:95:20:5f:f3:27:ad:fa:2a:74:98:b7:9e:f9:54:df:
44:71:cb:e6:7b:06:50:f1:99:e9:f6:4b:1e:50:26:44:d7:c5:
c5:49:39:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ257nZxMSNapykkZZPVKyBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMDAyZDZiYjg1YTk4NmJjODhkYmNkOTMzMjA5NDU0ZTVi
NWUwODIwHhcNMjUwNDI3MTEwMDE5WhcNMjUwNDI4MTEwMDE5WjAzMTEwLwYDVQQD
EygzOTEyNzJiNWQ2YTNkODg5OTMzNGYwZDExOTcxYmIyOGI0ZjZjY2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwstvqAUBVp9dk5fEWuv5VcWi8+IT
dds/O5acvwVNAA0RMmXJDUz2kmwioWqXmXqTo3c8BNjSZO5wppzDo4W1P2TOka83
THqcXrGUUjRZKoxOkIHztR73Ry9eQyE2DyvXO1M+2nD6jnoGJTN1/u0dS7BPUmxC
iAPC4KwQGxa/v61BsMdi5KDfc8mtz6Mp6ngAvkvHEo8cwmpNlN9FswX3V+Z3M74Y
PdiMi9CcnjLWytPxbeWK2KS8HEm33YfUg9ocDBzRVJKFJVeqiy2+E24Jhf3bvJmE
ffYm2kMe7vL6OVx3ip+s6xWVmgPa3UVCl/PJH+b4qEU8VMqM9w0UU4uWWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkScrXWo9iJkzTw0Rlxuyi09szMMB8GA1UdIwQY
MBaAFK8ALWu4WphryI282TMglFTlteCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcndBdGE3aGFtR3ZJamJ6Wk15Q1VWT1cxNElJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9hMmVkYTItZTg4NS00NjQwLTljODQt
ZDZlZjhlOTE0MzA3LzEvcndBdGE3aGFtR3ZJamJ6Wk15Q1VWT1cxNElJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9hMmVkYTItZTg4NS00NjQwLTljODQtZDZlZjhlOTE0MzA3
LzEvcndBdGE3aGFtR3ZJamJ6Wk15Q1VWT1cxNElJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2FoNKAX
2UfEB/lvw3IHF1UIxdUQ9PgIbf0HTB/0/MDJUM2EMl4mvnhfve9ePCbjTZ41JkfV
NUnen0agBRx0Fw9oqaqWlgfs6lzP/EUT/f2nivzRay92Yzzhr3zIoq8Cfsp/FBGi
VZn0sunxiA63o639zLjlrWSLtAVAF5pl7s5k4fuhdcjmMbSJS751VNaEFc7Mi1Cy
k4H5vJJS7HCZ47V1+hK/dpwKDJOzd2t5xFLDhTm/lZ/nQKubCnDKKL0LYhlXD2eZ
Pl2ZOSJgoHlmbZmOO8R7R7m2+HOtlSBf8yet+ip0mLee+VTfRHHL5nsGUPGZ6fZL
HlAmRNfFxUk5Vg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:20:48 2025 by rpki-client