Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
File: PetYF7vn5aHF-xMFUbhKtIgBb5I.mft (raw, json)
Hash identifier: bxSEe+5t/W652rIfmVahn/GfXV6Iky0O/HP46eLUj8k=
Subject key identifier: 50:E1:AB:F3:3C:8B:D8:1A:F8:AF:3E:49:EE:7C:70:9C:F3:EA:57:C7
Authority key identifier: 3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
Certificate issuer: /CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Certificate serial: 0196760D09931D8DD04FE36898460CEFC214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
Manifest number: 0170
Signing time: Sun 27 Apr 2025 07:01:27 +0000
Manifest this update: Sun 27 Apr 2025 07:01:27 +0000
Manifest next update: Mon 28 Apr 2025 07:01:27 +0000
Files and hashes: 1: KWPAsF0vFOD6kPsFU3LMV-L0lSI.roa (hash: VQvFUbsDDfVrBdoP9kicGC0pG5uJaNDDod3tQ4qnm70=)
2: PetYF7vn5aHF-xMFUbhKtIgBb5I.crl (hash: SJ9Fm3at7g8vlMYQFIxF4cfX+gNUBPQvFWw3WD3PFzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:09:93:1d:8d:d0:4f:e3:68:98:46:0c:ef:c2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Validity
Not Before: Apr 27 07:01:27 2025 GMT
Not After : Apr 28 07:01:27 2025 GMT
Subject: CN=50e1abf33c8bd81af8af3e49ee7c709cf3ea57c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4d:dc:82:f3:41:25:9c:06:5d:5b:68:4c:1f:
0c:ed:e5:0c:78:e0:5c:dc:dd:11:50:da:aa:96:94:
67:89:86:b0:9c:34:6a:3b:2c:fc:5b:68:66:28:aa:
0f:77:9b:e6:35:9c:e8:63:ab:34:0d:5f:38:b7:b8:
bb:a6:78:63:9c:3f:83:b5:32:ba:46:c9:34:5b:26:
41:8b:b3:23:85:da:70:00:19:82:26:96:88:89:e0:
30:1e:f9:92:61:0a:97:3e:7a:7f:f5:89:f6:14:f7:
7d:d5:8e:c8:60:96:b7:01:99:f9:8c:a0:e0:e9:56:
4e:1f:98:83:d5:5f:36:d5:1a:e3:49:5e:27:e7:f7:
18:d5:c9:08:d4:eb:6a:a2:54:4a:77:ab:99:ac:1e:
98:f6:4e:6f:46:73:72:f3:b5:06:e2:91:06:60:04:
c7:b6:42:d4:d0:0c:c0:fe:07:b3:e9:2d:ec:2c:8b:
d9:4d:bc:7b:d2:e9:51:9c:77:74:a4:97:2f:a2:97:
3d:6a:14:ea:e8:c3:27:3e:eb:d0:c5:54:54:14:d3:
e7:50:a1:0b:0d:0b:cc:71:30:d6:b5:65:f7:e5:da:
c2:a3:55:c7:b3:1f:3d:65:77:fb:76:4d:c4:59:f8:
00:f7:48:2c:a0:86:85:c7:9f:73:39:44:f2:cd:f1:
64:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E1:AB:F3:3C:8B:D8:1A:F8:AF:3E:49:EE:7C:70:9C:F3:EA:57:C7
X509v3 Authority Key Identifier:
keyid:3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d3:9e:19:77:4c:04:88:d9:cd:48:99:82:e9:be:9a:3e:c7:
94:af:cc:c8:d9:bd:bc:74:24:a0:a4:e2:50:42:d8:87:02:7c:
f7:7b:42:2a:fe:c1:fd:93:e0:2f:37:17:7a:4d:57:38:f7:4a:
61:ef:fe:73:30:fa:1c:8f:40:41:04:07:a5:80:d0:3c:31:3f:
f6:12:7d:94:92:df:a7:e4:3f:48:c4:8f:39:dd:93:a6:3b:6e:
98:eb:74:1d:0c:d8:cd:ba:f0:6c:48:92:84:85:aa:27:30:e5:
9c:20:5f:a6:6b:ff:6e:17:b5:1b:b0:5d:c7:05:a9:f1:8d:42:
34:2a:96:d7:0c:e9:a0:e1:ec:3f:99:8f:19:11:b3:d6:9d:7c:
6b:a3:fa:90:82:c8:28:29:39:1f:66:cb:d5:a5:59:76:f7:f5:
7f:5b:89:2d:41:15:8b:06:69:c6:d7:13:bb:7c:3c:f1:93:21:
99:5c:c8:89:17:1d:16:6e:f0:43:4f:f1:45:1e:82:ee:c3:c3:
4c:46:eb:46:a7:20:69:b1:a3:a3:92:43:2d:99:f6:fe:c2:13:
41:57:ed:98:e4:7a:c2:c5:18:32:4d:32:96:ec:25:0c:94:87:
3c:a7:ca:58:9f:2e:32:32:9b:7c:09:1a:bd:75:79:8f:e1:65:
60:ae:4e:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DQmTHY3QT+NomEYM78IUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZWI1ODE3YmJlN2U1YTFjNWZiMTMwNTUxYjg0YWI0ODgw
MTZmOTIwHhcNMjUwNDI3MDcwMTI3WhcNMjUwNDI4MDcwMTI3WjAzMTEwLwYDVQQD
Eyg1MGUxYWJmMzNjOGJkODFhZjhhZjNlNDllZTdjNzA5Y2YzZWE1N2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE3cgvNBJZwGXVtoTB8M7eUMeOBc
3N0RUNqqlpRniYawnDRqOyz8W2hmKKoPd5vmNZzoY6s0DV84t7i7pnhjnD+DtTK6
Rsk0WyZBi7MjhdpwABmCJpaIieAwHvmSYQqXPnp/9Yn2FPd91Y7IYJa3AZn5jKDg
6VZOH5iD1V821RrjSV4n5/cY1ckI1OtqolRKd6uZrB6Y9k5vRnNy87UG4pEGYATH
tkLU0AzA/gez6S3sLIvZTbx70ulRnHd0pJcvopc9ahTq6MMnPuvQxVRUFNPnUKEL
DQvMcTDWtWX35drCo1XHsx89ZXf7dk3EWfgA90gsoIaFx59zOUTyzfFkgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDhq/M8i9ga+K8+Se58cJzz6lfHMB8GA1UdIwQY
MBaAFD3rWBe75+WhxfsTBVG4SrSIAW+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGV0WUY3dm41YUhGLXhNRlViaEt0SWdCYjVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wZTQ5YTEtNzNhOS00NTgxLWI4OGMt
ZjEwNDg2ZTYwYTUzLzEvUGV0WUY3dm41YUhGLXhNRlViaEt0SWdCYjVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wZTQ5YTEtNzNhOS00NTgxLWI4OGMtZjEwNDg2ZTYwYTUz
LzEvUGV0WUY3dm41YUhGLXhNRlViaEt0SWdCYjVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNOeGXdM
BIjZzUiZgum+mj7HlK/MyNm9vHQkoKTiUELYhwJ893tCKv7B/ZPgLzcXek1XOPdK
Ye/+czD6HI9AQQQHpYDQPDE/9hJ9lJLfp+Q/SMSPOd2TpjtumOt0HQzYzbrwbEiS
hIWqJzDlnCBfpmv/bhe1G7BdxwWp8Y1CNCqW1wzpoOHsP5mPGRGz1p18a6P6kILI
KCk5H2bL1aVZdvf1f1uJLUEViwZpxtcTu3w88ZMhmVzIiRcdFm7wQ0/xRR6C7sPD
TEbrRqcgabGjo5JDLZn2/sITQVftmOR6wsUYMk0yluwlDJSHPKfKWJ8uMjKbfAka
vXV5j+FlYK5Oew==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:25:37 2025 by rpki-client