Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.mft
File: IPUwckL-PJUyezIgodpb_9ElJP4.mft (raw, json)
Hash identifier: hXftXNV9AKgRiPpHsuaZ+NCrWTps2zclJaME4FsvC+k=
Subject key identifier: 32:7D:28:CA:59:6D:7A:91:6A:91:1E:53:21:A3:83:71:A6:F8:55:34
Authority key identifier: 20:F5:30:72:42:FE:3C:95:32:7B:32:20:A1:DA:5B:FF:D1:25:24:FE
Certificate issuer: /CN=20f5307242fe3c95327b3220a1da5bffd12524fe
Certificate serial: 01967EA1799BB884529BD05C58D234ADF333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPUwckL-PJUyezIgodpb_9ElJP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.mft
Manifest number: 1259
Signing time: Mon 28 Apr 2025 23:00:33 +0000
Manifest this update: Mon 28 Apr 2025 23:00:33 +0000
Manifest next update: Tue 29 Apr 2025 23:00:33 +0000
Files and hashes: 1: IPUwckL-PJUyezIgodpb_9ElJP4.crl (hash: 3QG/nUt8iAjyB0cghWz5TwPxM/tyV5Im+PRGTthcaXo=)
2: Qa4JMIgPu5wL8OC2dk4UB5DnRYo.roa (hash: X6xGAAT5bKpyoabeTbBzbbLe23OVwiADFdpeDzqtwqo=)
3: tdTzvtLmLzsGpDsb_-eId6PoDIw.roa (hash: egeKGNdydr92Gcv38VGJLrGB08MiJTSLDukje+DoTiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPUwckL-PJUyezIgodpb_9ElJP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:79:9b:b8:84:52:9b:d0:5c:58:d2:34:ad:f3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f5307242fe3c95327b3220a1da5bffd12524fe
Validity
Not Before: Apr 28 23:00:33 2025 GMT
Not After : Apr 29 23:00:33 2025 GMT
Subject: CN=327d28ca596d7a916a911e5321a38371a6f85534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:7d:b9:74:45:58:b9:bb:92:e5:08:89:16:
c4:02:79:0c:94:b1:06:41:c4:87:08:78:cc:eb:35:
49:37:14:ac:ef:4c:67:d3:bb:64:75:7a:a6:46:11:
a6:9c:3f:c3:10:72:89:f0:3d:91:52:51:44:bd:72:
00:e4:a3:80:17:d7:95:55:60:48:80:df:ee:0d:22:
04:58:e2:5e:be:4c:f5:23:52:c0:3f:28:b6:a0:dd:
9d:f0:e1:14:f0:36:9b:6d:77:01:77:f2:c2:47:56:
7a:f8:e7:dd:31:ec:f5:36:ac:1f:5b:1d:73:93:e3:
e3:50:63:37:58:a8:25:04:f2:c9:82:6a:8f:f2:14:
23:0e:49:72:36:f0:f8:f7:29:50:d6:06:97:d0:8a:
6b:55:14:36:84:33:c1:dc:06:8e:92:c8:18:79:23:
fd:f7:82:5b:60:03:9e:8d:00:ba:e7:79:d6:ca:e0:
15:18:fd:fe:42:50:e3:29:05:e2:0d:23:5b:62:03:
a0:91:87:ea:da:1a:9a:98:2e:6e:f1:83:c2:b2:d4:
a1:86:ea:ff:40:48:53:f3:4f:bf:73:e1:bf:e2:cd:
0f:2d:11:4f:d2:29:9d:59:24:de:9e:3a:a7:61:b1:
d4:e9:69:d8:ac:f9:3f:5a:6a:c2:ec:95:ba:53:b4:
8a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7D:28:CA:59:6D:7A:91:6A:91:1E:53:21:A3:83:71:A6:F8:55:34
X509v3 Authority Key Identifier:
keyid:20:F5:30:72:42:FE:3C:95:32:7B:32:20:A1:DA:5B:FF:D1:25:24:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPUwckL-PJUyezIgodpb_9ElJP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:15:9e:0f:00:53:68:bd:69:42:63:a2:de:4c:2f:69:b1:59:
11:b7:b5:04:99:47:14:f8:a1:c2:5a:cd:14:62:51:d9:80:e6:
3d:e4:9c:e4:f6:83:f9:25:c8:e9:d2:81:6e:e3:57:cb:55:4c:
af:ae:8c:f1:f4:83:68:d5:05:4b:55:6f:99:96:42:d2:48:61:
58:2e:c3:43:a1:37:2e:f5:bd:54:ce:98:2f:43:e6:1d:84:90:
42:30:23:4d:24:47:a7:15:f6:ec:30:11:b6:f1:7a:d7:75:87:
60:d3:3d:8d:d5:63:0c:c1:bc:81:a3:fd:a1:57:4a:bd:4c:59:
07:19:9e:1f:4b:09:7f:d7:76:7d:41:7f:a6:e5:07:2a:9b:ec:
3c:4f:9d:63:80:92:15:6f:9b:f5:77:89:4b:60:50:bb:84:9f:
3e:e1:c7:0c:02:af:6a:82:a2:4a:13:a9:43:e4:f6:d1:6b:dd:
94:3e:8a:59:f1:7f:0f:81:5b:89:60:21:39:5d:7c:b0:21:58:
37:1a:52:0a:54:2b:53:c1:0a:38:d5:8e:da:41:c3:ad:be:b8:
27:ad:d2:ad:37:3d:38:58:7d:a2:a7:f9:01:b7:3d:e5:2a:74:
d8:51:09:df:fb:89:66:ef:b2:13:92:9d:3e:9c:70:f0:7d:54:
cb:c0:2c:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+oXmbuIRSm9BcWNI0rfMzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZjUzMDcyNDJmZTNjOTUzMjdiMzIyMGExZGE1YmZmZDEy
NTI0ZmUwHhcNMjUwNDI4MjMwMDMzWhcNMjUwNDI5MjMwMDMzWjAzMTEwLwYDVQQD
EygzMjdkMjhjYTU5NmQ3YTkxNmE5MTFlNTMyMWEzODM3MWE2Zjg1NTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0J9uXRFWLm7kuUIiRbEAnkMlLEG
QcSHCHjM6zVJNxSs70xn07tkdXqmRhGmnD/DEHKJ8D2RUlFEvXIA5KOAF9eVVWBI
gN/uDSIEWOJevkz1I1LAPyi2oN2d8OEU8DabbXcBd/LCR1Z6+OfdMez1NqwfWx1z
k+PjUGM3WKglBPLJgmqP8hQjDklyNvD49ylQ1gaX0IprVRQ2hDPB3AaOksgYeSP9
94JbYAOejQC653nWyuAVGP3+QlDjKQXiDSNbYgOgkYfq2hqamC5u8YPCstShhur/
QEhT80+/c+G/4s0PLRFP0imdWSTenjqnYbHU6WnYrPk/WmrC7JW6U7SKhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJ9KMpZbXqRapEeUyGjg3Gm+FU0MB8GA1UdIwQY
MBaAFCD1MHJC/jyVMnsyIKHaW//RJST+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVBVd2NrTC1QSlV5ZXpJZ29kcGJfOUVsSlA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lMTNhMDEtYzAwYi00OTU2LWFiM2Et
MzA5YTQ5NzBiYmZkLzEvSVBVd2NrTC1QSlV5ZXpJZ29kcGJfOUVsSlA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lMTNhMDEtYzAwYi00OTU2LWFiM2EtMzA5YTQ5NzBiYmZk
LzEvSVBVd2NrTC1QSlV5ZXpJZ29kcGJfOUVsSlA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxWeDwBT
aL1pQmOi3kwvabFZEbe1BJlHFPihwlrNFGJR2YDmPeSc5PaD+SXI6dKBbuNXy1VM
r66M8fSDaNUFS1VvmZZC0khhWC7DQ6E3LvW9VM6YL0PmHYSQQjAjTSRHpxX27DAR
tvF613WHYNM9jdVjDMG8gaP9oVdKvUxZBxmeH0sJf9d2fUF/puUHKpvsPE+dY4CS
FW+b9XeJS2BQu4SfPuHHDAKvaoKiShOpQ+T20WvdlD6KWfF/D4FbiWAhOV18sCFY
NxpSClQrU8EKONWO2kHDrb64J63SrTc9OFh9oqf5Abc95Sp02FEJ3/uJZu+yE5Kd
Ppxw8H1Uy8As2Q==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:41:06 2025 by rpki-client