Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
File: piEYZBO7394g5ZL75VU95_lOWYc.mft (raw, json)
Hash identifier: PtqFJyhe7kjyzV5dV08KQVA/BUaXkoPMGp5UNdvMOhs=
Subject key identifier: 87:46:4D:43:E4:98:18:4B:AE:5C:2C:A6:F8:21:74:DE:5E:92:BA:25
Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
Certificate issuer: /CN=a621186413bbdfde20e592fbe5553de7f94e5987
Certificate serial: 019672D47915348530B150B3984DBB814C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
Manifest number: 03E2
Signing time: Sat 26 Apr 2025 16:00:49 +0000
Manifest this update: Sat 26 Apr 2025 16:00:49 +0000
Manifest next update: Sun 27 Apr 2025 16:00:49 +0000
Files and hashes: 1: 2aIv5EFJCSs3iPuLEwGcOsjanoQ.roa (hash: rNsD7+Ehz0+ume5zSIU3z6oGfVe17YRXQCn2AWnXoqw=)
2: 3Z7L3_p0yn0EwtvhrBcb6RS6PAs.roa (hash: 4nmnsCr5dF+3f2AuaahP7K0weju+VIeFWLyhjXlOYao=)
3: piEYZBO7394g5ZL75VU95_lOWYc.crl (hash: Cdi/HoHiLRSS9im6BeWCsiyJKMind2oNwYq53qbSZ1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d4:79:15:34:85:30:b1:50:b3:98:4d:bb:81:4c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987
Validity
Not Before: Apr 26 16:00:49 2025 GMT
Not After : Apr 27 16:00:49 2025 GMT
Subject: CN=87464d43e498184bae5c2ca6f82174de5e92ba25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:27:6f:b4:f9:0d:fd:61:6a:33:f1:7f:97:c1:
ed:51:0b:93:11:01:a9:48:1f:49:d8:68:49:02:45:
bb:f8:1e:35:17:05:b4:57:73:63:fa:28:1b:7f:e9:
fd:29:89:c8:85:3a:e4:ee:ac:17:a7:7e:89:70:e9:
32:87:a9:1e:e5:f1:6c:6d:7b:15:ce:31:d6:58:ee:
9f:4d:03:8d:c5:5a:6d:46:f9:36:5f:c2:ef:01:91:
fd:73:ea:90:41:82:b1:7f:9d:0e:9c:eb:a5:81:57:
92:75:eb:12:16:0e:94:e5:b5:1c:14:fe:df:f4:31:
f1:45:c9:eb:e1:ff:68:7c:4e:ef:4a:1a:ab:15:45:
96:c9:bd:54:20:47:b0:c0:8e:56:3b:a6:36:32:06:
cb:fc:aa:0a:09:ac:bb:a4:6f:83:ff:c5:e1:40:05:
b8:0c:f6:81:02:d3:f4:26:ad:d8:ca:1f:e5:3e:2c:
0c:eb:e2:78:67:60:59:84:45:53:95:0f:0c:b9:20:
c8:05:c8:92:8b:4e:40:a2:da:b7:de:97:f5:4b:b2:
2f:6d:95:a4:74:6a:7c:2d:d6:97:c1:a3:41:28:6d:
0a:3f:db:ea:5f:e9:a7:ba:50:68:21:93:ae:17:a3:
04:83:49:8d:e8:92:d6:87:6d:86:e3:cb:67:01:0f:
0b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:46:4D:43:E4:98:18:4B:AE:5C:2C:A6:F8:21:74:DE:5E:92:BA:25
X509v3 Authority Key Identifier:
keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:fc:7e:41:6f:4b:89:e8:d6:03:f8:72:2a:9d:e6:31:1c:64:
cf:a3:5f:8b:a6:1a:85:2a:e0:fd:7e:60:72:69:f6:3f:4c:a3:
3b:0e:ca:1a:a4:3d:c2:71:b4:96:8d:c8:35:fa:b9:78:e2:87:
4e:a9:bc:8d:d1:bd:be:a6:b5:12:3f:97:48:b1:10:06:bc:d5:
96:89:9d:fe:da:71:25:0b:a8:1e:04:5e:bd:46:2a:5c:94:52:
2a:3d:69:0e:0d:f0:37:fe:01:d1:21:ee:e3:07:8a:fa:b8:18:
19:7a:a8:cb:77:b5:a1:68:dc:f1:f1:b8:8f:ac:3b:7d:2f:ff:
0a:7d:42:fe:9f:b1:71:f2:b6:fa:27:09:9e:be:17:19:a2:e6:
ea:16:a4:ab:31:a1:d5:89:68:67:cc:4f:70:a9:23:ea:96:a7:
92:f3:32:93:2b:90:d7:42:1b:65:d1:a2:77:c9:ed:48:d8:3b:
5e:ce:b3:ae:b4:2d:a3:3a:e3:c0:6c:0d:4b:bd:21:0d:2e:21:
0d:9f:ea:82:82:d3:2f:5a:08:32:fb:34:18:bc:01:d3:18:e6:
21:2a:d8:96:16:be:b3:b1:94:ab:17:82:fb:4b:68:af:94:49:
ef:20:88:d9:4c:67:ec:23:d2:43:47:0f:cd:17:e2:4a:b6:71:
b1:7f:a6:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZy1HkVNIUwsVCzmE27gUyMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MjExODY0MTNiYmRmZGUyMGU1OTJmYmU1NTUzZGU3Zjk0
ZTU5ODcwHhcNMjUwNDI2MTYwMDQ5WhcNMjUwNDI3MTYwMDQ5WjAzMTEwLwYDVQQD
Eyg4NzQ2NGQ0M2U0OTgxODRiYWU1YzJjYTZmODIxNzRkZTVlOTJiYTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCdvtPkN/WFqM/F/l8HtUQuTEQGp
SB9J2GhJAkW7+B41FwW0V3Nj+igbf+n9KYnIhTrk7qwXp36JcOkyh6ke5fFsbXsV
zjHWWO6fTQONxVptRvk2X8LvAZH9c+qQQYKxf50OnOulgVeSdesSFg6U5bUcFP7f
9DHxRcnr4f9ofE7vShqrFUWWyb1UIEewwI5WO6Y2MgbL/KoKCay7pG+D/8XhQAW4
DPaBAtP0Jq3Yyh/lPiwM6+J4Z2BZhEVTlQ8MuSDIBciSi05Aotq33pf1S7IvbZWk
dGp8LdaXwaNBKG0KP9vqX+mnulBoIZOuF6MEg0mN6JLWh22G48tnAQ8LewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdGTUPkmBhLrlwspvghdN5ekrolMB8GA1UdIwQY
MBaAFKYhGGQTu9/eIOWS++VVPef5TlmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGlFWVpCTzczOTRnNVpMNzVWVTk1X2xPV1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wMzk2YWQtZGRhNy00NjAwLThmNjYt
ZjU2Yzc3OWIxNDJmLzEvcGlFWVpCTzczOTRnNVpMNzVWVTk1X2xPV1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8wMzk2YWQtZGRhNy00NjAwLThmNjYtZjU2Yzc3OWIxNDJm
LzEvcGlFWVpCTzczOTRnNVpMNzVWVTk1X2xPV1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/x+QW9L
iejWA/hyKp3mMRxkz6Nfi6YahSrg/X5gcmn2P0yjOw7KGqQ9wnG0lo3INfq5eOKH
Tqm8jdG9vqa1Ej+XSLEQBrzVlomd/tpxJQuoHgRevUYqXJRSKj1pDg3wN/4B0SHu
4weK+rgYGXqoy3e1oWjc8fG4j6w7fS//Cn1C/p+xcfK2+icJnr4XGaLm6hakqzGh
1YloZ8xPcKkj6pankvMykyuQ10IbZdGid8ntSNg7Xs6zrrQtozrjwGwNS70hDS4h
DZ/qgoLTL1oIMvs0GLwB0xjmISrYlha+s7GUqxeC+0tor5RJ7yCI2Uxn7CPSQ0cP
zRfiSrZxsX+mIg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:06:14 2025 by rpki-client