Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
File: ARmUscWuj1grvs9ndysUttl3uqw.mft (raw, json)
Hash identifier: 1DHdnqNgvHoxK3dKS53tl/+Rd/n5A8Q/YPyqRXW/34k=
Subject key identifier: 47:CB:37:00:94:3D:33:5E:3E:25:D4:52:C3:63:06:28:50:6D:F2:1D
Authority key identifier: 01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC
Certificate issuer: /CN=011994b1c5ae8f582bbecf67772b14b6d977baac
Certificate serial: 01967C7C60ECE3B4BB84FBCEAA39B5D340B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
Manifest number: 042A
Signing time: Mon 28 Apr 2025 13:00:48 +0000
Manifest this update: Mon 28 Apr 2025 13:00:48 +0000
Manifest next update: Tue 29 Apr 2025 13:00:48 +0000
Files and hashes: 1: ARmUscWuj1grvs9ndysUttl3uqw.crl (hash: 9uKgXDDqxrWu3ZSrg4vrmNeME8V4X3nRDl0+Jnmw0pM=)
2: NFxIuk4KnMOoaK7t1Cp4prQGCpc.roa (hash: qLz7+g7LrMIsBpRTz+960ZyB6BF4g8W2iE+TmwJoilE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7c:60:ec:e3:b4:bb:84:fb:ce:aa:39:b5:d3:40:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011994b1c5ae8f582bbecf67772b14b6d977baac
Validity
Not Before: Apr 28 13:00:48 2025 GMT
Not After : Apr 29 13:00:48 2025 GMT
Subject: CN=47cb3700943d335e3e25d452c3630628506df21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:fc:25:3f:5e:42:af:68:a1:47:26:6d:84:
6b:43:47:ed:87:36:6c:d3:67:b2:d3:39:cb:76:a6:
b5:18:98:07:61:83:93:39:f8:42:5d:18:78:f8:d9:
53:d5:1c:39:04:c8:26:bd:0b:67:61:c0:85:21:d4:
13:50:a8:93:aa:3e:e2:00:c0:e6:ac:04:f9:09:9e:
a4:35:87:79:7c:8b:b0:bb:95:7c:b1:0f:81:54:05:
fc:bc:af:ea:67:83:95:99:40:4d:6f:99:03:8e:53:
13:54:7e:47:33:e3:2e:75:de:24:de:63:5b:cd:cb:
8b:ee:ec:ad:45:1d:c7:42:ac:7d:31:7c:9c:79:79:
78:57:71:c5:ae:32:77:20:55:5f:aa:0c:36:6a:5f:
c6:90:0e:1d:68:f9:e4:b0:94:95:d8:c3:0a:f1:82:
48:05:ba:d4:1e:7c:df:b8:bf:da:6e:1d:a9:be:bb:
af:7c:1d:a1:c5:1f:11:2c:83:02:33:7a:f0:52:1e:
85:eb:06:5e:70:2a:ca:d5:8d:63:e0:02:ca:7c:3f:
fc:9e:94:19:9a:e9:91:5e:c2:50:a4:36:3b:68:55:
19:43:10:a8:7d:c4:e0:74:1b:ff:69:66:ce:70:07:
3a:c9:01:d4:81:c0:b0:0e:3e:0f:f7:ec:ea:ab:6b:
06:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CB:37:00:94:3D:33:5E:3E:25:D4:52:C3:63:06:28:50:6D:F2:1D
X509v3 Authority Key Identifier:
keyid:01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a2:b7:6c:e5:87:e6:41:7f:01:8e:5e:85:dc:00:74:33:9a:
09:ba:8a:80:74:59:46:5c:ee:4d:da:05:a2:ce:c1:2a:71:4f:
19:7e:10:d3:9c:2e:22:86:7a:c6:ea:78:81:32:fe:2f:1a:7d:
7d:3d:62:4b:1e:21:35:d2:0b:83:21:1d:b1:1e:70:95:99:b9:
1b:53:d4:a1:8b:80:85:66:82:91:94:a0:43:84:bd:3d:26:4c:
0e:21:c1:c0:0c:f8:13:1f:92:b6:db:0a:74:01:19:d3:67:0e:
de:34:83:fa:f1:d1:aa:fd:92:29:ea:73:1b:4c:e4:03:d5:e3:
32:95:d5:60:91:d0:e1:47:9a:bd:28:73:c2:37:be:ee:2d:96:
17:5b:df:d3:b7:cd:17:d7:63:95:53:46:0f:bb:dd:9e:81:bf:
6f:c7:7b:25:da:64:bc:a6:00:a2:2e:04:f6:fc:7a:0b:ea:60:
39:2d:f8:51:70:17:29:bd:8e:d8:98:ee:ff:bb:cc:73:3a:ff:
70:88:79:2e:70:71:ff:34:33:71:98:45:9b:e3:d3:bc:e7:93:
d6:57:98:36:b8:06:c3:cc:6d:e8:c6:97:19:7a:e8:2d:93:61:
80:9c:ab:8e:28:49:c9:59:35:41:b9:7a:34:7b:39:b6:28:dc:
5a:03:76:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8fGDs47S7hPvOqjm100C2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMTk5NGIxYzVhZThmNTgyYmJlY2Y2Nzc3MmIxNGI2ZDk3
N2JhYWMwHhcNMjUwNDI4MTMwMDQ4WhcNMjUwNDI5MTMwMDQ4WjAzMTEwLwYDVQQD
Eyg0N2NiMzcwMDk0M2QzMzVlM2UyNWQ0NTJjMzYzMDYyODUwNmRmMjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8v8JT9eQq9ooUcmbYRrQ0fthzZs
02ey0znLdqa1GJgHYYOTOfhCXRh4+NlT1Rw5BMgmvQtnYcCFIdQTUKiTqj7iAMDm
rAT5CZ6kNYd5fIuwu5V8sQ+BVAX8vK/qZ4OVmUBNb5kDjlMTVH5HM+Mudd4k3mNb
zcuL7uytRR3HQqx9MXyceXl4V3HFrjJ3IFVfqgw2al/GkA4daPnksJSV2MMK8YJI
BbrUHnzfuL/abh2pvruvfB2hxR8RLIMCM3rwUh6F6wZecCrK1Y1j4ALKfD/8npQZ
mumRXsJQpDY7aFUZQxCofcTgdBv/aWbOcAc6yQHUgcCwDj4P9+zqq2sGkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfLNwCUPTNePiXUUsNjBihQbfIdMB8GA1UdIwQY
MBaAFAEZlLHFro9YK77PZ3crFLbZd7qsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kYTNlNWEtMzAwMi00MWIwLWFmOWEt
M2E3M2MzMzNlN2U3LzEvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9kYTNlNWEtMzAwMi00MWIwLWFmOWEtM2E3M2MzMzNlN2U3
LzEvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6K3bOWH
5kF/AY5ehdwAdDOaCbqKgHRZRlzuTdoFos7BKnFPGX4Q05wuIoZ6xup4gTL+Lxp9
fT1iSx4hNdILgyEdsR5wlZm5G1PUoYuAhWaCkZSgQ4S9PSZMDiHBwAz4Ex+SttsK
dAEZ02cO3jSD+vHRqv2SKepzG0zkA9XjMpXVYJHQ4UeavShzwje+7i2WF1vf07fN
F9djlVNGD7vdnoG/b8d7JdpkvKYAoi4E9vx6C+pgOS34UXAXKb2O2Jju/7vMczr/
cIh5LnBx/zQzcZhFm+PTvOeT1leYNrgGw8xt6MaXGXroLZNhgJyrjihJyVk1Qbl6
NHs5tijcWgN2tg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 16:51:05 2025 by rpki-client