Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5f3a02-0650-4e5c-b8d0-c701f279c6de/1/65Hpk6SkDOfl2chjJfGG3waeys0.mft
File: 65Hpk6SkDOfl2chjJfGG3waeys0.mft (raw, json)
Hash identifier: NiVtwnDLGHxy1rjIjNnDQit8k/PXGOIgZYjwASXDKEo=
Subject key identifier: AB:13:85:D8:7F:DE:A6:D3:37:52:3F:38:B3:33:74:2A:55:04:D6:6E
Authority key identifier: EB:91:E9:93:A4:A4:0C:E7:E5:D9:C8:63:25:F1:86:DF:06:9E:CA:CD
Certificate issuer: /CN=eb91e993a4a40ce7e5d9c86325f186df069ecacd
Certificate serial: 0196767A8DDCC164E0D92F96AB96454F7044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65Hpk6SkDOfl2chjJfGG3waeys0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f3a02-0650-4e5c-b8d0-c701f279c6de/1/65Hpk6SkDOfl2chjJfGG3waeys0.mft
Manifest number: 05F9
Signing time: Sun 27 Apr 2025 09:01:05 +0000
Manifest this update: Sun 27 Apr 2025 09:01:05 +0000
Manifest next update: Mon 28 Apr 2025 09:01:05 +0000
Files and hashes: 1: 65Hpk6SkDOfl2chjJfGG3waeys0.crl (hash: M35+fdq+R14DhAzvqjJjWyvVj9HOOv97t8GoYWHXajg=)
2: ctxe5Lnf-P92Y-aRF-aTwCxvQ-Y.roa (hash: JuvYZG1KASTZcCfggftiqfbWLqoSmP/ETYKyhfPlx0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f3a02-0650-4e5c-b8d0-c701f279c6de/1/65Hpk6SkDOfl2chjJfGG3waeys0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/5f3a02-0650-4e5c-b8d0-c701f279c6de/1/65Hpk6SkDOfl2chjJfGG3waeys0.mft
rsync://rpki.ripe.net/repository/DEFAULT/65Hpk6SkDOfl2chjJfGG3waeys0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:8d:dc:c1:64:e0:d9:2f:96:ab:96:45:4f:70:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb91e993a4a40ce7e5d9c86325f186df069ecacd
Validity
Not Before: Apr 27 09:01:05 2025 GMT
Not After : Apr 28 09:01:05 2025 GMT
Subject: CN=ab1385d87fdea6d337523f38b333742a5504d66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:a9:74:7e:6c:2e:68:7b:51:6e:d5:01:92:
6a:b4:d7:4b:9b:7e:a3:e7:06:a4:b7:fe:ef:f2:1a:
2d:74:4a:0a:c8:13:5a:11:17:e6:b1:0b:64:b9:20:
d2:8e:0a:81:9f:f5:ce:89:a6:bd:93:a7:1e:44:6a:
11:da:03:c9:19:7f:53:9f:18:05:cc:43:66:b1:23:
7f:42:98:c4:8d:dc:92:8d:9f:14:de:d7:d1:21:8e:
23:a5:fc:46:9a:65:8b:bd:0f:36:d5:95:22:50:9f:
ee:26:2b:f3:09:69:9c:53:f0:8c:47:4e:d6:43:71:
9a:8e:76:61:e7:c7:8f:28:b0:3e:90:6c:ee:36:09:
09:2d:d0:85:17:eb:be:71:47:4f:78:c0:65:db:3d:
8f:21:28:b7:b9:92:d9:ef:48:73:95:de:84:2d:1d:
fb:e7:78:a2:96:bc:76:d4:db:54:16:25:ec:8a:aa:
91:b3:db:5b:a3:4c:90:cf:6f:50:05:8f:af:68:d4:
a3:ae:83:4c:00:4c:1d:a9:96:16:4a:ec:bd:e5:7f:
69:e1:36:1e:65:9b:fb:b7:1c:3c:27:47:c8:4b:a5:
cd:64:53:17:69:9f:ce:c7:dc:e8:8d:c3:4a:4f:f5:
19:cb:71:89:ab:76:2e:30:45:7d:06:6f:37:ce:53:
65:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:13:85:D8:7F:DE:A6:D3:37:52:3F:38:B3:33:74:2A:55:04:D6:6E
X509v3 Authority Key Identifier:
keyid:EB:91:E9:93:A4:A4:0C:E7:E5:D9:C8:63:25:F1:86:DF:06:9E:CA:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65Hpk6SkDOfl2chjJfGG3waeys0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f3a02-0650-4e5c-b8d0-c701f279c6de/1/65Hpk6SkDOfl2chjJfGG3waeys0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f3a02-0650-4e5c-b8d0-c701f279c6de/1/65Hpk6SkDOfl2chjJfGG3waeys0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:0e:2e:c6:36:9b:0a:34:17:04:a1:12:16:c1:f9:a1:90:6d:
bd:d5:72:d1:29:da:c4:5e:c3:a8:5a:1a:d1:5e:d5:6a:32:cf:
7e:f1:b8:ae:99:b3:cd:d0:4d:06:6a:b3:2f:77:15:a5:53:e9:
8c:2a:f7:f1:f9:26:3f:92:29:78:5d:ce:81:e8:0e:89:37:13:
a1:b2:5e:e1:75:79:5d:01:9a:02:c0:5c:dc:db:51:fa:25:41:
7a:33:4e:4c:18:9e:39:06:cc:45:e1:86:6b:88:80:da:81:4f:
3f:62:ad:f3:f1:93:a7:9e:98:98:8d:b8:eb:5e:50:08:70:96:
e0:86:42:27:61:b6:cc:0b:ad:36:f7:a3:7b:78:fd:e7:3b:5a:
fb:e9:16:0a:c4:8f:4c:2b:ea:e5:d4:ba:4c:d9:2b:d6:f2:ef:
66:84:84:c0:eb:2a:47:44:fb:dd:b4:47:db:ea:3f:35:35:83:
9d:4b:94:71:1a:d7:e4:44:3b:f8:82:61:0f:57:de:4c:a3:e1:
61:cd:c5:fa:11:f1:97:e9:30:a4:98:ca:64:1e:19:0e:93:a6:
a9:04:5e:fc:c3:0e:0d:b1:1e:6c:af:ae:59:12:31:22:3d:d9:
0b:cb:f3:bb:d0:97:fd:db:44:32:a4:e0:a4:e6:c1:8c:cb:79:
c8:45:27:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2eo3cwWTg2S+Wq5ZFT3BEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViOTFlOTkzYTRhNDBjZTdlNWQ5Yzg2MzI1ZjE4NmRmMDY5
ZWNhY2QwHhcNMjUwNDI3MDkwMTA1WhcNMjUwNDI4MDkwMTA1WjAzMTEwLwYDVQQD
EyhhYjEzODVkODdmZGVhNmQzMzc1MjNmMzhiMzMzNzQyYTU1MDRkNjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4updH5sLmh7UW7VAZJqtNdLm36j
5wakt/7v8hotdEoKyBNaERfmsQtkuSDSjgqBn/XOiaa9k6ceRGoR2gPJGX9TnxgF
zENmsSN/QpjEjdySjZ8U3tfRIY4jpfxGmmWLvQ821ZUiUJ/uJivzCWmcU/CMR07W
Q3GajnZh58ePKLA+kGzuNgkJLdCFF+u+cUdPeMBl2z2PISi3uZLZ70hzld6ELR37
53iilrx21NtUFiXsiqqRs9tbo0yQz29QBY+vaNSjroNMAEwdqZYWSuy95X9p4TYe
ZZv7txw8J0fIS6XNZFMXaZ/Ox9zojcNKT/UZy3GJq3YuMEV9Bm83zlNl7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsThdh/3qbTN1I/OLMzdCpVBNZuMB8GA1UdIwQY
MBaAFOuR6ZOkpAzn5dnIYyXxht8GnsrNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjVIcGs2U2tET2ZsMmNoakpmR0czd2FleXMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81ZjNhMDItMDY1MC00ZTVjLWI4ZDAt
YzcwMWYyNzljNmRlLzEvNjVIcGs2U2tET2ZsMmNoakpmR0czd2FleXMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC81ZjNhMDItMDY1MC00ZTVjLWI4ZDAtYzcwMWYyNzljNmRl
LzEvNjVIcGs2U2tET2ZsMmNoakpmR0czd2FleXMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUw4uxjab
CjQXBKESFsH5oZBtvdVy0SnaxF7DqFoa0V7VajLPfvG4rpmzzdBNBmqzL3cVpVPp
jCr38fkmP5IpeF3OgegOiTcTobJe4XV5XQGaAsBc3NtR+iVBejNOTBieOQbMReGG
a4iA2oFPP2Kt8/GTp56YmI24615QCHCW4IZCJ2G2zAutNveje3j95zta++kWCsSP
TCvq5dS6TNkr1vLvZoSEwOsqR0T73bRH2+o/NTWDnUuUcRrX5EQ7+IJhD1feTKPh
Yc3F+hHxl+kwpJjKZB4ZDpOmqQRe/MMODbEebK+uWRIxIj3ZC8vzu9CX/dtEMqTg
pObBjMt5yEUn8g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:56:07 2025 by rpki-client