Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
File: cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json)
Hash identifier: G+D3E0h7V2l/sxlC8WVhD12Bs7KFmN1RN+9WTMkvdNY=
Subject key identifier: AA:1D:43:18:F5:12:3F:3A:7C:55:32:F7:70:09:67:06:F3:F7:E4:5E
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Certificate issuer: /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial: 0196775594B527360B2FC8506BE4724D5B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 13:00:19 +0000
Manifest this update: Sun 27 Apr 2025 13:00:19 +0000
Manifest next update: Mon 28 Apr 2025 13:00:19 +0000
Files and hashes: 1: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: 4QYNhDDSm/jLbUmLcIGDe4NdpkLYoKd6hQCtTP2iRIg=)
2: inuScwE1S9lEULUDFOPt0YYBMRU.roa (hash: hvD+jjYBAY5jZaJA8u8QgEl8M7kubkCEj9ntL0iNAX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:94:b5:27:36:0b:2f:c8:50:6b:e4:72:4d:5b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Validity
Not Before: Apr 27 13:00:19 2025 GMT
Not After : Apr 28 13:00:19 2025 GMT
Subject: CN=aa1d4318f5123f3a7c5532f770096706f3f7e45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:60:53:1e:70:5e:fb:fe:5e:6f:32:50:6e:ec:
de:65:24:7d:93:1d:c1:03:23:65:01:46:4a:1c:79:
f6:d7:c9:ae:d1:7a:38:b6:1a:66:43:c2:92:ae:52:
1d:c7:5a:7c:d0:29:b8:06:54:d3:28:a1:1b:4c:c7:
8e:bd:af:7d:3d:7a:20:f2:9b:4e:c6:61:d4:bd:74:
aa:75:f9:7c:b4:bd:78:d8:89:c8:bd:10:67:8f:52:
5f:bf:10:ae:36:76:fd:f5:ab:44:5c:de:ad:8b:0d:
0e:18:52:a1:c2:14:0b:de:0e:02:ba:79:1e:e2:31:
d5:5e:e5:db:bb:41:c8:7f:2f:c1:b7:dd:11:42:d3:
85:10:02:33:7c:68:b2:6a:6d:c0:94:ff:7e:e1:2d:
5d:bc:be:f7:d7:6d:ef:97:a7:01:8b:5a:34:cc:30:
7c:25:6a:d5:87:12:d0:c5:5f:51:bc:8f:63:68:78:
94:ba:ed:c8:35:51:e7:d2:9b:db:49:2a:08:0e:26:
c6:01:4b:f5:e3:62:37:d3:b5:a1:89:e5:ac:4b:15:
8e:1d:9f:99:79:92:49:85:7f:62:98:22:dc:0a:4c:
ca:13:cf:43:71:60:10:77:aa:1c:b3:3e:6f:86:1a:
00:5c:5d:00:35:69:7c:a9:1e:d5:f8:8e:f8:94:33:
3a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1D:43:18:F5:12:3F:3A:7C:55:32:F7:70:09:67:06:F3:F7:E4:5E
X509v3 Authority Key Identifier:
keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e3:31:fe:3b:dd:08:a8:8c:81:e0:a8:51:e1:a5:79:c0:5b:
31:e4:46:f8:f2:77:9a:73:6c:b2:40:64:a4:9f:95:65:83:b2:
41:eb:5e:44:16:3e:3d:aa:77:27:34:2c:61:68:b4:f7:f1:1c:
ee:df:0f:78:48:a4:ba:c4:33:56:db:57:f0:e6:dc:d6:e8:c6:
1d:c6:ec:50:1c:8c:e0:79:31:af:2c:a3:1f:ec:7b:07:de:e9:
b8:5b:4d:51:4c:5c:7f:27:c2:69:1c:c6:ea:a7:8c:81:59:3d:
67:cf:e0:49:50:f8:89:4c:79:29:06:7c:bb:a1:69:ea:57:42:
5f:ce:e9:49:1f:0e:ae:51:db:13:89:41:73:8b:e9:55:63:4e:
91:88:19:b2:eb:72:9a:62:cb:bb:32:f0:e5:f6:3a:1c:97:d0:
c4:16:c9:e1:bb:14:84:3b:5d:31:27:c6:3b:fb:bc:ad:60:56:
37:76:41:fb:d5:99:99:11:c5:ab:80:4b:c2:f5:9f:ca:b6:b9:
b8:70:2a:51:24:8b:f1:50:b7:5d:0d:30:cc:30:03:b0:87:af:
ae:6d:24:6c:92:c9:e6:b0:bb:ad:00:1e:2c:bf:0f:6c:0a:39:
c6:d7:08:c0:44:1e:62:99:d2:9b:b0:cc:e5:9d:24:db:01:6e:
4b:2d:b2:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3VZS1JzYLL8hQa+RyTVt1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYTc2OTI5Y2JlMjFjZWRkOTRjMDEyYmE1OGJiMGI2ZjEy
OTcyMmUwHhcNMjUwNDI3MTMwMDE5WhcNMjUwNDI4MTMwMDE5WjAzMTEwLwYDVQQD
EyhhYTFkNDMxOGY1MTIzZjNhN2M1NTMyZjc3MDA5NjcwNmYzZjdlNDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWBTHnBe+/5ebzJQbuzeZSR9kx3B
AyNlAUZKHHn218mu0Xo4thpmQ8KSrlIdx1p80Cm4BlTTKKEbTMeOva99PXog8ptO
xmHUvXSqdfl8tL142InIvRBnj1JfvxCuNnb99atEXN6tiw0OGFKhwhQL3g4Cunke
4jHVXuXbu0HIfy/Bt90RQtOFEAIzfGiyam3AlP9+4S1dvL73123vl6cBi1o0zDB8
JWrVhxLQxV9RvI9jaHiUuu3INVHn0pvbSSoIDibGAUv142I307WhieWsSxWOHZ+Z
eZJJhX9imCLcCkzKE89DcWAQd6ocsz5vhhoAXF0ANWl8qR7V+I74lDM6eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKodQxj1Ej86fFUy93AJZwbz9+ReMB8GA1UdIwQY
MBaAFHCnaSnL4hzt2UwBK6WLsLbxKXIuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0tkcEtjdmlITzNaVEFFcnBZdXd0dkVwY2k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMTRmNDctNjI4Yi00ZmI4LWIzNDQt
YTQwOWUyMmEyNDNlLzEvY0tkcEtjdmlITzNaVEFFcnBZdXd0dkVwY2k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8wMTRmNDctNjI4Yi00ZmI4LWIzNDQtYTQwOWUyMmEyNDNl
LzEvY0tkcEtjdmlITzNaVEFFcnBZdXd0dkVwY2k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbeMx/jvd
CKiMgeCoUeGlecBbMeRG+PJ3mnNsskBkpJ+VZYOyQeteRBY+Pap3JzQsYWi09/Ec
7t8PeEikusQzVttX8Obc1ujGHcbsUByM4HkxryyjH+x7B97puFtNUUxcfyfCaRzG
6qeMgVk9Z8/gSVD4iUx5KQZ8u6Fp6ldCX87pSR8OrlHbE4lBc4vpVWNOkYgZsuty
mmLLuzLw5fY6HJfQxBbJ4bsUhDtdMSfGO/u8rWBWN3ZB+9WZmRHFq4BLwvWfyra5
uHAqUSSL8VC3XQ0wzDADsIevrm0kbJLJ5rC7rQAeLL8PbAo5xtcIwEQeYpnSm7DM
5Z0k2wFuSy2yyg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:19:06 2025 by rpki-client