Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
File: rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft (raw, json)
Hash identifier: XLeaaJQt7hRTKiG8hkH3hQUQKQCuphZ+FMG6Y5ZMboE=
Subject key identifier: 60:AC:EE:E6:F2:DF:58:82:05:17:00:99:A3:7D:55:BF:C1:C9:71:18
Authority key identifier: AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
Certificate issuer: /CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
Certificate serial: 01968ADC5D2329C9D7E559FA468870B63D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
Manifest number: 151A
Signing time: Thu 01 May 2025 08:00:19 +0000
Manifest this update: Thu 01 May 2025 08:00:19 +0000
Manifest next update: Fri 02 May 2025 08:00:19 +0000
Files and hashes: 1: 7oGA-c6QRj7wEtUqcKNVQeiPaKA.roa (hash: MiRDhCNZZYXqTOB7AxjOweIsafby8dLcnJ/tR0Eay+E=)
2: rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl (hash: bXlZEmuMfCPTQ47cSOKWxIhfDl0XrAqzztvNXb6Tjnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:dc:5d:23:29:c9:d7:e5:59:fa:46:88:70:b6:3d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
Validity
Not Before: May 1 08:00:19 2025 GMT
Not After : May 2 08:00:19 2025 GMT
Subject: CN=60aceee6f2df588205170099a37d55bfc1c97118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e2:64:e2:16:5e:8e:b2:d0:a8:aa:88:95:9f:
fd:16:99:b5:bf:0a:5e:e7:d9:34:80:d1:43:48:27:
64:22:f5:ea:ad:d9:40:0f:35:dd:3a:bd:a1:14:0d:
8e:5a:d7:49:3a:09:1e:da:ca:f8:5f:e7:02:fb:68:
d4:39:b4:2d:7b:f5:18:08:b8:20:2c:52:d1:a4:a4:
ae:b2:6f:74:2a:81:45:d1:46:4d:1a:54:b7:96:f6:
7f:ba:50:ef:df:7b:4f:87:44:8d:3c:c4:45:f6:27:
95:61:88:33:9a:ad:bb:54:37:e0:98:af:80:72:31:
ee:b1:c8:cc:1a:01:16:bb:f4:c8:ef:e2:36:ff:1f:
ad:3b:1f:1e:49:c8:ac:5f:02:48:4b:35:f3:ae:03:
98:f6:47:42:c8:14:9c:d3:c0:d0:fe:bd:12:50:e8:
ba:7f:01:c2:66:33:f6:68:08:63:8d:b9:e3:1d:65:
51:fb:27:6b:62:99:29:24:f1:17:8b:ea:d5:80:10:
60:11:6f:59:37:88:59:7d:de:17:3d:9e:38:8c:ba:
70:bb:ce:cb:5a:62:a1:8a:aa:63:2a:dc:1d:da:f1:
0d:64:01:16:27:d6:c8:35:c2:a9:2a:98:dd:14:c9:
6d:01:60:27:f1:dd:ed:c3:d7:26:b6:a1:ea:be:b2:
5f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AC:EE:E6:F2:DF:58:82:05:17:00:99:A3:7D:55:BF:C1:C9:71:18
X509v3 Authority Key Identifier:
keyid:AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:94:b5:91:04:70:e0:7a:64:9d:15:de:8f:b6:60:a4:bd:bb:
75:20:e8:11:d3:b8:cf:f8:4b:2a:66:19:fe:4b:57:ec:ae:2a:
24:1f:bf:29:ba:71:e1:d9:7d:07:e9:89:4b:33:65:72:cb:50:
21:cb:ee:e6:c5:e8:71:14:d4:89:56:04:24:2e:e1:b7:bf:dc:
16:b9:d4:d4:27:90:e5:d7:7f:a7:af:d4:f5:7e:92:9c:a6:13:
16:a6:20:5c:f2:88:2b:26:15:76:72:2a:32:6c:f5:d3:2f:9a:
c3:ce:61:79:88:77:1e:be:cf:a2:50:23:fd:d6:90:18:9c:92:
25:9d:95:70:ec:0e:99:7e:5a:40:89:86:86:98:53:fd:50:58:
3c:78:08:39:92:09:62:2f:f1:27:1e:ae:59:f3:03:d0:47:66:
dc:df:a3:24:cb:2b:f7:18:09:16:bb:61:f3:79:d5:f5:b6:36:
9b:09:fa:2a:20:97:2e:0e:51:f6:87:12:57:9e:11:f1:18:17:
af:91:1d:72:1d:12:fd:52:eb:78:f9:4f:ae:0e:27:32:cb:e4:
6b:98:90:db:ea:73:67:1e:a6:13:a1:34:eb:e8:21:04:28:48:
cf:bc:ab:da:cb:2c:b4:9d:bc:5f:05:4e:9f:b0:4e:b4:97:cf:
ad:06:c7:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaK3F0jKcnX5Vn6Rohwtj1RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNGYzMTU3NTk5YjY2ZjI4Y2JjNWEyZWVkMzZmYmEyM2Yw
M2QyY2UwHhcNMjUwNTAxMDgwMDE5WhcNMjUwNTAyMDgwMDE5WjAzMTEwLwYDVQQD
Eyg2MGFjZWVlNmYyZGY1ODgyMDUxNzAwOTlhMzdkNTViZmMxYzk3MTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuJk4hZejrLQqKqIlZ/9Fpm1vwpe
59k0gNFDSCdkIvXqrdlADzXdOr2hFA2OWtdJOgke2sr4X+cC+2jUObQte/UYCLgg
LFLRpKSusm90KoFF0UZNGlS3lvZ/ulDv33tPh0SNPMRF9ieVYYgzmq27VDfgmK+A
cjHuscjMGgEWu/TI7+I2/x+tOx8eScisXwJISzXzrgOY9kdCyBSc08DQ/r0SUOi6
fwHCZjP2aAhjjbnjHWVR+ydrYpkpJPEXi+rVgBBgEW9ZN4hZfd4XPZ44jLpwu87L
WmKhiqpjKtwd2vENZAEWJ9bINcKpKpjdFMltAWAn8d3tw9cmtqHqvrJfIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCs7uby31iCBRcAmaN9Vb/ByXEYMB8GA1UdIwQY
MBaAFKxPMVdZm2byjLxaLu02+6I/A9LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckU4eFYxbWJadktNdkZvdTdUYjdvajhEMHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xMTQ4OGQtYzY2YS00MDA2LThmNjIt
MjUwOTgwZTc1YmRmLzEvckU4eFYxbWJadktNdkZvdTdUYjdvajhEMHM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8xMTQ4OGQtYzY2YS00MDA2LThmNjItMjUwOTgwZTc1YmRm
LzEvckU4eFYxbWJadktNdkZvdTdUYjdvajhEMHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZS1kQRw
4HpknRXej7ZgpL27dSDoEdO4z/hLKmYZ/ktX7K4qJB+/Kbpx4dl9B+mJSzNlcstQ
Icvu5sXocRTUiVYEJC7ht7/cFrnU1CeQ5dd/p6/U9X6SnKYTFqYgXPKIKyYVdnIq
Mmz10y+aw85heYh3Hr7PolAj/daQGJySJZ2VcOwOmX5aQImGhphT/VBYPHgIOZIJ
Yi/xJx6uWfMD0Edm3N+jJMsr9xgJFrth83nV9bY2mwn6KiCXLg5R9ocSV54R8RgX
r5Edch0S/VLrePlPrg4nMsvka5iQ2+pzZx6mE6E06+ghBChIz7yr2ssstJ28XwVO
n7BOtJfPrQbHFQ==
-----END CERTIFICATE-----
Generated at Thu May 1 09:56:04 2025 by rpki-client