Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
File: 0mHPvAfsMGN33LFql6EWDHptgsw.mft (raw, json)
Hash identifier: nTEV/qz8VvmweJ746pKbfINto4gxgk/GYXh9Evc74mU=
Subject key identifier: BE:BE:52:ED:73:77:44:93:52:E8:30:E1:A9:8A:D5:E6:9A:28:34:36
Authority key identifier: D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
Certificate issuer: /CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Certificate serial: 019674F9D20D0D67395538D791752449EE3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
Manifest number: 014F
Signing time: Sun 27 Apr 2025 02:00:51 +0000
Manifest this update: Sun 27 Apr 2025 02:00:51 +0000
Manifest next update: Mon 28 Apr 2025 02:00:51 +0000
Files and hashes: 1: 0mHPvAfsMGN33LFql6EWDHptgsw.crl (hash: JhxAcRVxlm6OiEz75RrLYsLWeYcVHu0HwC9sm08jZas=)
2: 1-242YNLxFtHiZKrZjOTCTUI_hX4.roa (hash: Zl/0hNDNG1rQGa8HsGyytZ4/ZO9Krs9kfipHSTu8iZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:d2:0d:0d:67:39:55:38:d7:91:75:24:49:ee:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Validity
Not Before: Apr 27 02:00:51 2025 GMT
Not After : Apr 28 02:00:51 2025 GMT
Subject: CN=bebe52ed7377449352e830e1a98ad5e69a283436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:90:94:81:bd:79:53:38:58:58:b9:16:3e:54:
fd:e3:9d:a1:4a:d3:9a:7a:02:95:10:be:2f:f9:48:
5c:59:94:7d:6d:b8:0e:04:be:52:b3:45:5a:e9:15:
5d:c8:ac:30:e4:6f:35:9d:e9:fd:a6:a4:18:16:0e:
e8:5f:d3:0f:4d:0c:34:39:b0:e5:78:97:c9:5e:71:
44:08:e4:59:3d:b7:ab:7d:9f:4c:05:b9:25:d5:a4:
f8:24:3e:3b:43:98:8a:7a:27:e0:c4:dd:7d:b6:15:
93:57:46:05:b4:10:90:62:94:75:16:97:c8:a7:1e:
26:77:c0:f6:d9:a1:57:5d:4a:77:ac:56:66:f3:53:
44:b5:f9:51:e3:84:99:5c:d8:47:63:d8:29:50:15:
43:83:6d:61:37:8b:d8:2e:52:73:c9:6f:7f:2a:98:
1c:60:b3:48:7a:a0:1d:01:5b:55:c5:f4:ed:75:21:
5d:46:3e:be:f6:c5:c9:64:80:6f:60:52:f7:c5:20:
b5:b0:bb:88:8f:0b:e7:ee:db:92:3b:3c:0f:d6:77:
86:55:fd:d1:92:cc:c5:f3:fa:e9:c9:e1:4b:d6:c5:
6f:f3:40:99:12:b0:b5:f7:93:10:7c:66:94:92:e4:
83:b9:13:ae:1e:db:e5:61:41:25:47:2b:ee:e1:d2:
35:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BE:52:ED:73:77:44:93:52:E8:30:E1:A9:8A:D5:E6:9A:28:34:36
X509v3 Authority Key Identifier:
keyid:D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:53:6f:0a:11:d9:da:be:23:dd:69:bf:6d:39:69:84:57:0b:
87:d9:96:aa:33:d8:1c:9a:4c:d5:ed:3a:cb:d5:4b:3b:17:6a:
de:ef:fb:63:5d:3b:4c:06:ab:91:5d:1e:27:23:bd:a3:14:23:
97:7d:6f:25:b7:38:6c:88:5f:83:0a:a9:07:b5:8b:fb:6f:50:
bc:69:54:d4:6a:d9:f5:30:c3:40:a8:45:db:db:81:3f:fb:74:
31:b4:da:2a:d6:23:2b:f0:cf:0e:8c:60:cc:72:77:47:05:c4:
6f:01:a7:2a:33:6f:99:9f:d5:74:8b:e6:3e:f3:d5:4e:d6:b4:
5d:c3:d8:d2:45:1b:2d:9a:6c:63:35:fb:fa:bf:cf:4e:1f:9b:
cd:7d:29:d3:f5:cd:5c:62:2b:97:a1:e8:cc:1b:90:dd:1c:20:
11:2a:96:2b:50:23:84:c0:e0:b7:25:b2:d1:33:ad:d0:93:34:
55:8e:5c:07:64:68:d1:ba:93:81:6c:04:4f:11:e3:c9:98:f6:
fa:c1:e2:63:4f:85:05:f7:7d:ec:9d:aa:1b:04:97:ce:ed:fe:
87:0f:8e:27:87:cc:8b:96:79:a1:e3:6d:86:6e:f4:54:8e:2b:
80:95:5f:e4:62:97:e1:07:97:5a:35:98:00:31:76:6f:3d:cd:
4b:6f:01:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0+dINDWc5VTjXkXUkSe46MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjFjZmJjMDdlYzMwNjM3N2RjYjE2YTk3YTExNjBjN2E2
ZDgyY2MwHhcNMjUwNDI3MDIwMDUxWhcNMjUwNDI4MDIwMDUxWjAzMTEwLwYDVQQD
EyhiZWJlNTJlZDczNzc0NDkzNTJlODMwZTFhOThhZDVlNjlhMjgzNDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+JCUgb15UzhYWLkWPlT9452hStOa
egKVEL4v+UhcWZR9bbgOBL5Ss0Va6RVdyKww5G81nen9pqQYFg7oX9MPTQw0ObDl
eJfJXnFECORZPberfZ9MBbkl1aT4JD47Q5iKeifgxN19thWTV0YFtBCQYpR1FpfI
px4md8D22aFXXUp3rFZm81NEtflR44SZXNhHY9gpUBVDg21hN4vYLlJzyW9/Kpgc
YLNIeqAdAVtVxfTtdSFdRj6+9sXJZIBvYFL3xSC1sLuIjwvn7tuSOzwP1neGVf3R
kszF8/rpyeFL1sVv80CZErC195MQfGaUkuSDuROuHtvlYUElRyvu4dI1rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6+Uu1zd0STUugw4amK1eaaKDQ2MB8GA1UdIwQY
MBaAFNJhz7wH7DBjd9yxapehFgx6bYLMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1IUHZBZnNNR04zM0xGcWw2RVdESHB0Z3N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80ZWFmYzktNTQ3My00NjAyLWExNDkt
OTIyYTE2ZDExN2RkLzEvMG1IUHZBZnNNR04zM0xGcWw2RVdESHB0Z3N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80ZWFmYzktNTQ3My00NjAyLWExNDktOTIyYTE2ZDExN2Rk
LzEvMG1IUHZBZnNNR04zM0xGcWw2RVdESHB0Z3N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlNvChHZ
2r4j3Wm/bTlphFcLh9mWqjPYHJpM1e06y9VLOxdq3u/7Y107TAarkV0eJyO9oxQj
l31vJbc4bIhfgwqpB7WL+29QvGlU1GrZ9TDDQKhF29uBP/t0MbTaKtYjK/DPDoxg
zHJ3RwXEbwGnKjNvmZ/VdIvmPvPVTta0XcPY0kUbLZpsYzX7+r/PTh+bzX0p0/XN
XGIrl6HozBuQ3RwgESqWK1AjhMDgtyWy0TOt0JM0VY5cB2Ro0bqTgWwETxHjyZj2
+sHiY0+FBfd97J2qGwSXzu3+hw+OJ4fMi5Z5oeNthm70VI4rgJVf5GKX4QeXWjWY
ADF2bz3NS28B3g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:53:19 2025 by rpki-client