Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
File: R-348b8MT7xGnnHJnYJInqHz2ko.mft (raw, json)
Hash identifier: j0CYSfbOrFYxHpItIsMdKTtjzEK73XsfP2IXgwVK4nE=
Subject key identifier: 42:87:3B:15:94:85:E1:A3:20:CA:DB:17:04:CB:E1:EA:92:FC:15:BC
Authority key identifier: 47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
Certificate issuer: /CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Certificate serial: 01967A201EB3658DA80708464260CD26BB8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 02:00:47 +0000
Manifest this update: Mon 28 Apr 2025 02:00:47 +0000
Manifest next update: Tue 29 Apr 2025 02:00:47 +0000
Files and hashes: 1: R-348b8MT7xGnnHJnYJInqHz2ko.crl (hash: Sin/4iiw67GlvW1Vi+qFYF8+jDsd1OFJXbkiVZyPpB8=)
2: gCOs3KLA0tgwiwT7QoZeSEcVloU.roa (hash: hS15w3lAiyNuXEphV/hfqWJDGTaMGPBiRqmkz4Z4hHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:20:1e:b3:65:8d:a8:07:08:46:42:60:cd:26:bb:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Validity
Not Before: Apr 28 02:00:47 2025 GMT
Not After : Apr 29 02:00:47 2025 GMT
Subject: CN=42873b159485e1a320cadb1704cbe1ea92fc15bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:6c:68:8a:30:b4:ac:59:e9:b3:36:98:a0:
56:18:00:29:4a:39:ea:e1:b1:87:23:f5:bd:db:1c:
6c:2a:17:7e:32:ce:df:bc:d8:8e:2f:7b:14:46:23:
58:1e:8f:6d:02:d3:40:e2:38:b3:87:98:bd:b4:02:
59:45:30:e2:f6:7e:e0:1c:c6:83:aa:70:8c:70:14:
7b:4b:df:09:33:72:f8:56:40:39:2c:30:bf:ff:6e:
0b:d7:33:9b:ef:17:b7:65:a7:bb:ed:45:5b:44:50:
b2:ff:ec:b3:95:ef:0d:8c:07:0a:22:12:b9:9c:48:
b1:a2:ff:fe:ce:f4:fc:f2:bf:4a:73:9a:71:db:7e:
1c:e7:98:aa:d4:69:d2:51:25:27:5a:5a:60:18:da:
42:aa:a6:f2:48:25:f5:ab:ab:56:59:59:24:47:6f:
e9:4a:b5:97:2e:0f:d9:37:75:42:ec:0e:4a:cc:0b:
4f:7e:76:b0:d0:94:da:a8:d0:ff:84:db:45:8d:aa:
5f:61:9e:9d:90:ae:29:97:1d:b4:d3:e8:d5:e6:df:
b6:c4:96:c1:b4:37:ab:91:46:12:a0:17:48:c7:96:
62:62:96:b4:7f:70:89:01:b4:9a:bd:b5:24:22:bc:
3f:85:ff:ce:e1:9c:a2:5e:c3:de:fd:86:08:84:9c:
bc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:87:3B:15:94:85:E1:A3:20:CA:DB:17:04:CB:E1:EA:92:FC:15:BC
X509v3 Authority Key Identifier:
keyid:47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:06:3c:b0:7d:05:16:cf:0d:dc:05:9b:45:cc:0d:45:1e:d9:
5d:2d:56:67:ba:a2:6b:24:fe:cf:74:30:e8:35:99:9a:fb:9a:
d7:d3:5b:7c:49:af:dd:50:7b:81:b1:6f:ca:6a:07:d5:f5:74:
b2:97:ab:c4:33:05:1c:db:22:00:35:96:a3:d5:aa:fd:53:7e:
97:7f:ee:46:b0:4f:b9:a0:7a:6b:7b:9d:9d:a7:77:c7:b4:c1:
15:77:9a:00:a9:e0:8c:c3:09:1b:59:f7:c8:78:e0:8d:7e:50:
6f:48:9f:c6:8e:f5:23:18:54:6b:ae:b1:80:9e:16:06:f6:12:
96:c7:f8:13:dc:82:38:21:ce:12:78:02:f8:be:75:6c:75:3a:
42:0a:3b:97:b5:a6:c2:24:d1:1d:ed:2d:60:7f:ab:00:8b:e5:
29:a7:fd:f4:fe:4e:da:49:ac:01:24:28:c2:04:67:07:2a:39:
78:08:54:61:8d:9a:bb:95:d6:9f:5b:47:4c:0f:01:14:e0:32:
4c:87:2d:c5:5b:ff:a7:96:da:d4:55:d4:74:78:25:dc:76:e9:
c3:d3:ad:9a:6f:29:c6:17:2c:2c:4a:cf:6d:e9:11:46:40:c1:
dd:a2:7d:a8:67:6d:34:3f:29:e5:f2:3b:37:b4:6c:fd:d1:f1:
79:c4:b5:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6IB6zZY2oBwhGQmDNJruPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZWRmOGYxYmYwYzRmYmM0NjllNzFjOTlkODI0ODllYTFm
M2RhNGEwHhcNMjUwNDI4MDIwMDQ3WhcNMjUwNDI5MDIwMDQ3WjAzMTEwLwYDVQQD
Eyg0Mjg3M2IxNTk0ODVlMWEzMjBjYWRiMTcwNGNiZTFlYTkyZmMxNWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRZsaIowtKxZ6bM2mKBWGAApSjnq
4bGHI/W92xxsKhd+Ms7fvNiOL3sURiNYHo9tAtNA4jizh5i9tAJZRTDi9n7gHMaD
qnCMcBR7S98JM3L4VkA5LDC//24L1zOb7xe3Zae77UVbRFCy/+yzle8NjAcKIhK5
nEixov/+zvT88r9Kc5px234c55iq1GnSUSUnWlpgGNpCqqbySCX1q6tWWVkkR2/p
SrWXLg/ZN3VC7A5KzAtPfnaw0JTaqND/hNtFjapfYZ6dkK4plx200+jV5t+2xJbB
tDerkUYSoBdIx5ZiYpa0f3CJAbSavbUkIrw/hf/O4ZyiXsPe/YYIhJy8UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKHOxWUheGjIMrbFwTL4eqS/BW8MB8GA1UdIwQY
MBaAFEft+PG/DE+8Rp5xyZ2CSJ6h89pKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUi0zNDhiOE1UN3hHbm5ISm5ZSklucUh6MmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ZGIzNGItOGFmYS00OWM1LWI3M2Yt
OTIwNGMxOTdhYTY1LzEvUi0zNDhiOE1UN3hHbm5ISm5ZSklucUh6MmtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82ZGIzNGItOGFmYS00OWM1LWI3M2YtOTIwNGMxOTdhYTY1
LzEvUi0zNDhiOE1UN3hHbm5ISm5ZSklucUh6MmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqAY8sH0F
Fs8N3AWbRcwNRR7ZXS1WZ7qiayT+z3Qw6DWZmvua19NbfEmv3VB7gbFvymoH1fV0
sperxDMFHNsiADWWo9Wq/VN+l3/uRrBPuaB6a3udnad3x7TBFXeaAKngjMMJG1n3
yHjgjX5Qb0ifxo71IxhUa66xgJ4WBvYSlsf4E9yCOCHOEngC+L51bHU6Qgo7l7Wm
wiTRHe0tYH+rAIvlKaf99P5O2kmsASQowgRnByo5eAhUYY2au5XWn1tHTA8BFOAy
TIctxVv/p5ba1FXUdHgl3Hbpw9Otmm8pxhcsLErPbekRRkDB3aJ9qGdtND8p5fI7
N7Rs/dHxecS1Tg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:26:51 2025 by rpki-client