Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
File: 43EGB7p6gV6RHEiS-WixiuZgQ4k.mft (raw, json)
Hash identifier: xuw+R8wGdZzbIXYa8WEz1lzFyLBtV4g4PWPZvHMi0tc=
Subject key identifier: F3:FA:43:01:2C:0C:F3:B8:82:F1:A7:85:D5:88:25:9D:A9:D3:FB:AF
Authority key identifier: E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
Certificate issuer: /CN=e3710607ba7a815e911c4892f968b18ae6604389
Certificate serial: 01968F273C60353DF00F0E34F44BF7EA674D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
Manifest number: 14AE
Signing time: Fri 02 May 2025 04:00:35 +0000
Manifest this update: Fri 02 May 2025 04:00:35 +0000
Manifest next update: Sat 03 May 2025 04:00:35 +0000
Files and hashes: 1: 43EGB7p6gV6RHEiS-WixiuZgQ4k.crl (hash: tCysNGujg/BqC8kdVuqdL6oCRZGZ3qqT6Qi2mcnY/es=)
2: gdCbju7iq0jqbnL3F15jB2y6w9k.roa (hash: 5imVu9OgEC0LpB68Uf/xLlkHKg4D35cIEP4G8Ci0Msk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:27:3c:60:35:3d:f0:0f:0e:34:f4:4b:f7:ea:67:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3710607ba7a815e911c4892f968b18ae6604389
Validity
Not Before: May 2 04:00:35 2025 GMT
Not After : May 3 04:00:35 2025 GMT
Subject: CN=f3fa43012c0cf3b882f1a785d588259da9d3fbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:48:ee:f9:33:15:c8:b7:c5:4d:e2:88:df:
97:0f:f2:dd:7b:48:a5:88:17:45:16:4c:7e:5b:e6:
b1:18:0e:35:8f:53:49:9c:ed:f4:d6:8f:55:2f:22:
6a:a6:61:9a:b8:2e:43:82:ec:e8:1b:6d:07:c3:08:
b8:d8:b4:19:7c:86:9d:25:74:5d:72:5f:c4:8c:15:
da:55:62:ed:6a:f6:e2:fa:ac:72:70:39:2c:be:10:
f4:d7:81:a2:37:4c:80:f1:18:20:1d:f9:05:e6:5d:
0c:a2:00:99:6d:cb:db:42:fe:37:84:ee:af:e7:e9:
fa:09:bd:fe:8e:c6:20:62:82:46:2f:cb:d4:02:67:
86:48:d4:8a:76:79:ef:ba:91:5b:1e:82:d7:82:39:
1c:c7:1e:d8:bf:78:52:e7:28:f1:71:b2:15:da:e7:
95:92:01:f9:bf:27:58:62:8f:00:ae:e1:c2:63:2b:
ac:6d:e8:c5:48:e3:4e:b3:39:04:db:c3:d3:63:3e:
a7:9a:8f:77:6b:e8:b4:89:2f:27:75:ad:05:6f:9a:
18:73:19:5c:bc:fe:2c:07:e0:87:3f:7e:88:ec:e3:
80:ed:e7:0a:bd:df:1c:0a:f8:0e:93:26:44:51:ff:
2f:02:87:38:aa:2f:0e:26:91:27:4b:38:47:66:19:
b5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FA:43:01:2C:0C:F3:B8:82:F1:A7:85:D5:88:25:9D:A9:D3:FB:AF
X509v3 Authority Key Identifier:
keyid:E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5b:35:f9:dd:09:28:a2:a5:b4:51:44:7e:4a:9e:79:20:8d:
7f:88:81:c3:6d:dc:22:e9:65:29:f2:69:50:68:88:f4:f8:53:
a0:70:c7:a5:03:69:70:bf:65:80:eb:43:6e:bf:c5:c5:e8:21:
71:5d:72:cb:25:38:ab:80:48:e7:3a:f7:c7:c4:03:d2:bd:12:
9e:9d:0f:48:43:65:f5:38:2f:80:cf:e2:6a:33:1e:09:1f:af:
44:b6:10:92:7d:21:69:76:b3:78:45:38:77:fe:3d:e0:14:bd:
45:48:38:f2:d8:51:60:d4:a2:18:d1:43:aa:1a:f0:63:5a:5c:
cb:46:19:80:dd:7a:14:5e:92:62:ab:21:20:cd:d0:48:9a:9c:
c9:ca:35:f1:f4:29:84:61:8a:d6:20:b7:a4:c9:8e:0e:ad:df:
03:5d:9e:7c:dc:b6:0d:45:8a:5e:c5:09:69:67:23:08:ec:46:
a5:1d:97:bf:e3:25:35:02:06:00:9a:8d:be:13:8b:19:92:1c:
08:a5:07:0d:8f:c6:44:d6:a7:8b:42:52:41:08:13:72:10:36:
03:6a:ae:a1:e0:82:f8:b9:55:6f:93:a9:18:d4:65:6b:bd:29:
d7:6c:47:66:f5:47:63:24:25:04:93:de:66:1e:b7:32:65:b3:
28:d2:41:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaPJzxgNT3wDw409Ev36mdNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNzEwNjA3YmE3YTgxNWU5MTFjNDg5MmY5NjhiMThhZTY2
MDQzODkwHhcNMjUwNTAyMDQwMDM1WhcNMjUwNTAzMDQwMDM1WjAzMTEwLwYDVQQD
EyhmM2ZhNDMwMTJjMGNmM2I4ODJmMWE3ODVkNTg4MjU5ZGE5ZDNmYmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZRI7vkzFci3xU3iiN+XD/Lde0il
iBdFFkx+W+axGA41j1NJnO301o9VLyJqpmGauC5DguzoG20Hwwi42LQZfIadJXRd
cl/EjBXaVWLtavbi+qxycDksvhD014GiN0yA8RggHfkF5l0MogCZbcvbQv43hO6v
5+n6Cb3+jsYgYoJGL8vUAmeGSNSKdnnvupFbHoLXgjkcxx7Yv3hS5yjxcbIV2ueV
kgH5vydYYo8AruHCYyusbejFSONOszkE28PTYz6nmo93a+i0iS8nda0Fb5oYcxlc
vP4sB+CHP36I7OOA7ecKvd8cCvgOkyZEUf8vAoc4qi8OJpEnSzhHZhm18QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPP6QwEsDPO4gvGnhdWIJZ2p0/uvMB8GA1UdIwQY
MBaAFONxBge6eoFekRxIkvlosYrmYEOJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wNDU5ODYtYjNhNC00OWU0LThmNDUt
MTI2ZDVlNjBmZGQxLzEvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8wNDU5ODYtYjNhNC00OWU0LThmNDUtMTI2ZDVlNjBmZGQx
LzEvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASls1+d0J
KKKltFFEfkqeeSCNf4iBw23cIullKfJpUGiI9PhToHDHpQNpcL9lgOtDbr/Fxegh
cV1yyyU4q4BI5zr3x8QD0r0Snp0PSENl9TgvgM/iajMeCR+vRLYQkn0haXazeEU4
d/494BS9RUg48thRYNSiGNFDqhrwY1pcy0YZgN16FF6SYqshIM3QSJqcyco18fQp
hGGK1iC3pMmODq3fA12efNy2DUWKXsUJaWcjCOxGpR2Xv+MlNQIGAJqNvhOLGZIc
CKUHDY/GRNani0JSQQgTchA2A2quoeCC+LlVb5OpGNRla70p12xHZvVHYyQlBJPe
Zh63MmWzKNJBXQ==
-----END CERTIFICATE-----
Generated at Fri May 2 10:05:21 2025 by rpki-client