Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
File: IW66tPRvJU2V9JZbhKjPJBlrnJU.mft (raw, json)
Hash identifier: NlzZhGXuPzaR5nHzx1Sm5uwPOEaBthGDuP6uzum9aVA=
Subject key identifier: 18:AE:6D:C3:E1:0E:B0:56:18:D5:FC:CD:18:31:A9:99:B9:59:20:75
Authority key identifier: 21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
Certificate issuer: /CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Certificate serial: 019671C1D96CC52163BEB799F8C18C75BDF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
Manifest number: 0426
Signing time: Sat 26 Apr 2025 11:00:51 +0000
Manifest this update: Sat 26 Apr 2025 11:00:51 +0000
Manifest next update: Sun 27 Apr 2025 11:00:51 +0000
Files and hashes: 1: IW66tPRvJU2V9JZbhKjPJBlrnJU.crl (hash: iyrWs8W82yYSuns1t+tZfcYGlcHgakFBte5ZvavVNAc=)
2: jevuz_hOgaa6W3MBuj-Sool4n-A.roa (hash: US9acN1N+sUj9TGOZu9sAfJQOkLuvKlT0/RKaeqAgXI=)
3: luM_lJTE2hly8-J3vWjwvVwVcis.roa (hash: GZ+X8TMn7AtOBR08KIlVoGK4dcs2JQzhXXW1m64U66U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:c1:d9:6c:c5:21:63:be:b7:99:f8:c1:8c:75:bd:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Validity
Not Before: Apr 26 11:00:51 2025 GMT
Not After : Apr 27 11:00:51 2025 GMT
Subject: CN=18ae6dc3e10eb05618d5fccd1831a999b9592075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b9:6c:10:cf:a0:2f:e2:e9:80:34:10:5e:9e:
d3:e4:af:a2:6f:e5:f0:71:6e:fd:b5:d1:99:a3:c7:
7f:0b:ea:94:c1:2f:7d:38:39:e5:05:9b:ff:ef:86:
44:2c:1d:7e:21:69:9a:76:c9:da:31:66:1c:4a:38:
95:04:85:64:44:9a:fa:a7:7e:d8:93:2c:27:94:a8:
bb:1e:7b:ba:dd:5c:50:3a:6c:f8:fc:f1:61:87:34:
1c:65:cf:88:51:e4:bf:1b:f8:73:32:1b:20:8d:c6:
89:0c:6b:f8:c5:35:40:bb:b5:eb:f1:da:d0:d8:11:
06:2e:33:7e:c2:a4:ad:5d:cc:76:a0:2c:5c:03:77:
46:65:e3:6b:fb:0e:69:80:8d:bf:50:53:4e:24:a6:
8f:48:ca:10:7b:91:1d:f4:76:66:b8:f8:d0:fe:99:
d0:49:91:1c:e6:35:bc:79:a8:d5:30:d9:57:ce:86:
1a:e1:7b:21:9a:5a:a3:f9:44:1e:b0:6b:96:ea:b8:
9a:6c:0f:f6:80:93:6b:84:06:e3:8a:4c:ac:23:75:
75:70:37:37:c5:01:a4:b6:ff:b7:af:db:98:fe:53:
48:79:f3:11:97:65:96:a9:74:6a:a1:ef:1a:dd:ca:
0c:f4:34:2a:45:66:a3:4a:64:e8:82:86:54:98:48:
9d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AE:6D:C3:E1:0E:B0:56:18:D5:FC:CD:18:31:A9:99:B9:59:20:75
X509v3 Authority Key Identifier:
keyid:21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2a:34:84:55:d4:46:a6:35:2c:ae:94:13:b2:b1:20:45:34:
0a:69:3f:2b:2c:27:50:51:d3:a2:fb:4d:e4:42:54:62:94:56:
f0:6e:81:c9:ed:ea:dc:3c:2a:f3:e3:46:80:0a:bd:f4:ae:17:
a5:7b:7e:5c:d9:98:a4:fc:17:3c:5c:6e:b5:5e:cf:b8:ee:66:
80:a8:19:05:b7:f2:c6:e0:e4:76:57:5d:6a:09:23:67:17:4b:
ef:14:dc:93:6e:7d:eb:9c:fe:3f:3d:ea:76:f2:60:d6:f6:31:
d2:c0:5b:0f:3b:4f:74:78:b1:dd:f3:8c:c1:05:4f:4f:4b:c5:
7d:b3:4c:ab:ff:ac:e3:94:6c:75:b4:bf:01:47:43:77:92:db:
c5:74:f8:55:87:24:ce:00:2d:a9:f9:bd:4d:52:02:65:82:91:
be:0e:97:a9:a5:02:43:58:13:78:41:a4:5c:0e:60:44:47:ec:
60:36:36:d5:9f:6e:f8:46:92:5c:c4:c5:48:50:61:6d:a5:de:
d6:dc:04:5c:c1:bc:22:e7:34:6c:f4:ca:94:00:ab:7a:f1:5e:
6d:91:91:84:32:23:39:33:0c:b4:fd:39:b9:91:f0:e6:fc:15:
59:c9:a4:ee:23:02:80:9a:37:4c:4a:9c:ee:24:5b:a5:21:f3:
7e:24:a3:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZxwdlsxSFjvreZ+MGMdb3zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNmViYWI0ZjQ2ZjI1NGQ5NWY0OTY1Yjg0YThjZjI0MTk2
YjljOTUwHhcNMjUwNDI2MTEwMDUxWhcNMjUwNDI3MTEwMDUxWjAzMTEwLwYDVQQD
EygxOGFlNmRjM2UxMGViMDU2MThkNWZjY2QxODMxYTk5OWI5NTkyMDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0blsEM+gL+LpgDQQXp7T5K+ib+Xw
cW79tdGZo8d/C+qUwS99ODnlBZv/74ZELB1+IWmadsnaMWYcSjiVBIVkRJr6p37Y
kywnlKi7Hnu63VxQOmz4/PFhhzQcZc+IUeS/G/hzMhsgjcaJDGv4xTVAu7Xr8drQ
2BEGLjN+wqStXcx2oCxcA3dGZeNr+w5pgI2/UFNOJKaPSMoQe5Ed9HZmuPjQ/pnQ
SZEc5jW8eajVMNlXzoYa4Xshmlqj+UQesGuW6riabA/2gJNrhAbjikysI3V1cDc3
xQGktv+3r9uY/lNIefMRl2WWqXRqoe8a3coM9DQqRWajSmTogoZUmEid5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBiubcPhDrBWGNX8zRgxqZm5WSB1MB8GA1UdIwQY
MBaAFCFuurT0byVNlfSWW4SozyQZa5yVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVc2NnRQUnZKVTJWOUpaYmhLalBKQmxybkpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82ZDhhMmMtZTIyOC00ZDQwLThkOTAt
ZGVjMjBkZGM3M2FhLzEvSVc2NnRQUnZKVTJWOUpaYmhLalBKQmxybkpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82ZDhhMmMtZTIyOC00ZDQwLThkOTAtZGVjMjBkZGM3M2Fh
LzEvSVc2NnRQUnZKVTJWOUpaYmhLalBKQmxybkpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKyo0hFXU
RqY1LK6UE7KxIEU0Cmk/KywnUFHTovtN5EJUYpRW8G6Bye3q3Dwq8+NGgAq99K4X
pXt+XNmYpPwXPFxutV7PuO5mgKgZBbfyxuDkdlddagkjZxdL7xTck25965z+Pz3q
dvJg1vYx0sBbDztPdHix3fOMwQVPT0vFfbNMq/+s45RsdbS/AUdDd5LbxXT4VYck
zgAtqfm9TVICZYKRvg6XqaUCQ1gTeEGkXA5gREfsYDY21Z9u+EaSXMTFSFBhbaXe
1twEXMG8Iuc0bPTKlACrevFebZGRhDIjOTMMtP05uZHw5vwVWcmk7iMCgJo3TEqc
7iRbpSHzfiSj3w==
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:22:49 2025 by rpki-client