Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
File: PrkDKEodFdwVitcYLqC854bOsq0.mft (raw, json)
Hash identifier: MBkLg9Q2KJdDcPFqWfAiPG9R/2+4HxwYyYGBrGI4aIM=
Subject key identifier: 07:EC:F5:F7:45:18:47:64:49:0F:84:68:47:46:DB:DC:70:E9:2F:DC
Authority key identifier: 3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
Certificate issuer: /CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Certificate serial: 0196846CA9A05F549B2EE336E9D679D12B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
Manifest number: 0171
Signing time: Wed 30 Apr 2025 02:00:35 +0000
Manifest this update: Wed 30 Apr 2025 02:00:35 +0000
Manifest next update: Thu 01 May 2025 02:00:35 +0000
Files and hashes: 1: 0zozhddFGxlaDU0eMcPGzCbmd6I.roa (hash: HhrjUsFCH402W4XdhuJKvzUEm96xMJ7A0tUrjiNFw6Y=)
2: 2z44fAwQyyEeWoKCF_G5EjvRE_Q.roa (hash: Z34LIfgBtYIlenX8BP2t8IUqfPpsJULSyBoNS38aJWk=)
3: 4kquCz-i6kJDkS1O2XQAUk_agCI.roa (hash: Pez2ubHTLSNld28U0wPkDbmTvFBCVvXm37XAiS5Y0fA=)
4: FukUNQ-1MuiT_YZ8AK4IiNn3ZEM.roa (hash: Q+TDgTJT6+GCL8Icb4N9FEYd+k8ybFyashs6L8F6jRA=)
5: Ih96IDuDaMSdBEjycgfBHMlpv1k.roa (hash: gzRNZYScETmPIIaSnlA3ny9nEyJmD80+p4ZodHIyvdw=)
6: PrkDKEodFdwVitcYLqC854bOsq0.crl (hash: RzM0/Cccu/URiXgHtYUQqES2RP1XYRgw0gdDaMVMYLs=)
7: fDTEunNvzlH5X-k5xdeAmWjVRig.roa (hash: kSsYzCwppDZTwjMBzSM9jNvsq5Yv3fwitPhSPp+j0to=)
8: s8x3Zl1NTIQSd2VaNW3r7mX9Qt0.roa (hash: 955pA2YQRo69WOfGT4zy28ccgCxBC3J2614wD9x3OY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:a9:a0:5f:54:9b:2e:e3:36:e9:d6:79:d1:2b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Validity
Not Before: Apr 30 02:00:35 2025 GMT
Not After : May 1 02:00:35 2025 GMT
Subject: CN=07ecf5f745184764490f84684746dbdc70e92fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e3:8e:17:fe:1a:29:42:a3:57:41:a2:34:80:
f2:cd:34:5f:d6:9f:f8:1f:a6:f5:5c:e1:05:37:be:
3a:0c:d3:f3:f3:90:44:2c:9b:46:90:b0:90:83:70:
a7:1b:b7:8f:c9:3f:8a:4b:fe:26:ed:3d:8b:c4:c2:
13:8e:27:59:ba:86:d6:b3:8e:35:aa:7c:80:6a:14:
01:f9:4e:63:0f:19:81:e8:5f:dc:6f:4c:06:fc:19:
3f:a0:aa:6a:b1:b3:6b:0f:f4:1a:c9:a6:e5:70:a6:
ee:87:01:1b:2e:aa:cb:1a:bd:87:8f:43:3a:54:81:
05:7f:8c:66:67:1f:2f:a3:b7:20:92:d6:d5:fc:37:
73:bf:1f:f3:b1:0e:43:f0:b3:9a:b6:98:dd:c2:fa:
d8:bc:a1:19:20:6e:20:49:1f:a9:81:01:e5:0e:4f:
58:22:f0:40:24:d0:9a:c1:4b:0b:67:e1:08:e9:54:
d4:a5:95:fc:33:ac:c5:1c:4e:bb:49:5e:84:ed:ad:
92:63:c7:ac:83:37:bd:2f:fe:ce:a2:ac:75:53:9f:
a6:bb:b7:e4:db:ae:4f:61:36:f9:64:2b:05:a1:df:
c9:03:c5:81:dc:89:9b:2d:bb:84:4c:21:a6:ea:06:
64:bc:8f:b6:61:e6:a5:3d:03:36:91:74:f8:8a:7f:
0c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EC:F5:F7:45:18:47:64:49:0F:84:68:47:46:DB:DC:70:E9:2F:DC
X509v3 Authority Key Identifier:
keyid:3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:6b:38:c7:94:40:27:b7:a3:dd:27:53:5c:59:7a:e7:e2:94:
47:cf:77:4f:6b:ea:b0:2e:ea:21:8f:39:f2:b3:6b:31:19:80:
ed:22:23:ad:e8:9b:82:c6:b8:72:7e:01:ee:f2:ee:d5:61:fb:
0d:e7:32:2d:39:35:ab:24:39:a5:30:9d:7c:98:c5:3d:a5:fe:
ba:95:ec:85:99:48:1a:58:75:3a:d7:20:57:f8:37:d4:4d:21:
71:bf:1b:40:a6:e0:2d:d5:a7:d7:63:e1:83:1a:ec:f8:cd:91:
45:9c:dd:8b:2d:03:28:1b:c9:81:42:9c:b8:00:8e:b4:39:f4:
d1:b2:6b:a7:c9:0d:7b:a6:d5:28:cd:de:7b:48:89:9e:a1:a9:
46:19:b5:f5:a5:14:bb:20:dd:62:ae:b8:cb:f8:ef:37:f9:32:
1c:1b:0c:79:62:a5:53:f8:41:b3:57:df:c4:0a:3f:39:b5:b2:
6a:1b:20:a7:83:8e:8a:c6:38:6d:3a:9e:76:9f:a2:69:be:8b:
8c:78:84:6b:f3:62:62:43:86:e9:94:81:3c:a8:12:ae:a2:22:
5f:f7:6d:a5:01:62:75:b4:81:0a:e0:9d:b9:3d:73:d7:72:2a:
b6:61:da:31:b6:6d:37:9b:92:84:65:47:a1:ca:01:56:57:ca:
66:49:7b:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaEbKmgX1SbLuM26dZ50SsGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYjkwMzI4NGExZDE1ZGMxNThhZDcxODJlYTBiY2U3ODZj
ZWIyYWQwHhcNMjUwNDMwMDIwMDM1WhcNMjUwNTAxMDIwMDM1WjAzMTEwLwYDVQQD
EygwN2VjZjVmNzQ1MTg0NzY0NDkwZjg0Njg0NzQ2ZGJkYzcwZTkyZmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+OOF/4aKUKjV0GiNIDyzTRf1p/4
H6b1XOEFN746DNPz85BELJtGkLCQg3CnG7ePyT+KS/4m7T2LxMITjidZuobWs441
qnyAahQB+U5jDxmB6F/cb0wG/Bk/oKpqsbNrD/QayablcKbuhwEbLqrLGr2Hj0M6
VIEFf4xmZx8vo7cgktbV/Ddzvx/zsQ5D8LOatpjdwvrYvKEZIG4gSR+pgQHlDk9Y
IvBAJNCawUsLZ+EI6VTUpZX8M6zFHE67SV6E7a2SY8esgze9L/7Ooqx1U5+mu7fk
265PYTb5ZCsFod/JA8WB3ImbLbuETCGm6gZkvI+2YealPQM2kXT4in8MGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfs9fdFGEdkSQ+EaEdG29xw6S/cMB8GA1UdIwQY
MBaAFD65AyhKHRXcFYrXGC6gvOeGzrKtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHJrREtFb2RGZHdWaXRjWUxxQzg1NGJPc3EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85MmVhOWYtYjEyZS00ZGQ1LTliZDMt
Yjc3ZGM4ZGMxYzdlLzEvUHJrREtFb2RGZHdWaXRjWUxxQzg1NGJPc3EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi85MmVhOWYtYjEyZS00ZGQ1LTliZDMtYjc3ZGM4ZGMxYzdl
LzEvUHJrREtFb2RGZHdWaXRjWUxxQzg1NGJPc3EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlGs4x5RA
J7ej3SdTXFl65+KUR893T2vqsC7qIY858rNrMRmA7SIjreibgsa4cn4B7vLu1WH7
DecyLTk1qyQ5pTCdfJjFPaX+upXshZlIGlh1OtcgV/g31E0hcb8bQKbgLdWn12Ph
gxrs+M2RRZzdiy0DKBvJgUKcuACOtDn00bJrp8kNe6bVKM3ee0iJnqGpRhm19aUU
uyDdYq64y/jvN/kyHBsMeWKlU/hBs1ffxAo/ObWyahsgp4OOisY4bTqedp+iab6L
jHiEa/NiYkOG6ZSBPKgSrqIiX/dtpQFidbSBCuCduT1z13IqtmHaMbZtN5uShGVH
ocoBVlfKZkl7sQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:15:08 2025 by rpki-client