Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
File: mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json)
Hash identifier: S2yNZmZySLbWaq11CA9S0TURf2F6PuckaoDXgBphxY4=
Subject key identifier: 70:E4:3D:DE:E8:A6:6E:28:C3:0A:3E:E4:66:0A:A5:30:A4:3C:F0:B7
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 0196767A3C9FBD4505C20B1BA771B92D3D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
Manifest number: 11FB
Signing time: Sun 27 Apr 2025 09:00:44 +0000
Manifest this update: Sun 27 Apr 2025 09:00:44 +0000
Manifest next update: Mon 28 Apr 2025 09:00:44 +0000
Files and hashes: 1: GEL87EsMVhk3ZunlststnTM4YLA.roa (hash: H7b1xc1l2fw0pFwv7g5oKkpSKlsP+OyAptyBIDDM0uk=)
2: agw3OIrKwOyL1W_VnmVopnHAQeo.roa (hash: f+xBycRNQ1p+9ZUPOHzjnJANu2PPzQm41w3wdyO787g=)
3: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: E5ZZiz1p5fpkSTUTZitSiSdSv1vVVOqLV+ZBZl3ksmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:3c:9f:bd:45:05:c2:0b:1b:a7:71:b9:2d:3d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Apr 27 09:00:44 2025 GMT
Not After : Apr 28 09:00:44 2025 GMT
Subject: CN=70e43ddee8a66e28c30a3ee4660aa530a43cf0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6b:c3:54:3f:2d:2a:55:93:7a:c4:67:61:46:
69:3a:5a:fb:f1:8d:49:25:b5:98:89:bd:aa:f3:d4:
6a:96:44:f3:15:cf:3f:e8:37:81:0c:27:0c:52:85:
52:6f:67:74:05:b4:85:38:a6:82:18:c8:ef:d0:05:
44:3a:5d:7e:3f:f4:5b:cd:52:94:40:9d:9f:c8:33:
fd:fd:24:ea:6b:09:2b:5d:f0:eb:85:be:d3:94:79:
6c:fb:c5:27:c0:06:6c:de:84:31:8e:06:95:8a:30:
ce:dd:59:5a:37:84:bb:89:49:e4:a0:86:58:af:c8:
d3:bb:ff:6a:3e:a9:25:bd:7d:fe:93:87:cc:b0:22:
a9:c4:e3:d4:1e:7d:69:a4:94:29:eb:e6:58:32:83:
7e:50:12:d9:b9:95:34:5d:11:c6:16:ba:1f:b5:ed:
9c:64:2e:4a:4a:d8:22:ac:2d:b3:a0:66:67:60:9a:
ea:f5:14:ac:70:91:2c:1b:bd:34:b1:25:65:a7:11:
7c:2e:a9:a8:d0:61:f0:7c:0a:34:a6:fb:f3:88:fe:
65:27:27:71:00:0e:3c:41:0c:74:17:1e:eb:bd:82:
66:a6:4c:a3:b2:34:68:81:63:ed:e0:3e:5e:8a:b6:
df:29:3a:82:a0:55:6a:36:46:ce:16:13:f7:bb:a0:
a4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E4:3D:DE:E8:A6:6E:28:C3:0A:3E:E4:66:0A:A5:30:A4:3C:F0:B7
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3d:96:26:6f:e9:93:c3:b7:d8:a6:8f:6e:20:e0:c8:9a:36:
cc:71:54:c5:8a:ca:83:e6:1e:e0:9a:f9:f5:a6:ea:65:9a:0f:
b1:b5:93:c4:94:60:54:19:63:d1:1d:54:3f:a2:11:78:77:14:
e8:5d:0c:b7:fa:c1:26:f1:fa:99:c1:17:0a:75:cf:90:99:e5:
5e:98:37:72:b5:5e:93:5b:37:ab:81:b1:4a:c8:8c:62:72:48:
59:7c:29:a0:94:4b:e3:72:a4:c2:60:18:7b:3b:28:8b:2b:1e:
c8:6c:70:1d:d4:96:a7:35:8c:e4:b3:6f:ba:f9:97:1e:c2:94:
e4:97:8d:70:b0:8d:80:eb:1b:17:f8:22:a8:e7:e2:f6:e4:c1:
a7:7d:bc:5f:c0:74:ae:75:5d:d3:75:eb:20:0e:3a:78:be:5e:
e5:3c:71:07:af:d3:48:74:47:70:a3:f5:55:e6:35:55:9c:0b:
33:33:2a:43:02:0f:22:81:39:06:06:69:bf:bf:56:84:ac:e1:
38:c0:c5:cc:c8:bf:e6:a6:9e:b3:cd:0c:e5:cf:e9:83:33:1c:
d7:1f:68:b0:e2:78:f0:e1:cf:0a:ff:e4:f5:63:4a:6f:f9:98:
61:1c:e6:b6:d1:66:41:7d:b2:27:ce:74:f5:17:ec:13:a3:c6:
81:3c:f2:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2ejyfvUUFwgsbp3G5LT1aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMmYwNzAxZDdhNjNjZjNkMTkzNjk1YzM5NWQxYTFmNzgz
MzVjY2YwHhcNMjUwNDI3MDkwMDQ0WhcNMjUwNDI4MDkwMDQ0WjAzMTEwLwYDVQQD
Eyg3MGU0M2RkZWU4YTY2ZTI4YzMwYTNlZTQ2NjBhYTUzMGE0M2NmMGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mvDVD8tKlWTesRnYUZpOlr78Y1J
JbWYib2q89RqlkTzFc8/6DeBDCcMUoVSb2d0BbSFOKaCGMjv0AVEOl1+P/RbzVKU
QJ2fyDP9/STqawkrXfDrhb7TlHls+8UnwAZs3oQxjgaVijDO3VlaN4S7iUnkoIZY
r8jTu/9qPqklvX3+k4fMsCKpxOPUHn1ppJQp6+ZYMoN+UBLZuZU0XRHGFrofte2c
ZC5KStgirC2zoGZnYJrq9RSscJEsG700sSVlpxF8Lqmo0GHwfAo0pvvziP5lJydx
AA48QQx0Fx7rvYJmpkyjsjRogWPt4D5eirbfKTqCoFVqNkbOFhP3u6Ck9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDkPd7opm4owwo+5GYKpTCkPPC3MB8GA1UdIwQY
MBaAFJovBwHXpjzz0ZNpXDldGh94M1zPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZWZhZDYtYzlhNC00ODM4LWJkNjct
NzM3MTdjNTZiNmYzLzEvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS81ZWZhZDYtYzlhNC00ODM4LWJkNjctNzM3MTdjNTZiNmYz
LzEvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXD2WJm/p
k8O32KaPbiDgyJo2zHFUxYrKg+Ye4Jr59abqZZoPsbWTxJRgVBlj0R1UP6IReHcU
6F0Mt/rBJvH6mcEXCnXPkJnlXpg3crVek1s3q4GxSsiMYnJIWXwpoJRL43KkwmAY
ezsoiyseyGxwHdSWpzWM5LNvuvmXHsKU5JeNcLCNgOsbF/giqOfi9uTBp328X8B0
rnVd03XrIA46eL5e5TxxB6/TSHRHcKP1VeY1VZwLMzMqQwIPIoE5BgZpv79WhKzh
OMDFzMi/5qaes80M5c/pgzMc1x9osOJ48OHPCv/k9WNKb/mYYRzmttFmQX2yJ850
9RfsE6PGgTzyyQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:10:11 2025 by rpki-client