Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
File: 250Zf7vuKh3MtPVXIqghDTEFsEI.mft (raw, json)
Hash identifier: gEszuUvsoX873jhg/8q0MHMTzVA1QDcbz11npc3+LQ4=
Subject key identifier: 3C:23:D2:17:1B:76:3F:98:0C:21:73:7E:C9:03:75:FD:41:68:42:09
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 019687DC140694D586BEA7D402B58A354483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
Manifest number: 10DF
Signing time: Wed 30 Apr 2025 18:01:09 +0000
Manifest this update: Wed 30 Apr 2025 18:01:09 +0000
Manifest next update: Thu 01 May 2025 18:01:09 +0000
Files and hashes: 1: 0c-KKappZ1t73aXjS8mz1x-xTGc.roa (hash: MAa3tSzCnjrh/og+z4XVJnuDQ4AqmSQvPQCYBTfEoDQ=)
2: 250Zf7vuKh3MtPVXIqghDTEFsEI.crl (hash: bz4+uV+iE2EYCYmwBSlhdL+hFUOWK4bB1aN6ngBMhMk=)
3: 3sv6NKDpba_DUykmu28n6vWbI8U.roa (hash: gUh8eARhI2X9S3x1fvxAhLVuOISp5wl4VqYYPGnDg8Y=)
4: 4rupNMtZnDN0QSWru1RNhLDuJIo.roa (hash: z4IbiN1+w7zdJy/d9hWZDYM0E9ZzQh9TzT+f2XEsa+o=)
5: E2YGCkvl1qJmLxaFsCR58I4gibo.roa (hash: xheLTw+nhNWSmWNkdWISArZADpVzS+Ca89hGltJJMno=)
6: Sp4iVd_pOq560eUzaVqvX_2Gqas.roa (hash: JgPqfPTZcwMnjOQsf/Q1+96TPKUck5H6ntnLpmTpKbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:dc:14:06:94:d5:86:be:a7:d4:02:b5:8a:35:44:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Apr 30 18:01:09 2025 GMT
Not After : May 1 18:01:09 2025 GMT
Subject: CN=3c23d2171b763f980c21737ec90375fd41684209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:79:07:83:df:d7:4d:00:55:74:88:b9:63:
2e:64:c0:63:73:5a:a6:b6:c6:3b:7b:4d:ac:b2:f8:
9a:d8:bb:24:a9:92:a7:a2:25:fe:99:88:7d:57:29:
a4:63:04:1c:fd:45:a1:de:37:81:7b:be:dc:2f:9c:
b4:a6:18:3f:92:3d:2f:bc:27:35:9c:c5:e7:ad:24:
d3:82:3e:d1:a9:d8:71:f3:90:28:5a:81:0d:46:cd:
bc:81:ed:3b:a0:f9:61:80:6e:8b:2b:ca:49:df:fb:
91:18:a7:6a:0b:8f:cf:06:8d:6d:3d:9f:05:ba:8a:
a4:73:5a:c0:a5:36:54:8e:aa:3c:85:17:2a:33:ee:
a9:fb:93:77:a8:db:3c:86:24:25:e8:01:c6:72:6a:
7c:bc:85:9e:63:3b:4e:36:94:e1:90:70:30:d4:fd:
06:8d:36:f5:85:96:d2:28:b9:21:e3:20:b6:22:4d:
1d:43:32:44:6a:a4:35:95:9a:34:13:74:be:87:05:
e2:bc:51:a4:17:00:4c:96:7f:75:a1:0f:86:22:6e:
d3:d7:f3:15:c8:69:8f:ef:f3:78:4a:30:6f:f3:22:
26:a7:5a:11:bc:9b:d1:0c:66:d3:63:15:ee:c1:1a:
72:f6:19:22:9c:d2:62:38:76:04:5e:9c:ff:98:b5:
0f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:23:D2:17:1B:76:3F:98:0C:21:73:7E:C9:03:75:FD:41:68:42:09
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:20:0c:6e:d3:39:e1:10:09:c8:86:9c:e2:c0:9a:0e:c4:0b:
bd:06:61:0f:3a:b4:fc:4c:06:fe:71:2d:b4:98:6e:77:b6:9f:
5b:c3:02:03:e6:4b:15:68:4b:85:5a:64:be:2b:c3:c1:2e:09:
44:ea:9f:8d:4a:e6:e7:03:e3:79:60:d5:dc:7e:e7:78:fb:a3:
59:a7:19:4f:52:f7:88:b7:97:83:d7:d3:1d:6a:36:61:d8:f7:
19:a3:2b:e8:80:b2:68:a6:2e:03:9b:6a:2a:f5:3b:1a:b5:66:
55:c5:87:95:d5:85:d0:4b:78:b6:21:c4:e2:c9:61:6c:5f:6b:
da:da:df:bc:2d:70:46:b6:16:88:00:c5:da:56:7b:08:78:75:
15:f5:ed:7e:98:3e:6a:9e:53:f9:5b:b8:32:04:be:d4:3e:30:
79:75:a9:de:dc:68:51:e8:f6:14:5a:2f:f7:b3:d7:10:40:a8:
85:fd:2a:56:b1:b5:39:01:08:07:0a:32:ae:15:1a:ea:02:d7:
24:35:99:86:c6:d6:fc:79:09:70:ee:6f:db:49:05:12:ec:2c:
45:d8:70:17:7a:66:da:3d:06:24:ad:b4:38:92:9f:b2:50:b8:
bd:a9:bc:76:a6:83:a7:eb:dc:21:a3:c1:67:17:c2:b5:a0:3d:
94:f4:56:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaH3BQGlNWGvqfUArWKNUSDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWQxOTdmYmJlZTJhMWRjY2I0ZjU1NzIyYTgyMTBkMzEw
NWIwNDIwHhcNMjUwNDMwMTgwMTA5WhcNMjUwNTAxMTgwMTA5WjAzMTEwLwYDVQQD
EygzYzIzZDIxNzFiNzYzZjk4MGMyMTczN2VjOTAzNzVmZDQxNjg0MjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRR5B4Pf100AVXSIuWMuZMBjc1qm
tsY7e02ssvia2LskqZKnoiX+mYh9VymkYwQc/UWh3jeBe77cL5y0phg/kj0vvCc1
nMXnrSTTgj7Rqdhx85AoWoENRs28ge07oPlhgG6LK8pJ3/uRGKdqC4/PBo1tPZ8F
uoqkc1rApTZUjqo8hRcqM+6p+5N3qNs8hiQl6AHGcmp8vIWeYztONpThkHAw1P0G
jTb1hZbSKLkh4yC2Ik0dQzJEaqQ1lZo0E3S+hwXivFGkFwBMln91oQ+GIm7T1/MV
yGmP7/N4SjBv8yImp1oRvJvRDGbTYxXuwRpy9hkinNJiOHYEXpz/mLUPcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwj0hcbdj+YDCFzfskDdf1BaEIJMB8GA1UdIwQY
MBaAFNudGX+77iodzLT1VyKoIQ0xBbBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMt
NGIyMzk1NmZiZDg2LzEvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMtNGIyMzk1NmZiZDg2
LzEvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCAMbtM5
4RAJyIac4sCaDsQLvQZhDzq0/EwG/nEttJhud7afW8MCA+ZLFWhLhVpkvivDwS4J
ROqfjUrm5wPjeWDV3H7nePujWacZT1L3iLeXg9fTHWo2Ydj3GaMr6ICyaKYuA5tq
KvU7GrVmVcWHldWF0Et4tiHE4slhbF9r2trfvC1wRrYWiADF2lZ7CHh1FfXtfpg+
ap5T+Vu4MgS+1D4weXWp3txoUej2FFov97PXEECohf0qVrG1OQEIBwoyrhUa6gLX
JDWZhsbW/HkJcO5v20kFEuwsRdhwF3pm2j0GJK20OJKfslC4vam8dqaDp+vcIaPB
ZxfCtaA9lPRWFw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:52:21 2025 by rpki-client