Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
File: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft (raw, json)
Hash identifier: UCbW4XLduH1dG5ez2IplqsbMwR/FYC/dHADBFozwtgs=
Subject key identifier: 41:9E:01:9B:50:F7:C6:59:5A:16:13:2A:BE:BC:81:35:8D:C6:23:DF
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 0196759E4A2D1FAB7D391406CAA9A0206452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 05:00:29 +0000
Manifest this update: Sun 27 Apr 2025 05:00:29 +0000
Manifest next update: Mon 28 Apr 2025 05:00:29 +0000
Files and hashes: 1: 9GpBlLtfTSGwtwmapQ1fHjDSL74.roa (hash: cQGV65QLMLrxeunkDqMGv2/A1B8DKG8uRXwHYjzRdog=)
2: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl (hash: c3PjXB1meGUBZPQD5RRiMCwBew9ExWBbhEiBtI+6dBk=)
3: k2cy-dpR9M4bnBgU53KrEJqTZ6Q.roa (hash: 8tyXNOmPdOoM3Bxwfs7taxKxeuKoZ5xeHwq+hSOSI5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:4a:2d:1f:ab:7d:39:14:06:ca:a9:a0:20:64:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Apr 27 05:00:29 2025 GMT
Not After : Apr 28 05:00:29 2025 GMT
Subject: CN=419e019b50f7c6595a16132abebc81358dc623df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a8:58:4d:b0:1c:47:97:f8:9e:b7:b0:7a:07:
6a:ca:ea:2a:c4:04:a5:7f:1a:22:be:77:f3:bc:98:
50:d0:96:62:a8:9d:8b:b8:8c:b6:d3:5e:f5:c7:7e:
66:ae:75:55:70:cf:8a:e6:63:dc:3c:cb:57:66:fb:
dc:91:83:0a:cb:5a:99:c7:4f:f9:df:53:50:a8:03:
ef:7c:77:ef:13:47:77:13:4c:d3:b6:b1:04:07:f1:
87:48:5a:ac:d2:3a:13:11:63:b7:b9:cd:3a:20:2a:
19:75:2b:2f:6a:05:b5:17:79:47:97:d3:ca:69:05:
bb:c5:d8:66:fc:45:cb:b0:a8:50:c7:1a:a2:b1:82:
bf:ce:1e:04:c3:21:6a:c9:2e:95:44:1f:db:ff:20:
3f:d1:24:81:dd:7c:37:c3:b8:04:1e:af:6f:53:04:
f7:e0:4b:4d:b2:9e:bb:a2:f2:63:05:18:74:a2:8a:
46:df:00:00:bd:4a:47:af:7f:34:3f:d7:95:09:b1:
63:0f:ba:d7:8f:d9:ce:73:2f:25:fc:6a:71:60:ff:
85:c4:41:21:b3:d7:87:2f:5c:8f:db:8d:11:e4:e6:
7f:b3:6d:37:97:92:32:6c:cd:bb:b0:a5:f0:f8:e6:
6d:80:66:97:f4:d4:58:ee:93:fc:dc:40:0b:e9:8a:
71:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9E:01:9B:50:F7:C6:59:5A:16:13:2A:BE:BC:81:35:8D:C6:23:DF
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e1:75:fb:5c:af:ae:af:de:f0:8f:1d:66:30:ce:d8:78:5b:
50:2c:e6:9e:fa:1d:e7:6a:65:93:12:ff:8a:ea:ab:a6:98:a1:
b0:fa:3d:a1:41:51:0d:63:95:fe:aa:a6:cc:70:95:f5:fe:24:
6c:a4:d2:6b:f4:8c:18:e2:69:d5:e5:36:dc:bb:25:58:c0:81:
a5:cc:93:74:9c:3d:82:07:67:49:a3:9a:00:6a:6e:be:3b:bc:
8e:9b:16:46:24:a1:09:ef:87:ff:d8:cf:51:60:48:65:df:89:
da:75:63:d9:5a:7a:5f:73:cb:1d:93:72:9d:00:c8:6e:d8:19:
4a:75:cd:a0:da:b8:33:a2:85:92:38:b4:73:73:2c:b9:70:15:
27:12:15:e5:0e:83:ee:c1:e4:11:f2:2d:0c:16:8d:12:8f:90:
4b:bb:82:64:5c:0b:20:f8:1b:1c:0c:e0:a6:6a:37:f8:35:f0:
ef:b8:c2:09:49:ca:c0:96:56:e5:a2:64:86:38:22:8c:59:00:
c7:f2:e2:aa:b1:03:1a:43:d3:8a:ee:30:c1:e5:ae:db:96:3a:
19:11:a5:09:85:79:01:c7:cd:a5:dc:27:35:f7:dd:54:55:26:
da:77:c9:03:28:13:d7:db:70:ee:29:b2:8b:0f:49:f1:79:46:
06:04:e9:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1nkotH6t9ORQGyqmgIGRSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1
ZDAwN2UwHhcNMjUwNDI3MDUwMDI5WhcNMjUwNDI4MDUwMDI5WjAzMTEwLwYDVQQD
Eyg0MTllMDE5YjUwZjdjNjU5NWExNjEzMmFiZWJjODEzNThkYzYyM2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ahYTbAcR5f4nrewegdqyuoqxASl
fxoivnfzvJhQ0JZiqJ2LuIy20171x35mrnVVcM+K5mPcPMtXZvvckYMKy1qZx0/5
31NQqAPvfHfvE0d3E0zTtrEEB/GHSFqs0joTEWO3uc06ICoZdSsvagW1F3lHl9PK
aQW7xdhm/EXLsKhQxxqisYK/zh4EwyFqyS6VRB/b/yA/0SSB3Xw3w7gEHq9vUwT3
4EtNsp67ovJjBRh0oopG3wAAvUpHr380P9eVCbFjD7rXj9nOcy8l/GpxYP+FxEEh
s9eHL1yP240R5OZ/s203l5IybM27sKXw+OZtgGaX9NRY7pP83EAL6YpxNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGeAZtQ98ZZWhYTKr68gTWNxiPfMB8GA1UdIwQY
MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt
MWZiYzY0MWI1MGIxLzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx
LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuF1+1yv
rq/e8I8dZjDO2HhbUCzmnvod52plkxL/iuqrppihsPo9oUFRDWOV/qqmzHCV9f4k
bKTSa/SMGOJp1eU23LslWMCBpcyTdJw9ggdnSaOaAGpuvju8jpsWRiShCe+H/9jP
UWBIZd+J2nVj2Vp6X3PLHZNynQDIbtgZSnXNoNq4M6KFkji0c3MsuXAVJxIV5Q6D
7sHkEfItDBaNEo+QS7uCZFwLIPgbHAzgpmo3+DXw77jCCUnKwJZW5aJkhjgijFkA
x/LiqrEDGkPTiu4wweWu25Y6GRGlCYV5AcfNpdwnNffdVFUm2nfJAygT19tw7imy
iw9J8XlGBgTpXw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:07:16 2025 by rpki-client