Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
File: RmJSHrWLRbDFosy-ODMVznnX7qU.mft (raw, json)
Hash identifier: Xn+B83Pg7JPOciNK9Z2M5ZzZx7QPpzK1CaRgtHKew80=
Subject key identifier: A3:28:8A:F9:55:46:AB:E0:5A:83:C9:63:B9:AE:B0:4A:27:FA:30:E0
Authority key identifier: 46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
Certificate issuer: /CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Certificate serial: 0196729D5C830FD124664904AC7DE27CCA97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
Manifest number: 0365
Signing time: Sat 26 Apr 2025 15:00:37 +0000
Manifest this update: Sat 26 Apr 2025 15:00:37 +0000
Manifest next update: Sun 27 Apr 2025 15:00:37 +0000
Files and hashes: 1: FMOrAvuXC1st0AxiGEbiYaRYpDg.roa (hash: OmIWmIcqWrtJmv8GjH0kjZnCnt6Sjb2fVpbncWqIDDs=)
2: RmJSHrWLRbDFosy-ODMVznnX7qU.crl (hash: fIyjMOyxEGPt2o16nSilu6v8ouuTkTNC6c392tmenys=)
3: Rn8OIh8zHAwmG50kXHn-kNbTEto.roa (hash: RiLsXz+R4XXCz86+60MDV16LzwORDjEzlHMC7VSLj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:5c:83:0f:d1:24:66:49:04:ac:7d:e2:7c:ca:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Validity
Not Before: Apr 26 15:00:37 2025 GMT
Not After : Apr 27 15:00:37 2025 GMT
Subject: CN=a3288af95546abe05a83c963b9aeb04a27fa30e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7a:d2:dd:5f:28:f7:b8:39:bc:af:e0:96:c3:
6a:b0:62:8e:13:29:ed:e6:6a:73:bc:39:52:25:53:
f1:ee:e8:1a:f5:90:df:c0:49:76:04:c8:7f:55:02:
33:c5:78:d9:f0:ec:e0:d6:a3:01:1b:68:7c:65:2a:
61:5a:4e:76:0d:d4:55:95:a9:d6:d5:bb:ac:a7:de:
51:0e:0e:e8:ce:8a:05:9a:74:7e:ef:61:2c:41:d9:
b3:ef:5f:96:6b:b2:15:5c:93:ad:f9:e5:2b:24:a5:
00:32:19:b0:df:19:2d:e3:58:9d:06:5a:f2:ab:2b:
4a:d8:51:5e:09:f0:22:d8:db:a3:56:b1:81:8f:7c:
9e:d3:0a:1a:57:30:03:91:46:2c:08:46:74:ce:1e:
f0:5b:17:36:1d:71:71:e5:bb:aa:f5:48:cf:b1:3a:
58:6e:a4:2c:67:4b:42:98:93:5c:50:1f:4c:e8:79:
bb:63:4b:59:b0:0f:83:80:50:5b:bc:7e:b0:57:4f:
1a:70:cc:47:79:6d:09:65:48:79:4b:d6:71:04:b8:
27:6e:1a:00:88:98:42:72:bc:05:d4:c3:a8:7c:82:
73:b7:8c:bf:64:eb:38:1d:46:af:c6:bb:f9:3f:23:
3f:68:07:d7:70:7d:cf:de:15:f7:60:12:4f:ae:f6:
52:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:28:8A:F9:55:46:AB:E0:5A:83:C9:63:B9:AE:B0:4A:27:FA:30:E0
X509v3 Authority Key Identifier:
keyid:46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0b:df:4c:1f:4b:df:1a:a5:d3:27:5a:92:9d:ae:a3:47:e2:
34:0c:f1:ff:26:e2:67:fb:f7:9e:05:84:ea:f6:27:78:34:ce:
91:a7:28:7a:e0:94:f0:2c:31:c6:80:02:54:55:32:e0:6d:b8:
6b:2b:18:82:cc:7d:fc:f2:d9:dd:62:cb:68:ef:f0:70:0b:b4:
af:41:2d:f1:7d:dd:69:ea:fa:b9:59:7d:4e:54:b2:96:c0:a2:
2c:4c:69:fb:e2:0a:c7:9f:8c:2b:df:02:73:57:b4:45:96:94:
ef:96:25:41:38:24:1e:f2:b5:61:64:23:10:00:3c:6c:d2:67:
e0:d0:fb:5c:82:00:0a:22:25:9a:8d:c5:68:21:ed:68:37:33:
ab:fb:ee:29:4e:d0:0f:9e:67:54:1d:60:81:3a:d8:f6:e3:17:
c0:4e:ba:09:e9:59:3c:5e:23:46:ba:7b:f3:7b:e9:ec:9e:76:
5c:44:4a:f7:e6:c5:25:dc:1f:2d:59:4e:23:48:62:0f:38:f9:
f5:a8:4b:94:3b:b6:61:75:63:44:42:84:10:fd:b3:e9:8c:14:
0a:09:22:02:c3:69:34:90:0e:7e:a9:c2:5e:79:9a:4b:cb:8c:
2a:45:09:20:28:60:17:98:3c:e1:7f:33:48:52:01:54:db:83:
90:9d:15:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZynVyDD9EkZkkErH3ifMqXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NjI1MjFlYjU4YjQ1YjBjNWEyY2NiZTM4MzMxNWNlNzlk
N2VlYTUwHhcNMjUwNDI2MTUwMDM3WhcNMjUwNDI3MTUwMDM3WjAzMTEwLwYDVQQD
EyhhMzI4OGFmOTU1NDZhYmUwNWE4M2M5NjNiOWFlYjA0YTI3ZmEzMGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonrS3V8o97g5vK/glsNqsGKOEynt
5mpzvDlSJVPx7uga9ZDfwEl2BMh/VQIzxXjZ8Ozg1qMBG2h8ZSphWk52DdRVlanW
1busp95RDg7ozooFmnR+72EsQdmz71+Wa7IVXJOt+eUrJKUAMhmw3xkt41idBlry
qytK2FFeCfAi2NujVrGBj3ye0woaVzADkUYsCEZ0zh7wWxc2HXFx5buq9UjPsTpY
bqQsZ0tCmJNcUB9M6Hm7Y0tZsA+DgFBbvH6wV08acMxHeW0JZUh5S9ZxBLgnbhoA
iJhCcrwF1MOofIJzt4y/ZOs4HUavxrv5PyM/aAfXcH3P3hX3YBJPrvZSDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMoivlVRqvgWoPJY7musEon+jDgMB8GA1UdIwQY
MBaAFEZiUh61i0WwxaLMvjgzFc551+6lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83MmM5ODQtMTQxMC00NWVjLTg2YzUt
OGFiODY5Mzc0MTBhLzEvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi83MmM5ODQtMTQxMC00NWVjLTg2YzUtOGFiODY5Mzc0MTBh
LzEvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAvfTB9L
3xql0ydakp2uo0fiNAzx/ybiZ/v3ngWE6vYneDTOkacoeuCU8CwxxoACVFUy4G24
aysYgsx9/PLZ3WLLaO/wcAu0r0Et8X3daer6uVl9TlSylsCiLExp++IKx5+MK98C
c1e0RZaU75YlQTgkHvK1YWQjEAA8bNJn4ND7XIIACiIlmo3FaCHtaDczq/vuKU7Q
D55nVB1ggTrY9uMXwE66CelZPF4jRrp783vp7J52XERK9+bFJdwfLVlOI0hiDzj5
9ahLlDu2YXVjREKEEP2z6YwUCgkiAsNpNJAOfqnCXnmaS8uMKkUJIChgF5g84X8z
SFIBVNuDkJ0V9Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:07:40 2025 by rpki-client