Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
File: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft (raw, json)
Hash identifier: PXulMYwMZTfsJiw/xXCsBFrm2fm1rb2s8DLca90UARs=
Subject key identifier: 7F:4B:9E:23:34:91:8D:89:28:4D:C2:A0:CD:60:93:76:AF:D0:A8:CF
Authority key identifier: 53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA
Certificate issuer: /CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
Certificate serial: 01967A5716171060C5A2C5EBEDE50579C99B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
Manifest number: 04F4
Signing time: Mon 28 Apr 2025 03:00:49 +0000
Manifest this update: Mon 28 Apr 2025 03:00:49 +0000
Manifest next update: Tue 29 Apr 2025 03:00:49 +0000
Files and hashes: 1: HoEt4y6zf8w5L0OHd11vl-inukI.roa (hash: 470AufFFRZgA9ydBk/s9OXGNkkDkg7YffxaoQosYMko=)
2: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl (hash: iA+GSuuIITP4efjvqd6XL2DAd8bZEnXORH9QcA+3zMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:16:17:10:60:c5:a2:c5:eb:ed:e5:05:79:c9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
Validity
Not Before: Apr 28 03:00:49 2025 GMT
Not After : Apr 29 03:00:49 2025 GMT
Subject: CN=7f4b9e2334918d89284dc2a0cd609376afd0a8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c9:ba:68:e4:96:11:6f:f0:42:2d:5e:94:e5:
d6:47:d7:14:49:66:f0:be:1d:6b:cb:03:73:a0:55:
83:c3:5e:60:ce:e6:4b:98:1b:46:c7:ab:a2:86:45:
3e:a2:58:f0:1c:7c:d2:4f:f3:1b:79:6b:76:1e:65:
e3:61:bf:c2:47:75:ec:60:b6:4c:e7:2e:09:b0:c5:
5e:ca:0f:cc:79:3a:ec:51:84:1f:7f:79:59:0e:24:
13:39:24:2b:71:68:42:d7:eb:26:28:b8:88:4a:4f:
0c:6a:3c:b8:02:89:61:1f:9a:0a:b0:c6:a5:aa:88:
e5:ba:e0:27:8c:ed:26:32:60:80:be:3a:16:60:06:
a3:ab:c4:17:00:78:70:9c:9c:02:7f:12:c7:97:b0:
f5:af:b5:13:94:20:8f:1e:02:d4:eb:50:c2:c9:50:
3a:af:32:67:59:cc:46:3d:46:52:af:a1:e1:94:ae:
48:83:86:be:dc:1a:13:30:09:01:6f:ea:6a:c0:60:
89:53:8e:2a:e3:3f:40:42:97:f6:8a:40:3f:86:d6:
6e:0d:ea:7f:85:3f:25:ce:01:5e:31:73:d4:aa:52:
2e:1e:5a:74:5b:4f:5a:62:fe:83:9f:9c:e0:c7:b5:
4f:a0:6e:7f:79:6e:83:41:9e:a7:b2:e0:a5:3c:a4:
41:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4B:9E:23:34:91:8D:89:28:4D:C2:A0:CD:60:93:76:AF:D0:A8:CF
X509v3 Authority Key Identifier:
keyid:53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ef:ee:33:c8:1e:56:79:d4:89:ac:eb:09:88:0a:6a:ec:fc:
26:42:da:1d:87:b8:25:4f:31:78:17:42:81:f6:c3:1e:e1:19:
53:26:63:f2:b1:96:7b:d5:18:55:ee:2e:f5:ac:60:f6:b3:a6:
23:c9:7e:ff:af:bd:f0:68:d8:38:b0:5b:d2:77:92:2b:53:bd:
9e:35:99:2f:cc:8f:a3:d3:37:99:d2:3e:6f:3d:fc:02:dc:b3:
0b:cb:25:f1:d9:11:6c:74:b8:ad:43:4a:36:3f:9a:ec:dc:2a:
16:6c:ae:89:27:d5:3a:26:55:b9:bb:58:38:28:cc:f8:0e:fd:
50:aa:ed:51:94:a9:fa:fa:e8:f7:52:5c:9d:ac:c0:cd:44:2a:
53:fc:d6:d6:7e:83:d7:c8:32:db:85:10:99:98:81:53:52:12:
91:68:1c:10:b9:05:de:ad:0e:bd:6e:41:65:45:80:c6:a0:f2:
d4:7e:98:a1:a7:e2:27:a0:8e:5f:af:d8:74:ef:c9:83:82:4b:
fb:44:38:3b:b1:40:fb:4b:a9:ee:86:a9:46:dc:d5:ca:ee:c5:
3e:8e:27:a3:34:0b:f0:7f:e2:29:75:0a:45:49:ac:88:16:b3:
cd:c1:a5:80:51:5e:03:99:2a:42:84:e3:99:96:5b:94:ea:0b:
e2:26:5c:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6VxYXEGDFosXr7eUFecmbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZWFhMTljYTI3YTZmNTdmMmNiYjRlNDYzNzIwYjQzNmFm
MTdkZWEwHhcNMjUwNDI4MDMwMDQ5WhcNMjUwNDI5MDMwMDQ5WjAzMTEwLwYDVQQD
Eyg3ZjRiOWUyMzM0OTE4ZDg5Mjg0ZGMyYTBjZDYwOTM3NmFmZDBhOGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsm6aOSWEW/wQi1elOXWR9cUSWbw
vh1rywNzoFWDw15gzuZLmBtGx6uihkU+oljwHHzST/MbeWt2HmXjYb/CR3XsYLZM
5y4JsMVeyg/MeTrsUYQff3lZDiQTOSQrcWhC1+smKLiISk8Majy4AolhH5oKsMal
qojluuAnjO0mMmCAvjoWYAajq8QXAHhwnJwCfxLHl7D1r7UTlCCPHgLU61DCyVA6
rzJnWcxGPUZSr6HhlK5Ig4a+3BoTMAkBb+pqwGCJU44q4z9AQpf2ikA/htZuDep/
hT8lzgFeMXPUqlIuHlp0W09aYv6Dn5zgx7VPoG5/eW6DQZ6nsuClPKRBCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9LniM0kY2JKE3CoM1gk3av0KjPMB8GA1UdIwQY
MBaAFFPqoZyiem9X8su05GNyC0Nq8X3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVS1xaG5LSjZiMWZ5eTdUa1kzSUxRMnJ4ZmVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8wZDNiMmItZTMwNC00ZDYxLWI2ZDAt
MjdlOGY0ZjFjNjg0LzEvVS1xaG5LSjZiMWZ5eTdUa1kzSUxRMnJ4ZmVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8wZDNiMmItZTMwNC00ZDYxLWI2ZDAtMjdlOGY0ZjFjNjg0
LzEvVS1xaG5LSjZiMWZ5eTdUa1kzSUxRMnJ4ZmVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZe/uM8ge
VnnUiazrCYgKauz8JkLaHYe4JU8xeBdCgfbDHuEZUyZj8rGWe9UYVe4u9axg9rOm
I8l+/6+98GjYOLBb0neSK1O9njWZL8yPo9M3mdI+bz38AtyzC8sl8dkRbHS4rUNK
Nj+a7NwqFmyuiSfVOiZVubtYOCjM+A79UKrtUZSp+vro91JcnazAzUQqU/zW1n6D
18gy24UQmZiBU1ISkWgcELkF3q0OvW5BZUWAxqDy1H6YoafiJ6COX6/YdO/Jg4JL
+0Q4O7FA+0up7oapRtzVyu7FPo4nozQL8H/iKXUKRUmsiBazzcGlgFFeA5kqQoTj
mZZblOoL4iZcKA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:04:53 2025 by rpki-client