Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
File: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft (raw, json)
Hash identifier: SGL6XpjAE18TMi15k/Qm56SRNvPKU8RTML9E2yzzC6Q=
Subject key identifier: 4D:4A:6D:3B:DF:DD:47:A8:02:00:C0:55:70:64:02:28:83:16:7D:A4
Authority key identifier: 0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
Certificate issuer: /CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Certificate serial: 019674549F91CB4B67C5B4E7101B5EA0FB98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
Manifest number: 13EC
Signing time: Sat 26 Apr 2025 23:00:24 +0000
Manifest this update: Sat 26 Apr 2025 23:00:24 +0000
Manifest next update: Sun 27 Apr 2025 23:00:24 +0000
Files and hashes: 1: 1tRI1NAS620irGWcDu4y9Qfw5Oc.roa (hash: cB16kbTr6A/atusEQcb+v3J61xx/lkSsq3ehr1/v5HA=)
2: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl (hash: x6dBnkQ+jawqQNSFcB2Gxa/4GnTJhhUXBXRhIQaeBwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:9f:91:cb:4b:67:c5:b4:e7:10:1b:5e:a0:fb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Validity
Not Before: Apr 26 23:00:24 2025 GMT
Not After : Apr 27 23:00:24 2025 GMT
Subject: CN=4d4a6d3bdfdd47a80200c0557064022883167da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e0:f4:c6:06:6c:6b:00:5b:78:ad:fc:68:60:
e7:24:8b:7f:bc:5b:84:08:8f:fb:ac:bb:ae:c7:c1:
46:6c:98:2f:ca:47:e8:76:33:a4:e4:d6:8b:9f:60:
60:7b:e6:79:ce:76:0f:a8:1f:38:aa:51:cc:e1:89:
2b:f0:72:d4:87:4e:ef:c8:a7:ee:3d:21:14:ff:fb:
e3:97:b5:20:2c:25:65:ce:a3:c7:3d:09:7d:37:bb:
ff:5d:1a:fc:3f:f7:14:66:9b:80:d5:b0:79:a8:f2:
66:1e:c9:9b:cd:e4:d5:82:93:e4:86:d6:aa:5c:85:
0d:84:24:22:fe:95:d6:df:fe:5b:79:d8:18:59:ab:
99:ae:08:15:d4:ef:35:7f:a6:7b:57:b2:55:69:62:
0c:04:75:ba:ed:fb:a6:66:8c:ac:39:c3:c8:47:e7:
ed:77:e7:2c:58:db:65:1d:b6:13:b0:4f:9a:97:04:
56:95:2d:3e:3a:6f:9d:44:5e:c5:6e:1d:23:8d:18:
76:64:ef:da:ba:8a:2f:30:23:6c:15:89:4f:f0:ef:
74:df:2c:76:49:e9:02:5d:3c:aa:b4:e0:46:a3:e4:
a1:bc:bf:d9:05:d4:fc:7e:d6:67:72:ce:ee:9a:a2:
3a:ee:8e:46:2d:7b:e3:26:17:bf:ef:a2:cc:f7:c6:
86:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4A:6D:3B:DF:DD:47:A8:02:00:C0:55:70:64:02:28:83:16:7D:A4
X509v3 Authority Key Identifier:
keyid:0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e4:48:86:58:4a:ed:17:1e:24:d0:31:4a:1a:0d:4a:3b:0d:
8d:95:f5:0d:f2:5c:b8:25:31:dd:e8:c8:9d:15:ff:72:cc:c6:
68:ee:aa:d4:4e:84:aa:08:12:e6:82:eb:ba:42:f5:bd:6a:43:
33:13:f3:07:53:17:84:85:f7:d3:db:00:c1:e2:05:d9:ad:e3:
11:bc:03:99:ef:0f:d9:68:bc:53:97:53:5a:d7:7e:6f:9a:02:
d4:3e:22:6f:38:8b:13:de:2c:d3:5b:73:02:04:98:2f:e3:2d:
79:7b:d6:51:d5:de:59:b1:2e:5f:3f:be:a0:24:90:21:a0:cc:
ff:ef:a0:84:16:a7:a1:38:c3:8d:b9:08:a3:66:67:99:41:cd:
74:e5:25:62:10:8f:a1:2a:3e:33:f7:81:d2:be:d3:4e:55:19:
b1:f7:fd:3b:73:2b:c5:25:b7:1f:97:49:22:d7:e2:1f:fc:b8:
2a:8b:d2:cb:63:bb:5c:44:55:1c:e0:c6:da:5c:5d:80:04:7b:
b5:ac:74:b6:38:f9:bb:50:67:4e:8e:eb:ae:c3:eb:94:df:32:
53:2a:23:3a:f9:cf:cb:40:59:2a:c7:50:16:de:d7:93:e5:bc:
20:30:9c:bb:1b:94:13:19:7a:49:55:d3:f7:84:bc:af:48:3a:
0c:67:4d:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0VJ+Ry0tnxbTnEBteoPuYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOTBiODBiM2Q0ODkzYzljMWVjN2QwMWMyOWJmM2I0NTBi
Yjg1MWQwHhcNMjUwNDI2MjMwMDI0WhcNMjUwNDI3MjMwMDI0WjAzMTEwLwYDVQQD
Eyg0ZDRhNmQzYmRmZGQ0N2E4MDIwMGMwNTU3MDY0MDIyODgzMTY3ZGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+D0xgZsawBbeK38aGDnJIt/vFuE
CI/7rLuux8FGbJgvykfodjOk5NaLn2Bge+Z5znYPqB84qlHM4Ykr8HLUh07vyKfu
PSEU//vjl7UgLCVlzqPHPQl9N7v/XRr8P/cUZpuA1bB5qPJmHsmbzeTVgpPkhtaq
XIUNhCQi/pXW3/5bedgYWauZrggV1O81f6Z7V7JVaWIMBHW67fumZoysOcPIR+ft
d+csWNtlHbYTsE+alwRWlS0+Om+dRF7Fbh0jjRh2ZO/auoovMCNsFYlP8O903yx2
SekCXTyqtOBGo+ShvL/ZBdT8ftZncs7umqI67o5GLXvjJhe/76LM98aGiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1KbTvf3UeoAgDAVXBkAiiDFn2kMB8GA1UdIwQY
MBaAFA+QuAs9SJPJwex9AcKb87RQu4UdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDVDNEN6MUlrOG5CN0gwQndwdnp0RkM3aFIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy85OWEyYjEtMTE0NC00ZjljLThmZGYt
NDNlNGQ1NmQ0MDQzLzEvRDVDNEN6MUlrOG5CN0gwQndwdnp0RkM3aFIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy85OWEyYjEtMTE0NC00ZjljLThmZGYtNDNlNGQ1NmQ0MDQz
LzEvRDVDNEN6MUlrOG5CN0gwQndwdnp0RkM3aFIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGeRIhlhK
7RceJNAxShoNSjsNjZX1DfJcuCUx3ejInRX/cszGaO6q1E6EqggS5oLrukL1vWpD
MxPzB1MXhIX309sAweIF2a3jEbwDme8P2Wi8U5dTWtd+b5oC1D4ibziLE94s01tz
AgSYL+MteXvWUdXeWbEuXz++oCSQIaDM/++ghBanoTjDjbkIo2ZnmUHNdOUlYhCP
oSo+M/eB0r7TTlUZsff9O3MrxSW3H5dJItfiH/y4KovSy2O7XERVHODG2lxdgAR7
tax0tjj5u1BnTo7rrsPrlN8yUyojOvnPy0BZKsdQFt7Xk+W8IDCcuxuUExl6SVXT
94S8r0g6DGdNnw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:38:11 2025 by rpki-client