Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
File: ifTHhzt_6kn_brkNUCwdvDpfjDM.mft (raw, json)
Hash identifier: ZYisMKl68OF565Fb+IGlzt1BVnsWWwgRUmE+Hwa/UGs=
Subject key identifier: E9:5D:15:AF:A5:EA:68:19:ED:99:4B:13:E5:15:29:31:DA:B4:A3:48
Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
Certificate issuer: /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Certificate serial: 01967B32D88E76D8BBE47E057D65B6054681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
Manifest number: 14F6
Signing time: Mon 28 Apr 2025 07:00:51 +0000
Manifest this update: Mon 28 Apr 2025 07:00:51 +0000
Manifest next update: Tue 29 Apr 2025 07:00:51 +0000
Files and hashes: 1: 5dE_GC4RYmruYsEQCosEswqhvMw.roa (hash: PKjCYy3vCzlACHchkXt5SVZDwsnRqMCgtgL6CJOnCUg=)
2: ifTHhzt_6kn_brkNUCwdvDpfjDM.crl (hash: 2CbWPgOUEmlHAuvW33nqod1SMdaqhqVk/f/aExHZA5Q=)
3: wITBUH3fVii4QvavQf9IYQ9sIA4.roa (hash: sUVkY3RRTmkWlOCgQmin3wil/Gjs5wSpMGd2nMYWzJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:d8:8e:76:d8:bb:e4:7e:05:7d:65:b6:05:46:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Validity
Not Before: Apr 28 07:00:51 2025 GMT
Not After : Apr 29 07:00:51 2025 GMT
Subject: CN=e95d15afa5ea6819ed994b13e5152931dab4a348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:59:8e:dc:13:db:df:2c:05:75:3a:86:fa:59:
1c:c4:24:8d:68:a2:66:7b:16:1d:b7:45:14:e9:75:
f5:56:ef:db:58:0e:80:30:75:f8:ae:37:79:9f:e5:
d5:7a:53:39:61:ae:41:b8:be:63:12:10:e4:0f:af:
ad:54:43:66:d2:3e:0c:d3:b2:60:cc:8b:aa:26:3a:
96:a9:f7:d8:35:9b:3e:27:09:82:ee:9d:86:a2:f3:
a7:54:f3:e6:dd:04:49:9f:74:63:4a:0c:55:0c:65:
b6:0d:7e:bc:eb:d4:3c:63:bc:81:23:20:22:65:ad:
9c:6c:51:1b:12:2c:bd:23:27:75:e3:cb:b4:dd:8e:
db:45:48:80:32:04:43:a1:b2:89:b0:9f:e7:a6:f7:
89:cf:c0:58:1e:c8:60:1a:74:8e:29:bf:1d:fe:bd:
9b:0e:db:dc:49:24:f8:b5:a2:63:7e:94:2e:fb:39:
be:48:43:59:2f:0b:03:23:c1:ee:35:36:db:c7:c8:
1d:7d:d7:7b:90:07:c5:13:b7:9c:a9:99:09:92:b7:
94:cf:e5:c7:2e:cc:10:d8:4d:46:2c:2d:d8:40:e1:
6a:83:2a:12:7c:ac:04:43:91:8a:75:6b:cb:98:b7:
e7:7c:89:ed:69:65:ce:ba:9c:cd:bd:1d:1c:a4:a3:
9b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5D:15:AF:A5:EA:68:19:ED:99:4B:13:E5:15:29:31:DA:B4:A3:48
X509v3 Authority Key Identifier:
keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:31:b5:84:d2:d1:1c:e8:91:07:59:8f:b2:85:09:05:c1:a4:
de:ab:75:0b:ef:f4:ef:af:f7:70:ae:65:58:9b:3b:e0:29:09:
0d:66:32:6b:c0:4a:e9:c7:f1:94:61:67:14:47:66:49:63:87:
6b:b1:91:96:55:77:a0:85:8c:e3:65:c6:bc:a7:9c:28:c6:a5:
a2:19:43:b0:ca:1d:19:58:3f:ee:c9:dd:a1:26:e9:e5:9e:85:
84:09:33:18:f5:4a:b5:e7:43:65:59:b1:e1:de:93:e9:e7:36:
e0:e8:fa:90:71:59:28:71:d1:2b:dd:18:e9:73:90:c8:52:e9:
d4:d4:da:83:d8:1b:36:77:00:0c:9a:93:cf:1f:98:64:26:8a:
78:93:d8:a8:19:95:ae:be:dc:fa:5b:b0:d2:cb:d3:fe:ac:d6:
4b:79:3a:a2:64:ed:78:73:1d:f2:68:16:63:d4:15:01:2e:e1:
db:10:f7:6d:e3:8f:dc:b4:f8:24:c2:8f:3f:60:62:13:56:fc:
c3:89:eb:14:fd:44:8e:07:2f:80:be:b6:d0:ed:97:5e:ba:e2:
e7:0d:6a:a0:e5:93:5c:18:99:ba:80:5c:be:cd:52:97:54:0f:
3d:f2:3d:d5:81:f6:79:26:5c:32:01:68:5f:13:96:b8:67:ce:
36:16:5e:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ7MtiOdti75H4FfWW2BUaBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZjRjNzg3M2I3ZmVhNDlmZjZlYjkwZDUwMmMxZGJjM2E1
ZjhjMzMwHhcNMjUwNDI4MDcwMDUxWhcNMjUwNDI5MDcwMDUxWjAzMTEwLwYDVQQD
EyhlOTVkMTVhZmE1ZWE2ODE5ZWQ5OTRiMTNlNTE1MjkzMWRhYjRhMzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VmO3BPb3ywFdTqG+lkcxCSNaKJm
exYdt0UU6XX1Vu/bWA6AMHX4rjd5n+XVelM5Ya5BuL5jEhDkD6+tVENm0j4M07Jg
zIuqJjqWqffYNZs+JwmC7p2GovOnVPPm3QRJn3RjSgxVDGW2DX6869Q8Y7yBIyAi
Za2cbFEbEiy9Iyd148u03Y7bRUiAMgRDobKJsJ/npveJz8BYHshgGnSOKb8d/r2b
DtvcSST4taJjfpQu+zm+SENZLwsDI8HuNTbbx8gdfdd7kAfFE7ecqZkJkreUz+XH
LswQ2E1GLC3YQOFqgyoSfKwEQ5GKdWvLmLfnfIntaWXOupzNvR0cpKObXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOldFa+l6mgZ7ZlLE+UVKTHatKNIMB8GA1UdIwQY
MBaAFIn0x4c7f+pJ/265DVAsHbw6X4wzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80M2FmYjYtMGQyMS00ZmY2LTk4NjMt
YmM1MTdlMTIxZDU0LzEvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80M2FmYjYtMGQyMS00ZmY2LTk4NjMtYmM1MTdlMTIxZDU0
LzEvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDG1hNLR
HOiRB1mPsoUJBcGk3qt1C+/076/3cK5lWJs74CkJDWYya8BK6cfxlGFnFEdmSWOH
a7GRllV3oIWM42XGvKecKMalohlDsModGVg/7sndoSbp5Z6FhAkzGPVKtedDZVmx
4d6T6ec24Oj6kHFZKHHRK90Y6XOQyFLp1NTag9gbNncADJqTzx+YZCaKeJPYqBmV
rr7c+luw0svT/qzWS3k6omTteHMd8mgWY9QVAS7h2xD3beOP3LT4JMKPP2BiE1b8
w4nrFP1EjgcvgL620O2XXrri5w1qoOWTXBiZuoBcvs1Sl1QPPfI91YH2eSZcMgFo
XxOWuGfONhZekw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:03:31 2025 by rpki-client