Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
File: y748bZmBGBnO3dzSfkviW8DPUG8.mft (raw, json)
Hash identifier: Nr2dN+G/Yf4Vf5+SZrlER4+pPBk0sw5upPF7UBDPp7I=
Subject key identifier: 48:1A:27:B0:EC:C0:6B:79:04:DA:12:12:F8:16:B7:09:19:67:76:30
Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Certificate serial: 019676B100E5597D0EA699CC1C53DBF07BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
Manifest number: 103B
Signing time: Sun 27 Apr 2025 10:00:33 +0000
Manifest this update: Sun 27 Apr 2025 10:00:33 +0000
Manifest next update: Mon 28 Apr 2025 10:00:33 +0000
Files and hashes: 1: ghqg6ujuEOV4Vw3b6x6YkQU8aSs.roa (hash: IATpDK+kaz0czhsEzmLbtPDJ492YJfivjvGQ/3AgHO8=)
2: rMy8dPPnYigzc4tv_MpgYXZWjBU.roa (hash: nHe7eBjoA3VTymKpGX1+aRKhTfLD28hgYmPFTLI6+4M=)
3: x5FwTTVorsGfIV2MDa8IC9dozSI.roa (hash: cVCSNkZBBh3ZJGnim77LdgANipO1Ai7iWjVLFMe9HIY=)
4: y748bZmBGBnO3dzSfkviW8DPUG8.crl (hash: 0jHTrl/q8qiBQkXSQqBGEHbzaeUEpNXfPpuyWb+gtPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:00:e5:59:7d:0e:a6:99:cc:1c:53:db:f0:7b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Validity
Not Before: Apr 27 10:00:33 2025 GMT
Not After : Apr 28 10:00:33 2025 GMT
Subject: CN=481a27b0ecc06b7904da1212f816b70919677630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:41:62:5f:77:ca:e3:2f:b1:55:19:59:71:b8:
ed:02:9d:7c:f4:74:99:97:2f:f7:ea:02:13:d5:72:
10:17:d2:f4:66:ee:6a:4f:9d:f2:04:e2:34:73:c7:
62:ed:d5:51:01:da:c8:07:ac:05:b3:dc:82:27:a3:
00:77:f7:da:25:5b:da:fc:e5:8c:27:c9:c6:9e:72:
cf:0d:ff:57:c6:66:81:b0:21:92:37:53:b6:88:64:
51:1a:0e:32:25:64:ce:11:22:92:78:69:0b:13:11:
6a:39:98:f3:71:b9:d0:8a:02:d1:b6:78:4e:a3:5f:
01:eb:27:26:25:5c:4b:86:64:8a:9e:4a:5f:7f:14:
6b:b0:e4:1f:0a:09:bb:a3:31:7d:cb:ca:37:4b:07:
c6:97:17:0a:03:38:62:7d:93:54:b0:a7:35:77:ff:
dd:f5:ed:1e:68:b1:7e:ee:25:96:a6:ef:5f:3e:f0:
72:ff:48:ba:6a:a4:66:e1:22:70:bc:a1:2d:b7:de:
4b:52:e3:b3:f6:76:f5:e4:96:21:98:31:34:39:3d:
ae:4f:54:a8:f0:68:7b:70:3a:be:18:b0:31:f2:0a:
33:30:bf:8c:fe:a7:5e:4a:ca:f5:ee:0d:fc:88:09:
6b:57:8d:32:1e:5a:e9:46:fc:44:4c:42:8c:f0:42:
a9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1A:27:B0:EC:C0:6B:79:04:DA:12:12:F8:16:B7:09:19:67:76:30
X509v3 Authority Key Identifier:
keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f8:e7:c7:fa:58:7a:ad:e7:15:86:94:5b:55:32:45:1a:00:
cc:4e:f8:4d:6c:48:60:da:59:3b:b5:5c:c2:4f:ee:71:9d:1b:
05:52:b2:d3:28:b4:31:90:21:9b:20:94:0f:c8:15:d4:f5:72:
23:91:b2:39:1d:a7:ad:5f:a4:75:09:3b:d9:b0:b2:6b:5d:fc:
7e:91:3b:b1:71:d9:01:0a:3f:02:28:1b:4d:1e:d0:d7:12:ba:
d4:ed:de:6e:7a:a3:5c:c6:13:72:da:c9:4a:ed:13:0c:5c:70:
1e:d6:22:55:22:dd:d6:c5:98:40:29:2d:5c:e2:e1:de:3a:ff:
d7:54:6f:60:4f:d6:e2:0b:dd:3d:17:55:a3:63:0d:cc:4d:37:
95:44:0a:a5:31:31:e4:b6:ee:02:69:4e:31:8d:33:1b:24:fe:
7b:92:b5:b5:c7:a2:02:89:88:37:fb:87:3c:b2:70:1d:45:4c:
99:28:48:25:56:4a:e8:4c:63:a3:fc:df:ef:02:f5:ca:f9:89:
cf:19:d6:78:04:81:e4:f7:d8:17:33:0a:cc:ba:ee:42:38:6a:
da:5c:c5:00:5b:96:c2:b7:54:40:0d:38:ac:4f:cf:a0:ac:1a:
f2:f2:7b:36:54:2a:a9:6d:82:98:3f:65:63:f7:96:5a:9d:0e:
a2:d2:56:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2sQDlWX0OppnMHFPb8HvSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiYmUzYzZkOTk4MTE4MTljZWRkZGNkMjdlNGJlMjViYzBj
ZjUwNmYwHhcNMjUwNDI3MTAwMDMzWhcNMjUwNDI4MTAwMDMzWjAzMTEwLwYDVQQD
Eyg0ODFhMjdiMGVjYzA2Yjc5MDRkYTEyMTJmODE2YjcwOTE5Njc3NjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UFiX3fK4y+xVRlZcbjtAp189HSZ
ly/36gIT1XIQF9L0Zu5qT53yBOI0c8di7dVRAdrIB6wFs9yCJ6MAd/faJVva/OWM
J8nGnnLPDf9XxmaBsCGSN1O2iGRRGg4yJWTOESKSeGkLExFqOZjzcbnQigLRtnhO
o18B6ycmJVxLhmSKnkpffxRrsOQfCgm7ozF9y8o3SwfGlxcKAzhifZNUsKc1d//d
9e0eaLF+7iWWpu9fPvBy/0i6aqRm4SJwvKEtt95LUuOz9nb15JYhmDE0OT2uT1So
8Gh7cDq+GLAx8gozML+M/qdeSsr17g38iAlrV40yHlrpRvxETEKM8EKp4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgaJ7DswGt5BNoSEvgWtwkZZ3YwMB8GA1UdIwQY
MBaAFMu+PG2ZgRgZzt3c0n5L4lvAz1BvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84NDhjOGItMGU5Yy00ZDZlLTg3M2Ut
OGNmN2Q0NDkzMzU4LzEveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84NDhjOGItMGU5Yy00ZDZlLTg3M2UtOGNmN2Q0NDkzMzU4
LzEveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANvjnx/pY
eq3nFYaUW1UyRRoAzE74TWxIYNpZO7Vcwk/ucZ0bBVKy0yi0MZAhmyCUD8gV1PVy
I5GyOR2nrV+kdQk72bCya138fpE7sXHZAQo/AigbTR7Q1xK61O3ebnqjXMYTctrJ
Su0TDFxwHtYiVSLd1sWYQCktXOLh3jr/11RvYE/W4gvdPRdVo2MNzE03lUQKpTEx
5LbuAmlOMY0zGyT+e5K1tceiAomIN/uHPLJwHUVMmShIJVZK6Exjo/zf7wL1yvmJ
zxnWeASB5PfYFzMKzLruQjhq2lzFAFuWwrdUQA04rE/PoKwa8vJ7NlQqqW2CmD9l
Y/eWWp0OotJWPg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:30:06 2025 by rpki-client