Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
File: P5YkCZj85BJMPLTfusuw7RYYQFo.mft (raw, json)
Hash identifier: aA9HXcf//DXmwnHcXp6Gx8hz1VDfGh4tq/RY83rKidE=
Subject key identifier: CA:DE:B1:51:67:C5:2B:93:20:F4:DE:68:2D:FD:1B:6E:A4:7F:8E:35
Authority key identifier: 3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
Certificate issuer: /CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Certificate serial: 01967B325CCEBCF8B9917618C2B6EBC117B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 07:00:20 +0000
Manifest this update: Mon 28 Apr 2025 07:00:20 +0000
Manifest next update: Tue 29 Apr 2025 07:00:20 +0000
Files and hashes: 1: P5YkCZj85BJMPLTfusuw7RYYQFo.crl (hash: AE9zTiOA5FqQQz3959+FYt53PTpQKDgCc+MNbeZgpMA=)
2: UXaxt-b39pINfZ1Y1ojLfS7SwMw.roa (hash: IC6xINcQpVjUgVum+7114aRM3S8XEivwvk3gYzMafvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:5c:ce:bc:f8:b9:91:76:18:c2:b6:eb:c1:17:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Validity
Not Before: Apr 28 07:00:20 2025 GMT
Not After : Apr 29 07:00:20 2025 GMT
Subject: CN=cadeb15167c52b9320f4de682dfd1b6ea47f8e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:40:ac:f3:e7:9e:93:d8:0a:07:57:d7:16:c0:
0b:60:8f:ad:92:09:23:61:ea:0e:b3:77:7f:20:98:
e6:0c:00:69:2a:67:1c:9a:9c:fd:aa:3f:f2:6e:84:
12:92:df:9d:8d:60:bc:f8:29:29:2e:ca:b4:6e:8b:
09:3e:69:47:d3:19:7e:e3:49:09:55:78:29:93:b5:
1b:53:5b:b6:45:2e:da:ce:6a:c7:70:69:1b:62:3d:
42:74:73:29:90:fd:a4:41:39:a7:e2:b2:fd:ce:ff:
bb:1b:48:5d:2b:e4:37:14:83:41:b3:34:31:ae:cb:
79:00:16:90:51:db:bd:0d:78:7e:2b:1c:82:be:b9:
ac:33:7b:af:4c:04:63:39:6c:93:ce:45:7b:2e:e0:
24:5b:2c:74:82:b8:17:22:96:34:9b:7f:6e:9a:7a:
f8:17:81:dc:7c:64:0a:03:e5:d3:65:d7:3f:a1:39:
cc:71:fb:2a:59:70:06:49:00:1e:30:9c:73:ff:96:
12:9f:27:27:e9:d8:54:50:a5:47:4f:2e:e0:e6:f3:
a7:f4:fa:53:da:93:83:cd:9a:67:cb:9e:43:76:f6:
77:94:3a:c7:d2:1e:fa:53:13:f7:ae:fd:55:9c:8c:
85:e4:3b:93:ee:51:97:a9:de:60:ab:d3:62:ba:ca:
44:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DE:B1:51:67:C5:2B:93:20:F4:DE:68:2D:FD:1B:6E:A4:7F:8E:35
X509v3 Authority Key Identifier:
keyid:3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3b:fa:a6:6b:d1:a1:c9:38:1a:6d:5f:8b:00:41:ea:09:ee:
70:a2:8c:18:ad:62:da:07:e8:ae:82:65:fa:68:dc:ed:34:14:
ce:9c:b6:4d:a2:64:d5:35:07:5f:12:e0:7f:3f:83:38:e7:7b:
71:d9:59:6b:b6:9a:72:8a:87:c8:c5:c4:af:fa:70:99:2c:e5:
15:70:e7:95:00:68:95:58:29:77:fa:b1:df:a5:d4:ea:93:33:
34:39:14:b9:d6:60:09:3c:62:87:36:09:51:97:15:7d:08:3b:
d6:6b:83:fd:33:4e:30:c0:61:7b:dd:13:11:79:b4:78:e7:b2:
f0:7a:59:7f:97:2d:06:bf:2e:ac:d9:db:a1:2e:37:1a:28:9b:
50:a8:11:d4:a2:b6:eb:54:cd:c5:cc:6e:03:33:5e:33:be:2d:
a8:c2:14:2c:71:d4:1f:f9:16:6e:9c:94:19:ec:ef:cc:86:67:
95:4d:35:13:7b:fb:10:c4:af:e7:97:0d:62:4e:83:1d:5c:44:
9a:11:e9:d3:24:16:ee:7a:fb:ae:ad:e5:2a:13:ae:4a:c6:cd:
88:fd:10:41:38:c2:c6:2b:9a:6a:08:6e:1a:53:a3:9c:ed:e2:
f1:5d:f6:bf:63:b7:bf:41:3b:24:ab:9c:14:b6:f6:ca:19:de:
01:75:be:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ7MlzOvPi5kXYYwrbrwRe5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOTYyNDA5OThmY2U0MTI0YzNjYjRkZmJhY2JiMGVkMTYx
ODQwNWEwHhcNMjUwNDI4MDcwMDIwWhcNMjUwNDI5MDcwMDIwWjAzMTEwLwYDVQQD
EyhjYWRlYjE1MTY3YzUyYjkzMjBmNGRlNjgyZGZkMWI2ZWE0N2Y4ZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kCs8+eek9gKB1fXFsALYI+tkgkj
YeoOs3d/IJjmDABpKmccmpz9qj/yboQSkt+djWC8+CkpLsq0bosJPmlH0xl+40kJ
VXgpk7UbU1u2RS7azmrHcGkbYj1CdHMpkP2kQTmn4rL9zv+7G0hdK+Q3FINBszQx
rst5ABaQUdu9DXh+KxyCvrmsM3uvTARjOWyTzkV7LuAkWyx0grgXIpY0m39umnr4
F4HcfGQKA+XTZdc/oTnMcfsqWXAGSQAeMJxz/5YSnycn6dhUUKVHTy7g5vOn9PpT
2pODzZpny55DdvZ3lDrH0h76UxP3rv1VnIyF5DuT7lGXqd5gq9NiuspEqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMresVFnxSuTIPTeaC39G26kf441MB8GA1UdIwQY
MBaAFD+WJAmY/OQSTDy037rLsO0WGEBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDVZa0Naajg1QkpNUExUZnVzdXc3UllZUUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82MGZlYzctMGI1MS00NDQ2LTliNWQt
Yzc0MWMyN2I0ZTIyLzEvUDVZa0Naajg1QkpNUExUZnVzdXc3UllZUUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82MGZlYzctMGI1MS00NDQ2LTliNWQtYzc0MWMyN2I0ZTIy
LzEvUDVZa0Naajg1QkpNUExUZnVzdXc3UllZUUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYjv6pmvR
ock4Gm1fiwBB6gnucKKMGK1i2gforoJl+mjc7TQUzpy2TaJk1TUHXxLgfz+DOOd7
cdlZa7aacoqHyMXEr/pwmSzlFXDnlQBolVgpd/qx36XU6pMzNDkUudZgCTxihzYJ
UZcVfQg71muD/TNOMMBhe90TEXm0eOey8HpZf5ctBr8urNnboS43GiibUKgR1KK2
61TNxcxuAzNeM74tqMIULHHUH/kWbpyUGezvzIZnlU01E3v7EMSv55cNYk6DHVxE
mhHp0yQW7nr7rq3lKhOuSsbNiP0QQTjCxiuaaghuGlOjnO3i8V32v2O3v0E7JKuc
FLb2yhneAXW+FQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:14:37 2025 by rpki-client