Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
File: 1-NPp2u22ukJraBbRyQ83kiO-dXY.mft (raw, json)
Hash identifier: BvajBRG/i+ovJ2qgF2ms5HX2KR9iPj5bFmCvlmSKQQE=
Subject key identifier: D0:92:66:C5:A0:4E:F0:68:27:E9:95:CE:8D:C2:2C:12:F6:D0:CD:01
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 01965793CCFE07D2F65A8763D01CB615D4AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 09:00:26 +0000
Manifest this update: Mon 21 Apr 2025 09:00:26 +0000
Manifest next update: Tue 22 Apr 2025 09:00:26 +0000
Files and hashes: 1: 1-NPp2u22ukJraBbRyQ83kiO-dXY.crl (hash: NfflsNj67090Fsec+Pfh0flvopBezlaDrwWhfKn8lHs=)
2: ApRmxFrIHgDq0uE514jDIHsfIeg.roa (hash: wwR59HFeyAkBUrzznAPWkLGe9T2sf1JpKPVH96BNgPU=)
3: LDvMOjEUxjVrAxBBKwXZ2WWq0ic.roa (hash: lSJbEniX1S5iq6pQApVmxDosGfWL1zz6nfIQW1JNw3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:cc:fe:07:d2:f6:5a:87:63:d0:1c:b6:15:d4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: Apr 21 09:00:26 2025 GMT
Not After : Apr 22 09:00:26 2025 GMT
Subject: CN=d09266c5a04ef06827e995ce8dc22c12f6d0cd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:57:66:5d:16:6f:c1:f7:13:f4:b3:c8:3c:
58:85:f3:8b:88:0a:b4:7f:6e:7f:84:b4:70:85:9c:
9e:16:30:9f:5c:0d:39:f7:bc:97:7b:36:33:e6:62:
ce:1a:ba:f2:99:55:85:fa:f6:d8:09:6f:ef:67:4e:
4f:67:b1:93:64:f4:b2:6f:cd:29:17:58:82:75:f4:
1b:2f:19:fe:13:7b:19:a8:99:5d:4b:1e:0b:3c:38:
6e:35:f7:e3:65:22:bc:f2:94:9c:5d:7f:06:26:2d:
4f:f4:ab:64:c2:51:18:36:15:8b:e6:64:44:6d:57:
b4:5b:3e:49:e4:2c:35:97:ff:4e:40:f3:61:ba:f0:
43:b2:77:b2:fd:4c:0c:00:72:74:e0:1c:e1:6a:52:
a3:48:db:34:63:29:18:79:11:79:85:50:88:33:6e:
1c:62:df:8c:cc:49:db:83:3f:fe:23:af:b4:d0:8a:
69:1c:ee:07:d7:4b:0b:0d:8f:94:6d:0d:ba:9e:a0:
8f:5a:82:2d:a3:25:a1:49:84:f9:6b:40:38:48:e4:
bd:5a:e7:c8:66:92:78:b9:17:6b:71:19:8b:d9:28:
fa:75:54:95:71:60:df:02:bc:b2:38:45:e4:77:75:
a5:7e:6f:ca:9f:bb:88:65:c3:84:1a:32:cc:4b:fc:
99:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:92:66:C5:A0:4E:F0:68:27:E9:95:CE:8D:C2:2C:12:F6:D0:CD:01
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2f:a4:57:91:22:86:66:08:a1:37:fa:6b:8b:89:f3:bb:99:
fb:02:bb:f3:18:6c:a9:ed:4e:ed:18:ab:0e:83:e6:02:6d:9d:
9e:15:46:b7:e1:bb:9a:fc:52:a1:5f:a3:2f:e9:04:48:61:d1:
48:aa:43:80:9e:d5:82:e2:a6:91:f9:a3:43:61:8b:69:27:3e:
29:b6:c8:24:24:b0:ee:ed:00:69:66:aa:ed:4a:87:99:db:4b:
d2:fb:1c:fa:fb:18:be:1b:12:10:f1:87:89:7c:88:81:43:4b:
c8:a3:03:0f:9b:c2:b4:bb:25:87:dd:29:4b:e5:a1:08:a9:b9:
f5:f5:47:e7:8a:18:68:06:e2:ed:a0:36:25:b7:b6:df:bf:7e:
24:8d:ef:96:a4:8a:17:2e:b8:f2:a6:cf:a7:11:3a:fd:2e:2f:
c5:90:5c:46:a6:5f:b3:c2:46:ab:6f:42:0e:30:2b:b7:58:65:
05:3f:2f:e2:36:60:b1:64:1a:4b:11:a8:4a:7c:1b:60:92:4f:
3f:a7:36:77:cd:1f:11:8f:20:dd:80:2d:a3:08:f9:5f:72:7c:
9a:29:46:38:6d:b9:34:f3:08:54:d7:94:23:bd:23:b7:be:27:
e1:8d:fe:09:6f:9d:96:17:e4:56:88:71:e3:0e:82:0d:29:3a:
8f:8d:c8:65
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZXk8z+B9L2Wodj0By2FdSrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZDNlOWRhZWRiNmJhNDI2YjY4MTZkMWM5MGYzNzkyMjNi
ZTc1NzYwHhcNMjUwNDIxMDkwMDI2WhcNMjUwNDIyMDkwMDI2WjAzMTEwLwYDVQQD
EyhkMDkyNjZjNWEwNGVmMDY4MjdlOTk1Y2U4ZGMyMmMxMmY2ZDBjZDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV1XZl0Wb8H3E/SzyDxYhfOLiAq0
f25/hLRwhZyeFjCfXA0597yXezYz5mLOGrrymVWF+vbYCW/vZ05PZ7GTZPSyb80p
F1iCdfQbLxn+E3sZqJldSx4LPDhuNffjZSK88pScXX8GJi1P9KtkwlEYNhWL5mRE
bVe0Wz5J5Cw1l/9OQPNhuvBDsney/UwMAHJ04BzhalKjSNs0YykYeRF5hVCIM24c
Yt+MzEnbgz/+I6+00IppHO4H10sLDY+UbQ26nqCPWoItoyWhSYT5a0A4SOS9WufI
ZpJ4uRdrcRmL2Sj6dVSVcWDfAryyOEXkd3Wlfm/Kn7uIZcOEGjLMS/yZCwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNCSZsWgTvBoJ+mVzo3CLBL20M0BMB8GA1UdIwQY
MBaAFPjT6drttrpCa2gW0ckPN5IjvnV2MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1OUHAydTIydWtKcmFCYlJ5UTgza2lPLWRYWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvMjI4ZjM0LTM1NjMtNDRkNC04ZmZi
LTZiMzI3M2YzNDRmMy8xLzEtTlBwMnUyMnVrSnJhQmJSeVE4M2tpTy1kWFkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA5LzIyOGYzNC0zNTYzLTQ0ZDQtOGZmYi02YjMyNzNmMzQ0
ZjMvMS8xLU5QcDJ1MjJ1a0pyYUJiUnlRODNraU8tZFhZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARS+k
V5EihmYIoTf6a4uJ87uZ+wK78xhsqe1O7RirDoPmAm2dnhVGt+G7mvxSoV+jL+kE
SGHRSKpDgJ7VguKmkfmjQ2GLaSc+KbbIJCSw7u0AaWaq7UqHmdtL0vsc+vsYvhsS
EPGHiXyIgUNLyKMDD5vCtLslh90pS+WhCKm59fVH54oYaAbi7aA2Jbe2379+JI3v
lqSKFy648qbPpxE6/S4vxZBcRqZfs8JGq29CDjArt1hlBT8v4jZgsWQaSxGoSnwb
YJJPP6c2d80fEY8g3YAtowj5X3J8milGOG25NPMIVNeUI70jt74n4Y3+CW+dlhfk
Vohx4w6CDSk6j43IZQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 11:29:41 2025 by rpki-client