Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json)
Hash identifier: VniWT1ukEF/Wdo4jQE9J+KeyzLqorknhNZgkrP9Sp70=
Subject key identifier: 38:F1:89:5A:21:32:98:7C:AE:A4:36:8E:F7:7E:E1:D0:8B:B8:59:92
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 01965B02B9F039AC3F58BC991B38152F4760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
Manifest number: 0180
Signing time: Tue 22 Apr 2025 01:00:27 +0000
Manifest this update: Tue 22 Apr 2025 01:00:27 +0000
Manifest next update: Wed 23 Apr 2025 01:00:27 +0000
Files and hashes: 1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: BrxtDBdrOxDWweAXdPC4bhlVzeCBjp4wpNz4GUDWsDs=)
2: 75Qx-kzPheTuRxMqDJeoXXXQrYg.roa (hash: ErepmH4DhXni27k1mjnFsC8LESHYORnx4kYupx2Zkhc=)
3: nya5VnmImUQCPczzWGzozyYmAoM.roa (hash: qg+/w/vLW7M/opQjKzbc9S+ktTmX4UXhPUmqd4d4i7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:02:b9:f0:39:ac:3f:58:bc:99:1b:38:15:2f:47:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Apr 22 01:00:27 2025 GMT
Not After : Apr 23 01:00:27 2025 GMT
Subject: CN=38f1895a2132987caea4368ef77ee1d08bb85992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:d2:45:8d:b2:ea:af:3b:8d:2d:d6:f5:d0:
69:84:4b:bc:e8:af:a9:81:b3:aa:31:12:ad:5e:34:
bb:2c:b4:70:a2:9c:c1:63:68:2f:f8:26:b4:a9:77:
10:e7:bd:6e:41:b2:e4:b6:10:ce:b3:cd:a4:6d:21:
12:32:57:ca:a0:c9:2c:8e:5f:41:d3:64:30:1f:f1:
19:f4:87:b1:1c:5c:3b:02:ac:a7:27:1e:72:ef:48:
81:a9:03:d3:99:8e:fc:d9:f2:36:a4:49:e3:98:58:
70:d4:71:97:07:6f:3a:ef:e0:df:70:76:44:54:e6:
9f:38:0e:e5:bf:c9:c9:b2:3c:66:4c:78:2e:7f:a2:
4e:02:38:f2:9a:2e:56:0e:31:3c:36:0d:56:d8:3d:
af:4e:99:42:bf:4c:de:1d:3d:2e:a7:01:ef:0d:30:
26:8f:d5:b1:d1:73:ca:23:10:3f:da:b6:76:f3:f7:
62:8d:01:65:d9:1d:ba:79:7d:28:03:eb:07:41:ab:
bc:2d:06:e4:b3:a3:8b:ef:2d:92:0f:8f:42:c3:7a:
17:37:28:bd:7b:f6:ca:ed:55:09:f3:b0:2d:46:0b:
80:47:84:f1:7c:66:c0:21:ac:2d:15:42:fb:7c:5b:
2d:e5:7f:90:ce:50:e9:66:a4:ac:11:36:5e:53:4b:
93:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F1:89:5A:21:32:98:7C:AE:A4:36:8E:F7:7E:E1:D0:8B:B8:59:92
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:79:39:b2:31:80:d9:6d:9d:4f:30:ef:43:47:c2:0a:ed:f5:
c3:84:90:90:52:11:56:ef:0c:96:2f:6b:43:df:af:9a:bd:51:
fe:e0:58:3b:86:92:4b:68:15:5b:82:e5:7c:5b:d1:d8:7f:f5:
ae:19:c8:1d:d7:06:3b:3e:43:7a:37:eb:2e:8b:17:7d:ef:b4:
72:57:04:06:a3:f4:93:42:9e:10:71:47:71:63:d4:35:67:98:
23:38:55:cf:99:6f:87:c6:44:cb:36:25:87:9b:98:a1:13:35:
40:9a:8f:86:af:f2:1b:da:d5:2c:58:95:7d:6a:17:32:ae:a2:
7a:ab:b5:96:96:7e:9b:a5:cd:c8:f3:8e:c6:ef:f3:40:7a:06:
e3:a8:be:0b:3c:57:4a:c8:4e:ea:db:67:0d:7b:e8:bf:8c:45:
81:11:17:8c:8c:0d:5f:ad:a7:c4:e9:b6:b3:1f:7a:d4:55:42:
b2:33:fe:f8:31:fe:92:fe:73:3f:c7:17:75:bc:97:4b:8d:8e:
fa:b3:3d:f8:b3:84:10:cc:9f:f5:75:ac:90:80:f3:48:33:b0:
7e:ee:dd:15:a8:c9:f5:25:32:36:e4:c3:bb:03:8d:9d:c5:f8:
84:0b:a9:1d:cd:6f:e4:7e:0b:ed:ca:94:f0:88:89:12:a7:5d:
d4:35:9b:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbArnwOaw/WLyZGzgVL0dgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw
YjVjN2MwHhcNMjUwNDIyMDEwMDI3WhcNMjUwNDIzMDEwMDI3WjAzMTEwLwYDVQQD
EygzOGYxODk1YTIxMzI5ODdjYWVhNDM2OGVmNzdlZTFkMDhiYjg1OTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2LSRY2y6q87jS3W9dBphEu86K+p
gbOqMRKtXjS7LLRwopzBY2gv+Ca0qXcQ571uQbLkthDOs82kbSESMlfKoMksjl9B
02QwH/EZ9IexHFw7AqynJx5y70iBqQPTmY782fI2pEnjmFhw1HGXB2867+DfcHZE
VOafOA7lv8nJsjxmTHguf6JOAjjymi5WDjE8Ng1W2D2vTplCv0zeHT0upwHvDTAm
j9Wx0XPKIxA/2rZ28/dijQFl2R26eX0oA+sHQau8LQbks6OL7y2SD49Cw3oXNyi9
e/bK7VUJ87AtRguAR4TxfGbAIawtFUL7fFst5X+QzlDpZqSsETZeU0uTUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjxiVohMph8rqQ2jvd+4dCLuFmSMB8GA1UdIwQY
MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt
MWY1NDMxZTJhNWFmLzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm
LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHk5sjGA
2W2dTzDvQ0fCCu31w4SQkFIRVu8Mli9rQ9+vmr1R/uBYO4aSS2gVW4LlfFvR2H/1
rhnIHdcGOz5DejfrLosXfe+0clcEBqP0k0KeEHFHcWPUNWeYIzhVz5lvh8ZEyzYl
h5uYoRM1QJqPhq/yG9rVLFiVfWoXMq6iequ1lpZ+m6XNyPOOxu/zQHoG46i+CzxX
SshO6ttnDXvov4xFgREXjIwNX62nxOm2sx961FVCsjP++DH+kv5zP8cXdbyXS42O
+rM9+LOEEMyf9XWskIDzSDOwfu7dFajJ9SUyNuTDuwONncX4hAupHc1v5H4L7cqU
8IiJEqdd1DWbzA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:50 2025 by rpki-client