Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
File: 75S8y9TC4P-PeqsEXhSjEfOy-f4.mft (raw, json)
Hash identifier: 4ZNPY4wniFSd0A3hzbEHkz+ACyNg7dksM0kCJeUGySs=
Subject key identifier: 34:04:1C:DB:20:FE:40:FD:8D:8D:24:69:C7:75:80:1D:22:6F:55:3E
Authority key identifier: EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE
Certificate issuer: /CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
Certificate serial: 0196594B2B605C3338226122934757A04D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
Manifest number: F2
Signing time: Mon 21 Apr 2025 17:00:20 +0000
Manifest this update: Mon 21 Apr 2025 17:00:20 +0000
Manifest next update: Tue 22 Apr 2025 17:00:20 +0000
Files and hashes: 1: 75S8y9TC4P-PeqsEXhSjEfOy-f4.crl (hash: CPAw9HjVxZ3pTgCPS0UOJ11uFVKhAi50gByuSCu08Ho=)
2: x_UGYHPi4KGbhasIbcCsyLRrLvc.roa (hash: TZUXAFaKqC1GafLAz2qnfFwZj2ZE2C3Lq2YMTRrQmKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 17:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:2b:60:5c:33:38:22:61:22:93:47:57:a0:4d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
Validity
Not Before: Apr 21 17:00:20 2025 GMT
Not After : Apr 22 17:00:20 2025 GMT
Subject: CN=34041cdb20fe40fd8d8d2469c775801d226f553e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:98:ac:cb:7a:7d:48:e8:94:f1:42:ce:c5:
2e:3e:36:80:b6:17:19:0a:70:c6:f8:9f:f0:a6:26:
f3:be:88:73:36:49:e1:1e:dc:21:ea:4e:bf:d4:1d:
8b:c2:3c:4a:32:5f:b4:0a:fd:a7:d5:db:2f:90:af:
95:49:d9:7e:4b:cb:ff:33:92:b2:f9:54:10:1b:d7:
ba:48:0a:39:c6:58:81:34:b5:f1:17:59:8e:23:5f:
e4:f6:b5:c1:df:91:46:49:be:98:59:b7:1d:b0:ef:
8b:84:17:5a:33:0e:44:06:05:47:33:2f:d2:5f:7d:
05:d0:d8:ba:33:90:9d:1d:ea:40:7c:3f:8e:5b:b9:
0b:9c:e7:1c:21:53:26:4e:52:1c:f0:fc:b2:1c:d6:
16:2c:3b:78:14:96:0c:3f:a0:f7:b8:8c:f0:5b:36:
98:27:d1:35:4b:9e:ba:73:a1:af:6d:e1:18:f4:e8:
e0:1b:d8:7b:64:7d:a8:87:79:30:c5:29:eb:da:ee:
4a:9e:42:85:5d:3f:77:7e:d0:94:d5:65:5a:b3:83:
13:7a:5a:bc:75:29:85:fb:95:e5:9b:4d:0c:f5:a2:
95:d9:f0:76:8a:5e:db:e1:9e:86:e5:4f:28:9d:67:
f5:43:f7:08:3f:f1:b6:34:2d:b5:8a:37:da:4f:60:
47:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:04:1C:DB:20:FE:40:FD:8D:8D:24:69:C7:75:80:1D:22:6F:55:3E
X509v3 Authority Key Identifier:
keyid:EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:36:dc:47:16:ae:1f:57:f4:ad:f9:4b:45:b6:cd:c7:9b:13:
b6:12:9b:e6:e5:df:30:44:f1:5b:59:ea:b3:9f:2f:2a:41:39:
9b:3b:af:76:1c:cd:69:a8:10:bf:d5:e3:dd:cb:3c:71:f3:72:
48:08:92:63:23:51:ea:80:d2:e7:3b:58:62:2f:b3:ad:05:1a:
b8:af:9f:da:aa:cc:a1:ca:61:5a:a2:08:2a:e3:d6:9f:e8:8b:
80:d7:1f:06:c5:ce:98:87:75:d3:e8:ac:4c:46:fc:bd:d8:2a:
b7:f8:6f:4f:78:92:51:d8:7f:f1:81:df:59:70:18:c3:bd:5b:
f9:cc:dc:30:16:57:2c:0e:18:e5:18:0d:d9:1f:ec:87:29:67:
97:fc:f1:90:10:a8:9f:6f:f0:32:47:48:7b:d7:34:cd:cc:02:
bd:1f:94:4e:b6:33:15:16:88:38:02:0b:a3:09:72:46:c6:d0:
9a:5a:ce:a2:05:cc:7e:91:6e:07:cc:ce:df:bf:34:39:96:16:
61:0c:c9:e5:47:76:57:6e:15:92:95:1b:3b:0c:aa:95:72:e0:
f4:74:e4:42:de:9f:a4:3e:bf:67:5d:4b:63:42:6b:15:69:aa:
9b:8b:46:4a:aa:37:7b:fd:00:73:e2:83:27:02:fd:8f:4a:65:
b8:e4:92:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZSytgXDM4ImEik0dXoE0cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmOTRiY2NiZDRjMmUwZmY4ZjdhYWIwNDVlMTRhMzExZjNi
MmY5ZmUwHhcNMjUwNDIxMTcwMDIwWhcNMjUwNDIyMTcwMDIwWjAzMTEwLwYDVQQD
EygzNDA0MWNkYjIwZmU0MGZkOGQ4ZDI0NjljNzc1ODAxZDIyNmY1NTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquqYrMt6fUjolPFCzsUuPjaAthcZ
CnDG+J/wpibzvohzNknhHtwh6k6/1B2LwjxKMl+0Cv2n1dsvkK+VSdl+S8v/M5Ky
+VQQG9e6SAo5xliBNLXxF1mOI1/k9rXB35FGSb6YWbcdsO+LhBdaMw5EBgVHMy/S
X30F0Ni6M5CdHepAfD+OW7kLnOccIVMmTlIc8PyyHNYWLDt4FJYMP6D3uIzwWzaY
J9E1S566c6GvbeEY9OjgG9h7ZH2oh3kwxSnr2u5KnkKFXT93ftCU1WVas4MTelq8
dSmF+5Xlm00M9aKV2fB2il7b4Z6G5U8onWf1Q/cIP/G2NC21ijfaT2BH/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQEHNsg/kD9jY0kacd1gB0ib1U+MB8GA1UdIwQY
MBaAFO+UvMvUwuD/j3qrBF4UoxHzsvn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzVTOHk5VEM0UC1QZXFzRVhoU2pFZk95LWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iZWMyNTMtOWMyOS00NzhjLTk3MTEt
Y2I2M2Q2ZmJiZmM3LzEvNzVTOHk5VEM0UC1QZXFzRVhoU2pFZk95LWY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iZWMyNTMtOWMyOS00NzhjLTk3MTEtY2I2M2Q2ZmJiZmM3
LzEvNzVTOHk5VEM0UC1QZXFzRVhoU2pFZk95LWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjbcRxau
H1f0rflLRbbNx5sTthKb5uXfMETxW1nqs58vKkE5mzuvdhzNaagQv9Xj3cs8cfNy
SAiSYyNR6oDS5ztYYi+zrQUauK+f2qrMocphWqIIKuPWn+iLgNcfBsXOmId10+is
TEb8vdgqt/hvT3iSUdh/8YHfWXAYw71b+czcMBZXLA4Y5RgN2R/shylnl/zxkBCo
n2/wMkdIe9c0zcwCvR+UTrYzFRaIOAILowlyRsbQmlrOogXMfpFuB8zO3780OZYW
YQzJ5Ud2V24VkpUbOwyqlXLg9HTkQt6fpD6/Z11LY0JrFWmqm4tGSqo3e/0Ac+KD
JwL9j0pluOSSDg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:19:45 2025 by rpki-client