Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
File: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft (raw, json)
Hash identifier: Q3ZMhBzxmwxwe1WKt7I1muYmHklNOdza8jLDoADizxw=
Subject key identifier: 94:59:45:D8:A8:C5:EF:CF:DE:1A:85:FA:AD:F0:DA:E2:EB:2C:28:77
Authority key identifier: D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
Certificate issuer: /CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Certificate serial: 01965B034196A859C5F2E5AA00B85CB5BF02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
Manifest number: F6
Signing time: Tue 22 Apr 2025 01:01:02 +0000
Manifest this update: Tue 22 Apr 2025 01:01:02 +0000
Manifest next update: Wed 23 Apr 2025 01:01:02 +0000
Files and hashes: 1: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl (hash: V2gG/iWb4sQ7JL3iRDzaR4iUb5uXdxB8XvqXapKCQHo=)
2: CG9KoNDYQYANjw8jkpEMfgifFYg.roa (hash: a/8GNnkxdjWR/BpDGvDmUNc0bdNHqrlCI9YD9Z7wQW0=)
3: cZUoXKNyODDdYDJJ689IFt9l7Fg.roa (hash: 2dlPle1Oc1/h21vw5YqVsut1uxLZie17Tr86ybW+M80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:41:96:a8:59:c5:f2:e5:aa:00:b8:5c:b5:bf:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Validity
Not Before: Apr 22 01:01:02 2025 GMT
Not After : Apr 23 01:01:02 2025 GMT
Subject: CN=945945d8a8c5efcfde1a85faadf0dae2eb2c2877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:22:44:59:d3:83:c9:cf:b5:f8:1e:db:94:45:
bf:33:6c:a7:a7:17:1b:7b:e1:61:3a:64:7b:e5:23:
30:bf:61:13:8c:ed:55:42:81:98:3c:0b:53:b5:31:
d4:fc:7d:e4:eb:a2:77:2d:af:7b:f1:d8:67:9f:03:
aa:43:7f:ad:23:21:94:a4:76:73:8a:3e:12:51:dc:
50:92:f3:b6:03:0e:56:74:0a:46:a9:39:52:b5:11:
2e:2d:ba:9a:77:68:4a:5a:8c:23:09:62:d1:11:b8:
aa:cb:7f:1a:8d:99:88:7c:9a:24:c2:20:16:74:99:
3d:17:97:00:a8:c1:fe:89:66:2e:58:3b:38:a3:ce:
6f:16:42:05:9f:8f:d9:f5:f0:12:90:26:a5:11:38:
63:7d:c2:de:56:ef:bc:ac:70:a8:0b:03:58:c9:d4:
ac:fb:8f:f1:a8:e4:b9:94:79:b9:5a:ab:fe:28:2b:
31:b6:ae:7f:ac:23:07:22:9b:b1:fe:20:60:1c:c2:
5c:d0:df:9a:2a:8d:99:0e:a5:d9:84:6e:24:d7:5c:
9d:13:fd:8d:3f:76:99:23:e9:fb:bb:b3:b1:78:b6:
3a:7c:50:05:27:93:3f:30:6d:ce:0e:f4:58:7d:75:
f7:2c:85:79:a2:b1:79:2b:b1:c9:e1:5b:f0:37:50:
13:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:59:45:D8:A8:C5:EF:CF:DE:1A:85:FA:AD:F0:DA:E2:EB:2C:28:77
X509v3 Authority Key Identifier:
keyid:D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4c:9a:6f:6e:65:74:ff:29:a0:d7:88:0d:2e:18:5a:97:30:
7c:7d:0b:23:23:28:e7:97:62:4f:68:d4:3d:bc:4a:62:a7:6b:
19:5c:2d:07:fb:c6:f7:7c:12:5e:8f:c5:c8:70:29:70:75:c4:
ab:08:9a:a3:24:a1:3c:ea:55:39:e8:73:5d:81:1d:d4:fc:a7:
da:1f:20:3a:59:30:f9:1a:5e:a2:8f:f2:45:d8:d1:11:23:7c:
fa:a5:a6:a9:47:00:09:ea:c6:fb:da:4e:a2:6a:67:14:7d:ff:
a5:35:76:68:ea:0d:8a:67:e2:d8:45:9d:6b:eb:35:00:1b:b3:
80:a0:c5:b2:24:b7:2f:61:d3:a6:62:2f:78:37:0e:75:09:63:
e2:57:44:b9:b3:32:a9:a2:68:d9:ca:e3:89:42:8e:ed:04:6e:
b3:04:79:8d:2d:29:34:7e:d8:e9:1f:7e:11:73:bb:6a:16:5b:
9a:46:92:cb:5c:a5:9f:9d:39:52:5b:34:78:7d:51:64:fc:06:
87:36:c1:46:d8:a1:ef:92:42:2d:eb:1b:d9:5d:ad:a5:86:e3:
27:66:7e:d8:0c:da:6e:fa:4b:7e:54:e2:75:cc:9d:64:83:3c:
e9:da:87:6b:da:08:fe:64:94:7f:6f:a5:9f:84:eb:9b:6d:c8:
06:c0:1e:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbA0GWqFnF8uWqALhctb8CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ODQzY2Q2MWQ4ZmZmMWY2Y2ZiMzgwYWUyNDNiZTBiMWQ5
NDM1YWIwHhcNMjUwNDIyMDEwMTAyWhcNMjUwNDIzMDEwMTAyWjAzMTEwLwYDVQQD
Eyg5NDU5NDVkOGE4YzVlZmNmZGUxYTg1ZmFhZGYwZGFlMmViMmMyODc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiJEWdODyc+1+B7blEW/M2ynpxcb
e+FhOmR75SMwv2ETjO1VQoGYPAtTtTHU/H3k66J3La978dhnnwOqQ3+tIyGUpHZz
ij4SUdxQkvO2Aw5WdApGqTlStREuLbqad2hKWowjCWLREbiqy38ajZmIfJokwiAW
dJk9F5cAqMH+iWYuWDs4o85vFkIFn4/Z9fASkCalEThjfcLeVu+8rHCoCwNYydSs
+4/xqOS5lHm5Wqv+KCsxtq5/rCMHIpux/iBgHMJc0N+aKo2ZDqXZhG4k11ydE/2N
P3aZI+n7u7OxeLY6fFAFJ5M/MG3ODvRYfXX3LIV5orF5K7HJ4VvwN1ATHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRZRdioxe/P3hqF+q3w2uLrLCh3MB8GA1UdIwQY
MBaAFNaEPNYdj/8fbPs4CuJDvgsdlDWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW9RODFoMlBfeDlzLXpnSzRrTy1DeDJVTmFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80NGNjN2MtYTZiNS00ZGE2LWFmOGUt
ZWVjZDA5ZDkwYzY1LzEvMW9RODFoMlBfeDlzLXpnSzRrTy1DeDJVTmFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi80NGNjN2MtYTZiNS00ZGE2LWFmOGUtZWVjZDA5ZDkwYzY1
LzEvMW9RODFoMlBfeDlzLXpnSzRrTy1DeDJVTmFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0yab25l
dP8poNeIDS4YWpcwfH0LIyMo55diT2jUPbxKYqdrGVwtB/vG93wSXo/FyHApcHXE
qwiaoyShPOpVOehzXYEd1Pyn2h8gOlkw+Rpeoo/yRdjRESN8+qWmqUcACerG+9pO
ompnFH3/pTV2aOoNimfi2EWda+s1ABuzgKDFsiS3L2HTpmIveDcOdQlj4ldEubMy
qaJo2crjiUKO7QRuswR5jS0pNH7Y6R9+EXO7ahZbmkaSy1yln505Uls0eH1RZPwG
hzbBRtih75JCLesb2V2tpYbjJ2Z+2AzabvpLflTidcydZIM86dqHa9oI/mSUf2+l
n4Trm23IBsAedA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:32:33 2025 by rpki-client