Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json)
Hash identifier: awzOxHv/S8CRLy92LbRX9n2CzxsQZePBCZtj8IfrmXY=
Subject key identifier: C4:14:74:BC:C9:EC:43:B2:74:E7:91:7E:5A:FE:97:F4:20:AA:D9:4F
Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Certificate serial: 01965FBB590FBA16050CA66508E3D68D1DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
Manifest number: 150A
Signing time: Tue 22 Apr 2025 23:00:35 +0000
Manifest this update: Tue 22 Apr 2025 23:00:35 +0000
Manifest next update: Wed 23 Apr 2025 23:00:35 +0000
Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: 4EL7AQmpIBNyjrhE44V8yQCj3UB6rgzIsARls21vQqU=)
2: Om_TmuMO8XG3pBM8gxAFde2dWMw.roa (hash: FbjCGDaIAC98JtiXhpiG2iZAAlR6dEBdv+iVw78RCUo=)
3: VZwnOlrac1s2Zb9Y96cCEjN1ihI.roa (hash: VbMoQoBhuySW3f8b4z7vMMYAoL+G6xfxVZmjVv4iceM=)
4: pY1evXi7L-RhS1kANnlGqZjoa4g.roa (hash: MHMoXswoxGYwux8eQ8dSbb24gK19/XF6bugh3G8kZT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:bb:59:0f:ba:16:05:0c:a6:65:08:e3:d6:8d:1d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Validity
Not Before: Apr 22 23:00:35 2025 GMT
Not After : Apr 23 23:00:35 2025 GMT
Subject: CN=c41474bcc9ec43b274e7917e5afe97f420aad94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:a1:27:0b:5b:be:63:11:54:ae:9a:22:86:
53:11:bb:0b:6f:2f:dd:2c:d3:6c:26:d4:fa:5f:f1:
b3:8d:a6:55:ad:42:7c:78:8b:ed:ac:46:bf:37:4f:
ef:20:3f:e5:06:16:f8:88:32:da:d3:8b:60:25:a1:
c1:a1:9c:c8:ef:9e:c6:0c:ac:e5:91:07:9c:cc:1d:
46:21:fe:e7:26:91:c5:7b:fa:0a:a3:21:03:16:24:
2e:e6:30:74:25:b9:4a:a7:0e:9a:6c:de:ea:34:6a:
86:72:6e:14:3e:78:97:76:93:43:43:bd:f6:dd:fa:
27:bc:cc:da:6d:a6:eb:6d:84:08:76:19:57:c2:65:
a4:f9:47:dc:fb:f2:d2:7a:76:51:e9:ab:1a:40:41:
63:73:f9:62:a6:64:d1:bf:7a:7c:7e:10:45:4b:3f:
3d:9b:78:77:5c:7b:eb:80:3e:5e:26:91:4a:a8:b8:
84:68:74:12:70:e8:32:66:60:06:f3:7e:ca:49:8e:
91:60:96:ee:9c:4d:b6:1c:b4:dd:90:76:d6:e2:6d:
f9:70:2e:e9:91:f2:16:a8:e3:1d:51:c8:e4:b8:9b:
ed:1d:65:1c:9a:3f:f3:ff:a0:90:df:05:af:66:ae:
b5:51:bc:1e:93:37:50:e5:14:e2:56:19:6f:3f:c6:
c6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:14:74:BC:C9:EC:43:B2:74:E7:91:7E:5A:FE:97:F4:20:AA:D9:4F
X509v3 Authority Key Identifier:
keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c5:3e:0f:87:6d:15:ae:c0:a3:75:33:d4:3f:b5:6b:47:cf:
bb:a7:a4:66:27:39:23:ac:9b:ea:9a:be:55:ce:e0:e3:5d:9e:
fb:8e:2e:04:3e:75:de:e2:af:7b:fb:30:24:a5:73:3c:25:ee:
16:fa:43:84:3c:64:69:49:12:e2:05:52:7f:6b:a7:ad:89:c0:
ac:2c:d7:54:a5:10:e7:c9:ff:60:59:cd:e1:18:8c:28:7e:8a:
1a:51:5e:53:56:6a:48:8a:e9:20:69:82:47:93:1d:0e:e4:03:
45:c1:64:b2:ce:5d:9e:6c:a1:b2:96:22:d5:d1:1a:ea:b9:d2:
2f:91:04:c3:9f:e1:a7:f4:6c:f9:46:ea:1e:62:6b:da:72:b5:
7e:a4:4c:eb:a1:60:16:b9:19:a5:b3:b9:dd:4d:bd:6e:d8:76:
dd:e9:85:2a:7b:59:e4:c2:af:14:c9:37:d1:cf:fd:62:b3:d3:
87:71:c5:b2:d5:8e:37:1d:e6:f9:0e:60:3a:b3:17:cf:16:20:
6e:ed:83:9f:3f:8a:29:4c:ca:48:86:8c:3e:fc:5e:f0:7d:10:
01:b5:48:ca:1c:f2:ed:6d:35:0c:95:dc:e5:c4:6d:0b:c2:e6:
3b:7b:b3:19:50:a7:0f:d5:d5:bc:0c:94:a4:53:48:ca:29:67:
ac:44:13:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZfu1kPuhYFDKZlCOPWjR3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZjdmMTZiMDVhMTEyMzE1MWE2NzdhNDdhYzJkOGQ5MDYx
ZGYzOTAwHhcNMjUwNDIyMjMwMDM1WhcNMjUwNDIzMjMwMDM1WjAzMTEwLwYDVQQD
EyhjNDE0NzRiY2M5ZWM0M2IyNzRlNzkxN2U1YWZlOTdmNDIwYWFkOTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyGhJwtbvmMRVK6aIoZTEbsLby/d
LNNsJtT6X/GzjaZVrUJ8eIvtrEa/N0/vID/lBhb4iDLa04tgJaHBoZzI757GDKzl
kQeczB1GIf7nJpHFe/oKoyEDFiQu5jB0JblKpw6abN7qNGqGcm4UPniXdpNDQ732
3fonvMzababrbYQIdhlXwmWk+Ufc+/LSenZR6asaQEFjc/lipmTRv3p8fhBFSz89
m3h3XHvrgD5eJpFKqLiEaHQScOgyZmAG837KSY6RYJbunE22HLTdkHbW4m35cC7p
kfIWqOMdUcjkuJvtHWUcmj/z/6CQ3wWvZq61UbwekzdQ5RTiVhlvP8bGkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQUdLzJ7EOydOeRflr+l/QgqtlPMB8GA1UdIwQY
MBaAFNf38WsFoRIxUaZ3pHrC2NkGHfOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYt
NmNiZTk0OTUzMmU0LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYtNmNiZTk0OTUzMmU0
LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfsU+D4dt
Fa7Ao3Uz1D+1a0fPu6ekZic5I6yb6pq+Vc7g412e+44uBD513uKve/swJKVzPCXu
FvpDhDxkaUkS4gVSf2unrYnArCzXVKUQ58n/YFnN4RiMKH6KGlFeU1ZqSIrpIGmC
R5MdDuQDRcFkss5dnmyhspYi1dEa6rnSL5EEw5/hp/Rs+UbqHmJr2nK1fqRM66Fg
FrkZpbO53U29bth23emFKntZ5MKvFMk30c/9YrPTh3HFstWONx3m+Q5gOrMXzxYg
bu2Dnz+KKUzKSIaMPvxe8H0QAbVIyhzy7W01DJXc5cRtC8LmO3uzGVCnD9XVvAyU
pFNIyilnrEQT9g==
-----END CERTIFICATE-----
Generated at Wed Apr 23 02:18:08 2025 by rpki-client