Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/9275ff-ba9e-48e0-90a1-477270661163/1/fvUy67B-qFBrZTQwwEbsjUAvlos.mft
File: fvUy67B-qFBrZTQwwEbsjUAvlos.mft (raw, json)
Hash identifier: E5JRzgVAvs6MhAlGM6sgF8jQiTHF+YAjzVpqC/UmR4o=
Subject key identifier: 9C:FB:56:3F:4C:9B:28:E5:15:43:73:11:B3:6A:9A:19:D6:0C:4E:15
Authority key identifier: 7E:F5:32:EB:B0:7E:A8:50:6B:65:34:30:C0:46:EC:8D:40:2F:96:8B
Certificate issuer: /CN=7ef532ebb07ea8506b653430c046ec8d402f968b
Certificate serial: 019656B7EF11029C168A35647C96F0ACD883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fvUy67B-qFBrZTQwwEbsjUAvlos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/9275ff-ba9e-48e0-90a1-477270661163/1/fvUy67B-qFBrZTQwwEbsjUAvlos.mft
Manifest number: 1505
Signing time: Mon 21 Apr 2025 05:00:16 +0000
Manifest this update: Mon 21 Apr 2025 05:00:16 +0000
Manifest next update: Tue 22 Apr 2025 05:00:16 +0000
Files and hashes: 1: NPrFrz0cd9RwFflsGsCdDNMfAr0.roa (hash: jshLBr/kCe7qG8FrThuyDuL970cXBRKfV+X/BS5ZI9Q=)
2: fvUy67B-qFBrZTQwwEbsjUAvlos.crl (hash: m8prBhMJHSf2qoV3LeSMCcS+BGvYoy9hnf/a4IwYUQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/9275ff-ba9e-48e0-90a1-477270661163/1/fvUy67B-qFBrZTQwwEbsjUAvlos.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/9275ff-ba9e-48e0-90a1-477270661163/1/fvUy67B-qFBrZTQwwEbsjUAvlos.mft
rsync://rpki.ripe.net/repository/DEFAULT/fvUy67B-qFBrZTQwwEbsjUAvlos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b7:ef:11:02:9c:16:8a:35:64:7c:96:f0:ac:d8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ef532ebb07ea8506b653430c046ec8d402f968b
Validity
Not Before: Apr 21 05:00:16 2025 GMT
Not After : Apr 22 05:00:16 2025 GMT
Subject: CN=9cfb563f4c9b28e515437311b36a9a19d60c4e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:86:f5:34:7d:d3:26:48:07:22:32:06:99:b2:
d7:6c:de:5d:f6:ac:13:ed:a4:25:67:61:da:8e:54:
68:92:72:dc:05:be:73:3f:f2:0a:b4:4d:4e:e6:91:
09:f8:5f:b4:70:4a:44:b3:37:f6:91:19:35:9c:98:
0f:40:89:86:08:d4:1e:8a:fe:4e:52:da:f1:d3:aa:
c6:72:b3:75:d9:2c:63:c7:fa:c1:5d:9b:73:cd:31:
be:be:a8:9d:c2:13:d7:6e:39:72:02:a9:7e:a4:e0:
a5:3d:6e:cb:c9:e9:98:ef:f6:5d:38:cd:6e:b3:4e:
3f:49:dc:a3:22:f7:25:3d:fa:ef:62:cf:c4:34:76:
55:6f:63:28:d8:72:70:02:a0:47:c4:39:9f:c8:f4:
28:5c:dc:15:8c:92:9e:eb:0b:bb:33:f4:68:db:e4:
68:af:71:67:57:31:cb:29:52:31:2c:81:3b:f7:5f:
f3:4e:66:2a:fc:41:99:b2:14:52:18:4f:5d:63:f8:
db:7f:13:8e:10:fc:6b:bb:b5:bd:77:e8:21:01:7c:
8e:35:90:d0:8a:bd:69:e6:8f:e3:69:f5:ab:b3:15:
65:8e:03:4b:fd:45:8e:9a:c3:4d:5b:33:cd:41:45:
28:cb:f3:08:5a:e1:d4:f0:68:67:a1:09:68:4d:14:
ed:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FB:56:3F:4C:9B:28:E5:15:43:73:11:B3:6A:9A:19:D6:0C:4E:15
X509v3 Authority Key Identifier:
keyid:7E:F5:32:EB:B0:7E:A8:50:6B:65:34:30:C0:46:EC:8D:40:2F:96:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvUy67B-qFBrZTQwwEbsjUAvlos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9275ff-ba9e-48e0-90a1-477270661163/1/fvUy67B-qFBrZTQwwEbsjUAvlos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9275ff-ba9e-48e0-90a1-477270661163/1/fvUy67B-qFBrZTQwwEbsjUAvlos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4b:7f:a5:96:07:64:b1:4d:c8:4f:b3:46:11:3c:f8:03:06:
68:8a:2b:37:84:06:3a:76:9f:31:ca:20:84:9c:9a:90:81:1e:
83:f7:b9:ef:bf:15:72:9a:8a:4b:c6:71:e3:d1:c9:3a:43:be:
72:1a:ce:87:66:31:df:68:da:52:c5:79:12:69:97:a6:65:06:
69:7b:e7:91:b7:b2:8e:45:cb:56:43:cb:91:8a:d1:ea:3a:32:
86:74:6a:47:de:75:03:4d:b7:43:56:f2:70:8d:d5:f7:08:00:
0a:66:45:70:bb:b6:d6:53:ae:00:2a:14:4f:da:e0:b8:a8:56:
29:7f:c3:01:80:b5:bd:dc:5b:0e:6f:00:3e:b9:79:9a:75:00:
b2:ba:9c:ff:c3:e8:79:98:ec:59:d1:c1:eb:98:66:60:b2:f1:
87:02:aa:b5:ea:ff:64:c3:df:e3:ad:8f:9f:45:45:6f:b7:6f:
4a:bd:a3:0e:56:fb:e0:c0:21:62:6a:61:7f:8a:8e:2f:7b:3a:
f5:49:05:a5:c1:2d:cc:83:d6:e7:b5:6c:71:68:5d:bf:04:7f:
3f:34:b2:88:19:6a:0e:6b:cb:92:d9:b0:ba:7b:7d:14:55:c0:
fe:ea:42:65:30:0e:7b:eb:72:42:71:65:4d:a1:a2:dd:28:dd:
e3:86:b4:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWt+8RApwWijVkfJbwrNiDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZjUzMmViYjA3ZWE4NTA2YjY1MzQzMGMwNDZlYzhkNDAy
Zjk2OGIwHhcNMjUwNDIxMDUwMDE2WhcNMjUwNDIyMDUwMDE2WjAzMTEwLwYDVQQD
Eyg5Y2ZiNTYzZjRjOWIyOGU1MTU0MzczMTFiMzZhOWExOWQ2MGM0ZTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4b1NH3TJkgHIjIGmbLXbN5d9qwT
7aQlZ2HajlRoknLcBb5zP/IKtE1O5pEJ+F+0cEpEszf2kRk1nJgPQImGCNQeiv5O
Utrx06rGcrN12Sxjx/rBXZtzzTG+vqidwhPXbjlyAql+pOClPW7LyemY7/ZdOM1u
s04/SdyjIvclPfrvYs/ENHZVb2Mo2HJwAqBHxDmfyPQoXNwVjJKe6wu7M/Ro2+Ro
r3FnVzHLKVIxLIE791/zTmYq/EGZshRSGE9dY/jbfxOOEPxru7W9d+ghAXyONZDQ
ir1p5o/jafWrsxVljgNL/UWOmsNNWzPNQUUoy/MIWuHU8GhnoQloTRTtKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJz7Vj9MmyjlFUNzEbNqmhnWDE4VMB8GA1UdIwQY
MBaAFH71MuuwfqhQa2U0MMBG7I1AL5aLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnZVeTY3Qi1xRkJyWlRRd3dFYnNqVUF2bG9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85Mjc1ZmYtYmE5ZS00OGUwLTkwYTEt
NDc3MjcwNjYxMTYzLzEvZnZVeTY3Qi1xRkJyWlRRd3dFYnNqVUF2bG9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi85Mjc1ZmYtYmE5ZS00OGUwLTkwYTEtNDc3MjcwNjYxMTYz
LzEvZnZVeTY3Qi1xRkJyWlRRd3dFYnNqVUF2bG9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASkt/pZYH
ZLFNyE+zRhE8+AMGaIorN4QGOnafMcoghJyakIEeg/e5778VcpqKS8Zx49HJOkO+
chrOh2Yx32jaUsV5EmmXpmUGaXvnkbeyjkXLVkPLkYrR6joyhnRqR951A023Q1by
cI3V9wgACmZFcLu21lOuACoUT9rguKhWKX/DAYC1vdxbDm8APrl5mnUAsrqc/8Po
eZjsWdHB65hmYLLxhwKqter/ZMPf462Pn0VFb7dvSr2jDlb74MAhYmphf4qOL3s6
9UkFpcEtzIPW57VscWhdvwR/PzSyiBlqDmvLktmwunt9FFXA/upCZTAOe+tyQnFl
TaGi3Sjd44a0yA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:53 2025 by rpki-client