Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
File: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json)
Hash identifier: apcSmonA+GPwLVpYSCcbYxgNoBn8fWmjrjuLHFsJX6w=
Subject key identifier: FA:BC:70:06:FA:55:BC:37:C3:8F:4F:15:25:2A:A5:34:B5:0F:F7:11
Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
Certificate issuer: /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Certificate serial: 019655DCD41543FE5AE8DC49864BADCDCF7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
Manifest number: 04F1
Signing time: Mon 21 Apr 2025 01:00:57 +0000
Manifest this update: Mon 21 Apr 2025 01:00:57 +0000
Manifest next update: Tue 22 Apr 2025 01:00:57 +0000
Files and hashes: 1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: q7o0QQTcmrs2henByDrRKnCs6c3tY85g4WwMGHsv9yo=)
2: iM-HUbcoELfWgS-lPVnMpAjn2tU.roa (hash: FOA+HRQLHHEYU2ci+E8byaoG9+so0NlIhMx5zOmbRnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:d4:15:43:fe:5a:e8:dc:49:86:4b:ad:cd:cf:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Validity
Not Before: Apr 21 01:00:57 2025 GMT
Not After : Apr 22 01:00:57 2025 GMT
Subject: CN=fabc7006fa55bc37c38f4f15252aa534b50ff711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:55:e8:b3:29:ff:4c:02:0d:1c:28:fd:30:a5:
fc:d7:fd:20:56:00:54:a7:07:2b:5c:21:ec:d7:46:
74:88:91:80:69:b9:e3:6d:7e:a4:c2:d6:9f:38:2f:
49:66:a5:13:b7:25:97:6b:51:d3:0c:ac:74:1c:57:
cd:58:6a:6f:82:cf:69:84:69:81:9f:89:ec:aa:d1:
0c:92:69:0e:b7:ac:e0:09:2d:f5:dc:77:72:34:e5:
73:e4:49:1a:a0:e7:96:4d:6e:d8:e8:1f:29:ae:12:
87:a0:e6:cc:32:19:c3:d6:1f:a3:8d:e2:6f:e7:5b:
ac:c1:40:03:06:e4:4c:57:8b:ee:7a:e7:ce:11:34:
b2:41:48:73:35:04:be:6f:bd:09:92:0c:28:f6:c4:
8e:a4:6e:a5:98:d5:61:66:15:7d:57:76:68:ed:0d:
c2:4d:a8:9e:ff:05:a4:a6:83:ab:0b:f5:31:86:e4:
3f:2d:33:2f:61:9b:f3:e9:05:2b:c2:e2:31:4b:d0:
42:37:57:9f:91:83:8b:89:01:ef:60:13:7b:3d:27:
c8:e1:62:e4:9b:48:f0:8e:ed:76:c1:5d:07:e4:27:
07:18:02:82:43:84:01:1c:f1:d9:4d:ba:b1:f5:87:
53:35:7f:68:ba:8a:70:2e:29:49:6d:57:27:ca:ba:
52:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BC:70:06:FA:55:BC:37:C3:8F:4F:15:25:2A:A5:34:B5:0F:F7:11
X509v3 Authority Key Identifier:
keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f8:d2:4f:5a:9d:95:03:00:b2:48:63:22:74:29:20:cd:4d:
9f:ff:99:e6:b3:61:62:8c:24:1a:20:e4:cb:49:6a:6d:d4:86:
df:58:0c:f4:fa:dc:d1:5f:c6:1c:9c:e2:44:68:b2:31:62:dc:
e9:cf:2c:83:d3:23:8c:6f:fe:e9:cc:d8:0d:ca:bb:dc:2c:3a:
0c:bf:f4:b5:88:ab:b2:31:a5:fc:95:d8:11:1e:32:b1:3d:58:
6a:4c:ff:79:37:3e:13:ce:6b:fb:03:01:7e:02:1c:32:dd:2e:
08:cb:5e:b2:97:fc:c3:ba:62:6f:0d:44:b9:9e:f0:44:c2:8c:
44:fd:a6:de:66:f2:5a:43:3c:c0:09:a5:6f:2e:fc:e9:e8:6c:
d4:6c:46:75:3a:db:cc:30:ae:71:c5:de:d7:b8:14:c8:33:88:
62:09:78:c6:bf:09:6a:9d:e0:1b:e4:5d:7e:ae:da:75:f0:1c:
e5:b8:c3:26:19:51:b4:0f:85:0e:35:60:de:b9:d8:a4:96:1f:
f3:73:6f:07:17:3e:04:f8:f4:ab:1a:66:76:ea:c6:39:4d:a1:
6d:f0:68:94:86:6b:d7:04:4c:70:71:e6:66:10:c3:1f:ef:7f:
d1:fb:62:62:0d:8f:21:92:32:c7:de:dc:48:ee:65:0e:93:7f:
7e:fa:b6:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3NQVQ/5a6NxJhkutzc98MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZTY5ODVjOGRhYzhjYzY3NzJiN2ZkMzljM2E3NTY0NGMy
NWEyNWEwHhcNMjUwNDIxMDEwMDU3WhcNMjUwNDIyMDEwMDU3WjAzMTEwLwYDVQQD
EyhmYWJjNzAwNmZhNTViYzM3YzM4ZjRmMTUyNTJhYTUzNGI1MGZmNzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1Xosyn/TAINHCj9MKX81/0gVgBU
pwcrXCHs10Z0iJGAabnjbX6kwtafOC9JZqUTtyWXa1HTDKx0HFfNWGpvgs9phGmB
n4nsqtEMkmkOt6zgCS313HdyNOVz5EkaoOeWTW7Y6B8prhKHoObMMhnD1h+jjeJv
51uswUADBuRMV4vueufOETSyQUhzNQS+b70Jkgwo9sSOpG6lmNVhZhV9V3Zo7Q3C
Taie/wWkpoOrC/UxhuQ/LTMvYZvz6QUrwuIxS9BCN1efkYOLiQHvYBN7PSfI4WLk
m0jwju12wV0H5CcHGAKCQ4QBHPHZTbqx9YdTNX9ouopwLilJbVcnyrpSCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPq8cAb6Vbw3w49PFSUqpTS1D/cRMB8GA1UdIwQY
MBaAFEXmmFyNrIzGdyt/05w6dWRMJaJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NGM0YTctMzYxYS00ODI5LWE0NjIt
NjkyNDI1NzUzMGIwLzEvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82NGM0YTctMzYxYS00ODI5LWE0NjItNjkyNDI1NzUzMGIw
LzEvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfjST1qd
lQMAskhjInQpIM1Nn/+Z5rNhYowkGiDky0lqbdSG31gM9Prc0V/GHJziRGiyMWLc
6c8sg9MjjG/+6czYDcq73Cw6DL/0tYirsjGl/JXYER4ysT1Yakz/eTc+E85r+wMB
fgIcMt0uCMtespf8w7pibw1EuZ7wRMKMRP2m3mbyWkM8wAmlby786ehs1GxGdTrb
zDCuccXe17gUyDOIYgl4xr8Jap3gG+Rdfq7adfAc5bjDJhlRtA+FDjVg3rnYpJYf
83NvBxc+BPj0qxpmdurGOU2hbfBolIZr1wRMcHHmZhDDH+9/0ftiYg2PIZIyx97c
SO5lDpN/fvq2lA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:32 2025 by rpki-client