Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
File: fWReWE8e-aiB8fu8TSejQj3j3_E.mft (raw, json)
Hash identifier: xgSiuysxR9QG0hYdq82cnTmG+KoM/aATukLi8/0Kp1A=
Subject key identifier: 3C:B0:E1:75:72:B5:45:D6:40:53:A8:4B:AA:30:8C:1D:4C:01:90:9B
Authority key identifier: 7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
Certificate issuer: /CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Certificate serial: 019653EE728A2E09B6270AE713D4DD54B031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 16:00:57 +0000
Manifest this update: Sun 20 Apr 2025 16:00:57 +0000
Manifest next update: Mon 21 Apr 2025 16:00:57 +0000
Files and hashes: 1: QHrCJn-3TWWMCJDQELy3q8dJt_4.roa (hash: DTg0RQCOqWT4OxprKyTz2OGsk5mW9uMRzOSYKDRAWp0=)
2: dvNIb3T0U0mU22w-yMo6gNRu98k.roa (hash: KB6r0yPVxOXp/PVpdxcqc3971j0F/zVlsLjdreh6UUk=)
3: fWReWE8e-aiB8fu8TSejQj3j3_E.crl (hash: ZebNIYDx4/aigUyfjS6HTMdy3lHH8RDk9ZK7l3tPYfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:72:8a:2e:09:b6:27:0a:e7:13:d4:dd:54:b0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Validity
Not Before: Apr 20 16:00:57 2025 GMT
Not After : Apr 21 16:00:57 2025 GMT
Subject: CN=3cb0e17572b545d64053a84baa308c1d4c01909b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:bb:33:9c:61:ae:44:cc:57:96:44:5d:52:
56:0b:df:6d:4c:50:fb:ec:4b:25:70:9f:15:6d:5c:
e9:21:e7:3f:c1:fb:6e:fa:58:28:9c:ad:e5:fd:8b:
97:3c:6c:52:db:19:24:2b:ba:bf:03:cc:b9:68:5f:
5a:18:b8:ee:c5:af:2f:d2:50:92:15:a8:81:44:33:
c6:62:0c:88:19:72:e0:a6:62:87:44:31:ec:5d:26:
05:5b:1f:c4:03:1a:87:fa:a8:b6:2a:ad:7c:a6:26:
71:78:3f:c4:0e:78:f7:a2:b0:6f:91:5b:c2:fe:1c:
cc:0f:22:35:35:6a:1c:52:d2:19:95:b3:88:33:f8:
d2:a1:06:f0:91:24:b4:50:f0:2a:d3:45:71:d7:12:
f4:1c:7c:e1:a4:22:06:46:67:2b:bb:ae:79:34:4f:
ff:b7:8f:9e:02:70:b7:17:ba:c1:da:2e:6a:e0:28:
f8:de:6e:89:f7:26:9f:ee:72:9d:25:cc:e5:71:3e:
c1:fe:ab:0c:67:f8:e1:64:82:4f:c7:14:cf:69:37:
e6:fd:60:65:e1:89:42:1c:49:5a:0c:d5:01:ff:c8:
ae:9d:ea:23:29:f9:5f:78:1b:bc:b5:a8:e4:7e:53:
7a:4d:a5:c5:89:fb:58:1f:2b:39:e3:f4:56:3f:36:
b9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B0:E1:75:72:B5:45:D6:40:53:A8:4B:AA:30:8C:1D:4C:01:90:9B
X509v3 Authority Key Identifier:
keyid:7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e3:8d:1a:dd:c1:40:73:be:a4:5e:8b:92:22:80:e1:a1:da:
89:54:f3:6c:42:4a:19:54:c5:a1:17:6d:5e:a5:d5:07:af:d7:
60:04:92:f4:a1:da:5f:09:ac:66:e0:4f:25:6d:0e:01:94:e8:
d2:b6:ef:f3:3a:53:89:20:d7:45:d6:ad:7a:85:e7:af:f9:f5:
7b:0d:dc:a6:4a:37:4c:16:e4:5f:ea:be:46:3b:f5:05:53:90:
f9:ed:2b:66:a2:3e:1e:4b:b3:27:ba:cc:17:48:23:fb:85:73:
fb:6f:68:6e:45:60:c7:96:87:71:65:dc:e8:1f:3d:d6:e2:2e:
9b:1c:87:18:c5:1b:ce:60:5f:f9:84:68:06:9b:18:41:50:3a:
0f:50:b4:5c:1d:88:4b:97:2b:ce:be:c5:aa:92:5b:60:8a:17:
88:ef:8f:77:a6:6b:c9:9c:2e:0a:17:54:2d:be:4c:e5:d5:5b:
a1:52:26:73:de:da:9b:72:1b:c1:ca:e9:4e:80:8d:b9:20:02:
de:6d:4d:4a:b5:b1:8e:d1:f7:92:57:47:bc:58:38:8c:21:86:
08:fe:6c:a5:fd:24:c6:83:e7:91:cf:6e:e6:3b:f0:0a:d0:93:
d8:ec:6a:4e:e8:ea:4b:1f:81:b7:c6:61:8f:74:e9:26:6f:a7:
47:c6:ee:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZT7nKKLgm2JwrnE9TdVLAxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNjQ1ZTU4NGYxZWY5YTg4MWYxZmJiYzRkMjdhMzQyM2Rl
M2RmZjEwHhcNMjUwNDIwMTYwMDU3WhcNMjUwNDIxMTYwMDU3WjAzMTEwLwYDVQQD
EygzY2IwZTE3NTcyYjU0NWQ2NDA1M2E4NGJhYTMwOGMxZDRjMDE5MDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr067M5xhrkTMV5ZEXVJWC99tTFD7
7EslcJ8VbVzpIec/wftu+lgonK3l/YuXPGxS2xkkK7q/A8y5aF9aGLjuxa8v0lCS
FaiBRDPGYgyIGXLgpmKHRDHsXSYFWx/EAxqH+qi2Kq18piZxeD/EDnj3orBvkVvC
/hzMDyI1NWocUtIZlbOIM/jSoQbwkSS0UPAq00Vx1xL0HHzhpCIGRmcru655NE//
t4+eAnC3F7rB2i5q4Cj43m6J9yaf7nKdJczlcT7B/qsMZ/jhZIJPxxTPaTfm/WBl
4YlCHElaDNUB/8iuneojKflfeBu8tajkflN6TaXFiftYHys54/RWPza5XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyw4XVytUXWQFOoS6owjB1MAZCbMB8GA1UdIwQY
MBaAFH1kXlhPHvmogfH7vE0no0I949/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZldSZVdFOGUtYWlCOGZ1OFRTZWpRajNqM19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZDFjMzMtOTExNy00YTExLWJiZmUt
ZGI4MWExOGUyNDJlLzEvZldSZVdFOGUtYWlCOGZ1OFRTZWpRajNqM19FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wZDFjMzMtOTExNy00YTExLWJiZmUtZGI4MWExOGUyNDJl
LzEvZldSZVdFOGUtYWlCOGZ1OFRTZWpRajNqM19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACeONGt3B
QHO+pF6LkiKA4aHaiVTzbEJKGVTFoRdtXqXVB6/XYASS9KHaXwmsZuBPJW0OAZTo
0rbv8zpTiSDXRdateoXnr/n1ew3cpko3TBbkX+q+Rjv1BVOQ+e0rZqI+HkuzJ7rM
F0gj+4Vz+29obkVgx5aHcWXc6B891uIumxyHGMUbzmBf+YRoBpsYQVA6D1C0XB2I
S5crzr7FqpJbYIoXiO+Pd6ZryZwuChdULb5M5dVboVImc97am3IbwcrpToCNuSAC
3m1NSrWxjtH3kldHvFg4jCGGCP5spf0kxoPnkc9u5jvwCtCT2OxqTujqSx+Bt8Zh
j3TpJm+nR8bukg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:25:57 2025 by rpki-client