Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
File: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json)
Hash identifier: T/VMrDzdM3DCi2F9QE1WayLZzpwfoluBOVSziILzq0o=
Subject key identifier: B6:71:EF:F9:D4:93:C4:FD:D6:83:0E:38:76:9E:1D:E7:C9:CD:22:8C
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial: 01965A5E6551B6CA24B01560ACCF59360EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 22:00:57 +0000
Manifest this update: Mon 21 Apr 2025 22:00:57 +0000
Manifest next update: Tue 22 Apr 2025 22:00:57 +0000
Files and hashes: 1: HdvygVOruYbTXwlr1NLClydlYqo.roa (hash: sMi8mYGDSncYX0REgUe1LpnyiMZD3xdRzWB6T1gaSas=)
2: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: +f5aKlVlmSZIvlCJlGDOQY0N1kZBkMnttgxl50pkETo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5e:65:51:b6:ca:24:b0:15:60:ac:cf:59:36:0e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Validity
Not Before: Apr 21 22:00:57 2025 GMT
Not After : Apr 22 22:00:57 2025 GMT
Subject: CN=b671eff9d493c4fdd6830e38769e1de7c9cd228c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9f:ef:db:fa:1a:94:72:90:a8:2b:cd:c9:b7:
a8:1c:10:18:91:25:07:8b:a6:8b:8d:74:d0:72:3e:
1e:eb:9a:14:40:47:de:b5:42:43:2e:b1:b8:0a:d7:
d5:31:e7:f7:24:93:4b:78:b9:f0:b1:8c:6c:03:f7:
af:07:2f:69:ba:0d:fc:af:8f:6b:04:ca:99:df:90:
61:61:b6:58:ba:19:26:41:48:80:a6:55:05:98:04:
4b:33:52:80:8c:aa:ce:18:84:dd:e3:4b:46:4c:59:
19:f2:1d:f0:a5:c8:0f:6b:d2:71:1e:55:f2:1d:4b:
f1:f8:a0:01:0d:15:40:90:9c:ba:33:f7:be:df:bf:
ad:fd:a7:08:d8:5b:1f:69:d7:cf:55:16:87:c5:fa:
fb:c2:bb:46:dc:9b:18:3a:c3:70:ae:1b:19:87:58:
54:7c:55:31:41:b9:4c:1e:ea:61:e8:73:5f:22:e5:
e1:79:98:54:06:3c:7c:f4:2e:0d:cc:7b:75:0e:4d:
b5:e9:41:96:54:f3:fa:20:39:c1:3c:51:4c:cb:86:
e3:d8:bd:6d:7e:a8:b4:6f:cf:cf:7d:5f:5a:59:92:
0c:ce:23:f9:8f:b9:b5:13:15:33:f4:b4:ac:b9:ca:
3b:0b:ac:1e:b5:03:08:3b:55:20:a2:7c:84:25:72:
c1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:71:EF:F9:D4:93:C4:FD:D6:83:0E:38:76:9E:1D:E7:C9:CD:22:8C
X509v3 Authority Key Identifier:
keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:34:98:9c:1b:a2:8c:19:3d:f4:d7:30:a4:97:d7:11:a1:2c:
43:a6:28:1a:f7:8c:05:23:64:d9:b6:59:39:42:61:39:93:ff:
fe:0b:0e:4e:9d:0b:df:e7:45:d7:f0:de:70:5e:c5:8b:a8:32:
ba:78:66:bf:b8:c4:40:de:5f:10:f8:86:ad:d6:41:ba:20:26:
cc:6f:fd:a7:30:a6:e3:22:98:fb:30:6d:b6:de:65:eb:e9:69:
b6:a7:ab:f5:ac:0f:12:e7:97:75:2e:27:dd:30:cb:a5:4b:ba:
21:26:cd:dd:e2:42:a9:20:49:b8:8b:ee:9a:c0:61:47:03:e1:
dd:50:61:02:36:44:2c:86:9f:65:d6:82:d0:bd:12:ba:71:56:
7f:96:9e:d1:1c:b3:e7:c3:64:80:0c:d2:40:53:26:6a:36:46:
64:d6:52:35:f8:8f:27:80:91:32:98:41:ff:86:43:31:ab:ca:
9e:a4:12:99:65:7e:f6:c8:e6:80:08:3b:b6:d2:95:ee:71:8f:
74:7d:43:05:c6:98:ca:c4:a7:2a:dd:2d:eb:71:14:aa:2a:40:
08:a6:0a:02:d0:88:b6:91:6b:b9:b9:e0:a5:fc:f2:0b:f9:11:
b5:8f:d1:5a:2e:61:a4:00:1f:e0:e5:43:6a:ed:e7:35:1c:ce:
26:ce:ce:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZaXmVRtsoksBVgrM9ZNg7aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZDFiNWNiNmZiMDQyMzk4Njg3MWVmMDFlNjYzZjM2NWNl
MGQ4OTUwHhcNMjUwNDIxMjIwMDU3WhcNMjUwNDIyMjIwMDU3WjAzMTEwLwYDVQQD
EyhiNjcxZWZmOWQ0OTNjNGZkZDY4MzBlMzg3NjllMWRlN2M5Y2QyMjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ/v2/oalHKQqCvNybeoHBAYkSUH
i6aLjXTQcj4e65oUQEfetUJDLrG4CtfVMef3JJNLeLnwsYxsA/evBy9pug38r49r
BMqZ35BhYbZYuhkmQUiAplUFmARLM1KAjKrOGITd40tGTFkZ8h3wpcgPa9JxHlXy
HUvx+KABDRVAkJy6M/e+37+t/acI2FsfadfPVRaHxfr7wrtG3JsYOsNwrhsZh1hU
fFUxQblMHuph6HNfIuXheZhUBjx89C4NzHt1Dk216UGWVPP6IDnBPFFMy4bj2L1t
fqi0b8/PfV9aWZIMziP5j7m1ExUz9LSsuco7C6wetQMIO1UgonyEJXLB0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZx7/nUk8T91oMOOHaeHefJzSKMMB8GA1UdIwQY
MBaAFHLRtctvsEI5hoce8B5mPzZc4NiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3RHMXkyLXdRam1HaHg3d0htWV9ObHpnMkpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hNjAwZjUtOTQyOC00ODVjLWI0MmUt
NjRkZTM0ZjFmNDY0LzEvY3RHMXkyLXdRam1HaHg3d0htWV9ObHpnMkpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9hNjAwZjUtOTQyOC00ODVjLWI0MmUtNjRkZTM0ZjFmNDY0
LzEvY3RHMXkyLXdRam1HaHg3d0htWV9ObHpnMkpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTSYnBui
jBk99NcwpJfXEaEsQ6YoGveMBSNk2bZZOUJhOZP//gsOTp0L3+dF1/DecF7Fi6gy
unhmv7jEQN5fEPiGrdZBuiAmzG/9pzCm4yKY+zBttt5l6+lptqer9awPEueXdS4n
3TDLpUu6ISbN3eJCqSBJuIvumsBhRwPh3VBhAjZELIafZdaC0L0SunFWf5ae0Ryz
58NkgAzSQFMmajZGZNZSNfiPJ4CRMphB/4ZDMavKnqQSmWV+9sjmgAg7ttKV7nGP
dH1DBcaYysSnKt0t63EUqipACKYKAtCItpFrubngpfzyC/kRtY/RWi5hpAAf4OVD
au3nNRzOJs7OZA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:43:53 2025 by rpki-client