Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
File: F2clVphEFbeOnRVGF4TIxOaR0BA.mft (raw, json)
Hash identifier: Pfwp9XI0wi/+pOFRPDaBWrdbBuB1N82AVoeDmC2RABk=
Subject key identifier: F9:16:91:45:F4:F9:FF:30:AA:0B:2E:2E:BA:52:D6:6D:3D:C9:D9:CA
Authority key identifier: 17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
Certificate issuer: /CN=17672556984415b78e9d15461784c8c4e691d010
Certificate serial: 01964C6B67274CF0F79D4C646A93CBCA038C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
Manifest number: 1391
Signing time: Sat 19 Apr 2025 05:00:29 +0000
Manifest this update: Sat 19 Apr 2025 05:00:29 +0000
Manifest next update: Sun 20 Apr 2025 05:00:29 +0000
Files and hashes: 1: F2clVphEFbeOnRVGF4TIxOaR0BA.crl (hash: bhd5PH6gBXT6b4YHLlPHO/rzSzul9Iif1sMHGKV2b2g=)
2: uO9dPxlx5kbryFMIrW1wZfHfrqc.roa (hash: NrkTIYE8RmX0UUZREQe1a/gFtR2Be/h3baezRNBfbZg=)
3: vMfYAVSQ4CaJ9hqOmmUhZmVM_Xc.roa (hash: HKXHwGN9LbH+lPLcsRDtqfOhE6nZDez5q/T7yrcmTHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:67:27:4c:f0:f7:9d:4c:64:6a:93:cb:ca:03:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17672556984415b78e9d15461784c8c4e691d010
Validity
Not Before: Apr 19 05:00:29 2025 GMT
Not After : Apr 20 05:00:29 2025 GMT
Subject: CN=f9169145f4f9ff30aa0b2e2eba52d66d3dc9d9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e9:0e:5a:df:6f:54:02:cd:1f:12:f3:49:75:
66:79:83:ed:13:36:11:a5:4d:54:25:a9:0d:52:b3:
4d:38:9d:98:93:4d:6d:66:3d:e9:3a:ef:04:41:a2:
3b:a7:27:f3:54:06:47:b7:8c:f9:30:58:6c:be:03:
0f:93:7e:d6:2f:d6:65:31:3e:7c:89:2b:5f:fb:f9:
45:d7:b2:73:2e:8d:05:54:c2:86:68:3c:a4:97:68:
a5:02:f9:d0:42:0a:ea:57:17:36:2a:7e:fe:f8:e5:
22:d8:43:e7:2a:85:35:17:e9:a4:3a:d5:0b:cf:f2:
6d:72:00:2f:1e:fd:b2:91:90:85:7f:35:43:b4:25:
d5:aa:c3:96:ee:90:4a:3a:4d:66:c8:e7:4f:e8:a5:
ae:7e:40:3d:8b:25:2f:d2:0f:35:5c:95:ac:e8:ee:
67:b1:1a:47:8a:9a:73:18:aa:2f:0b:27:04:2a:fc:
99:17:f2:10:bb:eb:5d:64:fe:35:35:b4:7f:20:a0:
38:ba:5d:f0:8e:19:15:df:95:e2:f0:0b:03:4a:dd:
48:58:ca:49:83:10:4b:f8:18:5e:3b:b0:f2:46:68:
ba:65:04:95:17:bc:01:b1:d0:ff:93:61:42:95:5b:
83:df:39:8f:8b:d2:a9:26:36:22:47:99:de:fc:25:
b7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:16:91:45:F4:F9:FF:30:AA:0B:2E:2E:BA:52:D6:6D:3D:C9:D9:CA
X509v3 Authority Key Identifier:
keyid:17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a1:74:54:42:05:77:c1:8f:58:a9:7d:dd:1f:3c:af:c2:86:
13:79:0c:ff:4d:c8:83:ef:bf:91:28:70:57:5b:ab:80:74:9f:
7f:9f:2e:ba:11:5d:e7:d0:c4:c0:66:c5:7c:f1:43:cb:b0:ef:
67:0f:0c:11:7f:38:c8:60:81:4d:a3:14:3a:dc:18:34:ef:5c:
22:e1:92:12:18:41:24:00:14:d0:77:18:6c:77:8f:6c:8b:00:
76:6c:14:ba:95:fc:0f:ab:8a:8f:3e:c4:8c:b0:36:94:68:83:
35:51:be:f5:9a:fa:5f:17:02:a3:f6:47:7f:72:20:27:67:07:
e8:de:39:11:97:ef:35:c2:9a:82:0e:d1:c4:43:1e:ef:15:6f:
d6:94:f4:ed:0d:96:01:0e:68:81:0d:bf:94:a7:a8:63:9a:30:
5a:80:c6:62:c3:3e:71:53:e1:f0:11:d7:f4:14:f4:14:02:af:
f3:9f:c0:f7:19:b0:5b:41:33:f3:6a:31:b9:64:1d:be:66:de:
02:bf:d1:90:ab:ee:09:bf:5e:9a:d7:75:59:09:df:3f:27:9c:
44:30:ef:85:e8:91:9e:25:4e:d4:c2:45:0c:d6:1b:4e:2c:47:
75:33:b6:48:8a:20:e4:ea:a7:c6:85:b6:14:d2:7b:14:eb:2d:
fc:42:81:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMa2cnTPD3nUxkapPLygOMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NjcyNTU2OTg0NDE1Yjc4ZTlkMTU0NjE3ODRjOGM0ZTY5
MWQwMTAwHhcNMjUwNDE5MDUwMDI5WhcNMjUwNDIwMDUwMDI5WjAzMTEwLwYDVQQD
EyhmOTE2OTE0NWY0ZjlmZjMwYWEwYjJlMmViYTUyZDY2ZDNkYzlkOWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOkOWt9vVALNHxLzSXVmeYPtEzYR
pU1UJakNUrNNOJ2Yk01tZj3pOu8EQaI7pyfzVAZHt4z5MFhsvgMPk37WL9ZlMT58
iStf+/lF17JzLo0FVMKGaDykl2ilAvnQQgrqVxc2Kn7++OUi2EPnKoU1F+mkOtUL
z/JtcgAvHv2ykZCFfzVDtCXVqsOW7pBKOk1myOdP6KWufkA9iyUv0g81XJWs6O5n
sRpHippzGKovCycEKvyZF/IQu+tdZP41NbR/IKA4ul3wjhkV35Xi8AsDSt1IWMpJ
gxBL+BheO7DyRmi6ZQSVF7wBsdD/k2FClVuD3zmPi9KpJjYiR5ne/CW3nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkWkUX0+f8wqgsuLrpS1m09ydnKMB8GA1UdIwQY
MBaAFBdnJVaYRBW3jp0VRheEyMTmkdAQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjJjbFZwaEVGYmVPblJWR0Y0VEl4T2FSMEJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8xODg3ZmEtNDNjYy00NDk5LWFiNzQt
ZTI4ODMyMzIzZjZkLzEvRjJjbFZwaEVGYmVPblJWR0Y0VEl4T2FSMEJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8xODg3ZmEtNDNjYy00NDk5LWFiNzQtZTI4ODMyMzIzZjZk
LzEvRjJjbFZwaEVGYmVPblJWR0Y0VEl4T2FSMEJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr6F0VEIF
d8GPWKl93R88r8KGE3kM/03Ig++/kShwV1urgHSff58uuhFd59DEwGbFfPFDy7Dv
Zw8MEX84yGCBTaMUOtwYNO9cIuGSEhhBJAAU0HcYbHePbIsAdmwUupX8D6uKjz7E
jLA2lGiDNVG+9Zr6XxcCo/ZHf3IgJ2cH6N45EZfvNcKagg7RxEMe7xVv1pT07Q2W
AQ5ogQ2/lKeoY5owWoDGYsM+cVPh8BHX9BT0FAKv85/A9xmwW0Ez82oxuWQdvmbe
Ar/RkKvuCb9emtd1WQnfPyecRDDvheiRniVO1MJFDNYbTixHdTO2SIog5OqnxoW2
FNJ7FOst/EKBhA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 10:19:13 2025 by rpki-client