Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
File: fU--VZRwf9z5QCXqFVcaaMJNqas.mft (raw, json)
Hash identifier: 3VR2SO7BZ3d09vvmbYJjllXeuVgBbFrRxQP9VTehlSY=
Subject key identifier: 66:E1:48:07:8D:09:8E:98:75:D5:B5:90:98:75:61:E0:20:9F:DB:BC
Authority key identifier: 7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB
Certificate issuer: /CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
Certificate serial: 019632761ECFFEDE08F0C82ED9FE07C9F226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
Manifest number: 06B9
Signing time: Mon 14 Apr 2025 04:02:03 +0000
Manifest this update: Mon 14 Apr 2025 04:02:03 +0000
Manifest next update: Tue 15 Apr 2025 04:02:03 +0000
Files and hashes: 1: fU--VZRwf9z5QCXqFVcaaMJNqas.crl (hash: Bn/BP5p/lS/NDMtl+wOTTc8HjksIrP7QnMsC+2KG9Yw=)
2: uJcxOoPayTtpIImr51o6Grvnwh4.roa (hash: HgfbCb24sxq0O5vUUAY2XVFtTmqaW+l9dpOtt2vq4Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:32:76:1e:cf:fe:de:08:f0:c8:2e:d9:fe:07:c9:f2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
Validity
Not Before: Apr 14 04:02:03 2025 GMT
Not After : Apr 15 04:02:03 2025 GMT
Subject: CN=66e148078d098e9875d5b590987561e0209fdbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:af:ff:d3:06:8b:50:06:9d:0e:5c:34:cb:
14:a6:9f:6e:c6:0e:f9:d1:36:2f:2e:e1:e5:23:1a:
53:12:83:18:79:eb:7d:09:38:c5:d9:07:2f:f1:1e:
2b:fc:70:16:e4:b0:d3:3a:04:bc:73:2e:76:2d:e3:
32:b4:af:b0:47:b5:e8:66:ac:0e:8e:14:57:54:6e:
1a:f8:dc:6e:70:72:d1:03:3c:16:6b:90:ee:60:08:
40:68:8e:9b:8e:d6:0e:16:e0:d0:1b:ed:18:19:14:
9c:41:f5:86:53:fd:ad:7d:48:4c:64:ac:20:e0:9c:
46:d2:c6:ce:b5:22:30:18:c3:de:88:9b:48:34:e6:
10:6c:40:eb:19:01:f9:33:72:8b:0a:99:d8:de:37:
8e:4e:58:bf:1c:08:d7:7d:a2:32:3a:d4:6f:c7:74:
4b:5d:e5:62:dc:db:4f:16:60:61:10:6d:61:8e:5e:
97:b0:17:34:02:eb:28:ef:78:99:2d:7e:ed:c5:20:
d9:7d:9c:b3:34:7e:a4:07:31:b5:16:ab:9e:c5:4a:
1a:f6:d6:78:4a:59:e1:38:7e:8e:a5:34:72:f2:41:
53:53:50:30:41:77:8b:72:ba:65:b7:f7:f9:d8:ff:
37:53:7a:f9:38:a7:c7:89:46:d3:cb:f0:51:3a:69:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E1:48:07:8D:09:8E:98:75:D5:B5:90:98:75:61:E0:20:9F:DB:BC
X509v3 Authority Key Identifier:
keyid:7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3a:9a:77:a9:07:00:54:4e:c2:37:4e:68:e8:8a:86:2f:34:
8a:36:c2:76:04:b7:b5:7c:7e:23:d1:e0:17:f0:af:3f:a9:b0:
3d:c7:a1:db:b2:0a:af:1e:aa:27:a4:de:c0:8d:bf:33:8e:4d:
1e:d5:7a:c0:84:e9:74:40:f4:83:24:7b:0c:73:82:98:91:43:
21:35:e8:61:07:8f:86:6e:98:15:ba:7f:cd:b9:a4:87:2d:4f:
a9:4b:f1:f5:18:d9:ce:2b:99:b9:8e:a6:f3:5d:28:69:09:4e:
ef:03:90:d7:d3:24:e4:ac:ef:62:70:16:70:f3:c0:4c:97:86:
e7:21:46:7d:5a:42:81:6f:d2:cd:f9:d0:71:e4:6f:22:0c:af:
4f:9e:40:80:49:56:43:96:24:a0:9c:07:18:22:1e:fa:11:d0:
78:cc:21:d9:40:5d:d2:54:9d:d3:6f:d8:6c:3d:9c:64:bc:b7:
e5:07:25:69:9c:95:c5:c3:7f:35:78:5b:40:94:5f:53:c1:2b:
13:54:65:9c:f9:22:ca:b2:94:81:fb:4e:d8:0b:93:78:9e:62:
1f:28:6d:d8:94:05:fe:c7:e0:e1:ec:00:55:86:ba:ce:7c:32:
09:7a:88:ba:e2:61:62:22:aa:aa:50:f0:51:f1:18:15:38:4b:
fb:28:d5:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYydh7P/t4I8Mgu2f4HyfImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNGZiZTU1OTQ3MDdmZGNmOTQwMjVlYTE1NTcxYTY4YzI0
ZGE5YWIwHhcNMjUwNDE0MDQwMjAzWhcNMjUwNDE1MDQwMjAzWjAzMTEwLwYDVQQD
Eyg2NmUxNDgwNzhkMDk4ZTk4NzVkNWI1OTA5ODc1NjFlMDIwOWZkYmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdWv/9MGi1AGnQ5cNMsUpp9uxg75
0TYvLuHlIxpTEoMYeet9CTjF2Qcv8R4r/HAW5LDTOgS8cy52LeMytK+wR7XoZqwO
jhRXVG4a+NxucHLRAzwWa5DuYAhAaI6bjtYOFuDQG+0YGRScQfWGU/2tfUhMZKwg
4JxG0sbOtSIwGMPeiJtINOYQbEDrGQH5M3KLCpnY3jeOTli/HAjXfaIyOtRvx3RL
XeVi3NtPFmBhEG1hjl6XsBc0Auso73iZLX7txSDZfZyzNH6kBzG1FquexUoa9tZ4
SlnhOH6OpTRy8kFTU1AwQXeLcrplt/f52P83U3r5OKfHiUbTy/BROmlJJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbhSAeNCY6YddW1kJh1YeAgn9u8MB8GA1UdIwQY
MBaAFH1PvlWUcH/c+UAl6hVXGmjCTamrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlUtLVZaUndmOXo1UUNYcUZWY2FhTUpOcWFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iZjdiYmItNmIxMi00NzRjLTkzYmMt
N2M3MzA1OTI3OGVmLzEvZlUtLVZaUndmOXo1UUNYcUZWY2FhTUpOcWFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iZjdiYmItNmIxMi00NzRjLTkzYmMtN2M3MzA1OTI3OGVm
LzEvZlUtLVZaUndmOXo1UUNYcUZWY2FhTUpOcWFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDqad6kH
AFROwjdOaOiKhi80ijbCdgS3tXx+I9HgF/CvP6mwPceh27IKrx6qJ6TewI2/M45N
HtV6wITpdED0gyR7DHOCmJFDITXoYQePhm6YFbp/zbmkhy1PqUvx9RjZziuZuY6m
810oaQlO7wOQ19Mk5KzvYnAWcPPATJeG5yFGfVpCgW/SzfnQceRvIgyvT55AgElW
Q5YkoJwHGCIe+hHQeMwh2UBd0lSd02/YbD2cZLy35QclaZyVxcN/NXhbQJRfU8Er
E1RlnPkiyrKUgftO2AuTeJ5iHyht2JQF/sfg4ewAVYa6znwyCXqIuuJhYiKqqlDw
UfEYFThL+yjV+Q==
-----END CERTIFICATE-----
Generated at Mon Apr 14 12:08:06 2025 by rpki-client