Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
File: u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft (raw, json)
Hash identifier: y3jmIebEnMIeC7K/lStbY6GISeygYTMvZ1XMOfOQXqY=
Subject key identifier: 07:32:EC:EE:B0:83:69:C1:D9:81:A2:36:EC:84:DF:C5:CC:69:68:8F
Authority key identifier: BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
Certificate issuer: /CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Certificate serial: 01964D7E63CB1F992144CD8626B0EB126842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
Manifest number: 14FE
Signing time: Sat 19 Apr 2025 10:00:50 +0000
Manifest this update: Sat 19 Apr 2025 10:00:50 +0000
Manifest next update: Sun 20 Apr 2025 10:00:50 +0000
Files and hashes: 1: u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl (hash: X5EBqlgTTyKdjBSEaqJAXXPPueTrL5S6+UltQcXgqgc=)
2: zqm8sqmxX0F8ohqYYWfQXp8iRJ4.roa (hash: dDiUuU6g/ottfUPpI3HwKpho2gKA2x4esWjcJownMww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:63:cb:1f:99:21:44:cd:86:26:b0:eb:12:68:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Validity
Not Before: Apr 19 10:00:50 2025 GMT
Not After : Apr 20 10:00:50 2025 GMT
Subject: CN=0732eceeb08369c1d981a236ec84dfc5cc69688f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:55:af:46:23:18:35:6d:4b:cb:ea:96:23:
3d:f0:21:13:2d:7d:d6:98:33:1b:0e:2d:66:96:62:
85:b5:fc:32:84:3f:cb:e8:e5:e1:0c:4c:dc:c4:eb:
6e:e5:00:b3:19:b3:b4:69:50:f9:f0:db:04:6c:21:
bc:a1:2b:28:71:a5:22:fc:90:02:ad:30:69:ba:ce:
34:af:c5:9d:4c:f7:97:20:d1:8a:e4:4f:a2:57:54:
fa:fb:94:2b:33:3c:17:24:1a:1d:ea:63:26:68:90:
1a:22:58:99:17:99:b4:34:03:7e:cc:96:89:c1:6f:
97:0e:9b:15:25:b2:4a:77:cf:39:3f:9c:d0:0d:9d:
f8:71:5d:03:01:ca:29:4e:da:f9:11:9c:f9:9b:f5:
49:66:a5:57:9b:df:03:e4:e7:d2:c5:7a:37:92:f2:
bd:d6:26:12:0e:ba:13:ea:ca:14:ab:24:33:43:7d:
a3:20:b3:77:25:67:67:86:30:49:e5:34:ef:86:c4:
61:9f:72:2d:cf:cf:eb:ce:12:61:c2:04:f7:4c:96:
34:f2:e2:6a:fa:b3:07:e9:52:3f:c8:fc:5f:4c:3a:
cf:79:34:3b:ba:3c:5d:05:8e:ff:ad:bc:74:a7:a0:
8a:ff:3d:1d:a1:67:82:cc:66:b9:7b:cc:71:4a:c8:
59:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:32:EC:EE:B0:83:69:C1:D9:81:A2:36:EC:84:DF:C5:CC:69:68:8F
X509v3 Authority Key Identifier:
keyid:BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:51:7c:9e:cb:25:99:5b:c2:77:14:e4:87:e4:0c:7a:f8:14:
07:eb:95:b1:51:bf:84:b3:5e:c1:2b:52:2b:10:b6:96:45:2d:
5e:bd:cd:cc:02:4e:95:c6:8f:a4:c8:90:83:44:84:08:02:0f:
3e:62:4f:55:f8:b5:69:90:3b:f3:c8:27:8f:10:49:0b:02:c1:
9c:50:b3:ed:8b:22:ef:0a:c4:e6:a6:f9:e5:eb:c2:a6:fc:6c:
51:be:66:ac:71:21:08:e8:ca:be:78:ae:c5:bf:36:1d:75:2e:
6d:a5:78:62:8e:f4:10:2b:8a:c1:60:85:73:f8:e4:25:a7:18:
f7:81:10:f7:fd:75:23:4f:97:cb:a3:de:4b:76:4e:66:0a:e9:
d1:38:c6:7c:f3:b8:14:8a:72:9c:09:45:b4:7c:9c:23:55:c5:
db:aa:ef:6e:ca:39:21:95:d3:47:68:b7:96:b0:5f:24:8c:25:
04:69:34:8c:39:d5:5c:fe:58:56:20:9f:41:8b:77:35:3f:b9:
7f:93:e6:74:ba:96:d1:a5:62:88:11:5f:a2:15:50:fe:cb:fc:
7e:34:4c:44:32:17:4b:c1:f3:0e:98:a1:22:30:14:e5:7a:b5:
ff:17:23:8a:1a:e0:1d:87:43:5f:de:7b:96:69:75:3f:69:4f:
aa:d7:66:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfmPLH5khRM2GJrDrEmhCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNTc1NjFjYTJkYmY3NTBlOGY1ZTBiNzM4OWVmMDljZTli
NWJjZWEwHhcNMjUwNDE5MTAwMDUwWhcNMjUwNDIwMTAwMDUwWjAzMTEwLwYDVQQD
EygwNzMyZWNlZWIwODM2OWMxZDk4MWEyMzZlYzg0ZGZjNWNjNjk2ODhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc1Vr0YjGDVtS8vqliM98CETLX3W
mDMbDi1mlmKFtfwyhD/L6OXhDEzcxOtu5QCzGbO0aVD58NsEbCG8oSsocaUi/JAC
rTBpus40r8WdTPeXINGK5E+iV1T6+5QrMzwXJBod6mMmaJAaIliZF5m0NAN+zJaJ
wW+XDpsVJbJKd885P5zQDZ34cV0DAcopTtr5EZz5m/VJZqVXm98D5OfSxXo3kvK9
1iYSDroT6soUqyQzQ32jILN3JWdnhjBJ5TTvhsRhn3Itz8/rzhJhwgT3TJY08uJq
+rMH6VI/yPxfTDrPeTQ7ujxdBY7/rbx0p6CK/z0doWeCzGa5e8xxSshZrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcy7O6wg2nB2YGiNuyE38XMaWiPMB8GA1UdIwQY
MBaAFLtXVhyi2/dQ6PXgtzie8JzptbzqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTFkV0hLTGI5MURvOWVDM09KN3duT20xdk9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kNWY5YWEtMzM3Yi00ZDYwLThmNWUt
MDIxMjVlNDRlM2E4LzEvdTFkV0hLTGI5MURvOWVDM09KN3duT20xdk9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9kNWY5YWEtMzM3Yi00ZDYwLThmNWUtMDIxMjVlNDRlM2E4
LzEvdTFkV0hLTGI5MURvOWVDM09KN3duT20xdk9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVF8nssl
mVvCdxTkh+QMevgUB+uVsVG/hLNewStSKxC2lkUtXr3NzAJOlcaPpMiQg0SECAIP
PmJPVfi1aZA788gnjxBJCwLBnFCz7Ysi7wrE5qb55evCpvxsUb5mrHEhCOjKvniu
xb82HXUubaV4Yo70ECuKwWCFc/jkJacY94EQ9/11I0+Xy6PeS3ZOZgrp0TjGfPO4
FIpynAlFtHycI1XF26rvbso5IZXTR2i3lrBfJIwlBGk0jDnVXP5YViCfQYt3NT+5
f5PmdLqW0aViiBFfohVQ/sv8fjRMRDIXS8HzDpihIjAU5Xq1/xcjihrgHYdDX957
lml1P2lPqtdmvg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:07 2025 by rpki-client