Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier: hUcni+5Era2SgCseiwgtjysW2tmKpfYsALFZ+2pPHNg=
Subject key identifier: 77:19:82:D2:AC:B8:6E:BE:97:E5:2F:D1:8B:80:91:10:B4:CB:8A:82
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 01962DF4186B682EA494CDDA8E9AA4A4E13F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number: 14EB
Signing time: Sun 13 Apr 2025 07:01:33 +0000
Manifest this update: Sun 13 Apr 2025 07:01:33 +0000
Manifest next update: Mon 14 Apr 2025 07:01:33 +0000
Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: 7hbcEM5PKfuN+ebEXYQowjsSM3DbQSHG0ZU1Ki9JpZg=)
2: ghOgZScInzU-k80H-uXo6Z44fh4.roa (hash: lvvfvqGDTHXluMikuB2xTzxX/lcqRvi6zFraBkTfrlc=)
3: y-KKayWDkSAQJ7WHnrYBMGYeW7s.roa (hash: eQq4AAV0PFKKGDw6XQHABkksm4Mts0DM9GmL48be7Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f4:18:6b:68:2e:a4:94:cd:da:8e:9a:a4:a4:e1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Apr 13 07:01:33 2025 GMT
Not After : Apr 14 07:01:33 2025 GMT
Subject: CN=771982d2acb86ebe97e52fd18b809110b4cb8a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f0:ac:ae:5e:48:85:cf:51:70:0b:70:dc:b5:
d0:57:13:52:2c:da:f5:4d:f1:a5:40:7d:e1:67:92:
8d:03:c4:6a:d3:68:08:d3:37:ee:82:70:78:0e:64:
0f:e1:4c:cb:4f:5b:58:c5:57:d7:a5:a6:7a:29:59:
f8:4d:d7:5a:86:fb:c4:4b:e7:b7:a8:91:d9:be:88:
32:90:bf:ad:da:b8:f3:01:c4:2c:16:89:22:6f:bc:
e3:7c:a5:6c:05:d5:73:e3:09:93:e8:88:92:41:1d:
d3:82:04:c3:66:06:ee:cc:95:90:27:c3:13:45:5d:
3d:0d:7a:c4:c3:ce:5f:e3:a7:87:f7:af:64:20:17:
6e:36:6f:3c:14:7c:30:47:a1:d9:d9:6c:03:72:67:
1a:ce:b5:9f:46:b0:6f:87:40:29:d4:4c:bd:66:83:
98:a5:64:61:3b:ee:04:30:a4:76:47:ee:97:de:55:
8c:bd:57:98:37:16:d5:c9:f0:d1:40:a4:c4:e0:51:
5e:fb:f6:64:a9:6c:68:a5:3d:e8:d5:f9:3b:b6:26:
56:5f:fe:b0:68:96:ba:85:3c:aa:31:d6:ad:27:8e:
07:c1:23:3f:26:32:e5:f3:70:a0:89:1a:8c:05:75:
f1:c3:46:de:44:d3:8e:a2:b2:9a:e4:d2:23:99:f6:
5f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:19:82:D2:AC:B8:6E:BE:97:E5:2F:D1:8B:80:91:10:B4:CB:8A:82
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:1a:5d:2f:23:8f:21:c5:ab:f0:5e:9f:f6:26:33:2e:6e:6e:
a0:24:e9:06:d3:7f:5d:57:07:c4:c7:e9:a2:83:e6:49:e3:d8:
53:4c:d3:f6:a4:81:4a:66:09:42:b2:6f:1c:81:d2:80:aa:d7:
04:9f:f8:17:4c:a2:ad:6c:8a:4d:44:31:83:4e:dc:86:81:a5:
99:db:4d:55:aa:0d:b2:68:42:90:34:29:e4:2b:8d:46:55:a0:
68:b4:51:aa:14:98:0c:d0:39:0e:1a:a0:07:4c:bd:d2:6a:e5:
c5:98:de:22:10:d7:0f:c3:ca:98:cd:c3:fa:66:fb:a3:ac:a2:
f8:fa:79:59:24:11:cf:66:fd:85:bb:0b:bd:12:23:da:99:dc:
98:bd:eb:45:f9:a8:47:da:f8:a3:d6:54:52:13:94:4b:c2:2c:
20:be:fa:53:7d:d8:9a:c2:32:a2:f6:02:46:16:18:8a:15:2a:
6d:92:eb:2c:bb:41:23:c3:ec:b6:d2:91:07:9b:bb:3a:88:69:
c8:fc:2a:ce:39:e1:bf:e5:fe:df:5a:cb:14:3b:3a:cf:50:4d:
39:30:67:a7:eb:10:9e:f9:17:34:f0:76:69:93:f3:7a:98:b4:
fa:8e:82:3d:91:5d:68:53:ca:30:e3:dd:8b:45:9c:41:e8:6d:
88:98:73:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9BhraC6klM3ajpqkpOE/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NDczN2Q4YTQ4NGQxMjUzNGNhNDBmOGRkODE4YTU4OGMz
YjNkZTIwHhcNMjUwNDEzMDcwMTMzWhcNMjUwNDE0MDcwMTMzWjAzMTEwLwYDVQQD
Eyg3NzE5ODJkMmFjYjg2ZWJlOTdlNTJmZDE4YjgwOTExMGI0Y2I4YTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvCsrl5Ihc9RcAtw3LXQVxNSLNr1
TfGlQH3hZ5KNA8Rq02gI0zfugnB4DmQP4UzLT1tYxVfXpaZ6KVn4TddahvvES+e3
qJHZvogykL+t2rjzAcQsFokib7zjfKVsBdVz4wmT6IiSQR3TggTDZgbuzJWQJ8MT
RV09DXrEw85f46eH969kIBduNm88FHwwR6HZ2WwDcmcazrWfRrBvh0Ap1Ey9ZoOY
pWRhO+4EMKR2R+6X3lWMvVeYNxbVyfDRQKTE4FFe+/ZkqWxopT3o1fk7tiZWX/6w
aJa6hTyqMdatJ44HwSM/JjLl83CgiRqMBXXxw0beRNOOorKa5NIjmfZfYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcZgtKsuG6+l+Uv0YuAkRC0y4qCMB8GA1UdIwQY
MBaAFBdHN9ikhNElNMpA+N2BiliMOz3iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjBjMzJLU0UwU1UweWtENDNZR0tXSXc3UGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xOTMyNGEtMDYxNi00NWQ0LTliNTMt
N2I3NDZlYTFhYjgyLzEvRjBjMzJLU0UwU1UweWtENDNZR0tXSXc3UGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xOTMyNGEtMDYxNi00NWQ0LTliNTMtN2I3NDZlYTFhYjgy
LzEvRjBjMzJLU0UwU1UweWtENDNZR0tXSXc3UGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRpdLyOP
IcWr8F6f9iYzLm5uoCTpBtN/XVcHxMfpooPmSePYU0zT9qSBSmYJQrJvHIHSgKrX
BJ/4F0yirWyKTUQxg07choGlmdtNVaoNsmhCkDQp5CuNRlWgaLRRqhSYDNA5Dhqg
B0y90mrlxZjeIhDXD8PKmM3D+mb7o6yi+Pp5WSQRz2b9hbsLvRIj2pncmL3rRfmo
R9r4o9ZUUhOUS8IsIL76U33YmsIyovYCRhYYihUqbZLrLLtBI8PsttKRB5u7Oohp
yPwqzjnhv+X+31rLFDs6z1BNOTBnp+sQnvkXNPB2aZPzepi0+o6CPZFdaFPKMOPd
i0WcQehtiJhzsA==
-----END CERTIFICATE-----
Generated at Sun Apr 13 12:48:16 2025 by rpki-client