Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
File: A1DfePx4WBNyTsZmSN-bSU-bjac.mft (raw, json)
Hash identifier: YwOY4DGUXloy4ZnW8jj0sx2oHYWbkBwMrrNncfN4tMY=
Subject key identifier: 22:80:91:19:48:82:FB:CA:08:A0:C9:D5:8A:25:BA:39:28:A7:16:4B
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial: 01964A7D5640D1D4A4FE3ED6FE27941BFA84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
Manifest number: 0F18
Signing time: Fri 18 Apr 2025 20:00:50 +0000
Manifest this update: Fri 18 Apr 2025 20:00:50 +0000
Manifest next update: Sat 19 Apr 2025 20:00:50 +0000
Files and hashes: 1: A1DfePx4WBNyTsZmSN-bSU-bjac.crl (hash: uOJ50XjtMs/Iz1JKv4BjzWdT2kg6pTv1bESNROXDW2Y=)
2: YWZ9Y-_nf9hJ3PCcQZw9nBpADV0.roa (hash: 8GJk/xJD9TDW949jEwNVPLQ5jxG7+jInYSsAj0hFBHo=)
3: hL7gjsE__TvimmJVNhYnW8HxcTk.roa (hash: fSQmS4KDtYP+UxUBfXGw0aeIOC4KTOr+x3hlF+s6H3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7d:56:40:d1:d4:a4:fe:3e:d6:fe:27:94:1b:fa:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
Validity
Not Before: Apr 18 20:00:50 2025 GMT
Not After : Apr 19 20:00:50 2025 GMT
Subject: CN=228091194882fbca08a0c9d58a25ba3928a7164b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:49:0b:23:c7:42:d6:2e:b9:5d:46:b9:c0:ae:
9d:0a:00:ad:13:2e:9e:e7:8d:7f:a0:80:e0:e0:04:
a4:1f:3b:f5:66:33:a1:7a:65:5e:3b:d3:bf:af:1f:
3a:08:29:c0:12:f4:ec:0f:d3:1b:31:6e:cd:8f:5b:
94:e0:d6:14:e4:27:61:a7:ac:88:9c:de:7c:14:de:
78:a0:58:09:93:8d:54:19:69:d3:0b:81:56:93:02:
c5:79:a8:e8:67:c5:b1:bb:9a:85:be:9c:dd:65:44:
e5:f9:5b:33:0d:c9:01:39:e3:4f:36:23:56:68:6c:
89:84:2c:1e:24:85:a4:89:5c:4a:6c:da:cf:00:ce:
ad:3c:87:17:2c:d7:c2:26:a3:5f:98:f5:bf:42:8b:
66:e8:a0:52:ff:d2:18:f3:3a:3d:c7:d8:c4:72:37:
6d:15:58:28:87:e8:21:67:f9:bd:5f:d9:12:09:90:
65:06:19:f4:b6:2f:02:42:83:8b:5e:6f:4b:57:69:
b3:57:96:bd:55:bd:e4:d0:83:2e:f1:fb:8b:6a:05:
b5:6a:ee:03:7d:2a:7b:9c:19:61:4f:69:0b:fe:83:
c0:b7:d6:84:75:9d:47:48:7a:bf:78:35:12:8c:35:
fa:68:4c:b2:b9:11:4d:8a:28:95:5c:70:2f:c0:51:
90:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:80:91:19:48:82:FB:CA:08:A0:C9:D5:8A:25:BA:39:28:A7:16:4B
X509v3 Authority Key Identifier:
keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:40:93:2d:8b:ab:53:14:4c:80:7a:46:c0:d1:6d:ab:3d:f8:
65:b1:f4:11:92:71:f1:a2:21:60:76:7d:13:b1:09:54:8b:91:
37:7e:47:05:12:a2:96:8a:33:40:d8:a7:75:aa:81:51:43:06:
f6:2b:55:48:7b:c1:40:63:d7:e0:0b:05:bb:3e:e7:b7:26:4f:
dc:bc:c2:1c:02:dc:e2:94:50:ac:4f:a4:55:17:97:21:43:c4:
8f:ab:bd:73:af:76:0d:5e:77:ce:58:65:2f:f8:7c:8f:ce:3c:
a1:81:f3:28:97:bb:75:df:a9:46:9e:9e:4d:7b:6c:32:1a:ba:
74:15:cd:fd:53:1e:89:9b:25:c2:69:f7:79:77:3f:39:b7:5b:
99:fe:32:78:93:d0:c5:99:bf:b6:5a:cd:0e:6d:75:35:6b:bf:
f3:33:f3:49:0e:0f:f3:f0:3d:ec:81:1c:4c:86:89:17:29:94:
42:5c:77:90:d1:42:d7:9e:d1:a9:f5:1c:24:11:18:ff:00:79:
34:95:3e:3d:3a:76:06:28:47:d6:6a:f9:ec:45:bd:ec:ec:4f:
5e:e2:ac:97:e6:f1:19:e1:3c:a0:be:6a:e3:c1:81:0d:eb:ca:
a8:6b:a3:9d:dd:69:4c:7f:b5:1a:32:26:b5:2b:08:24:31:55:
d0:05:24:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKfVZA0dSk/j7W/ieUG/qEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTBkZjc4ZmM3ODU4MTM3MjRlYzY2NjQ4ZGY5YjQ5NGY5
YjhkYTcwHhcNMjUwNDE4MjAwMDUwWhcNMjUwNDE5MjAwMDUwWjAzMTEwLwYDVQQD
EygyMjgwOTExOTQ4ODJmYmNhMDhhMGM5ZDU4YTI1YmEzOTI4YTcxNjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kkLI8dC1i65XUa5wK6dCgCtEy6e
541/oIDg4ASkHzv1ZjOhemVeO9O/rx86CCnAEvTsD9MbMW7Nj1uU4NYU5Cdhp6yI
nN58FN54oFgJk41UGWnTC4FWkwLFeajoZ8Wxu5qFvpzdZUTl+VszDckBOeNPNiNW
aGyJhCweJIWkiVxKbNrPAM6tPIcXLNfCJqNfmPW/Qotm6KBS/9IY8zo9x9jEcjdt
FVgoh+ghZ/m9X9kSCZBlBhn0ti8CQoOLXm9LV2mzV5a9Vb3k0IMu8fuLagW1au4D
fSp7nBlhT2kL/oPAt9aEdZ1HSHq/eDUSjDX6aEyyuRFNiiiVXHAvwFGQ/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKAkRlIgvvKCKDJ1YolujkopxZLMB8GA1UdIwQY
MBaAFANQ33j8eFgTck7GZkjfm0lPm42nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgt
ZDI5MmFiN2NlOWZhLzEvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgtZDI5MmFiN2NlOWZh
LzEvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABECTLYur
UxRMgHpGwNFtqz34ZbH0EZJx8aIhYHZ9E7EJVIuRN35HBRKiloozQNindaqBUUMG
9itVSHvBQGPX4AsFuz7ntyZP3LzCHALc4pRQrE+kVReXIUPEj6u9c692DV53zlhl
L/h8j848oYHzKJe7dd+pRp6eTXtsMhq6dBXN/VMeiZslwmn3eXc/Obdbmf4yeJPQ
xZm/tlrNDm11NWu/8zPzSQ4P8/A97IEcTIaJFymUQlx3kNFC157RqfUcJBEY/wB5
NJU+PTp2BihH1mr57EW97OxPXuKsl+bxGeE8oL5q48GBDevKqGujnd1pTH+1GjIm
tSsIJDFV0AUk+g==
-----END CERTIFICATE-----
Generated at Sat Apr 19 01:33:07 2025 by rpki-client