Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
File: d52BXbMia3qEiWEmKtdP_BVVf6E.mft (raw, json)
Hash identifier: eFlmEs3byqYxFIbjGM7lKWbZOsJbRlyOYnEPBqGyJ9U=
Subject key identifier: D7:34:3F:F7:22:58:A2:98:36:1F:9E:4B:A7:D8:67:F8:A0:C2:53:37
Authority key identifier: 77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
Certificate issuer: /CN=779d815db3226b7a848961262ad74ffc15557fa1
Certificate serial: 01965537F8ECCAF9E2FEAC099A1E0B2CCB6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 22:00:53 +0000
Manifest this update: Sun 20 Apr 2025 22:00:53 +0000
Manifest next update: Mon 21 Apr 2025 22:00:53 +0000
Files and hashes: 1: d52BXbMia3qEiWEmKtdP_BVVf6E.crl (hash: s2g94NRUNIS5MpEJMlAa/FAm+K3FIhFSVotNhxp7gF8=)
2: r_pXvYOMh3gSQPYuo_0x5LIDY1s.roa (hash: bQrJT1cr1jHVeYHOeCbVvQ+uUO5ecYBMkZwEAtD6RHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:f8:ec:ca:f9:e2:fe:ac:09:9a:1e:0b:2c:cb:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779d815db3226b7a848961262ad74ffc15557fa1
Validity
Not Before: Apr 20 22:00:53 2025 GMT
Not After : Apr 21 22:00:53 2025 GMT
Subject: CN=d7343ff72258a298361f9e4ba7d867f8a0c25337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c3:b5:f0:7d:14:41:9c:e0:3e:08:3c:f7:06:
3d:0c:26:6b:d4:1e:8d:c9:99:a0:03:7a:49:bc:15:
21:17:b2:ab:b7:f8:fd:f7:91:0c:c4:37:dc:a7:ab:
f2:73:10:75:6b:1b:c8:d5:b9:f6:9f:30:11:1d:d6:
a1:e6:ae:8d:51:2d:31:17:dc:0b:d9:26:a7:82:b4:
79:b9:2e:64:e2:a5:de:c0:5e:07:b7:f7:ac:9a:43:
c7:5b:6b:4c:04:0e:b2:13:8e:91:35:cb:3c:39:84:
ca:90:db:e2:27:9c:0a:6b:af:75:77:c6:16:7c:49:
b6:0f:54:9f:15:93:00:c7:2c:a4:d8:86:d4:27:2b:
82:14:9d:91:be:51:15:9d:aa:5e:f3:aa:f3:1e:e8:
21:d4:7b:23:8c:0d:d2:65:35:7c:55:ae:45:46:15:
ad:14:d7:a3:fb:81:fe:fd:b6:40:de:53:38:5d:8c:
32:1a:0c:30:b4:93:84:21:c8:c2:57:78:b4:d1:72:
3b:24:e1:da:83:76:76:26:1f:45:b6:8e:2d:f0:66:
d7:c2:89:ef:be:73:19:e9:07:26:df:a3:c2:5c:6f:
fc:c4:c1:f2:5d:2f:40:90:fd:a0:c3:2c:e1:2e:05:
33:3c:05:7e:79:ab:a5:60:45:28:84:6f:8c:74:96:
ca:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:34:3F:F7:22:58:A2:98:36:1F:9E:4B:A7:D8:67:F8:A0:C2:53:37
X509v3 Authority Key Identifier:
keyid:77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d8:c1:1b:f6:1f:a9:83:ce:04:6f:f1:76:dc:bd:16:90:65:
c7:02:aa:92:50:95:39:24:d5:51:80:f4:4e:7e:a9:f6:7f:b9:
58:72:a6:55:c8:3e:3a:9d:68:c9:5a:15:f1:c1:89:b7:72:92:
f9:93:02:7e:9d:91:e9:49:fc:f6:95:7b:ac:39:2a:53:9c:12:
7a:23:46:29:e1:3b:a9:c9:f6:17:46:b5:7a:34:87:58:e7:2f:
1a:f8:4a:09:bd:e5:63:11:28:05:72:dd:d0:66:5e:6a:93:f1:
03:34:89:61:dc:c0:6c:ca:6e:e1:26:46:30:42:7b:b3:76:3a:
b1:f1:ae:7d:fe:61:85:4c:95:c1:67:ea:38:60:45:42:54:ab:
73:ec:84:b4:fb:ce:e5:64:3b:8d:f5:12:cc:c0:10:be:f3:08:
d8:8f:1a:1a:fc:33:b1:93:fe:3b:2a:bb:c4:83:58:17:70:5a:
0c:27:05:7a:6f:4a:45:a0:2f:30:8d:9b:42:0b:1f:c8:a6:eb:
25:e3:c9:2d:68:c1:9e:12:44:af:4f:e1:52:ed:96:b1:e3:28:
e1:4a:49:f3:6f:e2:1f:19:99:da:9f:4d:a5:c0:cc:61:7f:b6:
f9:0b:ee:bc:fa:58:6d:a8:28:a7:94:54:d9:63:40:de:23:58:
41:7d:1b:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVN/jsyvni/qwJmh4LLMtuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OWQ4MTVkYjMyMjZiN2E4NDg5NjEyNjJhZDc0ZmZjMTU1
NTdmYTEwHhcNMjUwNDIwMjIwMDUzWhcNMjUwNDIxMjIwMDUzWjAzMTEwLwYDVQQD
EyhkNzM0M2ZmNzIyNThhMjk4MzYxZjllNGJhN2Q4NjdmOGEwYzI1MzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcO18H0UQZzgPgg89wY9DCZr1B6N
yZmgA3pJvBUhF7Krt/j995EMxDfcp6vycxB1axvI1bn2nzARHdah5q6NUS0xF9wL
2SangrR5uS5k4qXewF4Ht/esmkPHW2tMBA6yE46RNcs8OYTKkNviJ5wKa691d8YW
fEm2D1SfFZMAxyyk2IbUJyuCFJ2RvlEVnape86rzHugh1HsjjA3SZTV8Va5FRhWt
FNej+4H+/bZA3lM4XYwyGgwwtJOEIcjCV3i00XI7JOHag3Z2Jh9Fto4t8GbXwonv
vnMZ6Qcm36PCXG/8xMHyXS9AkP2gwyzhLgUzPAV+eaulYEUohG+MdJbKuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNc0P/ciWKKYNh+eS6fYZ/igwlM3MB8GA1UdIwQY
MBaAFHedgV2zImt6hIlhJirXT/wVVX+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDUyQlhiTWlhM3FFaVdFbUt0ZFBfQlZWZjZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83OTFhNGUtMWJlOS00OTc2LWJkOTUt
NjU2MWM4NDkwNTdmLzEvZDUyQlhiTWlhM3FFaVdFbUt0ZFBfQlZWZjZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83OTFhNGUtMWJlOS00OTc2LWJkOTUtNjU2MWM4NDkwNTdm
LzEvZDUyQlhiTWlhM3FFaVdFbUt0ZFBfQlZWZjZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNjBG/Yf
qYPOBG/xdty9FpBlxwKqklCVOSTVUYD0Tn6p9n+5WHKmVcg+Op1oyVoV8cGJt3KS
+ZMCfp2R6Un89pV7rDkqU5wSeiNGKeE7qcn2F0a1ejSHWOcvGvhKCb3lYxEoBXLd
0GZeapPxAzSJYdzAbMpu4SZGMEJ7s3Y6sfGuff5hhUyVwWfqOGBFQlSrc+yEtPvO
5WQ7jfUSzMAQvvMI2I8aGvwzsZP+Oyq7xINYF3BaDCcFem9KRaAvMI2bQgsfyKbr
JePJLWjBnhJEr0/hUu2WseMo4UpJ82/iHxmZ2p9NpcDMYX+2+QvuvPpYbagop5RU
2WNA3iNYQX0bxw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:53 2025 by rpki-client