Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
File: _MrtD4HiSNrzMrgIQ9Sino19UeQ.mft (raw, json)
Hash identifier: 8IV7XOcJxQ9uiGIctZ0fT8hVYWbWZLqfST6294ToFzo=
Subject key identifier: 26:EF:8A:7F:D9:C9:D2:F9:04:99:7C:2A:BD:51:59:79:40:7D:B2:6F
Authority key identifier: FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
Certificate issuer: /CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Certificate serial: 0196526D415CE4B175FAE2B6E3AE866A8579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
Manifest number: 1226
Signing time: Sun 20 Apr 2025 09:00:13 +0000
Manifest this update: Sun 20 Apr 2025 09:00:13 +0000
Manifest next update: Mon 21 Apr 2025 09:00:13 +0000
Files and hashes: 1: IYbiKXlQmjVmc2EBeJ1ZyhaFvEg.roa (hash: 4Xy4cTbgeWofaNajn2cgHkph6DzzB6nqlaBQdJk6xLo=)
2: _MrtD4HiSNrzMrgIQ9Sino19UeQ.crl (hash: Fagk5iCZ9a6EnSf7d3LEslyW39mqWFhWO0da8foMNQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 09:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:41:5c:e4:b1:75:fa:e2:b6:e3:ae:86:6a:85:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Validity
Not Before: Apr 20 09:00:13 2025 GMT
Not After : Apr 21 09:00:13 2025 GMT
Subject: CN=26ef8a7fd9c9d2f904997c2abd515979407db26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:3d:b1:57:de:20:d3:4c:48:ec:14:9a:28:
38:0c:1b:7c:5b:01:db:5d:28:88:5b:98:75:8a:cf:
aa:d7:82:ca:0a:f9:fb:6b:a4:be:f2:a4:93:1a:bd:
cd:1a:7e:65:6f:f9:e1:b4:09:7e:18:8f:5f:bb:13:
a4:bd:25:44:d2:82:05:1e:73:c3:91:e5:d7:48:87:
07:df:a3:48:b7:99:9d:fe:3b:c7:ab:8e:52:e6:74:
da:d5:a6:77:9e:3a:e4:40:48:96:78:57:b0:9f:73:
aa:02:af:d9:cb:19:74:27:6d:b0:63:5d:cc:d3:37:
b2:56:24:3d:7e:e9:71:24:de:11:6c:4b:71:0d:f2:
d7:91:2b:a3:31:0f:a1:aa:ad:d1:40:7a:60:2c:90:
37:64:4b:01:d2:5a:6f:e7:7e:07:24:6e:de:3a:5c:
c6:cc:0f:3e:f2:dc:63:62:10:21:99:a7:09:25:f0:
31:26:0e:18:86:b3:09:a0:ec:8e:88:71:36:39:7a:
fe:13:14:ef:65:b2:08:64:85:89:c4:2a:b9:a8:54:
ee:3c:c0:d5:dc:ac:82:e6:ed:8e:8c:e3:b6:9a:c1:
c1:60:d6:b6:5a:0c:be:98:35:a5:ea:55:7e:ed:74:
6f:56:c5:86:8c:33:e9:c2:7e:3f:fe:c9:3e:63:24:
93:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EF:8A:7F:D9:C9:D2:F9:04:99:7C:2A:BD:51:59:79:40:7D:B2:6F
X509v3 Authority Key Identifier:
keyid:FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a2:af:ff:0a:55:15:e4:5d:0c:bf:c3:40:9e:fa:e7:e0:31:
21:92:e7:74:94:12:b4:7f:50:b8:96:2b:92:e0:3d:c8:84:9a:
bb:47:29:20:22:df:4b:6d:70:ac:95:b2:60:72:ce:07:8e:c1:
3d:f4:06:d4:c5:a5:ab:da:5f:be:6b:5a:2b:b5:70:41:5c:1e:
b4:f6:83:42:30:dc:75:57:93:47:ab:de:d8:68:e0:c7:f3:af:
dd:b0:3d:f3:00:a3:63:3d:62:2a:3c:fc:c8:68:6e:d6:4f:57:
c4:53:9c:be:4b:ce:db:e1:86:39:e1:ea:44:5b:aa:39:3d:6e:
3d:b2:b9:d3:fb:98:82:1e:50:dd:52:69:6f:79:65:2e:b2:dc:
34:b1:58:4b:17:04:d6:07:39:14:2b:21:99:d0:9c:7b:aa:b7:
0a:c9:d8:9c:29:45:27:a6:2c:ab:b5:d6:7e:3f:86:d4:30:3e:
29:27:34:88:df:b4:10:90:db:53:06:3d:f0:ad:83:e6:1d:1b:
ba:0a:3b:98:89:c3:96:ca:c2:09:67:2b:9f:94:e2:8a:a2:9f:
45:2f:c0:3b:39:c6:6f:21:16:f2:98:10:78:b3:49:a0:d5:5a:
dd:1e:8d:95:3d:a9:06:84:96:d9:59:74:3c:95:f6:12:d7:97:
ad:26:c1:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSbUFc5LF1+uK2466GaoV5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjY2FlZDBmODFlMjQ4ZGFmMzMyYjgwODQzZDRhMjllOGQ3
ZDUxZTQwHhcNMjUwNDIwMDkwMDEzWhcNMjUwNDIxMDkwMDEzWjAzMTEwLwYDVQQD
EygyNmVmOGE3ZmQ5YzlkMmY5MDQ5OTdjMmFiZDUxNTk3OTQwN2RiMjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAI9sVfeINNMSOwUmig4DBt8WwHb
XSiIW5h1is+q14LKCvn7a6S+8qSTGr3NGn5lb/nhtAl+GI9fuxOkvSVE0oIFHnPD
keXXSIcH36NIt5md/jvHq45S5nTa1aZ3njrkQEiWeFewn3OqAq/Zyxl0J22wY13M
0zeyViQ9fulxJN4RbEtxDfLXkSujMQ+hqq3RQHpgLJA3ZEsB0lpv534HJG7eOlzG
zA8+8txjYhAhmacJJfAxJg4YhrMJoOyOiHE2OXr+ExTvZbIIZIWJxCq5qFTuPMDV
3KyC5u2OjOO2msHBYNa2Wgy+mDWl6lV+7XRvVsWGjDPpwn4//sk+YySTFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbvin/ZydL5BJl8Kr1RWXlAfbJvMB8GA1UdIwQY
MBaAFPzK7Q+B4kja8zK4CEPUop6NfVHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX01ydEQ0SGlTTnJ6TXJnSVE5U2lubzE5VWVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iZGJkZTAtMWQ5Ny00MTI2LTkzZTYt
OGU3NzE3M2RjNGJjLzEvX01ydEQ0SGlTTnJ6TXJnSVE5U2lubzE5VWVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9iZGJkZTAtMWQ5Ny00MTI2LTkzZTYtOGU3NzE3M2RjNGJj
LzEvX01ydEQ0SGlTTnJ6TXJnSVE5U2lubzE5VWVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFaKv/wpV
FeRdDL/DQJ765+AxIZLndJQStH9QuJYrkuA9yISau0cpICLfS21wrJWyYHLOB47B
PfQG1MWlq9pfvmtaK7VwQVwetPaDQjDcdVeTR6ve2Gjgx/Ov3bA98wCjYz1iKjz8
yGhu1k9XxFOcvkvO2+GGOeHqRFuqOT1uPbK50/uYgh5Q3VJpb3llLrLcNLFYSxcE
1gc5FCshmdCce6q3CsnYnClFJ6Ysq7XWfj+G1DA+KSc0iN+0EJDbUwY98K2D5h0b
ugo7mInDlsrCCWcrn5TiiqKfRS/AOznGbyEW8pgQeLNJoNVa3R6NlT2pBoSW2Vl0
PJX2EteXrSbBVQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:11:51 2025 by rpki-client