Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
File: fD5YWlm1I7uG1mCnFo4cHroJTaA.mft (raw, json)
Hash identifier: AvDjFWkifU0zckMxgt5TH5vxsSugV4Z5oaGhAX1YBwI=
Subject key identifier: 1F:32:F0:2C:63:68:78:59:1F:31:25:6F:8C:54:2D:D0:A7:16:3B:98
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 019651C95A2D832D267EB0F0367B91A571C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
Manifest number: 0C02
Signing time: Sun 20 Apr 2025 06:01:12 +0000
Manifest this update: Sun 20 Apr 2025 06:01:12 +0000
Manifest next update: Mon 21 Apr 2025 06:01:12 +0000
Files and hashes: 1: 7YFk8N6RNgx43dYC2zmFe5pT5VA.roa (hash: kblKELjSh5K08VMKP1lM/34cYDL9lz+wfqW+UgEqxtc=)
2: fD5YWlm1I7uG1mCnFo4cHroJTaA.crl (hash: Xv8GcmZYAGaMgdG9e18snnbGQQgBeTfUX6S14kn+KKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c9:5a:2d:83:2d:26:7e:b0:f0:36:7b:91:a5:71:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Apr 20 06:01:12 2025 GMT
Not After : Apr 21 06:01:12 2025 GMT
Subject: CN=1f32f02c636878591f31256f8c542dd0a7163b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4d:1d:51:aa:f1:fa:48:23:a8:ca:f4:9a:99:
db:07:7b:8d:68:49:08:e6:a3:83:ff:2b:29:df:f3:
87:6e:1b:ca:1d:c4:35:76:e8:17:11:84:cb:2b:63:
49:79:49:c0:eb:7d:15:0d:f0:84:d8:87:4a:97:37:
f5:46:b3:1e:d3:5f:62:51:fd:b3:6e:3e:a5:d1:0d:
f3:83:d7:14:db:b9:71:4e:66:7b:d4:01:29:de:7e:
95:e8:11:0c:eb:41:51:93:04:68:30:1b:a4:3e:04:
0d:67:af:de:c3:41:88:06:6b:f5:18:45:f3:42:d6:
20:91:bd:d6:14:c6:f4:e0:0c:b0:4d:79:46:d0:99:
e6:5a:22:35:35:3e:a6:2d:cd:d6:02:aa:06:42:ed:
ed:22:02:ba:0a:71:7b:c9:e9:15:45:92:6a:17:36:
ad:4a:f5:64:98:d2:ce:86:4b:08:05:c4:f2:89:5d:
63:64:d4:35:bc:d2:0e:d4:39:10:fc:b6:98:06:c3:
f8:8f:31:44:80:92:ba:ea:66:31:36:bf:03:84:49:
63:8f:e9:ab:4d:3b:00:f2:58:41:38:9e:3b:63:5c:
6e:fd:a3:7d:2f:04:c0:b7:42:c6:bc:72:2b:01:71:
51:ab:7e:58:61:52:f7:14:15:a5:a3:35:e2:56:a8:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:32:F0:2C:63:68:78:59:1F:31:25:6F:8C:54:2D:D0:A7:16:3B:98
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9c:4d:20:79:df:2b:63:35:78:10:2d:28:37:81:c8:86:63:
ef:ae:df:05:7c:44:11:b0:e4:d9:47:61:20:59:55:dc:30:7c:
49:01:96:38:18:97:af:20:71:c7:71:ed:9d:09:3d:10:80:6f:
03:9d:2e:f7:d6:60:a6:ce:cf:66:38:97:a5:b2:bb:2e:45:71:
07:6c:81:3c:bb:c5:a9:37:9f:38:72:55:49:38:2a:11:2c:5f:
36:80:80:84:80:48:aa:78:25:11:0e:ff:ac:28:aa:3d:90:aa:
b5:e5:fb:50:81:02:6f:b5:1a:28:8f:ab:00:a1:75:00:d3:0a:
12:37:6d:2a:24:ac:5b:04:e7:d6:db:a7:54:d2:c1:12:99:2e:
01:f2:5b:3c:a2:a1:4b:a4:49:17:d5:6d:e7:4e:fa:36:fc:38:
59:95:cc:48:66:2f:87:71:1e:db:fd:34:67:ba:23:4d:ab:0e:
3c:d2:42:ea:98:0e:a4:f2:08:2a:bd:ef:69:2f:cb:8e:89:75:
7b:70:87:bf:bd:dd:39:70:63:98:ee:b2:5a:d6:1d:aa:44:1d:
04:5b:2e:15:35:08:18:3f:ef:c7:a5:46:1b:c4:d8:40:56:a7:
9f:d3:43:b5:55:1b:76:88:1d:d6:b4:8f:08:cf:ab:db:d0:56:
07:69:17:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRyVotgy0mfrDwNnuRpXHFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2U1ODVhNTliNTIzYmI4NmQ2NjBhNzE2OGUxYzFlYmEw
OTRkYTAwHhcNMjUwNDIwMDYwMTEyWhcNMjUwNDIxMDYwMTEyWjAzMTEwLwYDVQQD
EygxZjMyZjAyYzYzNjg3ODU5MWYzMTI1NmY4YzU0MmRkMGE3MTYzYjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA300dUarx+kgjqMr0mpnbB3uNaEkI
5qOD/ysp3/OHbhvKHcQ1dugXEYTLK2NJeUnA630VDfCE2IdKlzf1RrMe019iUf2z
bj6l0Q3zg9cU27lxTmZ71AEp3n6V6BEM60FRkwRoMBukPgQNZ6/ew0GIBmv1GEXz
QtYgkb3WFMb04AywTXlG0JnmWiI1NT6mLc3WAqoGQu3tIgK6CnF7yekVRZJqFzat
SvVkmNLOhksIBcTyiV1jZNQ1vNIO1DkQ/LaYBsP4jzFEgJK66mYxNr8DhEljj+mr
TTsA8lhBOJ47Y1xu/aN9LwTAt0LGvHIrAXFRq35YYVL3FBWlozXiVqhZ/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8y8CxjaHhZHzElb4xULdCnFjuYMB8GA1UdIwQY
MBaAFHw+WFpZtSO7htZgpxaOHB66CU2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8yNmUzMmEtMzViYS00NDNmLWJjMWUt
NmRjMWY1NjAzMWViLzEvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8yNmUzMmEtMzViYS00NDNmLWJjMWUtNmRjMWY1NjAzMWVi
LzEvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpxNIHnf
K2M1eBAtKDeByIZj767fBXxEEbDk2UdhIFlV3DB8SQGWOBiXryBxx3HtnQk9EIBv
A50u99Zgps7PZjiXpbK7LkVxB2yBPLvFqTefOHJVSTgqESxfNoCAhIBIqnglEQ7/
rCiqPZCqteX7UIECb7UaKI+rAKF1ANMKEjdtKiSsWwTn1tunVNLBEpkuAfJbPKKh
S6RJF9Vt5076Nvw4WZXMSGYvh3Ee2/00Z7ojTasOPNJC6pgOpPIIKr3vaS/Ljol1
e3CHv73dOXBjmO6yWtYdqkQdBFsuFTUIGD/vx6VGG8TYQFann9NDtVUbdogd1rSP
CM+r29BWB2kXCg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:39:05 2025 by rpki-client