Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
File: fLi4cwN1yShTuZrjr1eXwSPdFQc.mft (raw, json)
Hash identifier: IhtVhctiZDW9paNGZtH4onofT/mvs+7vYbV3QBnVSJ8=
Subject key identifier: 80:45:87:18:8C:D0:E4:CC:A8:5F:8F:95:41:68:15:0A:C7:EC:7F:78
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial: 0196515A955D7860859CA0DCC821C0B60FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
Manifest number: 0F23
Signing time: Sun 20 Apr 2025 04:00:12 +0000
Manifest this update: Sun 20 Apr 2025 04:00:12 +0000
Manifest next update: Mon 21 Apr 2025 04:00:12 +0000
Files and hashes: 1: f-4yu6sDyBHuoUp0ijzfgQJpE8U.roa (hash: I5XhYKmiwTTC0KZ/h+71MELDdEucvcsXapf63tq8JL0=)
2: fLi4cwN1yShTuZrjr1eXwSPdFQc.crl (hash: oeij2Nf6/D91ELSVhrGngKYgykw/jtfWtI079dTeQ0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5a:95:5d:78:60:85:9c:a0:dc:c8:21:c0:b6:0f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Validity
Not Before: Apr 20 04:00:12 2025 GMT
Not After : Apr 21 04:00:12 2025 GMT
Subject: CN=804587188cd0e4cca85f8f954168150ac7ec7f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:82:b3:eb:d0:66:53:e0:33:2a:cb:08:4a:1b:
5b:41:f9:06:b2:b2:a4:89:76:e1:ef:55:b8:a9:48:
9d:5f:6c:eb:b5:03:fb:cb:d0:c5:00:5f:98:ce:3e:
b1:c2:0b:d8:05:1d:d6:91:cc:60:a4:62:1b:35:c3:
09:6a:1d:95:63:9d:2f:e7:7c:79:ac:44:06:0f:a6:
ec:c3:6f:8f:6f:7a:17:9d:38:bd:e3:13:37:98:1d:
7a:a8:5f:2a:42:b8:4a:21:1b:79:60:36:69:0f:71:
b7:18:c7:3d:21:f7:7e:13:de:c8:9e:94:90:cf:a9:
4c:72:40:9d:a0:4a:fc:fb:59:1e:60:98:56:61:68:
aa:81:1b:6c:d1:56:5a:ae:76:35:3b:87:2a:42:1b:
92:f5:97:49:ab:de:91:52:31:7f:fc:4c:05:f9:a4:
98:fd:bf:09:e3:f3:5e:f0:ea:55:5d:dd:92:cc:c3:
99:77:f5:06:08:26:82:8c:01:b5:59:6b:5c:ff:a0:
3e:2d:13:36:12:2a:1f:46:29:0b:0a:34:c7:fd:4c:
91:35:28:e6:45:ce:f8:dc:ac:56:d7:d1:09:58:cd:
e5:fe:a8:74:d1:cd:42:33:a6:63:87:18:09:cb:eb:
70:0e:f1:b0:e4:80:b8:35:00:ba:26:d8:06:26:19:
55:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:45:87:18:8C:D0:E4:CC:A8:5F:8F:95:41:68:15:0A:C7:EC:7F:78
X509v3 Authority Key Identifier:
keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9f:21:3c:e0:e5:97:d5:42:e6:d2:73:b2:4b:cb:b4:48:ce:
b5:34:4d:68:68:e2:17:11:25:be:1e:c2:4f:70:88:37:8b:2f:
97:67:f7:05:03:09:0a:20:f9:1a:07:e2:89:46:70:ff:20:16:
8e:75:c2:7c:73:00:f3:3d:42:83:2d:ef:f0:16:a8:7f:be:dc:
20:76:09:3b:f1:99:b0:dd:11:da:46:d4:30:67:75:74:85:85:
fc:6c:49:52:c0:cd:0e:6b:46:55:06:7c:f9:42:08:ab:04:6e:
27:7e:5e:c9:dd:9c:c8:c9:7d:eb:e7:f2:d9:c5:5b:0d:eb:90:
15:22:75:02:2f:e4:3e:4b:fc:32:15:1b:36:5a:45:03:f1:d4:
be:45:35:4e:b8:35:a5:69:1b:0a:08:0e:19:1e:22:7b:f8:93:
18:53:83:63:ac:1d:49:f6:46:9d:90:b5:c6:d5:03:6b:0f:94:
42:a6:f9:c9:b6:8a:8c:d3:dc:ba:08:d8:d9:52:b2:1b:1e:f9:
62:9b:a2:36:cd:a7:6c:be:02:07:d3:f5:a1:ec:be:6a:0f:be:
02:4c:9e:09:de:62:f7:a3:c2:d6:b9:b0:a2:4b:ee:3f:41:b5:
b5:df:4b:3d:78:c1:7a:0a:7d:08:fc:71:bc:98:06:a1:17:46:
3b:a7:58:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRWpVdeGCFnKDcyCHAtg+/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYjhiODczMDM3NWM5Mjg1M2I5OWFlM2FmNTc5N2MxMjNk
ZDE1MDcwHhcNMjUwNDIwMDQwMDEyWhcNMjUwNDIxMDQwMDEyWjAzMTEwLwYDVQQD
Eyg4MDQ1ODcxODhjZDBlNGNjYTg1ZjhmOTU0MTY4MTUwYWM3ZWM3Zjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64Kz69BmU+AzKssIShtbQfkGsrKk
iXbh71W4qUidX2zrtQP7y9DFAF+Yzj6xwgvYBR3WkcxgpGIbNcMJah2VY50v53x5
rEQGD6bsw2+Pb3oXnTi94xM3mB16qF8qQrhKIRt5YDZpD3G3GMc9Ifd+E97InpSQ
z6lMckCdoEr8+1keYJhWYWiqgRts0VZarnY1O4cqQhuS9ZdJq96RUjF//EwF+aSY
/b8J4/Ne8OpVXd2SzMOZd/UGCCaCjAG1WWtc/6A+LRM2EiofRikLCjTH/UyRNSjm
Rc743KxW19EJWM3l/qh00c1CM6ZjhxgJy+twDvGw5IC4NQC6JtgGJhlVYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBFhxiM0OTMqF+PlUFoFQrH7H94MB8GA1UdIwQY
MBaAFHy4uHMDdckoU7ma469Xl8Ej3RUHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkxpNGN3TjF5U2hUdVpyanIxZVh3U1BkRlFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hOWNlZDItM2ZhNC00NmVkLTg4ZTAt
Mzg0MTFhMzEyZDg2LzEvZkxpNGN3TjF5U2hUdVpyanIxZVh3U1BkRlFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9hOWNlZDItM2ZhNC00NmVkLTg4ZTAtMzg0MTFhMzEyZDg2
LzEvZkxpNGN3TjF5U2hUdVpyanIxZVh3U1BkRlFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjp8hPODl
l9VC5tJzskvLtEjOtTRNaGjiFxElvh7CT3CIN4svl2f3BQMJCiD5GgfiiUZw/yAW
jnXCfHMA8z1Cgy3v8Baof77cIHYJO/GZsN0R2kbUMGd1dIWF/GxJUsDNDmtGVQZ8
+UIIqwRuJ35eyd2cyMl96+fy2cVbDeuQFSJ1Ai/kPkv8MhUbNlpFA/HUvkU1Trg1
pWkbCggOGR4ie/iTGFODY6wdSfZGnZC1xtUDaw+UQqb5ybaKjNPcugjY2VKyGx75
YpuiNs2nbL4CB9P1oey+ag++AkyeCd5i96PC1rmwokvuP0G1td9LPXjBegp9CPxx
vJgGoRdGO6dYIw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:40:49 2025 by rpki-client