Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
File: 1-9JdpktGOvOLRE_zcxGxVm31_LI.mft (raw, json)
Hash identifier: lcvzUe0GrVJ/pgy/xZmbQ8lwUgkv+BjyYZJgPJYMvUM=
Subject key identifier: 9B:53:D0:0E:4D:75:EF:46:93:9E:11:E7:AC:59:9D:7F:7A:08:03:5C
Authority key identifier: FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
Certificate issuer: /CN=fbd25da64b463af38b444ff37311b1566df5fcb2
Certificate serial: 01964BC68DA417C0C82907C2E00407F5469B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 02:00:25 +0000
Manifest this update: Sat 19 Apr 2025 02:00:25 +0000
Manifest next update: Sun 20 Apr 2025 02:00:25 +0000
Files and hashes: 1: 1-9JdpktGOvOLRE_zcxGxVm31_LI.crl (hash: Hb5/WKsSgwP2vnkd/rlPOYctjwwT95rSvGJNme+NkjQ=)
2: 3GvpHIxxSBOh_JH9oQawEJfN78g.roa (hash: m/cK1kN4KKcnsjbPKB2PXLCdGbbG3lcfoo431XMf3kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:c6:8d:a4:17:c0:c8:29:07:c2:e0:04:07:f5:46:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd25da64b463af38b444ff37311b1566df5fcb2
Validity
Not Before: Apr 19 02:00:25 2025 GMT
Not After : Apr 20 02:00:25 2025 GMT
Subject: CN=9b53d00e4d75ef46939e11e7ac599d7f7a08035c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c2:5e:fa:a7:3e:96:9a:8a:aa:68:eb:99:c9:
27:59:19:92:61:91:51:16:15:60:10:a7:32:d7:41:
6f:71:df:ba:92:61:3e:15:95:d9:f6:72:2b:ef:68:
60:8e:62:cd:b3:15:5d:84:62:da:48:63:26:07:24:
dd:cf:7a:53:cf:9f:0b:99:48:e0:38:a9:be:f6:e5:
a9:db:32:de:50:79:1d:e5:b1:34:d1:fd:ff:08:86:
c2:41:d6:d6:ed:fc:64:0f:f6:53:7d:24:ed:6b:8b:
89:77:03:f3:1b:f8:4f:b9:3a:5a:e5:a8:b0:e7:20:
1a:4f:76:35:bb:24:8e:68:75:4a:ed:2c:b2:30:ce:
6f:2c:02:81:46:68:78:b4:17:de:07:8c:f2:42:1e:
d0:47:8a:f3:c9:d6:e3:3f:94:01:fb:cc:8e:0a:fa:
a0:f2:56:05:96:1e:d1:dc:e2:56:a8:46:f5:62:d8:
ff:20:91:9f:b3:6a:92:4b:2f:8f:66:11:94:a4:e6:
66:0d:44:9a:6d:9d:fb:6f:4e:2c:fc:82:3a:41:6d:
9b:70:8b:d4:65:57:96:8e:9b:8b:a8:3b:23:43:88:
ec:75:4f:82:40:bd:88:11:f3:98:fe:0a:33:27:08:
ba:ee:36:77:da:18:cf:7e:ad:c6:ee:b8:70:ff:41:
49:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:53:D0:0E:4D:75:EF:46:93:9E:11:E7:AC:59:9D:7F:7A:08:03:5C
X509v3 Authority Key Identifier:
keyid:FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:90:00:e7:03:da:10:30:22:f7:dc:8f:4d:b7:4c:10:7f:c5:
bf:e3:79:99:87:45:93:3d:58:8a:e7:48:7f:8b:03:a5:09:9a:
3b:13:4b:01:9d:51:88:34:a9:3d:9e:93:54:eb:dd:ff:94:5e:
ae:b7:2e:29:64:00:5b:ba:6f:d6:6b:51:c9:0e:11:53:29:0a:
89:5c:54:6b:57:80:b7:bf:69:97:04:48:60:af:96:c5:e6:c9:
5c:13:7b:f0:38:51:23:7c:35:e7:e3:ea:95:ba:33:b5:ad:c6:
89:59:c2:ab:7e:8c:af:49:d3:95:4b:c3:ac:05:9e:90:c0:c4:
0d:6f:d9:02:44:f0:0a:53:2c:6f:14:57:58:e6:be:8a:06:e0:
9b:1b:86:28:6d:ad:f3:ed:c4:3e:05:4b:d3:fe:39:e7:20:3b:
b8:27:69:b5:fd:42:6d:c2:8b:c3:7d:fa:97:8e:36:ca:97:91:
a1:ac:39:d3:0d:4b:e7:b4:6c:ea:bf:97:12:5b:33:47:a2:f0:
4c:25:21:11:53:39:69:d1:d1:93:0c:78:5b:dc:69:91:ee:65:
85:76:9e:3b:30:db:0a:0e:27:bf:a4:7a:2b:ee:47:3a:d8:c8:
38:88:62:7d:29:36:4c:de:b7:5f:44:51:29:72:d5:5c:d8:17:
4f:e3:91:24
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZLxo2kF8DIKQfC4AQH9UabMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZDI1ZGE2NGI0NjNhZjM4YjQ0NGZmMzczMTFiMTU2NmRm
NWZjYjIwHhcNMjUwNDE5MDIwMDI1WhcNMjUwNDIwMDIwMDI1WjAzMTEwLwYDVQQD
Eyg5YjUzZDAwZTRkNzVlZjQ2OTM5ZTExZTdhYzU5OWQ3ZjdhMDgwMzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcJe+qc+lpqKqmjrmcknWRmSYZFR
FhVgEKcy10Fvcd+6kmE+FZXZ9nIr72hgjmLNsxVdhGLaSGMmByTdz3pTz58LmUjg
OKm+9uWp2zLeUHkd5bE00f3/CIbCQdbW7fxkD/ZTfSTta4uJdwPzG/hPuTpa5aiw
5yAaT3Y1uySOaHVK7SyyMM5vLAKBRmh4tBfeB4zyQh7QR4rzydbjP5QB+8yOCvqg
8lYFlh7R3OJWqEb1Ytj/IJGfs2qSSy+PZhGUpOZmDUSabZ37b04s/II6QW2bcIvU
ZVeWjpuLqDsjQ4jsdU+CQL2IEfOY/gozJwi67jZ32hjPfq3G7rhw/0FJCwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJtT0A5Nde9Gk54R56xZnX96CANcMB8GA1UdIwQY
MBaAFPvSXaZLRjrzi0RP83MRsVZt9fyyMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05SmRwa3RHT3ZPTFJFX3pjeEd4Vm0zMV9MSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvZmE2NWU4LWU1OTctNDczOC04Mzk2
LTgyNWVjMTA3NWRlNi8xLzEtOUpkcGt0R092T0xSRV96Y3hHeFZtMzFfTEkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQxL2ZhNjVlOC1lNTk3LTQ3MzgtODM5Ni04MjVlYzEwNzVk
ZTYvMS8xLTlKZHBrdEdPdk9MUkVfemN4R3hWbTMxX0xJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJAA
5wPaEDAi99yPTbdMEH/Fv+N5mYdFkz1YiudIf4sDpQmaOxNLAZ1RiDSpPZ6TVOvd
/5RerrcuKWQAW7pv1mtRyQ4RUykKiVxUa1eAt79plwRIYK+WxebJXBN78DhRI3w1
5+Pqlbozta3GiVnCq36Mr0nTlUvDrAWekMDEDW/ZAkTwClMsbxRXWOa+igbgmxuG
KG2t8+3EPgVL0/455yA7uCdptf1CbcKLw336l442ypeRoaw50w1L57Rs6r+XElsz
R6LwTCUhEVM5adHRkwx4W9xpke5lhXaeOzDbCg4nv6R6K+5HOtjIOIhifSk2TN63
X0RRKXLVXNgXT+ORJA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:22:14 2025 by rpki-client