Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
File: 1vvg67NTA0y7YyjrPo4_zTYLL7s.mft (raw, json)
Hash identifier: mPyPQAsHWwWmn+4XODZ5gfFVp7OnUPQPl7eChxq5Kaw=
Subject key identifier: F1:AC:B1:B7:12:18:81:B4:19:53:79:8E:95:CC:08:D1:35:96:46:0A
Authority key identifier: D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
Certificate issuer: /CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Certificate serial: 01964F35B7B32FB0C4AB5FCBB5698FA0776E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 18:00:42 +0000
Manifest this update: Sat 19 Apr 2025 18:00:42 +0000
Manifest next update: Sun 20 Apr 2025 18:00:42 +0000
Files and hashes: 1: 1vvg67NTA0y7YyjrPo4_zTYLL7s.crl (hash: EB5435KyvlkeQfuC5frsBWyLvpV27Gjm2NjGG8r2EWY=)
2: ruk9oKCw5z4NLnJ9yGyr_UCfoEY.roa (hash: 3E2wFt0mctq9eZeC5gr+9q8G9wNZ7Xmn3ppu8VejkKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:b7:b3:2f:b0:c4:ab:5f:cb:b5:69:8f:a0:77:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Validity
Not Before: Apr 19 18:00:42 2025 GMT
Not After : Apr 20 18:00:42 2025 GMT
Subject: CN=f1acb1b7121881b41953798e95cc08d13596460a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:84:aa:42:64:b1:87:fe:b0:4f:6f:4e:f1:
c7:20:e6:ce:79:62:b7:6d:78:e3:a1:56:0e:b6:1f:
fa:68:fd:25:b9:e0:1c:22:1d:17:4a:a1:a1:82:ef:
ee:70:02:e4:70:23:6a:94:e7:0d:8a:6b:6f:bf:f5:
bc:7b:fb:3a:bb:66:e0:e7:fc:9c:5d:9a:2b:8a:b9:
01:1f:9c:0e:e0:73:3b:2e:09:70:67:ab:69:68:b1:
73:7b:13:fd:54:ff:f3:54:95:9a:09:aa:67:43:ce:
68:09:5a:f6:83:b9:67:5e:a0:29:d2:e5:ac:04:5e:
91:f8:e9:08:c9:d5:05:24:4e:0f:2a:d7:40:dd:ed:
fc:83:85:75:2d:b0:b4:da:51:e5:23:d0:f1:e2:26:
e1:d0:06:f0:3c:f1:c8:ef:21:87:a2:d4:90:68:15:
eb:ff:9d:d3:a1:7a:92:2a:3b:66:80:dd:f3:66:07:
b3:8e:bc:b1:d6:69:b7:47:58:3d:d7:30:58:53:96:
f6:bd:1e:c1:89:28:b4:3b:77:75:68:bd:c7:a5:0c:
43:a8:c8:ee:ba:d5:ba:89:aa:b1:bf:f3:98:79:b3:
98:1f:32:82:28:e3:c0:25:80:bf:98:1c:58:8c:e2:
97:ec:63:6c:f2:ae:71:0f:78:c3:20:59:c1:5b:9a:
a7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AC:B1:B7:12:18:81:B4:19:53:79:8E:95:CC:08:D1:35:96:46:0A
X509v3 Authority Key Identifier:
keyid:D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:90:b4:61:3a:7f:be:3a:89:a8:95:a2:81:02:35:f0:8e:39:
05:90:fd:17:67:b6:54:17:4f:4c:77:89:f4:d0:58:a9:41:f0:
ab:8f:8d:e9:c4:c4:6f:04:e1:ec:dd:7b:81:f6:7c:a6:82:98:
29:20:96:5a:05:da:79:12:ab:9a:4c:a3:b3:fe:f0:af:f1:03:
69:45:b7:be:62:79:02:48:7c:90:58:cc:a6:f3:d1:aa:43:20:
a4:ec:7e:18:1c:95:eb:eb:19:48:6c:1a:5a:0f:60:12:07:d1:
7d:16:ef:90:4a:e0:41:4c:f1:a3:15:b6:5f:49:d4:53:fa:c2:
dd:65:98:03:de:96:96:d7:9c:b6:f3:de:c0:3e:9f:6d:5c:84:
f6:fc:48:e7:4d:23:34:c8:89:e0:81:cc:f7:18:8f:05:5f:25:
a4:e8:f4:d8:ca:4b:3c:dd:18:27:f2:95:08:36:d6:8d:eb:9d:
c2:53:51:b4:25:44:dc:da:03:4d:b2:1a:f0:a8:98:83:23:45:
4f:82:ae:85:c4:76:7c:26:e3:0b:5c:9c:28:9e:d0:d6:e5:7d:
ca:93:c3:26:45:33:c7:bc:ed:c9:cf:52:d9:09:5c:ac:41:ca:
91:35:22:fa:68:3a:e1:26:b4:73:88:f0:f7:71:4c:ef:f3:34:
c9:65:42:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPNbezL7DEq1/LtWmPoHduMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZmJlMGViYjM1MzAzNGNiYjYzMjhlYjNlOGUzZmNkMzYw
YjJmYmIwHhcNMjUwNDE5MTgwMDQyWhcNMjUwNDIwMTgwMDQyWjAzMTEwLwYDVQQD
EyhmMWFjYjFiNzEyMTg4MWI0MTk1Mzc5OGU5NWNjMDhkMTM1OTY0NjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrqEqkJksYf+sE9vTvHHIObOeWK3
bXjjoVYOth/6aP0lueAcIh0XSqGhgu/ucALkcCNqlOcNimtvv/W8e/s6u2bg5/yc
XZorirkBH5wO4HM7LglwZ6tpaLFzexP9VP/zVJWaCapnQ85oCVr2g7lnXqAp0uWs
BF6R+OkIydUFJE4PKtdA3e38g4V1LbC02lHlI9Dx4ibh0AbwPPHI7yGHotSQaBXr
/53ToXqSKjtmgN3zZgezjryx1mm3R1g91zBYU5b2vR7BiSi0O3d1aL3HpQxDqMju
utW6iaqxv/OYebOYHzKCKOPAJYC/mBxYjOKX7GNs8q5xD3jDIFnBW5qnYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGssbcSGIG0GVN5jpXMCNE1lkYKMB8GA1UdIwQY
MBaAFNb74OuzUwNMu2Mo6z6OP802Cy+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZ2ZzY3TlRBMHk3WXlqclBvNF96VFlMTDdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zMzUwNjAtMWIyNy00YzExLWEyYmMt
MDBlYmRmY2JiODZmLzEvMXZ2ZzY3TlRBMHk3WXlqclBvNF96VFlMTDdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8zMzUwNjAtMWIyNy00YzExLWEyYmMtMDBlYmRmY2JiODZm
LzEvMXZ2ZzY3TlRBMHk3WXlqclBvNF96VFlMTDdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm5C0YTp/
vjqJqJWigQI18I45BZD9F2e2VBdPTHeJ9NBYqUHwq4+N6cTEbwTh7N17gfZ8poKY
KSCWWgXaeRKrmkyjs/7wr/EDaUW3vmJ5Akh8kFjMpvPRqkMgpOx+GByV6+sZSGwa
Wg9gEgfRfRbvkErgQUzxoxW2X0nUU/rC3WWYA96WltectvPewD6fbVyE9vxI500j
NMiJ4IHM9xiPBV8lpOj02MpLPN0YJ/KVCDbWjeudwlNRtCVE3NoDTbIa8KiYgyNF
T4KuhcR2fCbjC1ycKJ7Q1uV9ypPDJkUzx7ztyc9S2QlcrEHKkTUi+mg64Sa0c4jw
93FM7/M0yWVCIw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:22 2025 by rpki-client