Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
File: D0fcf_SFuEE7449b7oCRczCzFzg.mft (raw, json)
Hash identifier: GWOPZ0KwUpYf+5CAzG5rh4M3687Et/5m3YA7Y8fKL8U=
Subject key identifier: 7F:0E:72:B3:A2:7F:9E:91:4B:8F:30:17:43:AD:54:FF:F6:8D:72:80
Authority key identifier: 0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
Certificate issuer: /CN=0f47dc7ff485b8413be38f5bee80917330b31738
Certificate serial: 01964FA379638C3D1088F974A3DC43E1C173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 20:00:35 +0000
Manifest this update: Sat 19 Apr 2025 20:00:35 +0000
Manifest next update: Sun 20 Apr 2025 20:00:35 +0000
Files and hashes: 1: 4MlBcLkACtQP09DCmTzQOZzBiyU.roa (hash: VC+StI3JXPJWvc2fZQnaWQlAtRDc6F/BQhSkSjXucPs=)
2: D0fcf_SFuEE7449b7oCRczCzFzg.crl (hash: qfw4GZ/gQb/sBOOhC5p8HB/ETxHeSJyQ7OFa+XxuzOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:79:63:8c:3d:10:88:f9:74:a3:dc:43:e1:c1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f47dc7ff485b8413be38f5bee80917330b31738
Validity
Not Before: Apr 19 20:00:35 2025 GMT
Not After : Apr 20 20:00:35 2025 GMT
Subject: CN=7f0e72b3a27f9e914b8f301743ad54fff68d7280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:78:65:25:d4:1d:16:9a:cb:cb:a1:e0:4c:af:
d4:3b:48:fa:47:dd:50:eb:ca:4f:ee:60:1f:85:ef:
9d:58:ed:88:50:51:cd:db:20:45:b0:9c:5e:38:6e:
57:ef:06:a6:df:c6:25:83:80:18:30:77:99:ea:76:
4c:8f:37:68:ca:c4:2c:95:5b:e0:0d:8d:a8:86:da:
47:b1:82:8b:a7:59:62:c8:af:c8:05:5c:5d:33:c3:
a9:67:52:ae:6d:74:45:2b:bd:76:be:af:c3:87:1a:
47:d3:6f:bf:5b:39:1a:78:09:0f:d2:8c:87:d3:a4:
8a:b7:5d:07:af:5c:90:bd:f2:6f:63:99:73:21:15:
6b:d2:62:ff:cd:99:9d:68:ba:4b:f7:bb:38:26:b9:
a1:bb:25:ca:57:03:aa:00:a0:0d:14:51:30:73:76:
0b:b1:09:f8:42:20:fb:c6:5f:3d:a0:e2:ad:16:ce:
27:d1:b2:5c:38:65:51:bf:7d:0d:17:8e:8a:88:9e:
77:90:17:a5:14:9a:74:60:2c:8a:47:14:ea:a6:f4:
53:83:16:c8:90:20:0f:8d:13:49:ee:a1:97:d0:a1:
f0:a8:9e:4b:a6:c5:cd:39:95:37:ca:0f:81:97:80:
54:69:42:34:3d:71:4b:b9:21:5a:a7:dc:14:93:50:
5d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0E:72:B3:A2:7F:9E:91:4B:8F:30:17:43:AD:54:FF:F6:8D:72:80
X509v3 Authority Key Identifier:
keyid:0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:89:de:0a:66:18:53:70:29:22:01:71:bf:24:33:68:c2:06:
eb:56:1b:57:a1:6a:00:62:57:32:c1:8e:ad:9d:72:50:e1:78:
af:a1:20:bb:0d:77:00:ac:91:8c:d8:b5:83:f5:8f:4d:4c:37:
ea:75:98:b6:12:5b:a7:6c:4e:4e:e5:6c:dd:16:5d:f6:3e:d9:
14:a6:e4:09:da:2f:63:b7:ff:40:b9:22:de:66:94:ce:49:22:
42:06:9a:7b:7a:10:1c:13:35:c5:ec:17:0d:f8:ba:da:77:1e:
e7:17:46:16:b2:4c:21:05:1b:94:93:45:92:cb:31:d4:17:97:
3a:c6:12:c4:1b:b2:2d:37:db:9e:84:0c:65:66:0b:2d:d9:88:
32:09:a0:2c:94:7f:cf:aa:2c:97:d3:69:0f:48:6b:e9:21:cd:
d5:c0:4c:ba:5e:56:7b:e9:1d:a4:93:0f:55:ff:a9:e8:c9:d7:
ec:a4:a9:02:eb:42:b5:1b:fa:86:54:a8:57:64:34:b3:b3:03:
4b:da:91:92:55:63:37:c8:47:ac:d5:5f:4c:02:cb:c5:e3:4c:
f7:97:bc:c0:74:81:1d:60:93:4c:86:13:b1:1c:91:05:6f:32:
0a:cd:7b:c5:8c:f1:be:91:65:88:c8:c5:da:af:de:31:7c:47:
90:56:eb:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPo3ljjD0QiPl0o9xD4cFzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNDdkYzdmZjQ4NWI4NDEzYmUzOGY1YmVlODA5MTczMzBi
MzE3MzgwHhcNMjUwNDE5MjAwMDM1WhcNMjUwNDIwMjAwMDM1WjAzMTEwLwYDVQQD
Eyg3ZjBlNzJiM2EyN2Y5ZTkxNGI4ZjMwMTc0M2FkNTRmZmY2OGQ3MjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXhlJdQdFprLy6HgTK/UO0j6R91Q
68pP7mAfhe+dWO2IUFHN2yBFsJxeOG5X7wam38Ylg4AYMHeZ6nZMjzdoysQslVvg
DY2ohtpHsYKLp1liyK/IBVxdM8OpZ1KubXRFK712vq/DhxpH02+/WzkaeAkP0oyH
06SKt10Hr1yQvfJvY5lzIRVr0mL/zZmdaLpL97s4JrmhuyXKVwOqAKANFFEwc3YL
sQn4QiD7xl89oOKtFs4n0bJcOGVRv30NF46KiJ53kBelFJp0YCyKRxTqpvRTgxbI
kCAPjRNJ7qGX0KHwqJ5LpsXNOZU3yg+Bl4BUaUI0PXFLuSFap9wUk1BdwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8OcrOif56RS48wF0OtVP/2jXKAMB8GA1UdIwQY
MBaAFA9H3H/0hbhBO+OPW+6AkXMwsxc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDBmY2ZfU0Z1RUU3NDQ5YjdvQ1JjekN6RnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZjUwNzgtMjI0My00ZmRiLWFiMmIt
MmQ4NDdhM2Y3ZDJmLzEvRDBmY2ZfU0Z1RUU3NDQ5YjdvQ1JjekN6RnpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hZjUwNzgtMjI0My00ZmRiLWFiMmItMmQ4NDdhM2Y3ZDJm
LzEvRDBmY2ZfU0Z1RUU3NDQ5YjdvQ1JjekN6RnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4neCmYY
U3ApIgFxvyQzaMIG61YbV6FqAGJXMsGOrZ1yUOF4r6Eguw13AKyRjNi1g/WPTUw3
6nWYthJbp2xOTuVs3RZd9j7ZFKbkCdovY7f/QLki3maUzkkiQgaae3oQHBM1xewX
Dfi62nce5xdGFrJMIQUblJNFkssx1BeXOsYSxBuyLTfbnoQMZWYLLdmIMgmgLJR/
z6osl9NpD0hr6SHN1cBMul5We+kdpJMPVf+p6MnX7KSpAutCtRv6hlSoV2Q0s7MD
S9qRklVjN8hHrNVfTALLxeNM95e8wHSBHWCTTIYTsRyRBW8yCs17xYzxvpFliMjF
2q/eMXxHkFbrng==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:06 2025 by rpki-client