Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
File: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft (raw, json)
Hash identifier: fDWSCv0hCQcQ88SA95bSUvZE72yMTCuojKb1+qaLH7w=
Subject key identifier: 80:C3:E1:18:D9:82:37:2F:53:AD:27:14:79:A3:2C:6A:C8:2E:2D:8A
Authority key identifier: FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
Certificate issuer: /CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Certificate serial: 019645568CE7336F52E1A0C3ECF9D2F0C46E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 20:00:22 +0000
Manifest this update: Thu 17 Apr 2025 20:00:22 +0000
Manifest next update: Fri 18 Apr 2025 20:00:22 +0000
Files and hashes: 1: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl (hash: uS7FedqYT92Kq2Ua8awodVt83jovegACqkmAr5JJBRQ=)
2: jWNgVTvc3owe3kF91r8d7uRQV_o.roa (hash: uQLZ/d2z4o+33Z42D6wrDoH9q/yv6pAWgOV+vjfJeYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:8c:e7:33:6f:52:e1:a0:c3:ec:f9:d2:f0:c4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Validity
Not Before: Apr 17 20:00:22 2025 GMT
Not After : Apr 18 20:00:22 2025 GMT
Subject: CN=80c3e118d982372f53ad271479a32c6ac82e2d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1e:2e:5c:10:37:b2:81:f3:77:d4:01:d3:72:
19:ee:96:cd:d5:10:cc:ac:49:9a:d8:6a:88:c0:b0:
b5:a7:69:21:31:bd:e1:a0:48:52:92:58:c5:b5:11:
8b:be:d5:12:6f:e5:e6:14:56:48:80:95:1e:ca:12:
3c:b0:47:b4:24:d7:e6:fc:a6:a3:36:f3:e6:2c:e9:
c0:b1:0f:29:ee:47:0e:15:23:93:cc:17:b8:6c:00:
b6:6b:ba:7e:a9:07:3e:ad:45:3c:ea:92:ba:72:96:
ee:5e:8a:65:cd:74:34:0f:0e:10:1e:13:0d:29:65:
33:bb:3d:92:92:be:c2:c7:8a:f6:26:04:30:d8:f8:
20:0f:a8:9a:82:ac:15:fd:38:51:c4:24:8d:4f:10:
fa:77:aa:53:83:98:af:e9:c5:1a:12:ce:21:43:d2:
24:be:00:82:d3:5f:ab:c1:2c:58:a5:89:f0:d0:0e:
d2:47:e2:99:54:03:ec:71:d4:5e:95:2b:cc:d6:2f:
a9:83:dc:5f:18:9d:97:2e:b2:c3:5e:05:44:04:89:
d9:29:33:04:c5:8b:16:f2:39:26:57:65:88:18:7d:
e5:56:89:82:b6:01:1d:de:0c:a6:62:e0:d4:0b:2d:
7c:18:2f:df:4b:5c:f8:00:0e:69:3c:10:9b:35:81:
15:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C3:E1:18:D9:82:37:2F:53:AD:27:14:79:A3:2C:6A:C8:2E:2D:8A
X509v3 Authority Key Identifier:
keyid:FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:50:a0:fe:da:c7:d4:7d:9a:29:53:c3:64:e3:81:36:77:4d:
0c:0f:0a:af:a5:16:8d:92:b5:fa:d4:d6:20:4c:59:5e:57:3e:
75:cd:64:36:e6:32:8f:52:18:8a:f3:6d:43:e8:fa:9f:55:2f:
de:9b:d1:b1:6d:8c:68:ff:1a:36:d1:d9:98:13:1c:98:ac:fa:
5d:1a:1f:9c:38:f6:47:c4:92:4c:9e:ab:d1:73:34:36:27:49:
e5:6f:fe:4e:78:8e:d4:d2:45:55:e4:8e:e1:43:26:a0:0a:8e:
e0:82:a2:b4:6d:ae:b5:17:35:c9:bd:a8:57:57:f6:e5:34:44:
78:3f:f3:74:9e:fa:a0:87:0d:ee:7b:c2:d6:c9:d9:a5:40:58:
1d:49:67:d5:e3:c4:f5:45:24:ba:f7:75:34:b1:d5:74:85:18:
bf:b0:08:16:fd:13:9d:16:e9:e6:d7:c4:4e:c6:53:1c:a4:01:
ef:06:6f:ce:3f:59:44:82:a9:02:71:d9:74:ec:07:c5:6e:0b:
13:a2:b2:39:4e:18:a8:18:48:77:8e:73:3c:0f:53:67:c9:08:
c5:1f:37:2e:03:fc:f1:91:3e:8f:5d:ab:78:bf:be:8c:d5:a8:
84:a6:cd:a5:87:72:b7:d6:29:52:51:c2:13:50:ef:22:48:a6:
19:39:a5:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFVoznM29S4aDD7PnS8MRuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkY2I5NzZiYjYwMjkyMTZmN2EyYWQwNWI3OTMyZjRhNTVl
MGNmOGEwHhcNMjUwNDE3MjAwMDIyWhcNMjUwNDE4MjAwMDIyWjAzMTEwLwYDVQQD
Eyg4MGMzZTExOGQ5ODIzNzJmNTNhZDI3MTQ3OWEzMmM2YWM4MmUyZDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh4uXBA3soHzd9QB03IZ7pbN1RDM
rEma2GqIwLC1p2khMb3hoEhSkljFtRGLvtUSb+XmFFZIgJUeyhI8sEe0JNfm/Kaj
NvPmLOnAsQ8p7kcOFSOTzBe4bAC2a7p+qQc+rUU86pK6cpbuXoplzXQ0Dw4QHhMN
KWUzuz2Skr7Cx4r2JgQw2PggD6iagqwV/ThRxCSNTxD6d6pTg5iv6cUaEs4hQ9Ik
vgCC01+rwSxYpYnw0A7SR+KZVAPscdRelSvM1i+pg9xfGJ2XLrLDXgVEBInZKTME
xYsW8jkmV2WIGH3lVomCtgEd3gymYuDUCy18GC/fS1z4AA5pPBCbNYEVaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDD4RjZgjcvU60nFHmjLGrILi2KMB8GA1UdIwQY
MBaAFP3Ll2u2ApIW96KtBbeTL0pV4M+KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80OTRmMjctNGJiYy00YjM4LTg0OWIt
ZDg4OGEwNjg5YzE5LzEvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80OTRmMjctNGJiYy00YjM4LTg0OWItZDg4OGEwNjg5YzE5
LzEvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFCg/trH
1H2aKVPDZOOBNndNDA8Kr6UWjZK1+tTWIExZXlc+dc1kNuYyj1IYivNtQ+j6n1Uv
3pvRsW2MaP8aNtHZmBMcmKz6XRofnDj2R8SSTJ6r0XM0NidJ5W/+TniO1NJFVeSO
4UMmoAqO4IKitG2utRc1yb2oV1f25TREeD/zdJ76oIcN7nvC1snZpUBYHUln1ePE
9UUkuvd1NLHVdIUYv7AIFv0TnRbp5tfETsZTHKQB7wZvzj9ZRIKpAnHZdOwHxW4L
E6KyOU4YqBhId45zPA9TZ8kIxR83LgP88ZE+j12reL++jNWohKbNpYdyt9YpUlHC
E1DvIkimGTml1g==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:26:56 2025 by rpki-client