Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
File: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft (raw, json)
Hash identifier: m3znJA9mgaiHU2M1BFJcdqskd+LjtBFMILaSGAh1bV0=
Subject key identifier: 39:D4:A7:21:F5:34:FB:D0:1E:37:39:2D:15:6F:79:41:A6:3C:5F:97
Authority key identifier: 75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
Certificate issuer: /CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Certificate serial: 01959073CC72493590BD64697C2E8CFDEFD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
Manifest number: 149A
Signing time: Thu 13 Mar 2025 17:01:02 +0000
Manifest this update: Thu 13 Mar 2025 17:01:02 +0000
Manifest next update: Fri 14 Mar 2025 17:01:02 +0000
Files and hashes: 1: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl (hash: DnTAmywvrolA+EbZj7YgxANtH2LCCjJbkLp6/lqhy3o=)
2: tP4Nr3k13Af3UtlucGdOvIgy7uY.roa (hash: ofrFnG5ByBdxFiFLthIkeYVusoIIsNMbVNLs6rFZMMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:73:cc:72:49:35:90:bd:64:69:7c:2e:8c:fd:ef:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Validity
Not Before: Mar 13 17:01:02 2025 GMT
Not After : Mar 14 17:01:02 2025 GMT
Subject: CN=39d4a721f534fbd01e37392d156f7941a63c5f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:8c:85:38:2e:79:e8:1c:ce:a8:9b:5d:ac:
ba:f0:aa:ec:fb:3a:6c:d2:34:de:e2:92:cf:44:90:
dc:cf:c2:b1:cd:5c:73:4c:30:11:70:f3:27:1f:53:
ce:fc:28:20:d1:e9:34:bb:8c:e7:90:c4:64:26:cd:
1a:e7:0b:7b:ed:98:86:d6:6e:a7:60:5e:83:69:78:
03:7b:c1:00:0c:d0:99:c8:e6:66:a7:df:a6:7a:1c:
15:69:5e:b7:48:ee:aa:62:5b:46:07:d1:56:11:ff:
6c:86:38:ad:79:45:78:e8:3b:de:1a:ec:e6:28:d3:
cd:15:c3:38:93:de:1a:6f:0a:dd:60:65:80:e4:59:
88:03:95:b8:07:bf:19:fe:43:41:5d:0c:5f:21:2c:
54:7c:e7:78:28:d6:6d:d0:28:04:27:c2:6c:c5:32:
41:aa:82:96:3c:94:10:7e:41:10:a8:9f:d3:92:17:
b6:2e:39:c6:68:4c:1d:02:f0:29:ef:e9:5e:fa:2a:
5d:30:74:1e:64:cf:cc:0b:4d:06:c4:38:19:53:49:
13:90:86:3e:f8:e9:28:53:55:09:ad:1c:5f:30:f9:
d0:dc:0a:02:02:da:01:be:68:e9:1b:9e:53:20:7a:
18:d5:56:26:31:ee:93:40:4c:41:93:9f:8c:3d:03:
ce:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D4:A7:21:F5:34:FB:D0:1E:37:39:2D:15:6F:79:41:A6:3C:5F:97
X509v3 Authority Key Identifier:
keyid:75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:83:2f:dc:68:5f:c0:e2:42:7d:40:b8:3f:ae:16:72:10:45:
c9:69:bf:98:88:91:93:b7:d8:c8:8f:29:1a:bd:c1:c1:3e:d6:
f7:96:d7:8e:bb:53:a6:72:5a:f6:11:91:7a:69:10:04:83:d8:
a7:bb:77:d8:61:74:62:63:39:fb:e2:89:60:a8:6f:cd:41:ac:
c3:e7:d1:62:e8:ee:e9:61:54:91:82:f8:7e:60:c9:39:43:35:
14:c5:85:04:40:97:2f:de:cc:63:bf:82:4b:e8:42:93:4c:e8:
22:fe:84:b3:ff:b7:9f:31:37:03:0f:b9:d6:e6:cc:38:da:83:
fa:70:87:d9:5b:01:1e:73:e1:03:53:ff:75:fc:59:f9:7c:e9:
eb:51:96:5d:f3:97:61:db:67:82:1b:80:e0:cb:c0:66:4e:6d:
15:a3:dd:e2:e9:3f:93:b3:e8:2d:27:43:bd:a6:33:7d:43:f3:
fc:99:9e:1f:b3:e8:54:ba:d6:f0:5f:f0:4c:05:9a:8f:bc:eb:
2b:6c:86:ba:86:76:0b:c8:7e:9c:4c:cd:2a:1d:de:4d:07:f5:
d6:1f:10:9e:55:fb:4a:9e:38:21:b9:19:dd:3f:40:ad:d3:9f:
1b:4e:5c:95:55:ee:8c:c7:17:60:1b:2a:14:bf:80:1a:fa:3a:
e0:2f:02:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWQc8xySTWQvWRpfC6M/e/WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YjM0NTU2MmQ1NzE4YjZjNGIyMDZiMWFlMzA0ZmM2ODQz
NmFkYjIwHhcNMjUwMzEzMTcwMTAyWhcNMjUwMzE0MTcwMTAyWjAzMTEwLwYDVQQD
EygzOWQ0YTcyMWY1MzRmYmQwMWUzNzM5MmQxNTZmNzk0MWE2M2M1Zjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9CMhTgueegczqibXay68Krs+zps
0jTe4pLPRJDcz8KxzVxzTDARcPMnH1PO/Cgg0ek0u4znkMRkJs0a5wt77ZiG1m6n
YF6DaXgDe8EADNCZyOZmp9+mehwVaV63SO6qYltGB9FWEf9shjiteUV46DveGuzm
KNPNFcM4k94abwrdYGWA5FmIA5W4B78Z/kNBXQxfISxUfOd4KNZt0CgEJ8JsxTJB
qoKWPJQQfkEQqJ/Tkhe2LjnGaEwdAvAp7+le+ipdMHQeZM/MC00GxDgZU0kTkIY+
+OkoU1UJrRxfMPnQ3AoCAtoBvmjpG55TIHoY1VYmMe6TQExBk5+MPQPOBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnUpyH1NPvQHjc5LRVveUGmPF+XMB8GA1UdIwQY
MBaAFHWzRVYtVxi2xLIGsa4wT8aENq2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJORlZpMVhHTGJFc2dheHJqQlB4b1EycmJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zMGVhZWUtMWFkNy00ZTczLWE0ZGMt
OGFlNTFmNjJkMjE4LzEvZGJORlZpMVhHTGJFc2dheHJqQlB4b1EycmJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8zMGVhZWUtMWFkNy00ZTczLWE0ZGMtOGFlNTFmNjJkMjE4
LzEvZGJORlZpMVhHTGJFc2dheHJqQlB4b1EycmJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHIMv3Ghf
wOJCfUC4P64WchBFyWm/mIiRk7fYyI8pGr3BwT7W95bXjrtTpnJa9hGRemkQBIPY
p7t32GF0YmM5++KJYKhvzUGsw+fRYuju6WFUkYL4fmDJOUM1FMWFBECXL97MY7+C
S+hCk0zoIv6Es/+3nzE3Aw+51ubMONqD+nCH2VsBHnPhA1P/dfxZ+Xzp61GWXfOX
YdtnghuA4MvAZk5tFaPd4uk/k7PoLSdDvaYzfUPz/JmeH7PoVLrW8F/wTAWaj7zr
K2yGuoZ2C8h+nEzNKh3eTQf11h8QnlX7Sp44IbkZ3T9ArdOfG05clVXujMcXYBsq
FL+AGvo64C8Caw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:36:02 2025 by rpki-client