Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
File: I67pTQ__bGx1KmlC_6lirjfH5rY.mft (raw, json)
Hash identifier: jLAO6IEhGsyeDqSKYDk8vEuSGW435o5Sh7a24jS6Hi0=
Subject key identifier: FA:A2:16:02:7D:A5:26:62:E1:68:CD:20:DC:22:C2:C8:A0:70:C5:A1
Authority key identifier: 23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
Certificate issuer: /CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Certificate serial: 0196591444C6E38B8671E4225B56ED5287BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 16:00:22 +0000
Manifest this update: Mon 21 Apr 2025 16:00:22 +0000
Manifest next update: Tue 22 Apr 2025 16:00:22 +0000
Files and hashes: 1: I67pTQ__bGx1KmlC_6lirjfH5rY.crl (hash: ObjtQ+cVTMVaV/JtBI6FeJ7qRMBwLm56xAEavrf7nao=)
2: gR0LYM6QGI-qsid_nSKtkxsGl7k.roa (hash: ZNyhf/gNov+ZA8ZlWmnXcmM+r4ht/hEtiegrCZhA7GA=)
3: s_AzbY_4r2Y_-4vfgCGonUFbZoY.roa (hash: HgaSiRleH54HgG93gpFtFR8yZx0H4YCH5wCdvkPpECU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:44:c6:e3:8b:86:71:e4:22:5b:56:ed:52:87:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Validity
Not Before: Apr 21 16:00:22 2025 GMT
Not After : Apr 22 16:00:22 2025 GMT
Subject: CN=faa216027da52662e168cd20dc22c2c8a070c5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:36:8e:5e:e8:29:7c:0f:f1:54:ae:13:17:17:
f7:7d:f2:df:aa:3d:32:6b:ca:c7:03:da:87:cc:9e:
6e:10:fc:10:cd:a2:7a:a9:37:71:f1:c3:7a:a6:bb:
9b:89:ef:c7:5e:ad:f0:43:82:c7:10:35:fc:88:ce:
76:5e:92:90:0f:4d:f4:28:1f:62:b9:12:53:0b:a9:
cc:16:d5:6e:0e:9f:11:b5:ee:e3:2c:6a:40:1c:5e:
b0:ac:8a:97:11:cd:04:c9:51:b4:73:90:9e:d0:8b:
1a:cc:6e:29:5a:10:dd:53:26:ca:e4:bb:5c:cd:c2:
b6:70:2d:cd:d0:20:ce:a8:1f:9d:62:ac:5f:08:73:
ce:b5:ba:4e:cf:e3:c9:bc:98:10:e0:d0:1e:ed:65:
b7:50:4e:92:0c:e5:0c:d6:ac:d5:3c:e8:7c:37:2b:
31:35:62:6b:92:c1:5a:cb:1a:31:23:a8:a7:e2:d3:
ce:80:d2:8e:43:10:cf:ea:a7:27:ef:64:e3:a2:f8:
23:e5:fb:af:4a:9d:03:dc:49:99:9a:f6:31:ee:22:
b4:6c:5f:03:23:94:8a:c1:20:65:64:ed:05:11:87:
cb:88:db:c8:7b:11:72:9f:16:53:63:09:17:cc:da:
29:ea:2f:28:b1:ca:10:43:29:af:47:c9:2a:e1:67:
25:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A2:16:02:7D:A5:26:62:E1:68:CD:20:DC:22:C2:C8:A0:70:C5:A1
X509v3 Authority Key Identifier:
keyid:23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1f:51:44:5a:58:65:d0:c1:64:66:7a:1c:cd:b7:1f:32:a9:
a5:8b:75:3c:d0:0a:cf:33:b3:56:98:d8:1c:0d:dd:6f:22:93:
ad:67:bd:fc:dc:c4:86:56:bb:a9:6c:b9:4d:4f:96:0a:a0:31:
0b:61:2f:ad:a7:99:7f:2c:e3:3f:7b:48:8d:dc:09:82:8c:e8:
9c:3e:93:0c:79:b3:cc:2a:9d:8d:cd:2e:dd:cc:e1:d5:97:4b:
c3:4b:3a:4a:e1:fd:7d:b2:a5:50:05:cf:f9:df:46:3c:6f:b5:
85:cd:84:37:09:56:04:23:ee:de:87:7c:ad:0e:d7:04:2d:0a:
57:7a:88:5b:23:a2:d7:8e:a8:03:aa:bc:06:a2:5b:96:b7:33:
f1:b7:2a:06:08:87:74:a8:de:ec:87:3d:00:6b:5c:31:d9:79:
c0:6f:7b:2b:cb:3d:bc:b9:aa:98:f3:02:25:9a:1b:9a:aa:df:
c1:e5:3a:91:06:f9:2c:22:df:bb:fb:1b:03:f4:83:ef:59:04:
5c:65:b7:49:ef:03:d9:a1:bc:2c:ee:1f:7f:8d:2d:21:ba:75:
84:c1:27:27:76:73:43:fc:22:14:fa:b4:38:dd:32:f2:17:3d:
00:37:53:61:a6:7d:81:e2:0d:a2:47:31:30:51:7f:47:08:0d:
24:59:8f:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZFETG44uGceQiW1btUoe7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYWVlOTRkMGZmZjZjNmM3NTJhNjk0MmZmYTk2MmFlMzdj
N2U2YjYwHhcNMjUwNDIxMTYwMDIyWhcNMjUwNDIyMTYwMDIyWjAzMTEwLwYDVQQD
EyhmYWEyMTYwMjdkYTUyNjYyZTE2OGNkMjBkYzIyYzJjOGEwNzBjNWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDaOXugpfA/xVK4TFxf3ffLfqj0y
a8rHA9qHzJ5uEPwQzaJ6qTdx8cN6prubie/HXq3wQ4LHEDX8iM52XpKQD030KB9i
uRJTC6nMFtVuDp8Rte7jLGpAHF6wrIqXEc0EyVG0c5Ce0IsazG4pWhDdUybK5Ltc
zcK2cC3N0CDOqB+dYqxfCHPOtbpOz+PJvJgQ4NAe7WW3UE6SDOUM1qzVPOh8Nysx
NWJrksFayxoxI6in4tPOgNKOQxDP6qcn72Tjovgj5fuvSp0D3EmZmvYx7iK0bF8D
I5SKwSBlZO0FEYfLiNvIexFynxZTYwkXzNop6i8oscoQQymvR8kq4WcltQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqiFgJ9pSZi4WjNINwiwsigcMWhMB8GA1UdIwQY
MBaAFCOu6U0P/2xsdSppQv+pYq43x+a2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTY3cFRRX19iR3gxS21sQ182bGlyamZINXJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kNzAyNjItZjg3Yy00MTI2LWFmODUt
YTMxODUzZTY5OTdhLzEvSTY3cFRRX19iR3gxS21sQ182bGlyamZINXJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kNzAyNjItZjg3Yy00MTI2LWFmODUtYTMxODUzZTY5OTdh
LzEvSTY3cFRRX19iR3gxS21sQ182bGlyamZINXJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASB9RRFpY
ZdDBZGZ6HM23HzKppYt1PNAKzzOzVpjYHA3dbyKTrWe9/NzEhla7qWy5TU+WCqAx
C2EvraeZfyzjP3tIjdwJgozonD6TDHmzzCqdjc0u3czh1ZdLw0s6SuH9fbKlUAXP
+d9GPG+1hc2ENwlWBCPu3od8rQ7XBC0KV3qIWyOi146oA6q8BqJblrcz8bcqBgiH
dKje7Ic9AGtcMdl5wG97K8s9vLmqmPMCJZobmqrfweU6kQb5LCLfu/sbA/SD71kE
XGW3Se8D2aG8LO4ff40tIbp1hMEnJ3ZzQ/wiFPq0ON0y8hc9ADdTYaZ9geINokcx
MFF/RwgNJFmP0g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:27:08 2025 by rpki-client