Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
File: f-aLEiNL1wNDAbyWsTiq4neGCj4.mft (raw, json)
Hash identifier: cF6FByJabYJm7yjxZjjobX9/yx9Q0bxxlZU0AOMBkxU=
Subject key identifier: B4:E4:A1:90:00:2C:F6:EF:69:B9:F2:67:10:CB:3B:C8:FF:49:2D:95
Authority key identifier: 7F:E6:8B:12:23:4B:D7:03:43:01:BC:96:B1:38:AA:E2:77:86:0A:3E
Certificate issuer: /CN=7fe68b12234bd7034301bc96b138aae277860a3e
Certificate serial: 01964F35670FA4084F2521618493B4AC565B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
Manifest number: 0366
Signing time: Sat 19 Apr 2025 18:00:21 +0000
Manifest this update: Sat 19 Apr 2025 18:00:21 +0000
Manifest next update: Sun 20 Apr 2025 18:00:21 +0000
Files and hashes: 1: Wafu5_6TB8FPy-qQRyuoAEGDAX0.roa (hash: NgD/yDHNjwI5dLXtEOgTxi5zpKMG9LLhqvORpEaB0Qs=)
2: f-aLEiNL1wNDAbyWsTiq4neGCj4.crl (hash: +Vnvl02yI19CR9LtvuYcoKpKRww1icxvd9Up7t5FfA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:67:0f:a4:08:4f:25:21:61:84:93:b4:ac:56:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe68b12234bd7034301bc96b138aae277860a3e
Validity
Not Before: Apr 19 18:00:21 2025 GMT
Not After : Apr 20 18:00:21 2025 GMT
Subject: CN=b4e4a190002cf6ef69b9f26710cb3bc8ff492d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:34:5e:a4:b4:ef:18:e8:60:c2:e1:e0:9b:
e5:04:1d:09:7e:c3:05:36:75:fc:c4:0b:bb:52:aa:
88:33:9c:2f:f9:ce:c2:11:4e:8f:06:91:06:06:a3:
9e:89:7a:48:52:7d:3c:fc:04:9c:81:86:48:6b:ee:
8f:05:b1:93:41:75:39:df:c7:c7:25:54:23:25:55:
86:e0:91:04:2d:0a:0c:58:f0:87:dd:53:f8:4d:f2:
41:03:d8:24:b4:c4:c5:3e:a8:ea:ab:30:aa:e7:60:
3f:4c:e4:f7:48:86:21:6e:4b:96:c4:e3:f7:13:dc:
53:c7:83:df:56:d1:2f:6c:91:af:e0:e0:7d:c8:71:
f3:0f:12:f7:bb:b2:0a:43:00:fd:aa:36:f3:a8:c1:
22:4c:ad:9b:7e:4b:ae:de:30:1c:31:54:eb:39:e7:
ea:51:3a:ff:9d:29:9e:2c:b8:89:7c:b8:ec:5b:d2:
b4:d6:1e:68:43:3a:51:b1:48:a9:ea:4e:21:6f:8c:
d5:02:67:62:60:04:64:99:11:41:5a:00:9f:23:9b:
3e:e8:cc:2d:33:d4:f9:77:5a:29:d9:22:ff:06:a5:
e9:08:ec:15:0e:0b:24:ab:df:28:94:f1:86:75:2b:
52:9b:7f:62:12:4d:50:72:92:3a:9a:ca:f6:51:96:
f5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E4:A1:90:00:2C:F6:EF:69:B9:F2:67:10:CB:3B:C8:FF:49:2D:95
X509v3 Authority Key Identifier:
keyid:7F:E6:8B:12:23:4B:D7:03:43:01:BC:96:B1:38:AA:E2:77:86:0A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b0:60:14:21:c6:42:76:c8:03:15:63:60:14:91:b5:e4:34:
1c:1d:1c:ad:6e:ae:dd:23:0f:02:ab:a0:fa:37:9e:84:fb:fc:
4e:ea:3f:e6:d2:64:e3:2a:61:f7:b9:93:31:43:35:1b:17:c1:
2b:53:eb:23:38:b4:3c:8f:d6:b9:24:95:b5:34:90:35:5f:83:
86:db:66:02:29:04:4f:11:26:a4:39:42:f0:2c:cc:95:1d:8d:
28:21:36:de:8c:ab:7e:34:e6:c6:10:54:33:3a:39:47:c1:93:
37:59:ce:c4:1d:b2:1b:f6:29:be:c7:6d:5c:36:9b:0b:15:81:
ea:cd:8f:4f:d7:e7:0f:79:43:a1:28:5a:1e:74:89:fb:e5:24:
0b:71:8b:f0:8c:09:1a:5d:3d:fd:21:da:78:f3:64:8f:fc:70:
80:a4:70:36:88:62:0d:e7:c6:61:40:a1:6a:b9:ed:03:fb:1b:
fc:ef:2d:5a:68:92:61:6e:bf:e7:4e:04:05:93:40:7c:cb:11:
fd:07:67:3f:bd:77:56:68:9d:60:55:c0:10:25:3c:ab:7b:87:
66:f4:20:f5:63:42:10:7f:83:21:af:6f:31:0c:d0:2c:67:a3:
b0:43:1f:3c:52:75:c0:5b:68:34:81:c1:51:62:93:b0:7b:c8:
c8:7b:38:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPNWcPpAhPJSFhhJO0rFZbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZTY4YjEyMjM0YmQ3MDM0MzAxYmM5NmIxMzhhYWUyNzc4
NjBhM2UwHhcNMjUwNDE5MTgwMDIxWhcNMjUwNDIwMTgwMDIxWjAzMTEwLwYDVQQD
EyhiNGU0YTE5MDAwMmNmNmVmNjliOWYyNjcxMGNiM2JjOGZmNDkyZDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts80XqS07xjoYMLh4JvlBB0JfsMF
NnX8xAu7UqqIM5wv+c7CEU6PBpEGBqOeiXpIUn08/AScgYZIa+6PBbGTQXU538fH
JVQjJVWG4JEELQoMWPCH3VP4TfJBA9gktMTFPqjqqzCq52A/TOT3SIYhbkuWxOP3
E9xTx4PfVtEvbJGv4OB9yHHzDxL3u7IKQwD9qjbzqMEiTK2bfkuu3jAcMVTrOefq
UTr/nSmeLLiJfLjsW9K01h5oQzpRsUip6k4hb4zVAmdiYARkmRFBWgCfI5s+6Mwt
M9T5d1op2SL/BqXpCOwVDgskq98olPGGdStSm39iEk1QcpI6msr2UZb1aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTkoZAALPbvabnyZxDLO8j/SS2VMB8GA1UdIwQY
MBaAFH/mixIjS9cDQwG8lrE4quJ3hgo+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZi1hTEVpTkwxd05EQWJ5V3NUaXE0bmVHQ2o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi80YTExMTEtOGYzYy00ZWRmLWI3N2Mt
MmZhMjYzMWJjMzFjLzEvZi1hTEVpTkwxd05EQWJ5V3NUaXE0bmVHQ2o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi80YTExMTEtOGYzYy00ZWRmLWI3N2MtMmZhMjYzMWJjMzFj
LzEvZi1hTEVpTkwxd05EQWJ5V3NUaXE0bmVHQ2o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrBgFCHG
QnbIAxVjYBSRteQ0HB0crW6u3SMPAqug+jeehPv8Tuo/5tJk4yph97mTMUM1GxfB
K1PrIzi0PI/WuSSVtTSQNV+DhttmAikETxEmpDlC8CzMlR2NKCE23oyrfjTmxhBU
Mzo5R8GTN1nOxB2yG/YpvsdtXDabCxWB6s2PT9fnD3lDoShaHnSJ++UkC3GL8IwJ
Gl09/SHaePNkj/xwgKRwNohiDefGYUCharntA/sb/O8tWmiSYW6/504EBZNAfMsR
/QdnP713VmidYFXAECU8q3uHZvQg9WNCEH+DIa9vMQzQLGejsEMfPFJ1wFtoNIHB
UWKTsHvIyHs4rQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 01:59:37 2025 by rpki-client