Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft
File: 79kZGXhjH8lVrA9RBi1c6YROrgM.mft (raw, json)
Hash identifier: s4wfxHL7jmNs9TQUMR2kvc54z+J2jCN91pWfAeTTutw=
Subject key identifier: D8:C8:32:67:59:32:0D:84:D4:F8:F5:BD:0A:30:12:2F:E9:67:6C:3F
Authority key identifier: EF:D9:19:19:78:63:1F:C9:55:AC:0F:51:06:2D:5C:E9:84:4E:AE:03
Certificate issuer: /CN=efd9191978631fc955ac0f51062d5ce9844eae03
Certificate serial: 0196556EC16358687E8C997A78008005F48E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/79kZGXhjH8lVrA9RBi1c6YROrgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 23:00:43 +0000
Manifest this update: Sun 20 Apr 2025 23:00:43 +0000
Manifest next update: Mon 21 Apr 2025 23:00:43 +0000
Files and hashes: 1: 79kZGXhjH8lVrA9RBi1c6YROrgM.crl (hash: rCdLEfi2GiC/nNT2t838WpXrfejXYpmya8UDTinaXiI=)
2: arsEMbCDi2wvIB9pruDthcas_84.roa (hash: ilM4++SMMDRks/dY7/gazwzm3WAh1QbyvXCjkzciULs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/79kZGXhjH8lVrA9RBi1c6YROrgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:c1:63:58:68:7e:8c:99:7a:78:00:80:05:f4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efd9191978631fc955ac0f51062d5ce9844eae03
Validity
Not Before: Apr 20 23:00:43 2025 GMT
Not After : Apr 21 23:00:43 2025 GMT
Subject: CN=d8c8326759320d84d4f8f5bd0a30122fe9676c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c4:01:cf:a0:07:f8:72:9b:a1:63:45:f8:c8:
2b:fc:45:49:27:4d:c8:6e:50:23:bf:e0:0e:45:0e:
2d:b7:66:70:c9:c6:cc:41:ba:b6:a7:da:1b:f6:2c:
14:f7:23:48:6c:f0:ef:43:49:f9:4d:25:39:26:dc:
5b:87:0c:bf:3f:32:26:6d:32:2d:ee:8c:7f:a7:23:
34:cd:f3:98:55:09:75:f3:d5:99:dd:72:f5:1c:4e:
be:b3:cb:a5:56:2b:2f:41:fd:46:ff:25:04:15:22:
28:b0:4b:d9:c9:be:c5:cb:c3:0c:9e:ab:96:90:ed:
2a:b9:71:eb:49:65:f3:bd:9b:03:fe:b8:00:11:60:
c6:1b:03:3d:44:94:49:21:07:a0:08:c2:15:6c:23:
9f:91:8f:10:c8:a4:96:44:44:8d:e7:82:26:39:03:
f9:1e:f4:47:2b:6a:89:34:67:51:41:44:02:0b:2e:
d8:0f:3c:aa:7f:da:d5:5d:3e:b6:79:64:6d:37:c1:
2c:c4:11:a3:1f:96:5d:6d:a5:c0:de:a4:be:6b:c1:
ef:80:5f:d1:8b:cb:37:83:69:ad:ed:19:d3:aa:36:
0a:a1:11:8d:5f:33:0c:77:dc:d6:f1:13:2d:42:f9:
14:d6:f9:e9:e8:66:62:0e:eb:a8:f6:ac:40:ec:a9:
a9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C8:32:67:59:32:0D:84:D4:F8:F5:BD:0A:30:12:2F:E9:67:6C:3F
X509v3 Authority Key Identifier:
keyid:EF:D9:19:19:78:63:1F:C9:55:AC:0F:51:06:2D:5C:E9:84:4E:AE:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79kZGXhjH8lVrA9RBi1c6YROrgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:fb:a3:5d:88:38:d2:2a:0e:9c:52:81:f8:34:e3:b0:52:7b:
f7:f6:53:2b:98:70:8b:d1:5d:47:d6:40:87:6c:ab:15:19:e7:
67:a1:a3:33:71:c7:f8:6a:41:15:5d:5d:43:a5:d0:10:33:15:
d7:e9:16:46:d9:3b:8d:86:ef:a0:83:37:49:d6:3d:4b:ff:1a:
8c:a6:16:74:5b:be:40:4f:45:ff:36:63:85:ca:73:af:91:1e:
5e:7a:c6:b1:0a:31:19:d7:0a:8b:cf:19:52:ea:2e:1a:3f:ec:
05:49:01:f8:b9:5e:c2:48:7a:3b:ea:7f:ce:78:c2:a2:a9:90:
07:18:ad:e7:92:b0:f3:01:ae:47:d4:0f:50:84:00:02:28:65:
37:68:18:4c:7d:f0:86:4f:65:24:e8:30:29:b5:bd:be:ad:ab:
7c:49:f3:e4:ff:22:44:d2:7d:57:1b:ef:2b:91:93:d9:c1:68:
34:2a:1f:a3:2d:92:8d:51:61:ac:27:de:48:0c:7a:3f:cb:19:
35:b6:68:fb:bd:fe:33:fe:11:5a:95:95:46:ac:fa:43:6e:07:
ce:76:8b:e2:0a:5f:54:70:21:15:d4:12:53:19:0f:11:23:6e:
b5:8f:c3:54:99:db:a9:14:3e:57:83:18:4b:b7:bc:f1:8b:38:
28:35:24:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVbsFjWGh+jJl6eACABfSOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZDkxOTE5Nzg2MzFmYzk1NWFjMGY1MTA2MmQ1Y2U5ODQ0
ZWFlMDMwHhcNMjUwNDIwMjMwMDQzWhcNMjUwNDIxMjMwMDQzWjAzMTEwLwYDVQQD
EyhkOGM4MzI2NzU5MzIwZDg0ZDRmOGY1YmQwYTMwMTIyZmU5Njc2YzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsQBz6AH+HKboWNF+Mgr/EVJJ03I
blAjv+AORQ4tt2ZwycbMQbq2p9ob9iwU9yNIbPDvQ0n5TSU5Jtxbhwy/PzImbTIt
7ox/pyM0zfOYVQl189WZ3XL1HE6+s8ulVisvQf1G/yUEFSIosEvZyb7Fy8MMnquW
kO0quXHrSWXzvZsD/rgAEWDGGwM9RJRJIQegCMIVbCOfkY8QyKSWRESN54ImOQP5
HvRHK2qJNGdRQUQCCy7YDzyqf9rVXT62eWRtN8EsxBGjH5ZdbaXA3qS+a8HvgF/R
i8s3g2mt7RnTqjYKoRGNXzMMd9zW8RMtQvkU1vnp6GZiDuuo9qxA7KmphwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjIMmdZMg2E1Pj1vQowEi/pZ2w/MB8GA1UdIwQY
MBaAFO/ZGRl4Yx/JVawPUQYtXOmETq4DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzlrWkdYaGpIOGxWckE5UkJpMWM2WVJPcmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85MDA3ZGMtMjM1NC00ZTFiLTg3ZTUt
YmMxODBkYWNkZjA1LzEvNzlrWkdYaGpIOGxWckE5UkJpMWM2WVJPcmdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85MDA3ZGMtMjM1NC00ZTFiLTg3ZTUtYmMxODBkYWNkZjA1
LzEvNzlrWkdYaGpIOGxWckE5UkJpMWM2WVJPcmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffujXYg4
0ioOnFKB+DTjsFJ79/ZTK5hwi9FdR9ZAh2yrFRnnZ6GjM3HH+GpBFV1dQ6XQEDMV
1+kWRtk7jYbvoIM3SdY9S/8ajKYWdFu+QE9F/zZjhcpzr5EeXnrGsQoxGdcKi88Z
UuouGj/sBUkB+Llewkh6O+p/znjCoqmQBxit55Kw8wGuR9QPUIQAAihlN2gYTH3w
hk9lJOgwKbW9vq2rfEnz5P8iRNJ9VxvvK5GT2cFoNCofoy2SjVFhrCfeSAx6P8sZ
NbZo+73+M/4RWpWVRqz6Q24HznaL4gpfVHAhFdQSUxkPESNutY/DVJnbqRQ+V4MY
S7e88Ys4KDUk5w==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:57 2025 by rpki-client