Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
File: fewnmwUBcwaYowvNzqOuR3yVczE.mft (raw, json)
Hash identifier: +ddun6+wUQ9lLTbAtd1qqz7mQW7l9nMCiOOoxlq9mFo=
Subject key identifier: 1A:B4:56:F7:5D:44:1A:82:BD:09:C0:32:57:E1:A2:47:0C:8E:B9:67
Authority key identifier: 7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31
Certificate issuer: /CN=7dec279b0501730698a30bcdcea3ae477c957331
Certificate serial: 019653B70E76F4AF740A2E302CEBBD81CD71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 15:00:27 +0000
Manifest this update: Sun 20 Apr 2025 15:00:27 +0000
Manifest next update: Mon 21 Apr 2025 15:00:27 +0000
Files and hashes: 1: 8vkkegr96IBMHB6BFhag_SmFnOI.roa (hash: h5/oEq8rbYbckXXTNVYfhI/okuKJEZpt0WvLrdLeyGw=)
2: fewnmwUBcwaYowvNzqOuR3yVczE.crl (hash: Q9XyMGg4KOH0Yv66PqyZb8lqcH1zmcCXRcXb/CrZ6Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:0e:76:f4:af:74:0a:2e:30:2c:eb:bd:81:cd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec279b0501730698a30bcdcea3ae477c957331
Validity
Not Before: Apr 20 15:00:27 2025 GMT
Not After : Apr 21 15:00:27 2025 GMT
Subject: CN=1ab456f75d441a82bd09c03257e1a2470c8eb967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3b:09:b1:e9:70:5b:78:b3:4b:b3:8e:a4:fb:
46:60:14:a8:31:1f:f6:47:0a:51:a8:11:f5:c5:54:
ea:06:25:71:cd:4e:ce:ef:95:7e:01:95:14:e7:b4:
1d:b8:9f:b6:84:ff:72:01:07:a0:3a:a4:34:8c:be:
8c:db:1e:42:ce:15:43:b0:7c:7d:fd:c4:6f:6d:10:
a1:84:34:bc:d0:66:bd:79:1f:10:76:c1:d9:70:91:
7d:ee:14:5d:24:23:21:eb:6f:45:47:18:61:d1:9c:
46:7d:73:e5:a9:4e:2b:60:61:78:7f:cb:54:d5:df:
5b:f1:a1:0c:7f:d3:87:81:8d:a9:89:96:b2:08:e6:
f3:17:21:cf:39:3b:15:b7:7d:70:81:67:a5:84:d9:
67:f1:2b:76:17:75:15:d7:35:4a:78:14:fb:36:82:
fe:e3:23:28:7a:cc:0c:a4:4c:a1:70:15:6a:fc:4f:
2d:42:92:b1:f4:bc:6b:3d:fc:f6:6a:96:27:56:c2:
1b:c1:fc:01:e1:23:86:b9:fd:25:67:da:8a:fd:a5:
6c:8e:c4:3a:43:4f:6b:eb:8c:10:41:9b:82:16:fa:
a7:3e:ce:10:ec:db:00:f3:e5:31:51:45:85:95:ad:
ba:65:bb:f1:8e:39:a0:b9:5a:49:cd:4a:b0:c0:94:
20:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B4:56:F7:5D:44:1A:82:BD:09:C0:32:57:E1:A2:47:0C:8E:B9:67
X509v3 Authority Key Identifier:
keyid:7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:43:2c:65:09:5f:c4:cb:1a:56:88:e5:a8:89:f2:6e:b4:d3:
a6:3f:66:81:71:50:22:69:ce:34:aa:f0:c4:1d:10:42:5d:34:
77:b3:40:40:04:d8:15:9f:98:3e:2a:49:20:4c:bb:b9:b1:c5:
2c:fe:f8:fe:8d:7e:09:1f:ac:05:6e:4e:78:3d:b8:8f:8e:bc:
3e:ee:a5:37:7f:b7:ea:86:a8:2d:bc:6f:31:92:3f:36:1c:59:
3e:31:6f:bb:2b:70:4c:78:7a:b4:15:19:31:b5:09:32:e2:f6:
1f:91:e1:2e:51:d6:56:f3:18:46:ae:f5:39:64:25:bc:30:23:
3f:b7:7e:59:f4:e4:c0:f0:4d:fc:8f:09:0a:92:44:75:1c:e0:
7a:da:df:58:4f:4d:b9:ac:54:72:f9:62:f1:c3:23:24:0b:d7:
ca:70:20:6b:d3:7b:ce:03:26:07:a7:a3:7e:51:de:f9:fe:2d:
be:b2:bb:fc:76:6e:00:e7:c7:20:2e:86:b8:41:b5:b3:2f:e2:
b7:f2:b8:3a:2e:59:26:f0:07:e5:fe:30:38:e5:fe:4c:0d:11:
36:b5:b6:cc:be:5f:fd:09:4d:23:9d:91:d2:76:76:2f:d0:b1:
e1:28:48:15:8d:93:54:e1:82:df:9a:d4:a0:99:c9:17:ce:dc:
c6:5c:f1:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTtw529K90Ci4wLOu9gc1xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZWMyNzliMDUwMTczMDY5OGEzMGJjZGNlYTNhZTQ3N2M5
NTczMzEwHhcNMjUwNDIwMTUwMDI3WhcNMjUwNDIxMTUwMDI3WjAzMTEwLwYDVQQD
EygxYWI0NTZmNzVkNDQxYTgyYmQwOWMwMzI1N2UxYTI0NzBjOGViOTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjsJselwW3izS7OOpPtGYBSoMR/2
RwpRqBH1xVTqBiVxzU7O75V+AZUU57QduJ+2hP9yAQegOqQ0jL6M2x5CzhVDsHx9
/cRvbRChhDS80Ga9eR8QdsHZcJF97hRdJCMh629FRxhh0ZxGfXPlqU4rYGF4f8tU
1d9b8aEMf9OHgY2piZayCObzFyHPOTsVt31wgWelhNln8St2F3UV1zVKeBT7NoL+
4yMoeswMpEyhcBVq/E8tQpKx9LxrPfz2apYnVsIbwfwB4SOGuf0lZ9qK/aVsjsQ6
Q09r64wQQZuCFvqnPs4Q7NsA8+UxUUWFla26ZbvxjjmguVpJzUqwwJQgAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBq0VvddRBqCvQnAMlfhokcMjrlnMB8GA1UdIwQY
MBaAFH3sJ5sFAXMGmKMLzc6jrkd8lXMxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmV3bm13VUJjd2FZb3d2TnpxT3VSM3lWY3pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9kZWI5N2ItZGVmMS00NjQ2LWE1ZWQt
ZDg5ZTY0MTE4M2YzLzEvZmV3bm13VUJjd2FZb3d2TnpxT3VSM3lWY3pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9kZWI5N2ItZGVmMS00NjQ2LWE1ZWQtZDg5ZTY0MTE4M2Yz
LzEvZmV3bm13VUJjd2FZb3d2TnpxT3VSM3lWY3pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUMsZQlf
xMsaVojlqInybrTTpj9mgXFQImnONKrwxB0QQl00d7NAQATYFZ+YPipJIEy7ubHF
LP74/o1+CR+sBW5OeD24j468Pu6lN3+36oaoLbxvMZI/NhxZPjFvuytwTHh6tBUZ
MbUJMuL2H5HhLlHWVvMYRq71OWQlvDAjP7d+WfTkwPBN/I8JCpJEdRzgetrfWE9N
uaxUcvli8cMjJAvXynAga9N7zgMmB6ejflHe+f4tvrK7/HZuAOfHIC6GuEG1sy/i
t/K4Oi5ZJvAH5f4wOOX+TA0RNrW2zL5f/QlNI52R0nZ2L9Cx4ShIFY2TVOGC35rU
oJnJF87cxlzx7w==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:12:04 2025 by rpki-client