Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
File: 1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json)
Hash identifier: rONU+bKV/XDa4Kd3SkcEU5RndRiND7FaPcsFQNKKe+4=
Subject key identifier: 45:AC:20:6F:8F:FB:14:13:C4:9B:50:80:C4:F1:46:CF:17:8A:3C:22
Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055
Certificate serial: 019645C568DDD6345A1793CCE7528D0D2EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
Manifest number: 1161
Signing time: Thu 17 Apr 2025 22:01:27 +0000
Manifest this update: Thu 17 Apr 2025 22:01:27 +0000
Manifest next update: Fri 18 Apr 2025 22:01:27 +0000
Files and hashes: 1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: bXZ4N13vJOMz8aZa8x8E1aZ/8K4R1XM2Nrr8s692W2U=)
2: MwEJqReLtYJIDzQC3nxs7sP0tvA.roa (hash: WyxWLsA6emUiFQU/YyUOL864IemIj/7UtRIviv8JcEw=)
3: iAzdsnC_l6rdd2kZ6hvA3HRXqCU.roa (hash: sMPWtnAj59EVmsTaMYwCg3wIrLPxpEslb0ZjPRwWR6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c5:68:dd:d6:34:5a:17:93:cc:e7:52:8d:0d:2e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bab208653d4261ebf202f6036334119846055
Validity
Not Before: Apr 17 22:01:27 2025 GMT
Not After : Apr 18 22:01:27 2025 GMT
Subject: CN=45ac206f8ffb1413c49b5080c4f146cf178a3c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a5:ef:73:a6:a2:e2:8c:94:c3:76:f6:32:98:
c3:8a:13:80:9f:3b:33:ac:c6:55:d4:a6:6b:b8:3c:
2b:0a:21:b2:4d:bb:70:5b:4b:3b:31:22:76:b2:dc:
f1:80:86:df:f7:bc:d9:f6:4e:ac:05:2f:a9:fb:db:
b5:75:6b:4e:0b:22:36:d8:0d:e7:a6:de:38:1c:cc:
1f:b5:61:20:a0:e4:d1:f4:72:dd:98:19:86:cb:59:
09:c7:c5:da:d0:9f:70:f9:3d:12:d0:ed:af:75:40:
b6:82:be:aa:d7:b2:11:85:ee:ba:4b:8d:67:68:91:
2a:46:8f:5d:ee:ea:ee:18:29:66:62:0e:f2:bb:1c:
64:1c:29:42:41:7e:ec:6a:c9:53:ca:91:01:bb:dd:
af:bc:98:b3:f8:62:fd:df:dc:81:b8:a8:36:21:f9:
1c:48:38:fe:65:a7:b8:e6:17:6d:44:87:73:54:9c:
72:20:9b:46:58:b1:59:b8:a5:aa:57:b3:04:9c:37:
25:d3:8c:c8:fc:1e:41:98:a4:e2:9b:62:ff:9f:3e:
e8:82:4e:ad:8c:d5:6f:a1:8b:76:99:24:1a:c1:b6:
09:70:e6:db:bd:d0:ed:83:f5:9a:79:f6:7f:3a:a4:
4d:3a:6b:a9:26:9b:3a:cb:92:ee:49:f2:cb:10:d2:
42:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AC:20:6F:8F:FB:14:13:C4:9B:50:80:C4:F1:46:CF:17:8A:3C:22
X509v3 Authority Key Identifier:
keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a8:e1:e9:c3:70:c8:4a:30:b7:39:c9:89:66:db:62:9e:21:
73:04:1c:89:dc:88:30:86:0b:26:8b:c7:35:2c:a6:bb:0c:e3:
23:1f:0b:eb:b1:aa:34:b8:4a:f7:0f:c6:37:ab:8e:fd:35:07:
57:f9:01:f5:f2:25:e9:48:56:18:be:c7:8b:51:a2:3e:fe:22:
fc:fd:0d:dc:23:eb:2b:c8:b0:5b:a5:f8:52:6a:c8:0f:25:e4:
ac:f4:d1:07:54:24:9f:7b:ce:84:1e:9f:dc:28:74:c8:c6:af:
15:68:5b:45:25:f9:7f:38:02:e9:30:98:47:e4:b6:9d:39:cb:
f1:87:c5:8a:f4:b3:f8:5a:58:26:95:66:51:05:a8:07:10:e6:
a1:bf:3c:6e:08:0a:82:be:a2:ae:1e:ac:49:fc:d2:0d:ba:40:
9f:1f:78:fe:15:b0:e8:45:55:93:e6:88:e3:ae:94:e7:2b:aa:
3a:1e:1f:79:42:0c:61:bc:57:89:82:9e:cc:ff:8f:e7:e5:55:
7a:90:09:1e:3f:f6:01:d2:87:30:3e:6b:e6:98:59:67:c0:e5:
2e:b8:90:52:e0:69:96:39:eb:ba:2d:74:d1:36:16:2a:13:4b:
92:8b:6e:e8:33:25:31:80:c8:2c:78:48:34:b1:3f:5e:01:f1:
d1:53:b3:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFxWjd1jRaF5PM51KNDS7DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NWJhYjIwODY1M2Q0MjYxZWJmMjAyZjYwMzYzMzQxMTk4
NDYwNTUwHhcNMjUwNDE3MjIwMTI3WhcNMjUwNDE4MjIwMTI3WjAzMTEwLwYDVQQD
Eyg0NWFjMjA2ZjhmZmIxNDEzYzQ5YjUwODBjNGYxNDZjZjE3OGEzYzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aXvc6ai4oyUw3b2MpjDihOAnzsz
rMZV1KZruDwrCiGyTbtwW0s7MSJ2stzxgIbf97zZ9k6sBS+p+9u1dWtOCyI22A3n
pt44HMwftWEgoOTR9HLdmBmGy1kJx8Xa0J9w+T0S0O2vdUC2gr6q17IRhe66S41n
aJEqRo9d7uruGClmYg7yuxxkHClCQX7saslTypEBu92vvJiz+GL939yBuKg2Ifkc
SDj+Zae45hdtRIdzVJxyIJtGWLFZuKWqV7MEnDcl04zI/B5BmKTim2L/nz7ogk6t
jNVvoYt2mSQawbYJcObbvdDtg/WaefZ/OqRNOmupJps6y5LuSfLLENJCIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWsIG+P+xQTxJtQgMTxRs8XijwiMB8GA1UdIwQY
MBaAFNRbqyCGU9QmHr8gL2A2M0EZhGBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wYWVjMWYtNjA2NS00ZDg4LTg0NTQt
MTI0ZDNmYjM5MDZhLzEvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wYWVjMWYtNjA2NS00ZDg4LTg0NTQtMTI0ZDNmYjM5MDZh
LzEvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbajh6cNw
yEowtznJiWbbYp4hcwQcidyIMIYLJovHNSymuwzjIx8L67GqNLhK9w/GN6uO/TUH
V/kB9fIl6UhWGL7Hi1GiPv4i/P0N3CPrK8iwW6X4UmrIDyXkrPTRB1Qkn3vOhB6f
3Ch0yMavFWhbRSX5fzgC6TCYR+S2nTnL8YfFivSz+FpYJpVmUQWoBxDmob88bggK
gr6irh6sSfzSDbpAnx94/hWw6EVVk+aI466U5yuqOh4feUIMYbxXiYKezP+P5+VV
epAJHj/2AdKHMD5r5phZZ8DlLriQUuBpljnrui100TYWKhNLkotu6DMlMYDILHhI
NLE/XgHx0VOzfw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 02:11:32 2025 by rpki-client