Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
File: _m1KNjQMPa2HoDkh0PiP9lFiiXo.mft (raw, json)
Hash identifier: Axg09w9uTVa5Efj+mu7t7xvCIKOyEbLfiNif/28f9qU=
Subject key identifier: 83:38:3E:D4:01:43:D5:8E:0C:6F:A0:BA:3E:12:C0:47:AD:70:E7:9E
Authority key identifier: FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
Certificate issuer: /CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Certificate serial: 01961132D154A1A878C3190F7452073FE2D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
Manifest number: 09A1
Signing time: Mon 07 Apr 2025 17:01:05 +0000
Manifest this update: Mon 07 Apr 2025 17:01:05 +0000
Manifest next update: Tue 08 Apr 2025 17:01:05 +0000
Files and hashes: 1: _m1KNjQMPa2HoDkh0PiP9lFiiXo.crl (hash: e1kEhP9lwVNlJYBULnNZtF9Iv0qMGPhgvpJRbu5V75A=)
2: fNjIviZE-rak2nx-LNx6AaZmje8.roa (hash: OJD0Sen5B4Pm8+7K0PKLwNWQlIZiuvKDQ8wOO8ai7W8=)
3: vtbeMLgEiJIMz5_yaCwan-k-_x8.roa (hash: aUmr6KPHOpH3nBu3CynTnd8kH0I7Kbxq4Ukon/iSThY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:32:d1:54:a1:a8:78:c3:19:0f:74:52:07:3f:e2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Validity
Not Before: Apr 7 17:01:05 2025 GMT
Not After : Apr 8 17:01:05 2025 GMT
Subject: CN=83383ed40143d58e0c6fa0ba3e12c047ad70e79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ec:9b:72:8e:55:88:74:27:0e:25:c4:18:8b:
77:88:31:b2:c2:12:39:d4:e5:ed:bc:16:69:07:e0:
b7:c3:bc:dc:3a:17:10:e8:35:64:18:3c:76:d5:c5:
28:33:03:34:92:8a:df:64:17:38:8e:b5:86:27:98:
11:15:ea:cb:01:37:04:4f:5e:5a:a3:1b:ae:7c:e8:
6b:61:7a:0f:bf:ea:a8:85:64:51:fc:17:f1:1e:94:
d6:e4:e8:88:7a:a4:bf:aa:af:4e:09:a4:f1:99:aa:
5c:1b:6c:57:fd:68:64:1d:28:3b:6c:cd:a4:43:af:
6b:f9:53:9f:aa:dd:1c:29:3f:12:f3:de:bd:09:5a:
8f:c9:a5:e6:66:21:85:50:f0:b6:2c:14:8e:be:2d:
1d:c9:0a:a8:44:ee:93:67:ad:b1:26:02:26:fa:6a:
8a:1b:da:5f:59:c8:d1:d9:1c:d1:c0:b6:07:43:f7:
52:3b:16:01:91:72:f6:d6:87:0c:9f:c8:8f:31:90:
27:b7:92:76:21:ff:de:9e:cf:1d:7a:5c:3b:a2:f5:
17:e8:00:98:62:96:55:29:db:0c:85:d0:4d:5b:df:
a6:a0:2d:74:88:9b:aa:a7:4d:a6:cd:65:ce:aa:61:
2d:98:cf:b8:11:56:e9:ba:3c:d7:15:1d:02:20:67:
b6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:38:3E:D4:01:43:D5:8E:0C:6F:A0:BA:3E:12:C0:47:AD:70:E7:9E
X509v3 Authority Key Identifier:
keyid:FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b0:38:d3:f8:3c:09:34:97:d0:80:ba:80:e3:10:fa:f1:79:
a9:f3:84:bd:d1:46:0c:9b:8a:72:2b:17:c7:82:27:5a:e2:fe:
4b:c8:a6:ce:6f:81:4d:96:95:4c:de:03:2c:4a:fe:43:0a:0d:
24:bb:ef:cc:ec:c6:21:d3:cc:f5:e8:2a:a0:15:2c:97:33:45:
29:d8:44:83:81:62:03:38:33:aa:f8:27:90:fe:04:93:e4:78:
bc:3b:13:e3:e5:57:db:d5:8f:04:3b:d2:6a:e5:5d:68:d3:31:
bf:12:6e:ea:68:69:ce:fa:66:fe:3b:a4:27:13:2d:9f:a9:0c:
f6:42:12:c6:b3:67:25:a6:bf:39:9a:e6:94:d5:ed:93:35:4b:
b0:9b:e4:c2:53:5a:46:ab:fe:65:e2:0a:fa:04:c6:e5:55:61:
55:b3:28:59:92:e9:f1:e4:12:28:1c:15:6d:55:1d:35:fe:47:
e3:9e:86:39:5a:13:16:b9:b7:29:90:b4:d2:a7:6a:5c:1f:37:
19:7c:1f:95:94:e3:2b:1c:36:6a:89:13:6f:29:6c:97:88:bc:
69:58:c0:7a:6e:c6:7a:c5:39:51:90:cc:02:fe:54:77:a7:95:
10:fb:33:5f:be:99:f5:bb:2c:e0:a3:e9:68:de:2e:f9:4e:4d:
b6:4c:68:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYRMtFUoah4wxkPdFIHP+LTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNmQ0YTM2MzQwYzNkYWQ4N2EwMzkyMWQwZjg4ZmY2NTE2
Mjg5N2EwHhcNMjUwNDA3MTcwMTA1WhcNMjUwNDA4MTcwMTA1WjAzMTEwLwYDVQQD
Eyg4MzM4M2VkNDAxNDNkNThlMGM2ZmEwYmEzZTEyYzA0N2FkNzBlNzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uybco5ViHQnDiXEGIt3iDGywhI5
1OXtvBZpB+C3w7zcOhcQ6DVkGDx21cUoMwM0korfZBc4jrWGJ5gRFerLATcET15a
oxuufOhrYXoPv+qohWRR/BfxHpTW5OiIeqS/qq9OCaTxmapcG2xX/WhkHSg7bM2k
Q69r+VOfqt0cKT8S8969CVqPyaXmZiGFUPC2LBSOvi0dyQqoRO6TZ62xJgIm+mqK
G9pfWcjR2RzRwLYHQ/dSOxYBkXL21ocMn8iPMZAnt5J2If/ens8delw7ovUX6ACY
YpZVKdsMhdBNW9+moC10iJuqp02mzWXOqmEtmM+4EVbpujzXFR0CIGe2NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIM4PtQBQ9WODG+guj4SwEetcOeeMB8GA1UdIwQY
MBaAFP5tSjY0DD2th6A5IdD4j/ZRYol6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX20xS05qUU1QYTJIb0RraDBQaVA5bEZpaVhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzA0OTAtZmNhZS00OGVjLTkyNDkt
YmViYTc1NGFkZDU3LzEvX20xS05qUU1QYTJIb0RraDBQaVA5bEZpaVhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzA0OTAtZmNhZS00OGVjLTkyNDktYmViYTc1NGFkZDU3
LzEvX20xS05qUU1QYTJIb0RraDBQaVA5bEZpaVhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7A40/g8
CTSX0IC6gOMQ+vF5qfOEvdFGDJuKcisXx4InWuL+S8imzm+BTZaVTN4DLEr+QwoN
JLvvzOzGIdPM9egqoBUslzNFKdhEg4FiAzgzqvgnkP4Ek+R4vDsT4+VX29WPBDvS
auVdaNMxvxJu6mhpzvpm/jukJxMtn6kM9kISxrNnJaa/OZrmlNXtkzVLsJvkwlNa
Rqv+ZeIK+gTG5VVhVbMoWZLp8eQSKBwVbVUdNf5H456GOVoTFrm3KZC00qdqXB83
GXwflZTjKxw2aokTbylsl4i8aVjAem7GesU5UZDMAv5Ud6eVEPszX76Z9bss4KPp
aN4u+U5NtkxoCQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:50:16 2025 by rpki-client