Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.mft
File: fUQxNNzRasFvbNIJ-hx_lYym234.mft (raw, json)
Hash identifier: ZrnU58SjjoQKy19CI/UmFFNyl91Du109/zVvRGyjMdQ=
Subject key identifier: 23:DA:91:89:5C:48:59:17:EC:CB:D9:2A:B0:C6:E2:C4:0B:98:AB:DD
Authority key identifier: 7D:44:31:34:DC:D1:6A:C1:6F:6C:D2:09:FA:1C:7F:95:8C:A6:DB:7E
Certificate issuer: /CN=7d443134dcd16ac16f6cd209fa1c7f958ca6db7e
Certificate serial: 01964CA290C8C62F38313C102D743FB8D386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUQxNNzRasFvbNIJ-hx_lYym234.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 06:00:44 +0000
Manifest this update: Sat 19 Apr 2025 06:00:44 +0000
Manifest next update: Sun 20 Apr 2025 06:00:44 +0000
Files and hashes: 1: HnXbxzajLhcisRCq_fB03kkxY7Q.roa (hash: 3RLbNAEyHJR+jTuUtPlDmJk48r533+OhDx8HcGj/79c=)
2: fUQxNNzRasFvbNIJ-hx_lYym234.crl (hash: NPoiMLN81eK9KBv4aadCQvqimpJagnPHOyprfQm6Jus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUQxNNzRasFvbNIJ-hx_lYym234.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:90:c8:c6:2f:38:31:3c:10:2d:74:3f:b8:d3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d443134dcd16ac16f6cd209fa1c7f958ca6db7e
Validity
Not Before: Apr 19 06:00:44 2025 GMT
Not After : Apr 20 06:00:44 2025 GMT
Subject: CN=23da91895c485917eccbd92ab0c6e2c40b98abdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b3:e6:9f:16:36:a0:04:2c:43:a6:b3:e7:0a:
59:94:18:b1:a9:43:0e:51:89:85:13:2f:11:7c:b5:
dc:84:e4:ea:c2:d4:c1:d6:74:8b:15:a5:ed:01:1f:
68:93:6b:05:d0:51:3a:0e:3b:ec:d6:79:64:12:8e:
be:b4:41:f8:4b:a7:0e:12:d7:5b:72:1e:0c:7d:d1:
2e:2e:33:ca:b9:67:ee:41:ef:bb:14:72:2e:4b:50:
a6:84:c3:60:91:53:a1:6a:26:0a:95:f5:57:cb:67:
f9:6b:89:42:8a:7b:c8:87:f7:8c:02:da:0f:60:27:
c8:71:50:66:7a:11:00:9a:35:cc:cf:ee:17:94:c2:
88:ac:5f:80:b1:46:ef:a6:f8:61:99:fe:0d:af:41:
ba:b2:56:95:f6:06:74:de:b2:1d:32:b8:3e:46:b7:
c2:bc:d3:e4:c2:5d:99:6e:a2:22:7d:b8:48:38:2a:
0e:b3:98:d3:1a:b2:7f:fb:63:bf:2a:45:e4:b6:aa:
20:b6:d4:b1:8c:a9:cc:c4:09:4d:da:bb:33:7a:9b:
97:d0:74:21:92:2a:66:79:57:65:66:08:7f:3d:15:
b9:a1:f5:8d:c9:e1:3b:03:a9:4f:81:f9:8f:4f:d1:
ab:b8:b7:7b:1f:6d:8e:23:66:35:e0:db:1d:09:7c:
0e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DA:91:89:5C:48:59:17:EC:CB:D9:2A:B0:C6:E2:C4:0B:98:AB:DD
X509v3 Authority Key Identifier:
keyid:7D:44:31:34:DC:D1:6A:C1:6F:6C:D2:09:FA:1C:7F:95:8C:A6:DB:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUQxNNzRasFvbNIJ-hx_lYym234.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:80:ef:5c:be:da:b1:55:f9:ba:ae:e6:58:c5:ce:80:39:89:
11:d2:cd:76:29:af:7b:2f:37:fe:0f:d5:91:77:10:dd:33:3e:
79:c5:78:08:3d:37:9d:ce:1b:0d:e0:29:57:5e:e8:c2:cf:52:
54:07:b9:45:49:e5:d2:a8:1c:59:14:60:1f:98:f3:e6:eb:5a:
f0:52:ca:90:d8:d3:1a:86:3a:b3:68:da:23:67:c9:4d:b7:ac:
51:88:c6:34:17:9f:7a:67:55:24:dd:7c:e0:e3:c8:d1:b8:dd:
db:8c:b8:41:7e:3d:e1:5c:83:87:41:e2:48:b6:6e:3e:e6:42:
99:98:a9:ad:6e:78:3e:5a:27:90:97:37:b0:b6:0c:79:50:1a:
c1:37:71:1e:c2:ea:46:9d:dc:65:49:7a:d5:96:3c:e9:00:51:
e7:88:73:51:f4:aa:91:7b:8d:a1:67:4d:8f:df:20:ef:68:5c:
86:f2:3f:03:de:9a:90:82:fc:7b:d5:ff:1f:0a:4f:2e:66:52:
74:a6:da:1e:a5:c9:1e:ed:be:65:4e:39:fe:c9:56:e5:a1:04:
7f:6d:4d:2f:00:28:f0:0f:8d:71:fa:34:0a:8a:cb:d3:ee:bf:
05:a1:53:f2:29:ab:51:6d:aa:a0:5b:75:17:a4:21:99:ba:08:
6d:da:92:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMopDIxi84MTwQLXQ/uNOGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNDQzMTM0ZGNkMTZhYzE2ZjZjZDIwOWZhMWM3Zjk1OGNh
NmRiN2UwHhcNMjUwNDE5MDYwMDQ0WhcNMjUwNDIwMDYwMDQ0WjAzMTEwLwYDVQQD
EygyM2RhOTE4OTVjNDg1OTE3ZWNjYmQ5MmFiMGM2ZTJjNDBiOThhYmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbPmnxY2oAQsQ6az5wpZlBixqUMO
UYmFEy8RfLXchOTqwtTB1nSLFaXtAR9ok2sF0FE6Djvs1nlkEo6+tEH4S6cOEtdb
ch4MfdEuLjPKuWfuQe+7FHIuS1CmhMNgkVOhaiYKlfVXy2f5a4lCinvIh/eMAtoP
YCfIcVBmehEAmjXMz+4XlMKIrF+AsUbvpvhhmf4Nr0G6slaV9gZ03rIdMrg+RrfC
vNPkwl2ZbqIifbhIOCoOs5jTGrJ/+2O/KkXktqogttSxjKnMxAlN2rszepuX0HQh
kipmeVdlZgh/PRW5ofWNyeE7A6lPgfmPT9GruLd7H22OI2Y14NsdCXwO2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPakYlcSFkX7MvZKrDG4sQLmKvdMB8GA1UdIwQY
MBaAFH1EMTTc0WrBb2zSCfocf5WMptt+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlVReE5OelJhc0Z2Yk5JSi1oeF9sWXltMjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxNTItNWM5MC00NTQ0LThiN2Mt
OWMxOTNlNzhlYzE4LzEvZlVReE5OelJhc0Z2Yk5JSi1oeF9sWXltMjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85MTUxNTItNWM5MC00NTQ0LThiN2MtOWMxOTNlNzhlYzE4
LzEvZlVReE5OelJhc0Z2Yk5JSi1oeF9sWXltMjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIDvXL7a
sVX5uq7mWMXOgDmJEdLNdimvey83/g/VkXcQ3TM+ecV4CD03nc4bDeApV17ows9S
VAe5RUnl0qgcWRRgH5jz5uta8FLKkNjTGoY6s2jaI2fJTbesUYjGNBefemdVJN18
4OPI0bjd24y4QX494VyDh0HiSLZuPuZCmZiprW54PlonkJc3sLYMeVAawTdxHsLq
Rp3cZUl61ZY86QBR54hzUfSqkXuNoWdNj98g72hchvI/A96akIL8e9X/HwpPLmZS
dKbaHqXJHu2+ZU45/slW5aEEf21NLwAo8A+Ncfo0CorL0+6/BaFT8imrUW2qoFt1
F6QhmboIbdqSfw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:13:41 2025 by rpki-client