Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
File: 1DNtXnTx-LfbEynwC7hXJBrnTRk.mft (raw, json)
Hash identifier: lNb8zMcROFRllRlPQDO/xsMMefK7sVMIsAmx854Q0Zw=
Subject key identifier: FB:82:49:55:F6:43:49:82:EE:97:C4:6E:A9:92:C6:92:57:C8:0E:87
Authority key identifier: D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
Certificate issuer: /CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Certificate serial: 01965D5F9C492841FCB4BD0E265D058693F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
Manifest number: 028B
Signing time: Tue 22 Apr 2025 12:01:09 +0000
Manifest this update: Tue 22 Apr 2025 12:01:09 +0000
Manifest next update: Wed 23 Apr 2025 12:01:09 +0000
Files and hashes: 1: 1DNtXnTx-LfbEynwC7hXJBrnTRk.crl (hash: 9v1pMCuoAi6XZ4SlTJsjEjJJIER5ZwS01Gtd0gvtExA=)
2: L86Czh-hgFnJfXYShvX9w1KKWEg.roa (hash: UlpXjqDOYfOCQf+VBo1cHNYWZUpj4u/uB6dnGVYlbBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:5f:9c:49:28:41:fc:b4:bd:0e:26:5d:05:86:93:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Validity
Not Before: Apr 22 12:01:09 2025 GMT
Not After : Apr 23 12:01:09 2025 GMT
Subject: CN=fb824955f6434982ee97c46ea992c69257c80e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0b:8f:5f:12:02:ce:23:fe:d3:9f:17:e0:5d:
b7:71:20:55:01:1e:a0:e3:ec:be:b5:83:fe:71:8e:
45:9a:59:bb:cb:17:79:0a:6a:da:ef:59:a1:34:e6:
86:dd:c3:d2:4f:7b:38:2d:cd:c2:ba:75:40:7f:d0:
e6:2a:b6:52:f1:a4:2b:9c:e7:42:5f:20:1b:0f:a0:
f7:3b:62:84:2b:dc:e4:1d:86:bd:9a:b9:13:37:a4:
c4:bc:86:e2:70:2c:8a:5f:18:09:83:e6:c5:79:7d:
38:ba:1e:dc:2a:c6:d1:67:78:7b:3a:4d:01:34:92:
47:9e:c9:82:f8:3b:82:b6:c2:2f:66:48:6e:a0:71:
f0:b3:a9:05:c5:58:8a:85:6c:87:a2:6d:e5:f5:75:
08:90:6f:f8:9a:44:b1:40:51:b4:f4:b6:8a:0d:9f:
b9:7b:11:cb:37:4f:41:c8:3e:a8:be:3a:72:d3:ca:
b0:46:b7:73:10:ae:02:cb:1e:45:d3:12:66:92:53:
b8:54:5b:b7:67:df:5d:70:56:2a:8c:6a:8e:68:92:
9f:e9:d9:3e:7f:e2:36:1b:ec:05:30:1d:0a:2e:05:
3c:50:6c:cb:8c:39:48:01:82:7c:22:72:46:97:ae:
86:67:ab:3e:f6:2a:ce:2e:44:6e:73:57:d3:84:9c:
7e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:82:49:55:F6:43:49:82:EE:97:C4:6E:A9:92:C6:92:57:C8:0E:87
X509v3 Authority Key Identifier:
keyid:D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6f:54:27:61:e3:5a:d7:77:4b:a8:dd:9a:9a:9e:ac:2c:34:
77:b4:42:ed:35:8a:62:de:b1:94:37:d6:2e:83:2a:3b:fd:9f:
c4:48:1d:68:cd:da:fd:41:b3:2b:a4:db:fb:13:0e:25:1d:17:
fe:ab:bb:6f:96:d1:40:24:ee:79:74:c3:51:ae:24:1e:88:b4:
da:95:08:66:26:09:6f:52:fb:20:07:4f:ae:16:12:1f:4c:95:
23:42:0f:47:13:75:80:ad:10:56:fd:00:93:2f:a5:98:01:18:
d0:63:85:95:8f:e3:9f:b7:26:12:77:8b:aa:87:b7:67:41:a1:
b4:b8:e1:6c:ef:a7:22:57:15:14:83:62:fc:6d:ce:00:55:17:
13:68:f2:be:c2:e7:eb:c2:dd:da:e8:7e:1c:da:fe:22:c7:96:
b9:32:37:9b:30:56:e6:41:1f:09:42:c5:e1:0e:dc:30:5f:ea:
fc:23:a3:61:15:bf:e5:38:66:aa:8f:98:55:b7:2b:28:d2:66:
fd:1d:8b:2e:4c:f0:e6:f2:ef:ed:aa:70:2f:c7:61:28:82:7f:
e8:50:87:12:8c:89:79:19:6e:6a:38:61:f1:b0:b6:6f:34:06:
58:88:86:cf:0e:cf:07:88:53:28:3b:e4:01:fc:3d:f9:a8:ab:
4a:18:9f:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZdX5xJKEH8tL0OJl0FhpPxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MzM2ZDVlNzRmMWY4YjdkYjEzMjlmMDBiYjg1NzI0MWFl
NzRkMTkwHhcNMjUwNDIyMTIwMTA5WhcNMjUwNDIzMTIwMTA5WjAzMTEwLwYDVQQD
EyhmYjgyNDk1NWY2NDM0OTgyZWU5N2M0NmVhOTkyYzY5MjU3YzgwZTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQuPXxICziP+058X4F23cSBVAR6g
4+y+tYP+cY5Fmlm7yxd5Cmra71mhNOaG3cPST3s4Lc3CunVAf9DmKrZS8aQrnOdC
XyAbD6D3O2KEK9zkHYa9mrkTN6TEvIbicCyKXxgJg+bFeX04uh7cKsbRZ3h7Ok0B
NJJHnsmC+DuCtsIvZkhuoHHws6kFxViKhWyHom3l9XUIkG/4mkSxQFG09LaKDZ+5
exHLN09ByD6ovjpy08qwRrdzEK4Cyx5F0xJmklO4VFu3Z99dcFYqjGqOaJKf6dk+
f+I2G+wFMB0KLgU8UGzLjDlIAYJ8InJGl66GZ6s+9irOLkRuc1fThJx+wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPuCSVX2Q0mC7pfEbqmSxpJXyA6HMB8GA1UdIwQY
MBaAFNQzbV508fi32xMp8Au4VyQa500ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUROdFhuVHgtTGZiRXlud0M3aFhKQnJuVFJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYTZiZGQtMGQzYy00YTBkLThkYjYt
MmRkMjUxODRiMGQwLzEvMUROdFhuVHgtTGZiRXlud0M3aFhKQnJuVFJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8zYTZiZGQtMGQzYy00YTBkLThkYjYtMmRkMjUxODRiMGQw
LzEvMUROdFhuVHgtTGZiRXlud0M3aFhKQnJuVFJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGG9UJ2Hj
Wtd3S6jdmpqerCw0d7RC7TWKYt6xlDfWLoMqO/2fxEgdaM3a/UGzK6Tb+xMOJR0X
/qu7b5bRQCTueXTDUa4kHoi02pUIZiYJb1L7IAdPrhYSH0yVI0IPRxN1gK0QVv0A
ky+lmAEY0GOFlY/jn7cmEneLqoe3Z0GhtLjhbO+nIlcVFINi/G3OAFUXE2jyvsLn
68Ld2uh+HNr+IseWuTI3mzBW5kEfCULF4Q7cMF/q/COjYRW/5Thmqo+YVbcrKNJm
/R2LLkzw5vLv7apwL8dhKIJ/6FCHEoyJeRluajhh8bC2bzQGWIiGzw7PB4hTKDvk
Afw9+airShifMw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:43:44 2025 by rpki-client