Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
File: 1P97rGRNWVZyLl4YOiL7FFXnVUY.mft (raw, json)
Hash identifier: lkB4xKJhxYotPmHp5XINrkSsZj8Y78O+OC+5iMXt6nU=
Subject key identifier: 89:9A:11:98:DF:36:BA:AA:EC:7E:9C:21:A7:F4:4E:65:7F:0B:5D:64
Authority key identifier: D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
Certificate issuer: /CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Certificate serial: 01964067701D1337C1039DDF7A4BBE333A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
Manifest number: 017F
Signing time: Wed 16 Apr 2025 21:00:42 +0000
Manifest this update: Wed 16 Apr 2025 21:00:42 +0000
Manifest next update: Thu 17 Apr 2025 21:00:42 +0000
Files and hashes: 1: 1P97rGRNWVZyLl4YOiL7FFXnVUY.crl (hash: 16Vrw2fEYKBxCQFawaG24zuaLeiQeAIPj6RyOPwm9B4=)
2: BBrcZolorsy-tffprBkzb6kzxjw.roa (hash: LubTLYd6O/FVL7Y6tbf5xWEWtjZWCQG4GmiGhTzuDxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:70:1d:13:37:c1:03:9d:df:7a:4b:be:33:3a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Validity
Not Before: Apr 16 21:00:42 2025 GMT
Not After : Apr 17 21:00:42 2025 GMT
Subject: CN=899a1198df36baaaec7e9c21a7f44e657f0b5d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7a:66:d5:67:d5:2c:7d:e5:72:f6:74:fd:4c:
aa:70:c5:a7:f2:4a:c7:d0:a0:bd:ec:78:fb:a7:a0:
71:49:df:85:8a:a6:fc:76:96:42:9e:83:4e:9d:67:
a0:3e:8f:d0:99:73:92:a3:e0:f7:f2:40:31:2d:59:
64:a2:f6:87:c1:13:18:53:94:7c:93:2f:33:76:ef:
15:7e:b3:43:bf:1f:97:8f:95:2b:17:c4:5c:ec:5d:
9c:a7:47:d2:06:35:62:af:71:1d:aa:fe:50:84:64:
32:6b:90:c1:eb:52:2d:10:72:8f:29:fb:1b:cd:44:
31:9a:56:60:18:22:b0:4a:ea:4a:c4:80:73:78:80:
24:34:8a:e0:5c:b9:bd:10:ba:a0:67:6f:83:4a:2d:
36:a5:c2:c9:b2:8c:ef:2f:b4:b3:72:43:4c:34:52:
ad:73:0a:86:6c:d9:2d:33:9c:7e:cb:2c:1a:04:4d:
8d:f3:a3:0f:cf:cd:ed:42:cf:19:0a:93:08:ca:6c:
49:9a:0f:7c:29:b1:d5:01:e4:e9:b8:8c:88:2b:a2:
2e:31:57:86:bb:8e:2c:93:0c:c7:59:fd:11:ba:b0:
54:e8:43:e7:ea:10:b7:a5:a5:3b:21:b4:14:12:f5:
a6:9f:3c:30:bf:d7:39:f9:c9:fa:b4:60:dc:6a:99:
4d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9A:11:98:DF:36:BA:AA:EC:7E:9C:21:A7:F4:4E:65:7F:0B:5D:64
X509v3 Authority Key Identifier:
keyid:D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:10:bc:49:30:89:55:ff:24:85:25:3b:f9:65:b1:0f:22:25:
66:54:d6:3b:a3:23:4f:62:8f:60:69:28:4f:a0:c5:cd:38:3f:
5c:88:75:c3:24:d7:52:11:39:bf:b8:d5:1b:97:2f:82:25:6d:
25:6f:8c:b6:de:41:34:b4:ca:25:c1:4a:19:64:88:bf:5f:b9:
24:5f:22:21:fb:50:c1:b1:de:6f:e6:da:16:62:92:57:ad:d8:
92:b2:88:64:18:94:9d:dc:e2:31:8a:2f:f6:94:0d:23:7b:6f:
4e:ea:6a:9d:2f:32:d7:d3:47:63:08:b8:80:e4:0a:f6:6c:12:
80:48:41:b5:fc:9d:c4:88:fa:b2:38:0c:71:89:bc:d8:cc:a3:
d3:cd:9f:0a:e0:21:a5:ee:15:69:51:ec:df:04:aa:6c:54:49:
63:8b:0b:9a:cf:4f:df:af:33:56:4e:80:03:a1:53:ff:6c:f8:
2d:a4:5d:04:03:77:92:a3:3d:73:26:17:18:f6:b2:4f:3a:f5:
c0:6d:29:ae:e6:4a:3f:23:28:ce:32:33:01:6b:00:43:2b:c0:
c8:0f:6a:eb:35:81:42:4f:ae:3b:a2:81:45:93:f6:aa:6e:f2:
9f:b8:02:d4:1b:ea:bd:de:b9:9c:a3:3e:60:ff:3c:89:c1:04:
9d:5e:cf:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZAZ3AdEzfBA53feku+MzodMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZmY3YmFjNjQ0ZDU5NTY3MjJlNWUxODNhMjJmYjE0NTVl
NzU1NDYwHhcNMjUwNDE2MjEwMDQyWhcNMjUwNDE3MjEwMDQyWjAzMTEwLwYDVQQD
Eyg4OTlhMTE5OGRmMzZiYWFhZWM3ZTljMjFhN2Y0NGU2NTdmMGI1ZDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXpm1WfVLH3lcvZ0/UyqcMWn8krH
0KC97Hj7p6BxSd+Fiqb8dpZCnoNOnWegPo/QmXOSo+D38kAxLVlkovaHwRMYU5R8
ky8zdu8VfrNDvx+Xj5UrF8Rc7F2cp0fSBjVir3Edqv5QhGQya5DB61ItEHKPKfsb
zUQxmlZgGCKwSupKxIBzeIAkNIrgXLm9ELqgZ2+DSi02pcLJsozvL7SzckNMNFKt
cwqGbNktM5x+yywaBE2N86MPz83tQs8ZCpMIymxJmg98KbHVAeTpuIyIK6IuMVeG
u44skwzHWf0RurBU6EPn6hC3paU7IbQUEvWmnzwwv9c5+cn6tGDcaplNFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImaEZjfNrqq7H6cIaf0TmV/C11kMB8GA1UdIwQY
MBaAFNT/e6xkTVlWci5eGDoi+xRV51VGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVA5N3JHUk5XVlp5TGw0WU9pTDdGRlhuVlVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8xNjcyZDAtNWI2ZC00MTE1LWFmYjMt
ODgwYTgxYjk5Y2M1LzEvMVA5N3JHUk5XVlp5TGw0WU9pTDdGRlhuVlVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8xNjcyZDAtNWI2ZC00MTE1LWFmYjMtODgwYTgxYjk5Y2M1
LzEvMVA5N3JHUk5XVlp5TGw0WU9pTDdGRlhuVlVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRC8STCJ
Vf8khSU7+WWxDyIlZlTWO6MjT2KPYGkoT6DFzTg/XIh1wyTXUhE5v7jVG5cvgiVt
JW+Mtt5BNLTKJcFKGWSIv1+5JF8iIftQwbHeb+baFmKSV63YkrKIZBiUndziMYov
9pQNI3tvTupqnS8y19NHYwi4gOQK9mwSgEhBtfydxIj6sjgMcYm82Myj082fCuAh
pe4VaVHs3wSqbFRJY4sLms9P368zVk6AA6FT/2z4LaRdBAN3kqM9cyYXGPayTzr1
wG0pruZKPyMozjIzAWsAQyvAyA9q6zWBQk+uO6KBRZP2qm7yn7gC1Bvqvd65nKM+
YP88icEEnV7P1w==
-----END CERTIFICATE-----
Generated at Thu Apr 17 06:23:17 2025 by rpki-client