Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
File: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft (raw, json)
Hash identifier: 76aOs9eYOEqpzKMoJNf4MlfUrRdvUY93s+ODWpYXnN0=
Subject key identifier: F7:BE:09:D0:DE:73:4E:FC:E1:0F:4E:E4:50:ED:73:29:84:A1:ED:37
Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
Certificate issuer: /CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Certificate serial: 019655A607805057729E72E8673F73A6D82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 00:01:06 +0000
Manifest this update: Mon 21 Apr 2025 00:01:06 +0000
Manifest next update: Tue 22 Apr 2025 00:01:06 +0000
Files and hashes: 1: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl (hash: vYhMPWG6GxzfroviX7kbjMdxSDDOHzDBF+YaDz6PwqE=)
2: _H5ZwiyO85Qb1mh6oLMaDC1D8k4.roa (hash: WktPSy7l9BrHoKHlFfEwjyZbcRyoTKbpIr7ITj6OKq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:07:80:50:57:72:9e:72:e8:67:3f:73:a6:d8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Validity
Not Before: Apr 21 00:01:06 2025 GMT
Not After : Apr 22 00:01:06 2025 GMT
Subject: CN=f7be09d0de734efce10f4ee450ed732984a1ed37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:cb:f3:3e:eb:13:a7:24:0b:c0:27:ad:0e:
a8:72:9c:f9:dc:e7:4b:84:d5:e1:a7:bc:64:0f:26:
f6:3c:7f:74:5c:ef:60:7b:bb:9c:0d:e8:e7:94:c8:
1b:18:e0:87:58:e9:e4:ef:37:a6:7f:99:88:fc:e8:
4b:eb:48:cc:1a:30:d8:8d:59:14:33:21:d7:48:a1:
0d:70:ba:ce:7c:57:75:1d:e0:4c:6c:e8:bf:a0:1c:
0e:9c:23:7c:1a:6f:6a:1e:32:ce:c9:62:14:7a:9e:
c9:a6:72:f3:a2:64:08:aa:69:3c:7d:99:6f:d4:7c:
d7:b5:df:44:df:83:fa:e8:4f:e6:d7:64:d5:5e:c9:
ff:24:98:2e:39:3e:a2:5f:62:ae:6b:0d:52:fd:7c:
21:fe:e4:b0:88:b1:84:d9:81:3f:3e:58:e1:2f:26:
32:99:09:fa:02:bc:df:fd:7a:1c:e2:ca:6c:18:68:
a2:1c:4f:9c:8f:4f:a0:a2:30:97:a5:1f:c1:5d:0c:
13:25:63:ef:cc:0d:13:c1:b8:95:a4:6a:f0:6f:99:
7b:e8:19:0c:66:1c:8a:3a:00:78:8c:79:fa:d8:75:
54:f9:11:59:a7:56:67:0e:11:15:21:87:e0:0e:ea:
50:4b:dc:f8:f1:cd:c6:d5:77:67:da:ec:01:06:83:
c7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BE:09:D0:DE:73:4E:FC:E1:0F:4E:E4:50:ED:73:29:84:A1:ED:37
X509v3 Authority Key Identifier:
keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:58:63:ec:d8:92:58:07:23:44:7d:95:9e:5d:ca:8e:24:91:
e2:64:f7:cf:c1:8f:6f:e9:6a:26:0c:9f:30:18:80:1c:9b:e3:
0b:dc:c4:75:12:7e:eb:8a:8f:c0:db:8d:84:cc:fd:f6:75:6f:
a5:36:b4:ba:1e:5f:7e:a4:6c:14:59:62:bd:3a:aa:94:74:71:
28:1f:48:28:65:24:88:1d:87:02:a3:82:e6:80:72:58:49:f0:
12:90:3e:03:c9:47:af:06:ee:99:26:2a:d3:b4:51:df:01:be:
9f:37:e3:9f:36:1d:8b:69:45:14:11:4e:ec:3c:d5:3d:65:fb:
b9:00:0c:67:25:bf:a8:74:2f:7b:45:37:4e:b6:3b:b6:a8:4a:
a8:7a:c6:45:49:d3:e7:64:15:fc:53:02:20:a3:99:eb:31:97:
53:69:46:6a:0d:86:26:b0:98:5b:33:43:e6:0e:04:fb:6f:f0:
3b:ca:07:ab:a0:40:d2:6f:b7:db:f5:62:f3:90:bc:6f:96:c6:
f7:08:be:00:6d:94:d7:1f:15:79:b5:4c:3a:7c:72:21:29:f0:
07:07:f7:5e:29:44:dd:be:6a:e9:07:ee:72:bb:a1:42:9f:53:
16:98:9d:ac:c7:6f:f4:c1:2b:38:e5:88:0c:25:ff:9e:82:ee:
73:8b:81:7e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZVpgeAUFdynnLoZz9zptgsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhOTVlY2RhYTM1OWE2ZjgzNTU1NzNkMzkwMDFiYWEzNTg3
NGJlZDIwHhcNMjUwNDIxMDAwMTA2WhcNMjUwNDIyMDAwMTA2WjAzMTEwLwYDVQQD
EyhmN2JlMDlkMGRlNzM0ZWZjZTEwZjRlZTQ1MGVkNzMyOTg0YTFlZDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/zL8z7rE6ckC8AnrQ6ocpz53OdL
hNXhp7xkDyb2PH90XO9ge7ucDejnlMgbGOCHWOnk7zemf5mI/OhL60jMGjDYjVkU
MyHXSKENcLrOfFd1HeBMbOi/oBwOnCN8Gm9qHjLOyWIUep7JpnLzomQIqmk8fZlv
1HzXtd9E34P66E/m12TVXsn/JJguOT6iX2Kuaw1S/Xwh/uSwiLGE2YE/PljhLyYy
mQn6Arzf/Xoc4spsGGiiHE+cj0+gojCXpR/BXQwTJWPvzA0TwbiVpGrwb5l76BkM
ZhyKOgB4jHn62HVU+RFZp1ZnDhEVIYfgDupQS9z48c3G1Xdn2uwBBoPH4QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPe+CdDec0784Q9O5FDtcymEoe03MB8GA1UdIwQY
MBaAFPqV7NqjWab4NVVz05ABuqNYdL7SMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1wWHMycU5acHZnMVZYUFRrQUc2bzFoMHZ0SS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvZGJiNWM3LTk0NjAtNDAwOS04ZTdk
LTFjMTdkNTAyZDRkZi8xLzEtcFhzMnFOWnB2ZzFWWFBUa0FHNm8xaDB2dEkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JlL2RiYjVjNy05NDYwLTQwMDktOGU3ZC0xYzE3ZDUwMmQ0
ZGYvMS8xLXBYczJxTlpwdmcxVlhQVGtBRzZvMWgwdnRJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVhj
7NiSWAcjRH2Vnl3KjiSR4mT3z8GPb+lqJgyfMBiAHJvjC9zEdRJ+64qPwNuNhMz9
9nVvpTa0uh5ffqRsFFlivTqqlHRxKB9IKGUkiB2HAqOC5oByWEnwEpA+A8lHrwbu
mSYq07RR3wG+nzfjnzYdi2lFFBFO7DzVPWX7uQAMZyW/qHQve0U3TrY7tqhKqHrG
RUnT52QV/FMCIKOZ6zGXU2lGag2GJrCYWzND5g4E+2/wO8oHq6BA0m+32/Vi85C8
b5bG9wi+AG2U1x8VebVMOnxyISnwBwf3XilE3b5q6QfucruhQp9TFpidrMdv9MEr
OOWIDCX/noLuc4uBfg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:53:44 2025 by rpki-client