Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
File: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft (raw, json)
Hash identifier: Z6gtPrjFq+whMXk0e42Z2Z9Zi+vXYm4i2NmVMkffLGo=
Subject key identifier: F8:96:4F:C9:00:C9:0F:43:4E:EB:67:29:89:4B:F2:3A:1C:6E:D2:09
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 01963E78BC659AC4DBE285E222D86979156A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
Manifest number: 151A
Signing time: Wed 16 Apr 2025 12:00:22 +0000
Manifest this update: Wed 16 Apr 2025 12:00:22 +0000
Manifest next update: Thu 17 Apr 2025 12:00:22 +0000
Files and hashes: 1: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl (hash: aXdDtkCyRHSNhBxR775Hj5+daGHSQkp6G7n1lVsfYvw=)
2: BLXtsOUKyjdzK6aUOnCi71Mjrfo.roa (hash: 5RpGYLrJit43EcAURB9h1zI7H1uWOJSb9Qx7yrRnckQ=)
3: II7yHBEdnUHMS4NEG3cJmmouTG0.roa (hash: 1A2ldI4N+lxuF/IwKKhIwjgsIHcFt59vvrcV1uOWMII=)
4: gpzNMZcwo35-oTXOI3kYk3hJ2t8.roa (hash: ngODPWQb3vvd7XrB/GBFFEdeU0LiXPVPYCwgvVTHlW8=)
5: hrGvSdLkJyoD3ZMtvao-M__6pbs.roa (hash: 6UHWZ2yt7HBCXCOPrR1TZg8AMD6PQq6q04hXZuTRNOc=)
6: nx9moqlHgSMsf9HgtOFQ0KmEqlE.roa (hash: WzE9rCGNMfQ+mIxm9E1YIp9r6V0lkGRucRNG6aY0mCs=)
7: rIf0kB8Rc3IRATRBayI1xPvP3QA.roa (hash: Rx69uj0bTYsl5V2DHt7vMOyICCeb975OsfQSSz+LlmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:78:bc:65:9a:c4:db:e2:85:e2:22:d8:69:79:15:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Apr 16 12:00:22 2025 GMT
Not After : Apr 17 12:00:22 2025 GMT
Subject: CN=f8964fc900c90f434eeb6729894bf23a1c6ed209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4f:fd:45:8f:7a:ec:6d:46:88:4c:61:eb:73:
77:22:d5:f1:ba:87:86:4e:58:5d:6f:21:87:e9:31:
ed:27:a4:73:5a:e7:5d:e1:3a:dc:cd:27:c9:40:16:
5d:67:0d:a5:d9:ad:df:97:c7:2e:37:29:6c:eb:e7:
75:f3:c4:56:d7:28:ca:a5:62:01:c5:d2:ec:0b:9e:
69:b8:76:79:1e:ae:44:43:0e:71:a4:50:6e:b4:f5:
24:df:87:4a:ae:d7:9e:f8:90:c6:bb:3c:39:57:3e:
fa:7b:17:f2:dd:89:82:1d:2f:d4:30:75:81:b6:bb:
25:88:1a:5f:7e:07:60:96:ac:1b:cb:b2:10:af:21:
ba:c8:98:39:82:a1:e7:b7:d7:84:31:b0:d7:82:a7:
5f:01:ba:11:5f:60:2f:4c:6e:e6:d2:f6:2d:e7:21:
f4:d5:4f:c0:3c:a0:41:6d:10:f8:19:04:aa:de:97:
62:5f:75:5a:f8:b5:f7:77:5c:e8:0e:3e:f3:c9:00:
e3:ab:32:90:b7:94:4c:3c:21:93:a2:ef:4f:b6:4f:
a4:e2:a5:ad:15:e6:2d:03:8f:70:32:bf:f7:d5:95:
bd:c5:16:d9:01:cd:6d:25:5c:bb:a4:8f:af:02:71:
d0:6a:cf:66:69:75:be:b0:6b:49:e3:3e:da:91:7e:
34:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:96:4F:C9:00:C9:0F:43:4E:EB:67:29:89:4B:F2:3A:1C:6E:D2:09
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ab:97:de:ff:f1:87:83:76:c2:46:97:e8:20:f4:ca:9c:dd:
5e:24:e8:17:6a:29:f5:3a:f9:95:5b:42:dd:8c:90:96:c8:92:
df:30:e1:83:f4:32:bd:b4:3d:01:41:86:ef:94:c7:77:18:8f:
93:2a:6e:1e:35:a0:ae:ff:4b:e4:2d:2c:46:15:cb:d2:78:e2:
3e:8d:3f:0c:d7:84:7c:76:fe:63:da:1d:72:98:a1:1d:b0:03:
6a:90:cc:cf:d1:fe:16:ce:33:82:f6:9b:64:9b:d7:8f:6e:06:
f3:fc:b0:ca:f4:98:74:7a:07:d7:42:c7:c4:c7:f6:dc:3b:c4:
e0:09:1b:ad:20:e6:b4:3a:f7:38:69:a4:c4:8a:07:03:9c:57:
7a:24:be:46:b8:fe:ed:19:3a:a7:c8:3a:38:1f:19:09:62:12:
af:1c:f6:98:c8:f4:07:8e:60:85:fa:30:f3:a6:98:ad:10:b3:
e9:20:3e:04:ee:a9:a9:a8:5c:a0:58:32:6c:90:be:cc:53:a6:
64:75:40:bd:95:d4:1a:26:72:f8:e9:74:de:6e:4f:82:26:6f:
9f:50:ca:fc:ef:de:0c:d1:a3:73:8c:85:59:13:50:c6:75:7b:
9d:a4:f1:88:4d:0a:9c:d5:0f:d4:43:7d:02:24:d4:06:77:14:
4e:bb:54:45
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZY+eLxlmsTb4oXiIthpeRVqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhM2QwYmMxMWIyOWRhNDRhZDU3MzA0YzNmODU2ODg3MGEw
MTljMjQwHhcNMjUwNDE2MTIwMDIyWhcNMjUwNDE3MTIwMDIyWjAzMTEwLwYDVQQD
EyhmODk2NGZjOTAwYzkwZjQzNGVlYjY3Mjk4OTRiZjIzYTFjNmVkMjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1E/9RY967G1GiExh63N3ItXxuoeG
TlhdbyGH6THtJ6RzWudd4TrczSfJQBZdZw2l2a3fl8cuNyls6+d188RW1yjKpWIB
xdLsC55puHZ5Hq5EQw5xpFButPUk34dKrtee+JDGuzw5Vz76exfy3YmCHS/UMHWB
trsliBpffgdglqwby7IQryG6yJg5gqHnt9eEMbDXgqdfAboRX2AvTG7m0vYt5yH0
1U/APKBBbRD4GQSq3pdiX3Va+LX3d1zoDj7zyQDjqzKQt5RMPCGTou9Ptk+k4qWt
FeYtA49wMr/31ZW9xRbZAc1tJVy7pI+vAnHQas9maXW+sGtJ4z7akX403wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPiWT8kAyQ9DTutnKYlL8jocbtIJMB8GA1UdIwQY
MBaAFPo9C8EbKdpErVcwTD+FaIcKAZwkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qMEx3UnNwMmtTdFZ6Qk1QNFZvaHdvQm5DUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1
LWQyMTA3MWVmNzM1Yi8xLzEtajBMd1JzcDJrU3RWekJNUDRWb2h3b0JuQ1EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2MzL2FhNjYyOS1kMTQ5LTQxOTctYTMxNS1kMjEwNzFlZjcz
NWIvMS8xLWowTHdSc3Aya1N0VnpCTVA0Vm9od29CbkNRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6uX
3v/xh4N2wkaX6CD0ypzdXiToF2op9Tr5lVtC3YyQlsiS3zDhg/QyvbQ9AUGG75TH
dxiPkypuHjWgrv9L5C0sRhXL0njiPo0/DNeEfHb+Y9odcpihHbADapDMz9H+Fs4z
gvabZJvXj24G8/ywyvSYdHoH10LHxMf23DvE4AkbrSDmtDr3OGmkxIoHA5xXeiS+
Rrj+7Rk6p8g6OB8ZCWISrxz2mMj0B45ghfow86aYrRCz6SA+BO6pqahcoFgybJC+
zFOmZHVAvZXUGiZy+Ol03m5PgiZvn1DK/O/eDNGjc4yFWRNQxnV7naTxiE0KnNUP
1EN9AiTUBncUTrtURQ==
-----END CERTIFICATE-----
Generated at Wed Apr 16 19:33:43 2025 by rpki-client