Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
File: 1UfPnyd2dHcSCx07JsxXphCZpyQ.mft (raw, json)
Hash identifier: bKRG/VqOVPsZloFO/7WqLh8J5an21BextMYbqCwn4MY=
Subject key identifier: 7C:0F:F3:D1:B0:22:9C:58:3F:6D:9D:49:D8:94:E0:9D:AA:95:F7:1D
Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
Certificate issuer: /CN=d547cf9f27767477120b1d3b26cc57a61099a724
Certificate serial: 019639F780337E46EEB7CE9B27A781583213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
Manifest number: 029F
Signing time: Tue 15 Apr 2025 15:00:43 +0000
Manifest this update: Tue 15 Apr 2025 15:00:43 +0000
Manifest next update: Wed 16 Apr 2025 15:00:43 +0000
Files and hashes: 1: 1UfPnyd2dHcSCx07JsxXphCZpyQ.crl (hash: e/RM+qc/gVm6aJKJZVp5QU/b2T17fhzQstaVCFGM/f4=)
2: loFt9UkmmZ1FwU6GuBvE7wOCBXI.roa (hash: EBLJxo6VHYAxrO4XWEk670Ig6ARB7G0deWDK0JqRpRk=)
3: uEe7yxEzwBqxOdiy6kW5K2akSMQ.roa (hash: 4vrYRNv3vEFbdxt4zd7lm78u8NLMmrbvWa8ivtjvkwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:f7:80:33:7e:46:ee:b7:ce:9b:27:a7:81:58:32:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724
Validity
Not Before: Apr 15 15:00:43 2025 GMT
Not After : Apr 16 15:00:43 2025 GMT
Subject: CN=7c0ff3d1b0229c583f6d9d49d894e09daa95f71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:94:6d:c3:2c:b3:e3:e3:51:b5:63:fb:43:69:
22:43:52:31:c7:2b:e6:95:04:8b:8f:9a:a4:7d:5f:
a7:19:2e:f2:5e:ad:05:41:84:56:e2:d8:47:e6:d8:
99:f1:d5:9c:c1:d6:9c:8c:b5:3b:25:08:3e:33:4f:
fd:87:2c:61:c5:5f:dd:53:3a:97:1d:57:fd:0c:dd:
89:fc:ca:1d:5f:8e:7a:44:5e:f2:4c:51:11:ae:36:
e0:56:a6:ac:65:02:32:93:e3:40:54:f4:21:1d:c5:
8c:c0:9b:85:2b:45:5a:12:d1:80:d2:c0:a8:af:b5:
95:23:ef:73:2c:a0:cd:e0:04:c1:b9:19:a1:68:65:
17:2d:f1:b2:ca:53:fa:21:40:14:ea:c3:89:44:21:
7a:ea:ae:06:f2:0f:6b:f8:a5:ae:a4:f4:0f:6e:08:
e7:04:cb:54:e7:84:f9:c7:09:b0:75:e9:7a:b6:a7:
3e:e2:60:33:b2:1d:6b:fb:0e:56:d2:25:81:c9:1a:
f4:10:45:64:ce:8a:8e:02:c3:da:c8:96:be:70:98:
b0:09:50:28:87:c0:bf:ad:f0:40:b7:42:c2:45:1b:
60:82:b9:3a:0d:20:5a:b6:79:34:81:95:22:3d:e7:
97:8e:bf:3f:41:92:c2:f6:d5:d8:7b:f1:7e:79:51:
ce:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0F:F3:D1:B0:22:9C:58:3F:6D:9D:49:D8:94:E0:9D:AA:95:F7:1D
X509v3 Authority Key Identifier:
keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:37:7d:e5:63:8e:ac:e7:90:c6:11:25:17:80:12:19:4c:fe:
8b:ee:e7:b5:a5:4f:df:df:51:d5:ab:1e:42:cb:db:08:94:1e:
71:8f:e4:cb:58:c7:ca:91:75:b6:48:42:ae:c2:88:73:3c:ea:
ba:13:98:e1:71:b5:06:5d:73:33:73:8d:2a:98:12:25:a6:c2:
9f:4c:44:6e:35:73:b8:fb:52:93:19:9a:a5:3a:65:19:37:76:
3f:00:39:63:79:be:d0:69:f2:21:87:83:47:c4:cf:67:f7:d7:
60:79:78:87:b2:df:54:85:44:af:85:30:c8:95:4c:3a:1e:29:
cd:5e:b9:dc:71:3c:a8:7c:49:58:54:46:12:9a:7b:05:52:2e:
d4:2c:b5:38:bd:4e:2e:96:ad:99:5a:f2:9f:55:19:17:bf:2b:
47:62:e3:ae:e9:11:b1:98:0d:0b:ba:ae:b2:4e:d7:2d:26:a4:
b3:d0:f0:57:38:1c:b8:c2:c8:e4:c2:ca:88:b7:7c:fa:58:28:
f8:93:35:0e:f5:c8:c0:2a:fe:b8:f4:34:48:e5:83:53:9c:99:
a9:40:57:24:47:77:5b:59:92:b8:0e:5e:ab:20:20:b3:8d:e6:
aa:95:5e:c0:85:f4:66:96:74:31:34:89:bc:f9:07:1d:07:c2:
e2:6c:72:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY594Azfkbut86bJ6eBWDITMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NDdjZjlmMjc3Njc0NzcxMjBiMWQzYjI2Y2M1N2E2MTA5
OWE3MjQwHhcNMjUwNDE1MTUwMDQzWhcNMjUwNDE2MTUwMDQzWjAzMTEwLwYDVQQD
Eyg3YzBmZjNkMWIwMjI5YzU4M2Y2ZDlkNDlkODk0ZTA5ZGFhOTVmNzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5Rtwyyz4+NRtWP7Q2kiQ1Ixxyvm
lQSLj5qkfV+nGS7yXq0FQYRW4thH5tiZ8dWcwdacjLU7JQg+M0/9hyxhxV/dUzqX
HVf9DN2J/ModX456RF7yTFERrjbgVqasZQIyk+NAVPQhHcWMwJuFK0VaEtGA0sCo
r7WVI+9zLKDN4ATBuRmhaGUXLfGyylP6IUAU6sOJRCF66q4G8g9r+KWupPQPbgjn
BMtU54T5xwmwdel6tqc+4mAzsh1r+w5W0iWByRr0EEVkzoqOAsPayJa+cJiwCVAo
h8C/rfBAt0LCRRtggrk6DSBatnk0gZUiPeeXjr8/QZLC9tXYe/F+eVHOswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwP89GwIpxYP22dSdiU4J2qlfcdMB8GA1UdIwQY
MBaAFNVHz58ndnR3EgsdOybMV6YQmackMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVVmUG55ZDJkSGNTQ3gwN0pzeFhwaENacHlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wNjNlNTktOWU5NC00ZTkxLThiN2Ut
NmY0ZGUwMjBhYWU2LzEvMVVmUG55ZDJkSGNTQ3gwN0pzeFhwaENacHlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8wNjNlNTktOWU5NC00ZTkxLThiN2UtNmY0ZGUwMjBhYWU2
LzEvMVVmUG55ZDJkSGNTQ3gwN0pzeFhwaENacHlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTd95WOO
rOeQxhElF4ASGUz+i+7ntaVP399R1aseQsvbCJQecY/ky1jHypF1tkhCrsKIczzq
uhOY4XG1Bl1zM3ONKpgSJabCn0xEbjVzuPtSkxmapTplGTd2PwA5Y3m+0GnyIYeD
R8TPZ/fXYHl4h7LfVIVEr4UwyJVMOh4pzV653HE8qHxJWFRGEpp7BVIu1Cy1OL1O
LpatmVryn1UZF78rR2LjrukRsZgNC7qusk7XLSaks9DwVzgcuMLI5MLKiLd8+lgo
+JM1DvXIwCr+uPQ0SOWDU5yZqUBXJEd3W1mSuA5eqyAgs43mqpVewIX0ZpZ0MTSJ
vPkHHQfC4mxyXQ==
-----END CERTIFICATE-----
Generated at Wed Apr 16 00:20:37 2025 by rpki-client