Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
File: fgRhmrDxIJtw8QWYxplEvzTb8jI.mft (raw, json)
Hash identifier: wesWNIBnlKXaYeSQKRNnnq+lQXaDlNC/RpDXVVmeYqE=
Subject key identifier: 1F:E9:E9:45:05:9A:3A:D9:F5:D4:78:5C:7A:B7:B1:DC:FC:9C:5A:8E
Authority key identifier: 7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32
Certificate issuer: /CN=7e04619ab0f1209b70f10598c69944bf34dbf232
Certificate serial: 01965500C9BA71B03CCE0A37D5AD77983D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
Manifest number: 123C
Signing time: Sun 20 Apr 2025 21:00:36 +0000
Manifest this update: Sun 20 Apr 2025 21:00:36 +0000
Manifest next update: Mon 21 Apr 2025 21:00:36 +0000
Files and hashes: 1: 787yu0Xx7LAqYI4eV6FlvWwe4sU.roa (hash: 0rdw2IxnG2UduKLMx9SDd9m8DvhrTv12ADsR6eydjg0=)
2: fgRhmrDxIJtw8QWYxplEvzTb8jI.crl (hash: BYh8IqLLkTX4/4jIgVZYvUKz1ujFRBme9plkgkcpa2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:c9:ba:71:b0:3c:ce:0a:37:d5:ad:77:98:3d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e04619ab0f1209b70f10598c69944bf34dbf232
Validity
Not Before: Apr 20 21:00:36 2025 GMT
Not After : Apr 21 21:00:36 2025 GMT
Subject: CN=1fe9e945059a3ad9f5d4785c7ab7b1dcfc9c5a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ed:92:9f:45:5a:97:45:65:cc:a5:07:98:f2:
bd:47:61:ac:ce:55:b6:67:e5:ce:8d:b2:29:48:a8:
01:20:e7:b2:35:4e:7c:97:c8:64:56:9a:36:c8:dc:
70:14:d1:30:84:5b:78:e7:33:b4:a3:06:07:b7:fd:
7d:0b:e7:a2:ad:5a:43:38:c7:1c:e7:8e:c7:3c:a8:
23:32:ec:92:c0:02:0c:57:5f:60:09:bd:20:41:73:
74:4f:1d:cf:ce:90:23:7e:5d:48:30:50:3a:63:9a:
cd:7c:8e:ca:df:c8:12:1d:c3:d0:36:25:a1:db:84:
31:5d:be:0e:24:87:7a:ae:33:28:e6:c5:c1:30:c3:
cf:53:e2:5a:c6:7f:1e:2f:5b:09:14:95:98:ac:7d:
be:99:a1:79:11:7a:f4:f2:4d:0c:db:45:67:e5:6c:
e8:ec:5b:92:64:05:6d:4e:72:dd:8b:c0:f8:5e:34:
23:dc:01:f8:07:c9:83:a9:9a:ef:0b:57:81:59:d1:
15:4d:5e:af:20:29:08:82:00:a7:ea:f2:22:9d:f0:
4e:b7:9d:cf:d6:59:52:29:2a:e2:d2:0d:bc:30:35:
83:9b:67:10:b9:8a:cf:92:8b:91:f0:1c:c9:23:bb:
6d:9e:3b:2c:3f:89:15:2c:60:5a:d5:09:b1:fa:25:
8d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E9:E9:45:05:9A:3A:D9:F5:D4:78:5C:7A:B7:B1:DC:FC:9C:5A:8E
X509v3 Authority Key Identifier:
keyid:7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c2:30:5f:42:1e:e1:32:06:c2:d3:0b:81:93:c6:aa:c7:0e:
9b:ec:cc:79:bf:00:63:89:6f:f5:93:03:89:55:83:d2:8e:1b:
bb:7d:fc:83:62:93:ef:61:cb:50:a3:d6:af:58:85:3b:f0:24:
35:41:c0:8b:47:23:a2:eb:62:93:7c:c5:26:78:d6:55:4d:1b:
6c:56:ac:ed:34:d2:ff:43:e6:15:a5:c2:a9:db:54:84:de:af:
d8:16:b9:6d:ff:27:8a:97:72:3b:99:b0:1e:d4:c9:06:6f:0a:
6d:3d:4d:db:2f:ef:00:d1:4d:5b:23:0b:e7:dd:d1:cf:a3:ff:
31:4d:b1:44:6a:0d:8b:a0:85:85:c4:8a:50:3e:9e:21:a4:2d:
cc:fe:e2:13:86:ef:7d:d4:ea:83:c5:3a:53:6e:e8:b3:e4:b0:
b9:57:5f:b7:f0:3a:80:e4:54:6f:5c:25:66:51:52:81:2d:96:
c8:60:49:86:86:c3:f3:78:78:91:78:00:77:cd:ec:e9:41:47:
77:6b:6b:40:83:e3:fe:d6:2e:9b:5e:06:bb:4b:b7:da:63:ee:
40:54:c0:15:1f:a5:c5:9f:a0:b1:8f:fc:a9:16:90:bf:0d:69:
94:be:ef:83:e9:c8:74:da:eb:eb:82:db:0c:10:df:1b:18:76:
1b:f9:23:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVAMm6cbA8zgo31a13mD0VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMDQ2MTlhYjBmMTIwOWI3MGYxMDU5OGM2OTk0NGJmMzRk
YmYyMzIwHhcNMjUwNDIwMjEwMDM2WhcNMjUwNDIxMjEwMDM2WjAzMTEwLwYDVQQD
EygxZmU5ZTk0NTA1OWEzYWQ5ZjVkNDc4NWM3YWI3YjFkY2ZjOWM1YThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+2Sn0Val0VlzKUHmPK9R2GszlW2
Z+XOjbIpSKgBIOeyNU58l8hkVpo2yNxwFNEwhFt45zO0owYHt/19C+eirVpDOMcc
547HPKgjMuySwAIMV19gCb0gQXN0Tx3PzpAjfl1IMFA6Y5rNfI7K38gSHcPQNiWh
24QxXb4OJId6rjMo5sXBMMPPU+Jaxn8eL1sJFJWYrH2+maF5EXr08k0M20Vn5Wzo
7FuSZAVtTnLdi8D4XjQj3AH4B8mDqZrvC1eBWdEVTV6vICkIggCn6vIinfBOt53P
1llSKSri0g28MDWDm2cQuYrPkouR8BzJI7ttnjssP4kVLGBa1Qmx+iWNbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/p6UUFmjrZ9dR4XHq3sdz8nFqOMB8GA1UdIwQY
MBaAFH4EYZqw8SCbcPEFmMaZRL802/IyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmdSaG1yRHhJSnR3OFFXWXhwbEV2elRiOGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi80NTNlZmMtZjE5My00MjdiLWE0OTgt
MTc5MDNhMzAyZWMwLzEvZmdSaG1yRHhJSnR3OFFXWXhwbEV2elRiOGpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi80NTNlZmMtZjE5My00MjdiLWE0OTgtMTc5MDNhMzAyZWMw
LzEvZmdSaG1yRHhJSnR3OFFXWXhwbEV2elRiOGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcIwX0Ie
4TIGwtMLgZPGqscOm+zMeb8AY4lv9ZMDiVWD0o4bu338g2KT72HLUKPWr1iFO/Ak
NUHAi0cjoutik3zFJnjWVU0bbFas7TTS/0PmFaXCqdtUhN6v2Ba5bf8nipdyO5mw
HtTJBm8KbT1N2y/vANFNWyML593Rz6P/MU2xRGoNi6CFhcSKUD6eIaQtzP7iE4bv
fdTqg8U6U27os+SwuVdft/A6gORUb1wlZlFSgS2WyGBJhobD83h4kXgAd83s6UFH
d2trQIPj/tYum14Gu0u32mPuQFTAFR+lxZ+gsY/8qRaQvw1plL7vg+nIdNrr64Lb
DBDfGxh2G/kjDA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:47:41 2025 by rpki-client