Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
File: fbrLH8LCBjBCeBYxtRfOR1Izor0.mft (raw, json)
Hash identifier: 5Cl7TrF4VwTQOuP/b+bIFlOnIGFb9TpeeCyhX+dp/7Q=
Subject key identifier: 41:B2:D9:8A:8F:61:7F:B6:93:19:15:D4:38:D6:E4:A6:9E:AE:73:EE
Authority key identifier: 7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
Certificate issuer: /CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Certificate serial: 01964C350BECCECBC8134CA46A19A23B855E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
Manifest number: 14FF
Signing time: Sat 19 Apr 2025 04:01:06 +0000
Manifest this update: Sat 19 Apr 2025 04:01:06 +0000
Manifest next update: Sun 20 Apr 2025 04:01:06 +0000
Files and hashes: 1: M9qNJvC_kcwpwY04nD9scW455qU.roa (hash: 3RMJRIwbxzvUUPiZWVxoeQuqeF3pwso/hbH6wuXsN8I=)
2: fbrLH8LCBjBCeBYxtRfOR1Izor0.crl (hash: 76pem7pAPIsLyFbrn11jDt1i5eusr7BQXXNsABnfLTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:35:0b:ec:ce:cb:c8:13:4c:a4:6a:19:a2:3b:85:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Validity
Not Before: Apr 19 04:01:06 2025 GMT
Not After : Apr 20 04:01:06 2025 GMT
Subject: CN=41b2d98a8f617fb6931915d438d6e4a69eae73ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:31:ee:01:aa:11:48:ac:f1:2b:2f:99:1f:31:
ce:66:93:13:3c:d5:73:b6:a1:13:aa:cb:7f:c5:fe:
ac:81:f6:5d:0e:b4:8f:66:a9:c1:0c:f8:f8:cf:a0:
4d:7b:37:83:47:8a:c9:88:8f:e5:9d:54:1e:5b:57:
30:19:d0:68:4f:df:b1:f4:3d:d4:11:9a:08:a0:5c:
62:eb:59:7f:2e:42:55:71:12:2c:72:b0:12:80:a5:
1f:e7:49:56:0c:33:f1:01:25:16:2f:b6:e4:c0:73:
12:eb:16:38:31:db:93:a4:b4:4d:3c:cf:77:6a:e2:
53:2c:38:4e:94:3e:c8:e8:13:f1:e3:0c:a7:89:8e:
5a:39:c2:d4:69:dd:e8:53:23:e1:90:d9:0f:58:75:
50:b6:78:90:73:3e:82:53:4a:71:28:75:7c:ec:a2:
02:af:c6:83:7a:33:32:16:91:47:8b:3f:ec:7c:0a:
ff:2b:7f:c8:94:58:8b:f4:e5:f4:9a:99:ba:b7:53:
98:47:fb:9f:c5:46:de:ac:40:53:6e:3e:d0:e8:5e:
87:37:79:49:0c:28:43:1b:19:2e:94:17:39:69:d4:
f9:b9:aa:99:29:3d:51:66:9c:7a:23:53:b1:c0:2a:
cf:a6:7b:77:3e:77:7e:5e:c6:19:7a:c9:b8:19:23:
e5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B2:D9:8A:8F:61:7F:B6:93:19:15:D4:38:D6:E4:A6:9E:AE:73:EE
X509v3 Authority Key Identifier:
keyid:7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d9:f9:5d:c4:b0:3e:5e:8e:46:60:02:2e:60:8d:ba:43:0c:
6a:9a:e5:79:e4:3d:f9:6c:b0:11:7c:68:a2:10:4c:49:67:6b:
d0:bb:a4:b0:67:93:9e:78:a7:d6:3f:e8:bd:1f:3e:2c:9b:50:
64:93:75:22:da:01:7b:5e:75:78:79:0c:f1:6d:7a:da:0e:82:
21:c1:e5:59:95:f5:1b:6b:0e:ba:0e:58:d8:64:11:a7:4a:b1:
1a:ab:79:20:66:f3:9d:ca:69:16:e5:34:29:73:f3:51:30:4b:
bf:8f:6d:c3:ca:59:5d:6c:7e:39:d2:87:45:90:66:ec:b7:2d:
0b:b2:4a:44:ee:dc:c5:11:86:94:cf:d2:9c:f6:94:06:c8:56:
0f:4d:39:6a:d8:c9:bf:80:2d:70:29:6f:ad:2d:90:da:93:48:
9c:44:d8:9d:02:e1:9f:38:38:c1:8c:e4:14:a3:a1:08:41:3e:
cd:f0:a1:8d:3f:e3:09:af:6c:b7:24:c9:8e:8e:69:74:ae:de:
4f:07:87:b5:09:a3:0c:bc:06:79:6f:33:f8:a7:75:f1:24:b3:
21:c8:a2:17:2c:30:b6:04:0b:c5:7f:96:25:74:2d:7d:3a:f0:
d7:34:7b:c7:11:76:d9:e9:10:ab:88:84:7f:bb:34:c4:1e:1e:
f2:13:0e:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMNQvszsvIE0ykahmiO4VeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYmFjYjFmYzJjMjA2MzA0Mjc4MTYzMWI1MTdjZTQ3NTIz
M2EyYmQwHhcNMjUwNDE5MDQwMTA2WhcNMjUwNDIwMDQwMTA2WjAzMTEwLwYDVQQD
Eyg0MWIyZDk4YThmNjE3ZmI2OTMxOTE1ZDQzOGQ2ZTRhNjllYWU3M2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zHuAaoRSKzxKy+ZHzHOZpMTPNVz
tqETqst/xf6sgfZdDrSPZqnBDPj4z6BNezeDR4rJiI/lnVQeW1cwGdBoT9+x9D3U
EZoIoFxi61l/LkJVcRIscrASgKUf50lWDDPxASUWL7bkwHMS6xY4MduTpLRNPM93
auJTLDhOlD7I6BPx4wyniY5aOcLUad3oUyPhkNkPWHVQtniQcz6CU0pxKHV87KIC
r8aDejMyFpFHiz/sfAr/K3/IlFiL9OX0mpm6t1OYR/ufxUberEBTbj7Q6F6HN3lJ
DChDGxkulBc5adT5uaqZKT1RZpx6I1OxwCrPpnt3Pnd+XsYZesm4GSPlwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGy2YqPYX+2kxkV1DjW5KaernPuMB8GA1UdIwQY
MBaAFH26yx/CwgYwQngWMbUXzkdSM6K9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zZDJkN2ItMmM1Yy00OThmLTg1YmYt
Mjg1ZWM4ZmU4ZWM2LzEvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zZDJkN2ItMmM1Yy00OThmLTg1YmYtMjg1ZWM4ZmU4ZWM2
LzEvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdn5XcSw
Pl6ORmACLmCNukMMaprleeQ9+WywEXxoohBMSWdr0LuksGeTnnin1j/ovR8+LJtQ
ZJN1ItoBe151eHkM8W162g6CIcHlWZX1G2sOug5Y2GQRp0qxGqt5IGbzncppFuU0
KXPzUTBLv49tw8pZXWx+OdKHRZBm7LctC7JKRO7cxRGGlM/SnPaUBshWD005atjJ
v4AtcClvrS2Q2pNInETYnQLhnzg4wYzkFKOhCEE+zfChjT/jCa9styTJjo5pdK7e
TweHtQmjDLwGeW8z+Kd18SSzIciiFywwtgQLxX+WJXQtfTrw1zR7xxF22ekQq4iE
f7s0xB4e8hMOZg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:03:08 2025 by rpki-client