Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
File: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft (raw, json)
Hash identifier: ihaGzdY6xRv+2wOcCyh7vRbZMMscaUJNl9Culojm5po=
Subject key identifier: 7A:4F:86:3D:14:11:48:F4:75:07:29:A0:90:4E:9E:23:81:09:4D:F4
Authority key identifier: FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
Certificate issuer: /CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Certificate serial: 019652DB413F65DAB785C09BDE9504D5EFEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 11:00:22 +0000
Manifest this update: Sun 20 Apr 2025 11:00:22 +0000
Manifest next update: Mon 21 Apr 2025 11:00:22 +0000
Files and hashes: 1: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl (hash: LRZRoOvCrn+THqDjrk6p9gHcnXkRyrZXL3GrJoD8Pwk=)
2: 5QzI9Kx0_zx8sVl6RSClMEylLsI.roa (hash: ouFHr10qAXIAq0kULKbopJbnAAixS5hvvnbbv6zQ1js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:41:3f:65:da:b7:85:c0:9b:de:95:04:d5:ef:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Validity
Not Before: Apr 20 11:00:22 2025 GMT
Not After : Apr 21 11:00:22 2025 GMT
Subject: CN=7a4f863d141148f4750729a0904e9e2381094df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b8:47:ec:a8:e7:b5:35:8e:6b:3a:51:94:60:
21:79:57:1a:f6:60:71:cf:34:9c:26:88:1a:68:0c:
d1:04:a0:55:7b:6d:1d:00:28:10:c5:f4:21:c2:eb:
b4:07:af:07:49:06:5f:e0:e4:ea:38:85:84:79:cb:
c6:2c:1b:31:f8:92:9b:a1:7f:22:2c:91:ac:a2:e3:
75:67:3c:e2:9e:fa:07:77:20:a9:5e:ca:da:88:0b:
48:14:d8:a8:6f:04:e2:08:d6:ac:92:4f:3c:cd:6a:
2e:ec:91:2a:03:ed:18:58:fd:c1:1e:31:b5:2f:d5:
18:7f:25:28:71:ce:00:c8:7b:bd:e5:73:36:b9:12:
27:19:ae:c7:0b:22:9f:9f:af:b8:8b:a6:25:5b:83:
4e:48:6b:55:d5:54:06:1c:6f:39:66:b7:05:ac:ee:
82:82:c0:3a:f0:eb:06:08:eb:3d:20:65:bd:28:bc:
bb:8a:d7:d7:a2:8d:f5:5a:66:b7:3b:c3:6f:a6:09:
21:95:76:cf:60:d5:03:be:16:32:d3:48:ca:8e:72:
c6:7a:4f:e9:09:8d:21:0b:0b:af:c9:c5:f3:46:60:
06:c7:74:02:c0:cd:a2:b8:15:1f:9d:a6:d2:57:18:
c0:d7:dd:13:8f:bd:71:e1:ff:f5:31:48:65:7a:ae:
c7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4F:86:3D:14:11:48:F4:75:07:29:A0:90:4E:9E:23:81:09:4D:F4
X509v3 Authority Key Identifier:
keyid:FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c4:b8:2f:78:66:d0:29:54:40:d6:3b:2a:1f:a5:94:19:74:
ab:86:cb:6f:97:8c:15:7a:9d:02:54:a7:02:97:74:f7:c0:13:
53:fe:35:7c:16:ca:7e:1d:56:5b:82:6a:56:38:72:32:04:db:
51:00:9b:37:2b:29:e3:fa:bc:35:fb:3e:98:4f:0c:68:08:c4:
0c:42:74:56:e1:28:47:0b:16:6c:03:fa:5f:2e:be:5f:24:30:
9b:b9:69:1a:65:7d:0d:71:7d:19:8e:dd:a8:be:e2:77:4e:e9:
c3:e3:39:eb:97:de:ce:fa:03:e0:bb:17:aa:02:45:43:62:18:
24:31:85:fe:6d:ab:4a:48:61:39:41:2e:c6:4c:7a:7d:d2:5b:
8b:3c:c8:46:48:fe:4d:34:3b:27:9f:cb:85:70:c0:f5:4a:b1:
20:36:9d:e0:95:a5:cf:07:b7:2b:91:b3:07:97:c1:a7:0d:94:
12:e7:87:cf:b6:0d:8d:c3:70:e3:ca:09:d2:fa:04:4c:3d:4c:
54:44:a0:91:b6:25:db:d0:0c:26:2b:c0:89:d3:4f:e4:bd:33:
f1:2e:7b:56:ce:17:65:58:bc:de:c7:29:88:75:1e:f9:7d:ef:
c9:27:c3:cd:46:be:a4:ab:51:16:0a:64:21:be:20:81:82:a8:
b6:82:41:bf
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZS20E/Zdq3hcCb3pUE1e/rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZDE4NjNjYmRlYzFiNTk2ZGFjZWViOTAxYTA4NTNkNmM4
N2U3NTYwHhcNMjUwNDIwMTEwMDIyWhcNMjUwNDIxMTEwMDIyWjAzMTEwLwYDVQQD
Eyg3YTRmODYzZDE0MTE0OGY0NzUwNzI5YTA5MDRlOWUyMzgxMDk0ZGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7hH7KjntTWOazpRlGAheVca9mBx
zzScJogaaAzRBKBVe20dACgQxfQhwuu0B68HSQZf4OTqOIWEecvGLBsx+JKboX8i
LJGsouN1ZzzinvoHdyCpXsraiAtIFNiobwTiCNaskk88zWou7JEqA+0YWP3BHjG1
L9UYfyUocc4AyHu95XM2uRInGa7HCyKfn6+4i6YlW4NOSGtV1VQGHG85ZrcFrO6C
gsA68OsGCOs9IGW9KLy7itfXoo31Wma3O8NvpgkhlXbPYNUDvhYy00jKjnLGek/p
CY0hCwuvycXzRmAGx3QCwM2iuBUfnabSVxjA190Tj71x4f/1MUhleq7HowIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHpPhj0UEUj0dQcpoJBOniOBCU30MB8GA1UdIwQY
MBaAFPrRhjy97BtZbazuuQGghT1sh+dWMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10R0dQTDNzRzFsdHJPNjVBYUNGUFd5SDUxWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvZGRkYTdlLWEwMzctNGQzOC05NTU1
LTBhMTEwYzQ5NzQ5Yy8xLzEtdEdHUEwzc0cxbHRyTzY1QWFDRlBXeUg1MVkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RmL2RkZGE3ZS1hMDM3LTRkMzgtOTU1NS0wYTExMGM0OTc0
OWMvMS8xLXRHR1BMM3NHMWx0ck82NUFhQ0ZQV3lINTFZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlcS4
L3hm0ClUQNY7Kh+llBl0q4bLb5eMFXqdAlSnApd098ATU/41fBbKfh1WW4JqVjhy
MgTbUQCbNysp4/q8Nfs+mE8MaAjEDEJ0VuEoRwsWbAP6Xy6+XyQwm7lpGmV9DXF9
GY7dqL7id07pw+M565fezvoD4LsXqgJFQ2IYJDGF/m2rSkhhOUEuxkx6fdJbizzI
Rkj+TTQ7J5/LhXDA9UqxIDad4JWlzwe3K5GzB5fBpw2UEueHz7YNjcNw48oJ0voE
TD1MVESgkbYl29AMJivAidNP5L0z8S57Vs4XZVi83scpiHUe+X3vySfDzUa+pKtR
FgpkIb4ggYKotoJBvw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:21:00 2025 by rpki-client