Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
File: 1vgHZgvyzZKu45FEKlNDr3GMGMc.mft (raw, json)
Hash identifier: UrquS/tl/uyI3nDCrFObZ2/H7Bh6JaGel/0UFoQBwng=
Subject key identifier: 44:F4:8C:54:8D:54:8A:38:0E:84:E5:BF:AC:9D:D3:F1:A0:E5:7B:DB
Authority key identifier: D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
Certificate issuer: /CN=d6f807660bf2cd92aee391442a5343af718c18c7
Certificate serial: 01961A6CB322D4A77137480ECD6B4DC24F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
Manifest number: 1472
Signing time: Wed 09 Apr 2025 12:00:53 +0000
Manifest this update: Wed 09 Apr 2025 12:00:53 +0000
Manifest next update: Thu 10 Apr 2025 12:00:53 +0000
Files and hashes: 1: 1vgHZgvyzZKu45FEKlNDr3GMGMc.crl (hash: 5Zl66VjBHrKXXhhD4WthvdKVr72SingglfmKNPnKLGo=)
2: KWwJmTARHeAHpXQEJKYr4FNXsos.roa (hash: 1063ws7p1tPR9qPGeDgdtnc+pragLeBe3JdEiKbe844=)
3: axQ4QcGTmWCvhs7XYE0LSyL0bR8.roa (hash: jnmoj5c8hE+D/ASpXs+Aut4m2SL0NpIhMDG7HImlpO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:6c:b3:22:d4:a7:71:37:48:0e:cd:6b:4d:c2:4f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f807660bf2cd92aee391442a5343af718c18c7
Validity
Not Before: Apr 9 12:00:53 2025 GMT
Not After : Apr 10 12:00:53 2025 GMT
Subject: CN=44f48c548d548a380e84e5bfac9dd3f1a0e57bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8e:43:b1:da:25:84:63:4b:b2:64:45:ce:fe:
b6:b9:47:11:6c:79:52:40:92:ec:44:55:3b:0d:85:
72:98:04:a2:6e:15:4a:e6:37:ec:6e:65:2b:80:a4:
a5:ab:cf:19:0d:ba:ec:1a:c8:c4:3b:f9:d0:3f:b8:
c9:d4:42:d4:45:67:c8:b6:f8:f7:ac:c2:5c:c1:e4:
b6:3a:f3:b3:06:fe:51:ef:5c:ca:40:27:3e:4a:48:
f3:07:26:e0:05:46:86:af:83:db:4c:12:ae:72:9e:
ac:44:9d:5b:ba:67:6a:a5:1b:cc:6b:2a:28:87:06:
f0:d8:d3:61:d1:09:a0:0c:b3:f3:78:4a:35:98:04:
37:ac:87:79:25:63:65:aa:72:8f:31:48:9b:83:b8:
47:9f:b7:ae:fd:f5:b3:d3:3b:21:56:ec:51:f3:f9:
35:f6:a5:7a:61:ee:f9:74:76:74:e0:c7:07:c8:1e:
15:fd:cb:1c:43:2b:ec:d0:f4:d6:d3:01:c5:2d:d5:
e9:cf:71:ee:fe:23:d1:92:6e:b9:87:15:04:d0:15:
2b:64:9e:8d:8c:92:c9:86:38:a8:a4:1d:15:7f:37:
99:fb:18:d5:17:45:db:e4:87:36:35:c5:b4:23:ed:
1d:d9:d7:df:16:59:9b:f4:97:45:fb:62:78:5a:c0:
12:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F4:8C:54:8D:54:8A:38:0E:84:E5:BF:AC:9D:D3:F1:A0:E5:7B:DB
X509v3 Authority Key Identifier:
keyid:D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:28:e4:de:c6:f8:e2:d0:f8:b9:d1:77:07:3e:5f:b5:bb:30:
60:9f:19:84:2b:80:46:40:e9:e1:b7:36:af:5e:82:70:4e:10:
9e:14:77:18:42:18:ed:f3:6b:fa:3a:e2:84:32:2f:68:72:43:
6e:70:27:1f:07:5b:e4:6e:b2:5f:b6:04:0f:c0:f3:71:60:95:
b4:42:c8:fb:c9:dd:ca:d4:d1:66:f0:d5:16:69:31:77:d0:a9:
39:b9:47:a5:08:97:a2:bc:25:99:13:83:ae:dc:6e:ac:4d:c9:
35:f2:b8:88:bb:c5:f3:a4:19:e6:e7:0a:cf:5a:87:a9:92:96:
b5:2d:8f:67:96:1e:ae:ec:96:99:04:0c:7a:ee:dd:d8:a6:90:
e6:02:50:9a:92:6b:2c:3b:15:1c:c9:c9:7f:43:cf:3e:0c:40:
53:2f:d4:de:25:8c:f2:8c:65:d8:97:49:55:05:da:92:a0:1a:
64:e0:ec:74:b3:bf:1f:05:5f:7a:73:3a:88:91:32:1b:d3:3a:
ea:64:ad:60:d4:a9:ee:e1:28:b1:9c:26:0f:ce:c9:1c:26:f9:
b2:ce:e6:a2:b7:9d:c0:05:83:7d:9d:44:b6:b0:b7:37:e5:de:
6c:cb:36:09:88:7e:58:29:1a:1b:98:7c:bd:15:0e:77:da:b6:
d5:95:dd:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYabLMi1KdxN0gOzWtNwk9VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZjgwNzY2MGJmMmNkOTJhZWUzOTE0NDJhNTM0M2FmNzE4
YzE4YzcwHhcNMjUwNDA5MTIwMDUzWhcNMjUwNDEwMTIwMDUzWjAzMTEwLwYDVQQD
Eyg0NGY0OGM1NDhkNTQ4YTM4MGU4NGU1YmZhYzlkZDNmMWEwZTU3YmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo5DsdolhGNLsmRFzv62uUcRbHlS
QJLsRFU7DYVymASibhVK5jfsbmUrgKSlq88ZDbrsGsjEO/nQP7jJ1ELURWfItvj3
rMJcweS2OvOzBv5R71zKQCc+SkjzBybgBUaGr4PbTBKucp6sRJ1bumdqpRvMayoo
hwbw2NNh0QmgDLPzeEo1mAQ3rId5JWNlqnKPMUibg7hHn7eu/fWz0zshVuxR8/k1
9qV6Ye75dHZ04McHyB4V/cscQyvs0PTW0wHFLdXpz3Hu/iPRkm65hxUE0BUrZJ6N
jJLJhjiopB0VfzeZ+xjVF0Xb5Ic2NcW0I+0d2dffFlmb9JdF+2J4WsASOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFET0jFSNVIo4DoTlv6yd0/Gg5XvbMB8GA1UdIwQY
MBaAFNb4B2YL8s2SruORRCpTQ69xjBjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iNzVkNjQtOWE1NS00OTBjLThjNTgt
M2ZlMTc0ODFmNjA4LzEvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iNzVkNjQtOWE1NS00OTBjLThjNTgtM2ZlMTc0ODFmNjA4
LzEvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiCjk3sb4
4tD4udF3Bz5ftbswYJ8ZhCuARkDp4bc2r16CcE4QnhR3GEIY7fNr+jrihDIvaHJD
bnAnHwdb5G6yX7YED8DzcWCVtELI+8ndytTRZvDVFmkxd9CpOblHpQiXorwlmROD
rtxurE3JNfK4iLvF86QZ5ucKz1qHqZKWtS2PZ5YeruyWmQQMeu7d2KaQ5gJQmpJr
LDsVHMnJf0PPPgxAUy/U3iWM8oxl2JdJVQXakqAaZODsdLO/HwVfenM6iJEyG9M6
6mStYNSp7uEosZwmD87JHCb5ss7moredwAWDfZ1EtrC3N+XebMs2CYh+WCkaG5h8
vRUOd9q21ZXdVw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 19:57:59 2025 by rpki-client