Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
File: h497ckDFitfp7vUFdPYIjpuQsC0.mft (raw, json)
Hash identifier: QowBo1zf3rJd1oFS7PLb9lBooYIwyBSRX4EOsmK4IfA=
Subject key identifier: C6:49:62:53:B2:74:8C:E8:3A:38:02:A9:A2:94:43:D0:69:3E:49:70
Authority key identifier: 87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
Certificate issuer: /CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Certificate serial: 01958BF26ED13C29467F88E15938758364F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
Manifest number: 1427
Signing time: Wed 12 Mar 2025 20:01:15 +0000
Manifest this update: Wed 12 Mar 2025 20:01:15 +0000
Manifest next update: Thu 13 Mar 2025 20:01:15 +0000
Files and hashes: 1: 6mTYkUzvhb-Htm6lfZWXyJFAe3g.roa (hash: wl2jbKj60gngwVW2ZgUBMEJL1S5Obo/uhCmKyt9SPvM=)
2: h497ckDFitfp7vUFdPYIjpuQsC0.crl (hash: RqIqRnF20LHPa15AUPX6nTropF9WDxxd6JfWlRAH12k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:6e:d1:3c:29:46:7f:88:e1:59:38:75:83:64:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Validity
Not Before: Mar 12 20:01:15 2025 GMT
Not After : Mar 13 20:01:15 2025 GMT
Subject: CN=c6496253b2748ce83a3802a9a29443d0693e4970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:68:11:63:2c:97:aa:25:11:49:3d:50:08:d2:
c8:dc:14:cc:3d:79:7f:81:56:52:d2:52:2e:e2:5e:
3d:f8:b8:9e:3c:72:1f:c1:3d:cc:37:43:10:a4:72:
a6:0d:99:3b:a1:25:a2:e9:d1:26:fa:b3:27:28:02:
5a:3c:e2:87:fc:e6:4e:09:34:a4:e4:19:9c:87:53:
9e:0b:5d:a6:27:dc:c0:aa:0e:72:2c:5b:b5:cd:b3:
fe:ff:43:ce:1c:1b:95:29:f0:77:60:6f:2b:20:66:
4b:1d:f5:27:73:cc:8c:97:b6:ff:89:33:a3:df:10:
7d:69:e3:bb:d3:c3:db:5c:b9:40:a8:af:2c:5c:40:
58:79:8d:2a:6c:b5:ef:3e:00:5a:b6:c1:fb:89:78:
8a:15:a9:52:9b:30:3f:7f:42:69:84:09:a4:ee:5f:
80:fa:92:28:5d:d5:5a:e4:bf:22:55:ba:ca:7f:d2:
91:2b:b1:9a:0d:8f:3b:e0:30:6d:46:29:51:70:a6:
96:d9:f2:ee:d2:0c:b6:6f:a3:a9:df:e2:73:73:03:
74:60:3f:9a:05:8f:9e:07:d0:4d:fe:51:d6:b6:56:
7d:0d:b2:2f:35:63:60:e8:a5:f5:43:d8:f0:27:72:
75:22:15:36:28:ad:16:b8:e2:ac:85:23:b4:23:81:
ca:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:49:62:53:B2:74:8C:E8:3A:38:02:A9:A2:94:43:D0:69:3E:49:70
X509v3 Authority Key Identifier:
keyid:87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e8:4f:17:34:0b:03:33:11:0c:b0:10:50:28:7b:99:48:c2:
76:a9:44:28:95:45:a4:bb:3e:95:a5:a2:55:ba:5d:c1:8a:81:
00:54:58:51:5c:cd:6d:a0:64:33:3f:fc:bc:f9:49:cc:6f:25:
0a:a2:04:ef:29:29:87:66:df:1b:9d:83:b4:ea:6f:26:32:60:
26:3d:d3:5f:24:23:3f:bf:71:b7:f1:d3:e7:90:29:0e:79:5a:
fb:e4:9f:b7:c0:b8:23:56:16:f6:c7:f6:03:f6:d3:d1:b8:d5:
ff:0b:be:65:ba:8f:29:09:0f:f0:5c:2f:ee:80:d9:82:6f:2c:
88:e2:4d:1c:d2:bf:ca:3f:b8:ad:eb:b2:73:09:9a:dc:a1:a2:
49:bf:03:0e:6a:b3:59:ac:e2:34:7a:28:41:11:a5:82:ca:c8:
a8:6a:e2:03:b8:aa:04:0d:08:4d:9f:20:db:db:63:15:6c:18:
22:c9:76:98:6f:d1:05:de:83:90:42:d9:cd:8f:2c:8f:0d:dc:
dc:e1:ad:9b:2b:71:3f:d2:95:ab:61:6c:4b:b4:c8:02:35:13:
40:f4:fa:4a:fb:37:58:f1:62:34:04:9d:a3:24:ea:77:a4:6b:
a6:18:69:46:e8:4d:f6:dd:d8:d4:65:c5:5d:98:c3:c9:79:7e:
ce:5a:f2:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWL8m7RPClGf4jhWTh1g2TyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OGY3YjcyNDBjNThhZDdlOWVlZjUwNTc0ZjYwODhlOWI5
MGIwMmQwHhcNMjUwMzEyMjAwMTE1WhcNMjUwMzEzMjAwMTE1WjAzMTEwLwYDVQQD
EyhjNjQ5NjI1M2IyNzQ4Y2U4M2EzODAyYTlhMjk0NDNkMDY5M2U0OTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WgRYyyXqiURST1QCNLI3BTMPXl/
gVZS0lIu4l49+LiePHIfwT3MN0MQpHKmDZk7oSWi6dEm+rMnKAJaPOKH/OZOCTSk
5Bmch1OeC12mJ9zAqg5yLFu1zbP+/0POHBuVKfB3YG8rIGZLHfUnc8yMl7b/iTOj
3xB9aeO708PbXLlAqK8sXEBYeY0qbLXvPgBatsH7iXiKFalSmzA/f0JphAmk7l+A
+pIoXdVa5L8iVbrKf9KRK7GaDY874DBtRilRcKaW2fLu0gy2b6Op3+JzcwN0YD+a
BY+eB9BN/lHWtlZ9DbIvNWNg6KX1Q9jwJ3J1IhU2KK0WuOKshSO0I4HKkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZJYlOydIzoOjgCqaKUQ9BpPklwMB8GA1UdIwQY
MBaAFIePe3JAxYrX6e71BXT2CI6bkLAtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDQ5N2NrREZpdGZwN3ZVRmRQWUlqcHVRc0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mYzE1OWUtOGQ1Ni00YzNhLWFlNDIt
MGNiZGQ5NWExNmRkLzEvaDQ5N2NrREZpdGZwN3ZVRmRQWUlqcHVRc0MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mYzE1OWUtOGQ1Ni00YzNhLWFlNDItMGNiZGQ5NWExNmRk
LzEvaDQ5N2NrREZpdGZwN3ZVRmRQWUlqcHVRc0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdOhPFzQL
AzMRDLAQUCh7mUjCdqlEKJVFpLs+laWiVbpdwYqBAFRYUVzNbaBkMz/8vPlJzG8l
CqIE7ykph2bfG52DtOpvJjJgJj3TXyQjP79xt/HT55ApDnla++Sft8C4I1YW9sf2
A/bT0bjV/wu+ZbqPKQkP8Fwv7oDZgm8siOJNHNK/yj+4reuycwma3KGiSb8DDmqz
WaziNHooQRGlgsrIqGriA7iqBA0ITZ8g29tjFWwYIsl2mG/RBd6DkELZzY8sjw3c
3OGtmytxP9KVq2FsS7TIAjUTQPT6Svs3WPFiNASdoyTqd6RrphhpRuhN9t3Y1GXF
XZjDyXl+zlrysw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:16 2025 by rpki-client