Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier: HyZx+a5/FZdlhaemUxIFCu0hyjSxZTwF75lfcpxOdsQ=
Subject key identifier: FA:70:02:6E:30:AC:A0:7E:23:71:09:45:E8:80:5C:9E:43:58:BB:4A
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 01960309A80617D4EE800EFE7C88A7101EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number: 0CB5
Signing time: Fri 04 Apr 2025 23:01:26 +0000
Manifest this update: Fri 04 Apr 2025 23:01:26 +0000
Manifest next update: Sat 05 Apr 2025 23:01:26 +0000
Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: P/SY+x1deBmIf00rkS/kaOcFw0kU6g+EgBKW4P2ynvo=)
2: ZrVj2s197OVZslr8l0eL6BOnr3w.roa (hash: MfbdU/hx9JIBrv7/G68X/y0zTkmoV59GNKmYnsQV+5o=)
3: mwni58KyYHbpUQER4Pt8qtMcan4.roa (hash: 1zAR9iZ3h0/evzy5xE5e6DnfwvHvR1HUWm8sNJWcti0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:03:09:a8:06:17:d4:ee:80:0e:fe:7c:88:a7:10:1e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Apr 4 23:01:26 2025 GMT
Not After : Apr 5 23:01:26 2025 GMT
Subject: CN=fa70026e30aca07e23710945e8805c9e4358bb4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:98:89:a4:f1:9f:2a:8d:0c:04:12:a8:b1:35:
b1:9a:3b:7f:99:a6:04:98:6e:9e:53:ee:91:ad:11:
03:55:05:93:78:04:7d:16:55:0b:fd:7f:ac:52:67:
d1:45:b6:46:02:0f:af:62:1e:03:70:58:87:de:9b:
4f:26:dc:ef:3f:f3:7f:50:01:ee:30:73:20:d3:1a:
fa:d9:41:82:8e:bc:5b:fa:56:14:e2:95:6d:cf:96:
e7:45:31:47:2e:9b:6c:92:f8:91:63:74:8c:76:c5:
84:78:6e:1e:2b:7c:03:39:87:12:97:f4:bd:bf:d7:
5d:cc:27:4b:f3:c4:63:b5:04:04:29:99:a0:a2:63:
18:47:65:f0:75:d4:ca:61:09:c6:a3:44:61:8a:1e:
9d:97:92:5a:b0:08:21:22:a4:ea:32:f7:b8:8f:f4:
8d:a2:11:e8:d0:b0:00:93:5b:43:de:72:47:e9:21:
68:84:33:8f:9f:4b:55:cb:88:68:b5:7f:f0:18:0a:
46:3c:cc:72:c3:95:09:46:4b:65:56:4a:c2:27:7d:
55:6c:fa:af:87:f4:62:bb:1d:3a:71:68:68:fb:13:
79:1f:ed:d5:1e:80:74:75:77:f6:d4:10:87:fa:7d:
86:da:29:b8:76:92:67:e1:c5:43:54:3a:b9:78:af:
f8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:70:02:6E:30:AC:A0:7E:23:71:09:45:E8:80:5C:9E:43:58:BB:4A
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:0a:3c:fe:71:a1:8a:39:d2:61:64:97:ba:46:e4:fb:84:3d:
ec:56:06:03:74:05:36:51:26:59:e4:b9:e0:25:95:a2:9f:70:
d8:df:c1:88:a6:aa:84:62:25:e3:5d:70:d3:45:d9:0c:1a:cc:
95:40:37:ea:96:bc:2b:bd:9f:31:4d:16:0b:ac:17:b4:b2:9c:
1c:5c:e6:fa:bc:98:28:04:77:11:58:81:c0:12:a8:6c:8d:7c:
04:ca:12:6f:68:7d:02:a3:88:da:3a:10:e9:c0:96:ed:49:f5:
00:a1:40:c5:cd:ff:03:e1:ed:4b:d6:66:6d:d7:07:8a:2c:c5:
5b:4b:94:b6:80:24:23:3d:4c:8e:6a:d5:de:47:28:0d:09:98:
e4:21:cc:35:67:9a:04:e5:5e:28:95:f5:3d:c6:df:16:12:12:
70:b0:8a:22:97:32:8c:7c:57:92:c7:cb:ab:17:c8:9d:ba:e2:
06:5c:37:3c:54:18:2c:fc:cb:31:8a:d9:01:ea:38:e1:ed:21:
26:93:19:54:e7:82:eb:5e:47:4c:9a:1e:d4:bf:c7:68:6a:d8:
9b:b3:1b:94:09:b0:9a:4a:fc:b0:f1:23:2d:44:19:2a:8c:e9:
b7:00:b7:51:aa:ea:c5:25:75:2f:d3:ec:13:3c:f3:a3:a7:74:
ac:ac:82:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYDCagGF9TugA7+fIinEB7CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MzhkNzcyNmE1ZjFmMzNkYTE1ZDg3ZTVjOGIwZTQ4ZjUw
MjgxYmYwHhcNMjUwNDA0MjMwMTI2WhcNMjUwNDA1MjMwMTI2WjAzMTEwLwYDVQQD
EyhmYTcwMDI2ZTMwYWNhMDdlMjM3MTA5NDVlODgwNWM5ZTQzNThiYjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75iJpPGfKo0MBBKosTWxmjt/maYE
mG6eU+6RrREDVQWTeAR9FlUL/X+sUmfRRbZGAg+vYh4DcFiH3ptPJtzvP/N/UAHu
MHMg0xr62UGCjrxb+lYU4pVtz5bnRTFHLptskviRY3SMdsWEeG4eK3wDOYcSl/S9
v9ddzCdL88RjtQQEKZmgomMYR2XwddTKYQnGo0Rhih6dl5JasAghIqTqMve4j/SN
ohHo0LAAk1tD3nJH6SFohDOPn0tVy4hotX/wGApGPMxyw5UJRktlVkrCJ31VbPqv
h/Riux06cWho+xN5H+3VHoB0dXf21BCH+n2G2im4dpJn4cVDVDq5eK/4UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpwAm4wrKB+I3EJReiAXJ5DWLtKMB8GA1UdIwQY
MBaAFNU413JqXx8z2hXYflyLDkj1AoG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVRqWGNtcGZIelBhRmRoLVhJc09TUFVDZ2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80M2M0NTEtZTRlOS00ODU5LWI5ODUt
MmQ5ZGY0ZWY1ZjUwLzEvMVRqWGNtcGZIelBhRmRoLVhJc09TUFVDZ2I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80M2M0NTEtZTRlOS00ODU5LWI5ODUtMmQ5ZGY0ZWY1ZjUw
LzEvMVRqWGNtcGZIelBhRmRoLVhJc09TUFVDZ2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgo8/nGh
ijnSYWSXukbk+4Q97FYGA3QFNlEmWeS54CWVop9w2N/BiKaqhGIl411w00XZDBrM
lUA36pa8K72fMU0WC6wXtLKcHFzm+ryYKAR3EViBwBKobI18BMoSb2h9AqOI2joQ
6cCW7Un1AKFAxc3/A+HtS9ZmbdcHiizFW0uUtoAkIz1MjmrV3kcoDQmY5CHMNWea
BOVeKJX1PcbfFhIScLCKIpcyjHxXksfLqxfInbriBlw3PFQYLPzLMYrZAeo44e0h
JpMZVOeC615HTJoe1L/HaGrYm7MblAmwmkr8sPEjLUQZKozptwC3UarqxSV1L9Ps
Ezzzo6d0rKyCzA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:04 2025 by rpki-client