Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
File: 0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json)
Hash identifier: H3Dn3fwky847DML5wjcRu/+Jqb0QbGhVWittz2eNTbs=
Subject key identifier: 02:22:82:DF:2E:30:4C:81:A4:DD:11:9E:C7:D6:2C:08:35:EE:1D:BF
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial: 01967AFBD5ABB51BC7F6C236C909C69C71F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 06:00:46 +0000
Manifest this update: Mon 28 Apr 2025 06:00:46 +0000
Manifest next update: Tue 29 Apr 2025 06:00:46 +0000
Files and hashes: 1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: 451vsUqQR1VNYusukDawQQwwbX8DiWuFk5BZbo2Ek+c=)
2: FtQX4tz2PfNS1jDZrdtbiPoNYSU.roa (hash: M4MM/hQp8qhWYBPYsVJLPE9nJhVevNigPOSWligASH4=)
3: xpbeDPeraC0lsT88_DSzZTcvzFU.roa (hash: 7vANxALGvUHJgNJxUW1TqxLJ7J9U0tCgO5zgV2ERDWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:d5:ab:b5:1b:c7:f6:c2:36:c9:09:c6:9c:71:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Validity
Not Before: Apr 28 06:00:46 2025 GMT
Not After : Apr 29 06:00:46 2025 GMT
Subject: CN=022282df2e304c81a4dd119ec7d62c0835ee1dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ba:20:e8:49:ed:b2:66:a4:48:a7:7c:44:5a:
b7:57:d0:58:b0:de:bf:58:46:e7:5f:c2:21:4e:31:
9d:1f:00:db:c7:df:ba:5b:80:50:8d:a2:8b:44:6b:
2d:25:1c:0c:58:49:bf:79:90:65:85:58:63:5a:fb:
91:ce:6e:73:de:a3:04:19:d5:1a:c3:76:0b:fc:6d:
0c:1b:39:95:db:40:05:da:d0:9e:89:6b:c1:b8:7d:
36:56:35:45:73:dc:1a:55:dc:c9:77:20:e9:41:fc:
6f:a4:75:07:d2:05:c5:42:fd:c8:47:7d:e7:f9:80:
b2:aa:ef:8f:eb:5a:3a:f2:0e:50:88:9f:be:02:3a:
70:56:2c:8a:0d:be:ad:c4:d7:01:08:6d:0c:01:97:
43:84:4b:d3:3c:fd:f2:e9:61:1f:c0:c7:bc:62:dd:
67:69:2e:19:21:20:1d:8a:5d:3a:27:d6:90:2a:e1:
ab:68:75:54:39:f4:fb:89:be:39:3d:5e:64:13:65:
b8:29:c5:4a:3a:d1:b4:37:21:be:09:53:9d:99:3c:
18:eb:e0:b9:f6:c8:a4:12:7a:e6:34:4d:68:c5:4d:
be:91:b4:2a:01:ef:d8:94:fe:49:82:eb:d7:81:b6:
e5:de:54:83:89:c1:a0:fc:69:19:ec:3b:da:7e:f7:
4a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:22:82:DF:2E:30:4C:81:A4:DD:11:9E:C7:D6:2C:08:35:EE:1D:BF
X509v3 Authority Key Identifier:
keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:54:06:c3:27:40:1c:2b:8f:e6:79:df:25:ce:22:90:ff:15:
6b:dd:27:3d:00:13:d0:ab:c1:35:7e:4d:82:85:9f:ff:51:98:
c1:4c:84:d9:16:be:e6:6b:0c:c7:c9:c9:52:ce:bd:ba:eb:7e:
96:b0:df:00:51:0f:15:fb:a4:db:5d:23:aa:69:13:1f:26:fe:
9d:5e:a1:48:bd:f7:fe:12:a1:c4:92:25:82:9e:a7:92:e9:3d:
ac:9e:82:8c:5f:62:2a:5c:52:c0:c2:db:aa:4d:9c:d1:86:0a:
62:9c:6d:ae:b6:69:3e:b4:cf:cd:e6:55:c7:74:1e:ff:f9:06:
9d:d9:55:0b:23:23:f1:0a:55:2d:ee:88:e2:da:36:9e:ab:d1:
a1:e0:fe:35:8e:66:31:fd:8b:bd:48:0c:73:20:83:df:3c:4c:
05:fd:7b:85:ea:41:74:d3:3e:d3:74:ff:12:66:da:d8:de:fa:
17:80:a0:d5:69:c8:01:7f:3f:22:97:a9:d0:c2:5c:7a:11:f1:
c0:5b:56:c6:14:8b:e3:3a:4f:f6:09:4e:0a:88:e3:48:7b:80:
fb:5a:78:12:06:df:ff:dd:bb:13:2c:6d:c7:af:b5:4b:34:09:
ae:98:12:2e:f9:88:a8:13:01:9a:c6:d1:d2:b6:65:e8:40:3a:
6e:c5:2a:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6+9WrtRvH9sI2yQnGnHHyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNTVlMGI4NmYzZjUxMjUwNTQ4NjNjZjkyNjRlNjM0NmUw
OWJiYjcwHhcNMjUwNDI4MDYwMDQ2WhcNMjUwNDI5MDYwMDQ2WjAzMTEwLwYDVQQD
EygwMjIyODJkZjJlMzA0YzgxYTRkZDExOWVjN2Q2MmMwODM1ZWUxZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7og6EntsmakSKd8RFq3V9BYsN6/
WEbnX8IhTjGdHwDbx9+6W4BQjaKLRGstJRwMWEm/eZBlhVhjWvuRzm5z3qMEGdUa
w3YL/G0MGzmV20AF2tCeiWvBuH02VjVFc9waVdzJdyDpQfxvpHUH0gXFQv3IR33n
+YCyqu+P61o68g5QiJ++AjpwViyKDb6txNcBCG0MAZdDhEvTPP3y6WEfwMe8Yt1n
aS4ZISAdil06J9aQKuGraHVUOfT7ib45PV5kE2W4KcVKOtG0NyG+CVOdmTwY6+C5
9sikEnrmNE1oxU2+kbQqAe/YlP5JguvXgbbl3lSDicGg/GkZ7DvafvdKBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIigt8uMEyBpN0RnsfWLAg17h2/MB8GA1UdIwQY
MBaAFNBV4LhvP1ElBUhjz5Jk5jRuCbu3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8xY2JhOWYtY2Q2ZS00ZDEyLWE3OGQt
Zjk4YzdmZWMxOTRlLzEvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8xY2JhOWYtY2Q2ZS00ZDEyLWE3OGQtZjk4YzdmZWMxOTRl
LzEvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlQGwydA
HCuP5nnfJc4ikP8Va90nPQAT0KvBNX5NgoWf/1GYwUyE2Ra+5msMx8nJUs69uut+
lrDfAFEPFfuk210jqmkTHyb+nV6hSL33/hKhxJIlgp6nkuk9rJ6CjF9iKlxSwMLb
qk2c0YYKYpxtrrZpPrTPzeZVx3Qe//kGndlVCyMj8QpVLe6I4to2nqvRoeD+NY5m
Mf2LvUgMcyCD3zxMBf17hepBdNM+03T/Emba2N76F4Cg1WnIAX8/Ipep0MJcehHx
wFtWxhSL4zpP9glOCojjSHuA+1p4Egbf/927Eyxtx6+1SzQJrpgSLvmIqBMBmsbR
0rZl6EA6bsUqnQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:00 2025 by rpki-client