Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier: 0MBCfZrGysPIBnBZvNF2hy1m5KkG+a041CItsdQ+hkA=
Subject key identifier: C1:B9:17:A9:8B:82:55:DA:D9:42:E3:BD:B7:87:23:95:4A:34:EB:26
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 01967F46660E35AB1B029C2D4CC5FD3C482B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 02:00:42 +0000
Manifest this update: Tue 29 Apr 2025 02:00:42 +0000
Manifest next update: Wed 30 Apr 2025 02:00:42 +0000
Files and hashes: 1: 4lN9UMCt9-jT04o2voesNzfPwGs.roa (hash: t3RT/PpcRecUqHyCeVTaRV/4YmAPhY6KAKsv8Og5F9U=)
2: ACmM5xMJG5d1YVOZ4RZKGVZYg9k.roa (hash: Fvp/3zg9VXW0brdKzJ0fdm3mkA4lR5zaksqsabjZcF4=)
3: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: 2FgD8GsseLATRHbSsKqH0poXMoTjWZhihMXEF6woctI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:66:0e:35:ab:1b:02:9c:2d:4c:c5:fd:3c:48:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: Apr 29 02:00:42 2025 GMT
Not After : Apr 30 02:00:42 2025 GMT
Subject: CN=c1b917a98b8255dad942e3bdb78723954a34eb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:89:82:15:97:69:87:c5:12:e3:75:7f:e6:46:
2b:d4:37:a6:79:d8:13:ab:08:99:d7:c3:ee:c9:de:
38:a8:9c:ce:99:0e:7b:04:90:50:4b:b8:d9:f5:26:
b8:f4:f0:22:f4:e5:90:3f:69:8f:cc:b4:a0:10:48:
2b:51:c7:55:fc:54:42:d0:4e:67:6c:5d:27:2b:b3:
0f:59:7e:43:40:f4:6a:74:f3:18:db:46:4e:bc:ed:
8d:b9:63:ef:09:a1:0d:85:f1:b7:4b:56:8d:64:1f:
35:51:38:94:19:4b:af:2f:ec:fc:64:c7:fb:1e:07:
3b:3d:51:db:16:43:25:26:1c:3c:fd:56:f3:d5:a6:
22:fc:3a:a4:70:fb:91:48:b5:5f:3b:81:2f:39:76:
a7:10:6e:c5:0d:26:8d:97:9e:63:8d:be:75:cb:42:
e3:f1:16:0b:98:62:bc:d5:98:d2:cf:21:aa:6a:c9:
2d:64:1a:19:fc:89:55:69:53:53:5e:d3:9a:cd:47:
fe:87:0c:c6:7f:89:b2:2f:7b:94:54:af:98:ea:1a:
74:6a:63:a9:a8:d0:1e:eb:b5:b3:61:79:05:9c:a9:
7c:a7:4e:d2:c1:6d:01:12:56:21:57:da:47:7e:19:
7f:dc:68:c8:33:79:18:45:c0:b1:43:ca:10:e5:8d:
b1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B9:17:A9:8B:82:55:DA:D9:42:E3:BD:B7:87:23:95:4A:34:EB:26
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:89:3f:7b:9b:ca:8e:97:c7:63:af:f5:cb:d0:d5:5f:15:cc:
06:db:55:7c:e4:70:b7:99:13:e8:0d:ce:0a:43:97:20:77:5d:
f1:93:e5:87:50:34:6f:b7:e1:34:5a:80:b7:c8:70:03:20:b7:
94:9a:27:1f:34:1c:44:53:71:05:eb:1a:6c:4c:a1:11:33:ec:
c6:11:72:8f:2e:90:6e:64:ce:12:d3:3c:4b:72:56:8f:eb:31:
62:5f:01:65:6a:0e:65:df:c9:1c:9f:d6:b9:79:ea:5d:47:e2:
58:f3:ff:f6:a7:9e:20:f0:da:50:14:be:6e:dd:85:32:a2:3e:
49:6b:44:bb:42:00:80:2e:54:c2:a3:ad:e8:fd:bd:e5:21:00:
2c:9b:e2:4a:77:a7:5c:eb:9e:5d:3d:3e:47:a9:de:f2:ff:12:
2c:79:ad:4f:64:a7:3f:cb:4f:7a:26:36:8c:7d:15:dd:39:2e:
aa:99:89:0e:d8:75:53:bf:4a:33:37:4f:5b:d1:7b:cb:f7:7b:
ed:35:f0:64:43:c7:41:51:27:44:fe:13:0b:5f:b8:de:0a:1b:
98:21:dd:63:96:20:06:06:69:95:a3:23:19:a5:4f:34:a7:20:
14:4a:af:86:8c:c8:d2:82:f7:2c:02:43:07:59:43:00:a0:38:
45:b6:fe:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/RmYONasbApwtTMX9PEgrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmZhNzdiM2NkNzgyOTMzZTVmMjU1NDQ1ZDQyOGFkZmJk
Y2EwZTEwHhcNMjUwNDI5MDIwMDQyWhcNMjUwNDMwMDIwMDQyWjAzMTEwLwYDVQQD
EyhjMWI5MTdhOThiODI1NWRhZDk0MmUzYmRiNzg3MjM5NTRhMzRlYjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24mCFZdph8US43V/5kYr1DemedgT
qwiZ18Puyd44qJzOmQ57BJBQS7jZ9Sa49PAi9OWQP2mPzLSgEEgrUcdV/FRC0E5n
bF0nK7MPWX5DQPRqdPMY20ZOvO2NuWPvCaENhfG3S1aNZB81UTiUGUuvL+z8ZMf7
Hgc7PVHbFkMlJhw8/Vbz1aYi/DqkcPuRSLVfO4EvOXanEG7FDSaNl55jjb51y0Lj
8RYLmGK81ZjSzyGqasktZBoZ/IlVaVNTXtOazUf+hwzGf4myL3uUVK+Y6hp0amOp
qNAe67WzYXkFnKl8p07SwW0BElYhV9pHfhl/3GjIM3kYRcCxQ8oQ5Y2x/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMG5F6mLglXa2ULjvbeHI5VKNOsmMB8GA1UdIwQY
MBaAFCG/p3s814KTPl8lVEXUKK373KDhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWItbmV6elhncE0tWHlWVVJkUW9yZnZjb09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85YzdhZmYtZDgzZS00ZjUxLTliOTYt
NTQ4NGMzOWIyZDRlLzEvSWItbmV6elhncE0tWHlWVVJkUW9yZnZjb09FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85YzdhZmYtZDgzZS00ZjUxLTliOTYtNTQ4NGMzOWIyZDRl
LzEvSWItbmV6elhncE0tWHlWVVJkUW9yZnZjb09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4k/e5vK
jpfHY6/1y9DVXxXMBttVfORwt5kT6A3OCkOXIHdd8ZPlh1A0b7fhNFqAt8hwAyC3
lJonHzQcRFNxBesabEyhETPsxhFyjy6QbmTOEtM8S3JWj+sxYl8BZWoOZd/JHJ/W
uXnqXUfiWPP/9qeeIPDaUBS+bt2FMqI+SWtEu0IAgC5UwqOt6P295SEALJviSnen
XOueXT0+R6ne8v8SLHmtT2SnP8tPeiY2jH0V3TkuqpmJDth1U79KMzdPW9F7y/d7
7TXwZEPHQVEnRP4TC1+43gobmCHdY5YgBgZplaMjGaVPNKcgFEqvhozI0oL3LAJD
B1lDAKA4Rbb+eg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:31:06 2025 by rpki-client