Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
File: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft (raw, json)
Hash identifier: wLLkXyeh8JZipVkRaWaveC3vlACqBFNlDqC5Xff0TrY=
Subject key identifier: B7:F2:58:85:38:39:FB:BC:4A:2F:7F:CB:02:C7:FA:7F:DF:DE:46:43
Authority key identifier: FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
Certificate issuer: /CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Certificate serial: 0196778CAA4DAECFBFFB9024A944717C5B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
Manifest number: 1524
Signing time: Sun 27 Apr 2025 14:00:29 +0000
Manifest this update: Sun 27 Apr 2025 14:00:29 +0000
Manifest next update: Mon 28 Apr 2025 14:00:29 +0000
Files and hashes: 1: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl (hash: xefMHVrFQc8kG7XFLSUdH5m8c2jAXgAjbs16/DUn/Fk=)
2: hn0oOL_Phy31I2IYdCocfuCMl4Y.roa (hash: pL8SqciTf3yJI1mNpTYcxXjCVmcDvB9gR79xz18ukNA=)
3: n4Gl-s-Z4-ZJ7aZsYXedLjfUwYs.roa (hash: 2ovoFydr5EnhNhzcx+FRnrZsnjvX8pqDu1VDKcopbtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:aa:4d:ae:cf:bf:fb:90:24:a9:44:71:7c:5b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Validity
Not Before: Apr 27 14:00:29 2025 GMT
Not After : Apr 28 14:00:29 2025 GMT
Subject: CN=b7f258853839fbbc4a2f7fcb02c7fa7fdfde4643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5d:70:9b:8c:03:12:40:6c:55:d5:13:ed:64:
99:6a:5d:81:14:b2:53:3e:ad:34:93:86:1b:83:15:
f3:b6:16:a0:b6:66:5f:77:b9:f1:1c:54:e1:cd:ff:
51:a1:b9:23:f4:e3:61:61:1c:38:6c:25:44:33:65:
4b:f7:75:89:e1:40:db:4c:c3:f9:5f:a6:b2:42:4d:
06:b8:cc:b4:db:2c:de:51:62:5d:5e:ae:ba:a6:37:
40:57:a3:6a:ed:f0:52:96:d6:e2:9d:b3:c9:b2:87:
d2:c0:cd:68:e9:c9:a5:00:3d:d0:48:93:cd:8b:e5:
09:fa:74:de:c4:5d:ac:c0:a0:e2:c5:22:ec:54:c4:
60:47:2f:38:dc:f9:8c:f1:8a:e4:2e:eb:72:35:78:
71:44:6e:d9:a5:48:b3:00:7a:30:13:db:50:93:b5:
d2:92:23:9e:f8:18:c6:60:9f:c8:56:23:5d:e3:9f:
e7:c5:75:e1:50:9b:55:5a:96:51:a5:b1:c5:66:53:
11:5e:24:9b:19:c4:e8:ef:37:b9:bc:7f:68:91:db:
59:f0:4c:10:c8:ef:83:9a:32:a8:d7:7f:a3:e3:0a:
2d:3d:a1:d8:7e:eb:b2:e8:c3:0c:ce:e3:1b:02:e0:
0f:a8:54:5c:1d:42:4c:6e:4c:0e:04:d1:c0:2c:b5:
d7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F2:58:85:38:39:FB:BC:4A:2F:7F:CB:02:C7:FA:7F:DF:DE:46:43
X509v3 Authority Key Identifier:
keyid:FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d8:8f:4c:a0:90:64:bc:75:5b:95:72:4e:b6:de:4c:8f:96:
4e:bd:ad:39:68:c8:24:97:20:af:5b:5a:c2:5b:72:b4:1d:33:
4b:6e:d0:9c:7d:c3:f5:9c:09:e7:78:eb:f2:00:c5:12:8e:d0:
1f:f0:94:d4:33:20:a8:24:70:8a:f1:c9:ae:54:96:d1:8e:be:
9a:7a:5a:c1:7e:09:9a:37:89:60:0e:7d:87:8d:8f:19:f3:d7:
7a:39:88:02:0e:ba:9b:81:2b:11:08:e1:6e:49:e3:84:79:14:
1f:12:30:13:fc:b6:b1:1e:00:19:6a:54:5d:13:ef:0a:7b:47:
a2:c5:07:34:9f:8c:d5:36:54:04:7d:85:7f:99:50:21:bd:e4:
dd:31:f9:c5:3c:75:63:45:5d:b9:cd:52:eb:34:bc:f5:fc:04:
89:d5:83:8d:f4:7f:d4:20:ae:21:26:3e:4f:b9:b3:2c:4b:61:
de:aa:2e:99:88:79:3f:fd:97:7c:e9:f4:5b:1e:28:44:b8:d2:
b2:ec:9a:c3:e9:5d:22:b5:f9:20:0f:9f:de:98:98:3f:ba:d3:
2a:2c:77:48:d7:90:36:f7:af:1f:b4:f9:05:71:02:15:21:a4:
59:af:cf:5f:3d:4d:7d:2c:52:21:02:95:f5:66:ad:19:ac:5a:
22:82:26:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3jKpNrs+/+5AkqURxfFuXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDJiMzYyMDY0MzliYmNlMTViMzYzZjA5ZWVmZjFkNzM4
Y2VjYzcwHhcNMjUwNDI3MTQwMDI5WhcNMjUwNDI4MTQwMDI5WjAzMTEwLwYDVQQD
EyhiN2YyNTg4NTM4MzlmYmJjNGEyZjdmY2IwMmM3ZmE3ZmRmZGU0NjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF1wm4wDEkBsVdUT7WSZal2BFLJT
Pq00k4YbgxXzthagtmZfd7nxHFThzf9Robkj9ONhYRw4bCVEM2VL93WJ4UDbTMP5
X6ayQk0GuMy02yzeUWJdXq66pjdAV6Nq7fBSltbinbPJsofSwM1o6cmlAD3QSJPN
i+UJ+nTexF2swKDixSLsVMRgRy843PmM8YrkLutyNXhxRG7ZpUizAHowE9tQk7XS
kiOe+BjGYJ/IViNd45/nxXXhUJtVWpZRpbHFZlMRXiSbGcTo7ze5vH9okdtZ8EwQ
yO+DmjKo13+j4wotPaHYfuuy6MMMzuMbAuAPqFRcHUJMbkwOBNHALLXXawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfyWIU4Ofu8Si9/ywLH+n/f3kZDMB8GA1UdIwQY
MBaAFP3Ss2IGQ5u84Vs2Pwnu/x1zjOzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RLellnWkRtN3poV3pZX0NlN19IWE9NN01jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS82MmI5MDktMWUzZS00YTFiLTllMjQt
YjAxZTAyOTdiMDcwLzEvX2RLellnWkRtN3poV3pZX0NlN19IWE9NN01jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS82MmI5MDktMWUzZS00YTFiLTllMjQtYjAxZTAyOTdiMDcw
LzEvX2RLellnWkRtN3poV3pZX0NlN19IWE9NN01jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHNiPTKCQ
ZLx1W5VyTrbeTI+WTr2tOWjIJJcgr1tawltytB0zS27QnH3D9ZwJ53jr8gDFEo7Q
H/CU1DMgqCRwivHJrlSW0Y6+mnpawX4JmjeJYA59h42PGfPXejmIAg66m4ErEQjh
bknjhHkUHxIwE/y2sR4AGWpUXRPvCntHosUHNJ+M1TZUBH2Ff5lQIb3k3TH5xTx1
Y0Vduc1S6zS89fwEidWDjfR/1CCuISY+T7mzLEth3qoumYh5P/2XfOn0Wx4oRLjS
suyaw+ldIrX5IA+f3piYP7rTKix3SNeQNvevH7T5BXECFSGkWa/PXz1NfSxSIQKV
9WatGaxaIoIm2Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:16:23 2025 by rpki-client