Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
File: fQDvTzv2W4fPoC73tKZYm6LeT_c.mft (raw, json)
Hash identifier: 1/RLW3zH1GdGJyRap5cT2iDakStjd2eQKg0xB1FXnz0=
Subject key identifier: 89:DF:F0:CF:D0:32:47:5B:4B:F2:14:AA:4F:48:48:73:3D:CE:09:0A
Authority key identifier: 7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7
Certificate issuer: /CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
Certificate serial: 01967BA0AD97EA0F8B669A2AF4A731F0244E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
Manifest number: 0D17
Signing time: Mon 28 Apr 2025 09:00:49 +0000
Manifest this update: Mon 28 Apr 2025 09:00:49 +0000
Manifest next update: Tue 29 Apr 2025 09:00:49 +0000
Files and hashes: 1: 8c_-JJSRaWAdlgvn5HbEMrKvRfI.roa (hash: KpvO8IWbSGTOfjfycUgdrrf84glELyn27WOsA9sqcQY=)
2: fQDvTzv2W4fPoC73tKZYm6LeT_c.crl (hash: c4V7yVG7tyiHy35Cftgh9T86M+OnCcnd7kofwXOyiDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:ad:97:ea:0f:8b:66:9a:2a:f4:a7:31:f0:24:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
Validity
Not Before: Apr 28 09:00:49 2025 GMT
Not After : Apr 29 09:00:49 2025 GMT
Subject: CN=89dff0cfd032475b4bf214aa4f4848733dce090a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:02:09:16:f8:6c:75:2d:06:9a:7b:26:84:72:
e2:33:c9:aa:1a:28:17:66:82:8c:22:49:62:db:ed:
75:bb:54:dd:e0:a7:d2:16:d7:5d:f0:35:8a:61:99:
e4:9c:5a:00:5c:94:59:22:22:0f:2e:f4:d1:03:af:
0f:d6:ec:ef:d4:63:e3:62:9f:c8:33:9e:ef:70:72:
30:bb:0b:35:c1:de:42:0d:a9:70:90:c8:48:0a:61:
cd:c7:d5:aa:b0:1c:d4:6e:19:34:d2:d2:27:15:11:
95:bc:77:31:e5:26:c0:12:c0:b4:8d:ba:22:20:a6:
98:7e:da:f5:3f:d3:25:fc:52:58:6d:19:02:ae:40:
a0:d4:70:ef:1e:d8:4c:6f:15:3f:8a:ba:26:38:bb:
03:4a:e9:c5:a3:a0:87:25:c1:bb:b2:84:a9:80:d1:
f9:78:85:49:4d:65:58:2e:55:5c:2a:03:00:69:9a:
41:89:79:b7:3e:6b:1e:55:ab:82:bf:c7:96:54:ed:
ed:55:f5:ad:8f:1c:65:40:df:74:63:b4:48:a6:33:
6a:a5:2b:5a:ab:a8:94:62:d1:34:1b:97:67:1d:90:
87:32:b0:02:9c:a9:4a:8c:8e:45:bb:a5:18:a2:04:
97:a5:12:1f:41:d0:49:a0:8e:e2:69:6b:a3:48:dc:
33:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DF:F0:CF:D0:32:47:5B:4B:F2:14:AA:4F:48:48:73:3D:CE:09:0A
X509v3 Authority Key Identifier:
keyid:7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:75:48:39:c8:1c:97:c5:86:64:75:5a:64:25:99:d7:b6:1e:
51:77:86:12:b8:ea:e1:17:69:4e:94:a4:98:f9:2e:dd:5a:65:
22:43:be:87:81:fe:98:93:36:08:f5:e6:5b:5f:bb:ad:af:a0:
82:ba:35:c6:ae:b9:97:d2:39:50:fb:16:40:bf:80:92:9e:2c:
97:96:58:f1:02:67:05:ff:e0:67:a6:55:49:5c:4e:ba:75:eb:
82:d2:2f:76:bf:8f:09:2c:54:40:3a:14:86:8b:de:f7:94:bb:
14:c6:d3:ba:f1:7c:93:5c:d8:38:5f:d5:cc:ee:9c:30:15:79:
23:f0:26:0b:73:ec:28:fe:90:a4:94:a6:c1:5b:e7:18:29:f9:
14:a1:88:39:9f:22:95:80:20:b3:28:be:9b:30:88:70:45:f7:
0e:99:9a:f6:e1:50:f6:f5:25:3e:08:7e:7c:ca:97:68:27:5c:
c1:a9:3f:44:26:af:e6:8d:f9:fc:74:5d:6c:d5:f5:48:6a:e4:
7b:44:9f:7e:e1:f9:00:aa:98:04:1d:0a:6b:99:ec:bc:90:ae:
f8:76:98:c1:ab:75:3a:5e:0f:e4:71:8f:09:10:47:56:3a:c5:
b7:36:26:cc:98:75:1e:b4:16:6b:cc:ee:31:b5:f0:51:0a:e8:
bf:c0:35:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ7oK2X6g+LZpoq9Kcx8CROMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDBlZjRmM2JmNjViODdjZmEwMmVmN2I0YTY1ODliYTJk
ZTRmZjcwHhcNMjUwNDI4MDkwMDQ5WhcNMjUwNDI5MDkwMDQ5WjAzMTEwLwYDVQQD
Eyg4OWRmZjBjZmQwMzI0NzViNGJmMjE0YWE0ZjQ4NDg3MzNkY2UwOTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AIJFvhsdS0GmnsmhHLiM8mqGigX
ZoKMIkli2+11u1Td4KfSFtdd8DWKYZnknFoAXJRZIiIPLvTRA68P1uzv1GPjYp/I
M57vcHIwuws1wd5CDalwkMhICmHNx9WqsBzUbhk00tInFRGVvHcx5SbAEsC0jboi
IKaYftr1P9Ml/FJYbRkCrkCg1HDvHthMbxU/iromOLsDSunFo6CHJcG7soSpgNH5
eIVJTWVYLlVcKgMAaZpBiXm3PmseVauCv8eWVO3tVfWtjxxlQN90Y7RIpjNqpSta
q6iUYtE0G5dnHZCHMrACnKlKjI5Fu6UYogSXpRIfQdBJoI7iaWujSNwzkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInf8M/QMkdbS/IUqk9ISHM9zgkKMB8GA1UdIwQY
MBaAFH0A70879luHz6Au97SmWJui3k/3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFEdlR6djJXNGZQb0M3M3RLWlltNkxlVF9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9kZDYxZTMtZjhjYy00ZjgzLWE4YzQt
ZGU5ZDA0MDFhNmY2LzEvZlFEdlR6djJXNGZQb0M3M3RLWlltNkxlVF9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9kZDYxZTMtZjhjYy00ZjgzLWE4YzQtZGU5ZDA0MDFhNmY2
LzEvZlFEdlR6djJXNGZQb0M3M3RLWlltNkxlVF9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWnVIOcgc
l8WGZHVaZCWZ17YeUXeGErjq4RdpTpSkmPku3VplIkO+h4H+mJM2CPXmW1+7ra+g
gro1xq65l9I5UPsWQL+Akp4sl5ZY8QJnBf/gZ6ZVSVxOunXrgtIvdr+PCSxUQDoU
hove95S7FMbTuvF8k1zYOF/VzO6cMBV5I/AmC3PsKP6QpJSmwVvnGCn5FKGIOZ8i
lYAgsyi+mzCIcEX3Dpma9uFQ9vUlPgh+fMqXaCdcwak/RCav5o35/HRdbNX1SGrk
e0SffuH5AKqYBB0Ka5nsvJCu+HaYwat1Ol4P5HGPCRBHVjrFtzYmzJh1HrQWa8zu
MbXwUQrov8A1Vw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:21:39 2025 by rpki-client