Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
File: 1ftSajPzZqqJRhiOXTJr3ORuLEA.mft (raw, json)
Hash identifier: M9gX+eat88yHUClp8vIBzVi3yVsVgyp4I04NVxEHpv0=
Subject key identifier: 1A:30:EF:47:21:F3:21:40:39:5B:F4:9F:E9:23:3C:6B:9E:90:6E:71
Authority key identifier: D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
Certificate issuer: /CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Certificate serial: 0196802267644E45CE9B124BB64AFAAC208B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
Manifest number: 077E
Signing time: Tue 29 Apr 2025 06:01:00 +0000
Manifest this update: Tue 29 Apr 2025 06:01:00 +0000
Manifest next update: Wed 30 Apr 2025 06:01:00 +0000
Files and hashes: 1: 1ftSajPzZqqJRhiOXTJr3ORuLEA.crl (hash: fRCjBjGGDbn90HbkKxUstS0h1ZbcJquGZJgTRJHZiLM=)
2: qfUgWmjDBIJJxDCL7jiouOIMq6E.roa (hash: 8LoPzts8EEAcumqZ7LuONp4lduak/H5FziwN8+pOFJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:67:64:4e:45:ce:9b:12:4b:b6:4a:fa:ac:20:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Validity
Not Before: Apr 29 06:01:00 2025 GMT
Not After : Apr 30 06:01:00 2025 GMT
Subject: CN=1a30ef4721f32140395bf49fe9233c6b9e906e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a3:47:08:77:d2:5b:84:aa:b8:cc:08:30:01:
38:1e:ba:e7:49:66:ac:e5:e5:6b:ee:99:d3:5a:84:
18:c9:d4:e3:d8:fc:4f:ba:e3:a6:95:7a:a0:3f:6f:
82:0f:fa:bb:e7:ad:db:d2:5f:85:0c:98:ca:6f:09:
39:cc:35:c8:12:f6:13:98:a3:4b:c4:fd:78:6c:ad:
f9:f8:d4:49:31:14:bc:7c:c7:b3:cb:be:f8:d6:da:
33:ad:22:7d:c0:d9:93:92:ef:fe:a7:df:f8:3c:8e:
f0:10:d4:ba:97:2a:2d:55:5e:2d:41:d8:eb:09:68:
31:28:27:c6:92:e2:50:c6:b6:fe:cd:b8:89:e3:db:
8e:c7:fd:84:cc:b9:90:47:d0:4c:eb:e8:33:50:5d:
2a:6d:a1:c3:5e:ea:e8:b1:fd:ff:94:0e:ea:07:d2:
13:49:08:b1:13:ef:99:82:9d:44:29:c9:70:29:15:
7c:c1:4f:a6:de:3e:ae:51:bc:4f:c9:d6:fa:3e:94:
df:da:2d:c6:d5:42:13:44:3a:79:cb:76:dc:75:37:
4e:29:db:04:d1:d0:57:ed:b1:d2:8b:23:d5:3d:27:
18:71:7e:80:2d:54:a4:24:bc:be:1a:c7:14:ec:d6:
56:b2:89:9e:c2:3b:74:2d:6e:13:ff:29:d8:85:2f:
12:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:30:EF:47:21:F3:21:40:39:5B:F4:9F:E9:23:3C:6B:9E:90:6E:71
X509v3 Authority Key Identifier:
keyid:D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:45:ca:c2:c6:ed:30:1f:35:72:31:7d:9f:21:23:d4:7f:66:
31:7e:80:6f:11:b5:86:4b:72:2d:be:27:9b:17:02:e3:ef:67:
b3:ec:54:5d:93:14:51:07:f3:cd:39:30:d9:c7:ac:72:0e:25:
ba:39:6c:2a:42:93:24:7b:43:24:fd:4a:55:df:01:1f:ff:7a:
fb:21:91:86:c2:5f:92:96:30:4b:3c:b0:00:95:67:2f:ae:c0:
f6:ef:5b:b1:53:fc:20:79:25:61:86:23:7f:37:65:0a:e9:9d:
fe:30:90:94:63:5c:08:4c:c2:63:77:6c:d1:c3:28:8d:33:db:
c6:ba:a0:78:c4:b7:4d:87:3c:36:3d:ca:6c:31:33:7b:e1:f3:
e8:be:47:0f:35:0e:c0:66:c9:e3:91:0a:05:c1:84:bd:51:42:
2c:b4:71:60:39:95:18:8a:a2:df:b7:9b:4c:4c:12:08:69:ee:
00:61:1a:3f:3b:a8:eb:2c:85:a0:bc:d4:8a:e5:0b:54:23:01:
8d:c7:40:47:f9:24:fc:19:b2:fe:6e:af:58:2d:8e:50:8e:41:
cc:e4:32:db:f2:07:54:c5:11:bf:99:8a:2d:f7:43:a7:11:68:
90:fe:f4:cb:b1:b5:6b:2f:02:af:70:48:9f:6f:cb:72:a1:77:
de:49:e5:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAImdkTkXOmxJLtkr6rCCLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZmI1MjZhMzNmMzY2YWE4OTQ2MTg4ZTVkMzI2YmRjZTQ2
ZTJjNDAwHhcNMjUwNDI5MDYwMTAwWhcNMjUwNDMwMDYwMTAwWjAzMTEwLwYDVQQD
EygxYTMwZWY0NzIxZjMyMTQwMzk1YmY0OWZlOTIzM2M2YjllOTA2ZTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aNHCHfSW4SquMwIMAE4HrrnSWas
5eVr7pnTWoQYydTj2PxPuuOmlXqgP2+CD/q7563b0l+FDJjKbwk5zDXIEvYTmKNL
xP14bK35+NRJMRS8fMezy7741tozrSJ9wNmTku/+p9/4PI7wENS6lyotVV4tQdjr
CWgxKCfGkuJQxrb+zbiJ49uOx/2EzLmQR9BM6+gzUF0qbaHDXurosf3/lA7qB9IT
SQixE++Zgp1EKclwKRV8wU+m3j6uUbxPydb6PpTf2i3G1UITRDp5y3bcdTdOKdsE
0dBX7bHSiyPVPScYcX6ALVSkJLy+GscU7NZWsomewjt0LW4T/ynYhS8SmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBow70ch8yFAOVv0n+kjPGuekG5xMB8GA1UdIwQY
MBaAFNX7Umoz82aqiUYYjl0ya9zkbixAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWZ0U2FqUHpacXFKUmhpT1hUSnIzT1J1TEVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80YTI3Y2ItOGNkNi00NWNjLTgyNDYt
MGU5ZDNlY2E0NGMyLzEvMWZ0U2FqUHpacXFKUmhpT1hUSnIzT1J1TEVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS80YTI3Y2ItOGNkNi00NWNjLTgyNDYtMGU5ZDNlY2E0NGMy
LzEvMWZ0U2FqUHpacXFKUmhpT1hUSnIzT1J1TEVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkEXKwsbt
MB81cjF9nyEj1H9mMX6AbxG1hktyLb4nmxcC4+9ns+xUXZMUUQfzzTkw2cescg4l
ujlsKkKTJHtDJP1KVd8BH/96+yGRhsJfkpYwSzywAJVnL67A9u9bsVP8IHklYYYj
fzdlCumd/jCQlGNcCEzCY3ds0cMojTPbxrqgeMS3TYc8Nj3KbDEze+Hz6L5HDzUO
wGbJ45EKBcGEvVFCLLRxYDmVGIqi37ebTEwSCGnuAGEaPzuo6yyFoLzUiuULVCMB
jcdAR/kk/Bmy/m6vWC2OUI5BzOQy2/IHVMURv5mKLfdDpxFokP70y7G1ay8Cr3BI
n2/LcqF33knlvg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:15:44 2025 by rpki-client