Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
File: dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json)
Hash identifier: htD1roienPG869mctZqm5Xxo0f2qyWfiB8zaccfTi3Y=
Subject key identifier: A2:A1:90:F0:EA:A1:0B:F3:A5:88:76:C3:BF:CA:55:24:B5:99:C7:EF
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial: 01968359B01B3ACD1148B7B9C1FA8B005A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 21:00:14 +0000
Manifest this update: Tue 29 Apr 2025 21:00:14 +0000
Manifest next update: Wed 30 Apr 2025 21:00:14 +0000
Files and hashes: 1: PUpM4VMV5RRi5tzTokF5lqr4ZZQ.roa (hash: 9xAG/+lXKPXOcRJWGmtvJdS/t7KdmtbF4dJ5vzXbJTA=)
2: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: wJDofnx6Qb5s/E1I4ZBxhOEPiJfs33rmofAFCUDOgc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 21:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:59:b0:1b:3a:cd:11:48:b7:b9:c1:fa:8b:00:5a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
Validity
Not Before: Apr 29 21:00:14 2025 GMT
Not After : Apr 30 21:00:14 2025 GMT
Subject: CN=a2a190f0eaa10bf3a58876c3bfca5524b599c7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a3:b8:51:68:db:f0:b6:f2:e2:80:6b:80:10:
1a:5a:09:d4:78:2b:f9:0d:51:be:01:c4:8f:f3:34:
40:e8:16:f6:75:6d:92:e6:1e:76:2b:9d:d5:ca:41:
cf:ce:93:aa:7d:5f:9f:22:aa:d6:41:59:a4:db:98:
59:84:c5:2e:02:07:6e:e5:0f:14:b5:d5:31:cf:7d:
f8:83:81:06:61:dc:53:ce:5a:4d:aa:d9:6c:5e:e1:
8d:66:b5:aa:f0:31:bf:15:7b:db:dc:ff:de:d2:a2:
27:63:cf:9a:92:c3:e1:81:70:f3:40:67:09:a3:2e:
6e:97:de:56:d0:01:d6:60:e7:91:27:ca:94:08:1b:
26:2e:2f:9d:08:31:f5:43:47:45:12:9f:ab:0e:49:
b0:e9:20:09:61:38:2c:38:4e:6e:85:e3:d0:3f:5d:
ef:71:ea:91:b7:f8:4f:bc:cb:f8:c8:e7:70:ad:69:
35:a9:d6:80:e4:e3:ac:69:ab:bc:77:1c:f6:e2:81:
0e:06:16:3b:80:64:e8:30:d6:16:24:4e:70:f7:01:
23:38:8b:cb:f4:71:1b:73:87:7f:b0:a3:a2:e9:fb:
12:ca:5d:2c:8b:fc:a4:93:ba:36:dc:3e:10:f6:d3:
88:b6:f1:52:76:81:32:49:88:ea:a2:d9:52:08:05:
0c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A1:90:F0:EA:A1:0B:F3:A5:88:76:C3:BF:CA:55:24:B5:99:C7:EF
X509v3 Authority Key Identifier:
keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4c:cd:67:f4:51:0d:a7:73:8b:f7:1b:a3:32:3d:6a:c9:96:
8a:29:41:8e:76:12:34:ca:43:ce:ef:eb:54:a0:e9:ba:79:e8:
a0:c5:c4:dc:89:80:f1:30:7a:1d:9a:30:f5:7a:ff:6b:fd:c4:
70:94:2f:60:a7:c2:d7:77:e9:2d:a1:50:0d:84:ed:dc:5d:df:
e1:73:9b:68:c2:cd:41:f2:d9:ec:f9:dd:0a:a4:b9:90:3b:80:
c3:b7:b9:43:c6:a1:27:2a:22:f6:d8:c8:f2:81:82:4b:2f:34:
cb:c6:2d:37:79:71:71:2c:d5:bf:56:b7:3f:98:a8:eb:2a:ee:
3b:40:76:29:6e:84:0e:07:87:d3:51:0e:4a:72:6c:78:89:a6:
8b:ba:79:c1:20:fb:83:4b:48:8a:1e:13:62:73:a7:04:f0:2a:
fe:bc:1a:94:d3:e2:db:7b:56:0d:8f:b3:c7:02:65:84:49:d9:
79:3d:a6:60:9b:23:18:0a:4d:c1:6a:7c:8a:23:e1:07:ad:07:
27:83:9a:e6:59:e7:79:df:e4:a7:0b:29:9f:d2:73:76:c8:af:
a4:e1:11:ca:aa:fa:50:04:1e:d2:c9:f3:c5:89:94:c8:aa:aa:
08:13:e3:2f:b3:82:24:f1:9e:ad:12:8c:e7:7d:db:57:64:eb:
d0:9e:27:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDWbAbOs0RSLe5wfqLAFpAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NTA4MTBmMTNkZjhkOTAxOWYxNTdjMzZmYmQwZjZkYjk4
NjI5OTIwHhcNMjUwNDI5MjEwMDE0WhcNMjUwNDMwMjEwMDE0WjAzMTEwLwYDVQQD
EyhhMmExOTBmMGVhYTEwYmYzYTU4ODc2YzNiZmNhNTUyNGI1OTljN2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46O4UWjb8Lby4oBrgBAaWgnUeCv5
DVG+AcSP8zRA6Bb2dW2S5h52K53VykHPzpOqfV+fIqrWQVmk25hZhMUuAgdu5Q8U
tdUxz334g4EGYdxTzlpNqtlsXuGNZrWq8DG/FXvb3P/e0qInY8+aksPhgXDzQGcJ
oy5ul95W0AHWYOeRJ8qUCBsmLi+dCDH1Q0dFEp+rDkmw6SAJYTgsOE5uhePQP13v
ceqRt/hPvMv4yOdwrWk1qdaA5OOsaau8dxz24oEOBhY7gGToMNYWJE5w9wEjOIvL
9HEbc4d/sKOi6fsSyl0si/ykk7o23D4Q9tOItvFSdoEySYjqotlSCAUMjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKhkPDqoQvzpYh2w7/KVSS1mcfvMB8GA1UdIwQY
MBaAFHRQgQ8T342QGfFXw2+9D225himSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xMzM1ZDYtYjRkNi00YzgzLThiMGUt
OGYyMTVjMDlhZTcyLzEvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8xMzM1ZDYtYjRkNi00YzgzLThiMGUtOGYyMTVjMDlhZTcy
LzEvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXEzNZ/RR
Dadzi/cbozI9asmWiilBjnYSNMpDzu/rVKDpunnooMXE3ImA8TB6HZow9Xr/a/3E
cJQvYKfC13fpLaFQDYTt3F3f4XObaMLNQfLZ7PndCqS5kDuAw7e5Q8ahJyoi9tjI
8oGCSy80y8YtN3lxcSzVv1a3P5io6yruO0B2KW6EDgeH01EOSnJseImmi7p5wSD7
g0tIih4TYnOnBPAq/rwalNPi23tWDY+zxwJlhEnZeT2mYJsjGApNwWp8iiPhB60H
J4Oa5lnned/kpwspn9JzdsivpOERyqr6UAQe0snzxYmUyKqqCBPjL7OCJPGerRKM
533bV2Tr0J4nGQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 06:26:02 2025 by rpki-client