Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
File: 75pS4318rMafjv78dTO8CxjLXmc.mft (raw, json)
Hash identifier: Y/lSNacdLK850pmHqJ3Q66SKPN0EuIEJvMfJSy27Kvc=
Subject key identifier: 1D:F4:FB:DD:9E:4E:D5:F4:35:8D:CB:D0:D2:A9:3A:FA:74:9B:90:53
Authority key identifier: EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
Certificate issuer: /CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Certificate serial: 0196839149BF6F04782D30018F56C491A4F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
Manifest number: 06D7
Signing time: Tue 29 Apr 2025 22:00:58 +0000
Manifest this update: Tue 29 Apr 2025 22:00:58 +0000
Manifest next update: Wed 30 Apr 2025 22:00:58 +0000
Files and hashes: 1: 75pS4318rMafjv78dTO8CxjLXmc.crl (hash: e5kfl9TWpdJJf3i200YNoD7D1OAZfGymY/xov4nMtjU=)
2: V1xvVOGY5BJ_I9u5C9ObZ-YSnJg.roa (hash: NClt/SHG+/tXhhv3Y/klJlIO43Syulf2MR3J6Q5EBlA=)
3: qsZrdnkoO0E25hqGWNb8Z9dNerM.roa (hash: hAyilmx8AWlJmwYPt85XuLAx4M2nXqrLORTF4xGEO6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:49:bf:6f:04:78:2d:30:01:8f:56:c4:91:a4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Validity
Not Before: Apr 29 22:00:58 2025 GMT
Not After : Apr 30 22:00:58 2025 GMT
Subject: CN=1df4fbdd9e4ed5f4358dcbd0d2a93afa749b9053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a0:6a:84:e6:c4:45:26:8a:09:1a:72:03:25:
2e:72:ba:b5:39:98:8c:f3:cc:ac:fa:8d:f6:02:2c:
63:32:2b:50:60:22:c8:ee:dd:f3:78:0d:d4:d9:26:
0d:f6:c9:4f:4d:bb:12:92:d7:5f:e2:17:82:cc:57:
3a:fb:5d:84:2b:d2:89:5b:31:a4:48:75:74:39:e5:
a2:e2:81:aa:28:9c:7e:73:7c:28:42:f8:60:02:b4:
ee:e8:a3:22:db:de:88:8f:93:c6:70:ec:8e:4d:fe:
77:af:07:84:9d:99:82:d2:67:8c:9f:78:4c:c4:96:
f5:90:61:b1:54:3d:d8:ca:8e:53:9b:2f:55:1f:d1:
57:f5:82:a9:c8:85:8e:c8:83:a6:b8:d0:03:eb:cb:
80:4a:48:78:97:90:93:9b:68:2b:f0:3c:6c:86:df:
5d:bf:63:74:82:81:fe:98:01:91:0a:66:07:07:75:
f4:e5:68:46:56:97:70:6d:aa:6b:08:0a:99:d4:15:
dc:50:3a:0b:84:5b:26:3b:d4:a9:e1:e8:ac:06:d5:
95:30:39:ce:1b:3f:57:f6:0d:77:24:b5:f4:43:9d:
7f:1b:ac:1f:80:d4:df:9d:b6:86:55:6d:42:52:33:
ed:98:f4:4c:74:62:ca:45:82:50:35:88:db:21:f7:
74:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F4:FB:DD:9E:4E:D5:F4:35:8D:CB:D0:D2:A9:3A:FA:74:9B:90:53
X509v3 Authority Key Identifier:
keyid:EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:7c:39:2e:7c:33:9e:3e:c0:ac:c4:6b:5f:32:b2:1e:7b:f3:
6a:34:21:07:ee:37:1c:31:68:19:b6:14:e5:24:cb:09:a8:af:
5d:71:73:82:0c:87:79:7a:b7:8e:eb:1a:32:79:b7:b5:6c:b5:
12:f4:1b:3c:b9:a1:5d:64:81:c0:27:7c:aa:6f:1c:64:49:a6:
02:5a:81:e2:e3:0c:eb:13:c2:a3:56:d1:8d:c4:5d:63:ec:ee:
7d:be:22:6d:62:93:9e:fa:be:8a:29:54:fc:77:b6:86:25:36:
fb:68:6d:36:ab:4c:e8:0f:22:52:81:c9:58:6b:bf:78:bb:6f:
81:4c:f9:ba:85:0d:4f:0f:9d:72:d8:5b:52:95:37:60:e5:d4:
7b:80:d2:12:a9:84:d1:22:ca:64:b1:fa:ef:0e:7c:db:28:cd:
a8:42:47:a9:53:69:01:54:05:71:03:d5:8d:06:9e:e5:dc:c8:
a3:8d:c9:90:c2:01:a4:42:d5:1d:39:ad:cd:90:da:d6:12:96:
bc:a3:42:2f:83:ad:f2:26:c2:c1:74:55:03:03:2f:65:04:54:
db:51:26:d6:0c:08:4a:56:a8:c3:99:0f:dd:71:46:9d:ee:77:
b8:00:2f:08:ca:63:60:e5:8e:82:c4:4f:4d:23:61:ae:30:c3:
6d:4b:97:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDkUm/bwR4LTABj1bEkaT5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmOWE1MmUzN2Q3Y2FjYzY5ZjhlZmVmYzc1MzNiYzBiMThj
YjVlNjcwHhcNMjUwNDI5MjIwMDU4WhcNMjUwNDMwMjIwMDU4WjAzMTEwLwYDVQQD
EygxZGY0ZmJkZDllNGVkNWY0MzU4ZGNiZDBkMmE5M2FmYTc0OWI5MDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKBqhObERSaKCRpyAyUucrq1OZiM
88ys+o32AixjMitQYCLI7t3zeA3U2SYN9slPTbsSktdf4heCzFc6+12EK9KJWzGk
SHV0OeWi4oGqKJx+c3woQvhgArTu6KMi296Ij5PGcOyOTf53rweEnZmC0meMn3hM
xJb1kGGxVD3Yyo5Tmy9VH9FX9YKpyIWOyIOmuNAD68uASkh4l5CTm2gr8Dxsht9d
v2N0goH+mAGRCmYHB3X05WhGVpdwbaprCAqZ1BXcUDoLhFsmO9Sp4eisBtWVMDnO
Gz9X9g13JLX0Q51/G6wfgNTfnbaGVW1CUjPtmPRMdGLKRYJQNYjbIfd0fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB30+92eTtX0NY3L0NKpOvp0m5BTMB8GA1UdIwQY
MBaAFO+aUuN9fKzGn47+/HUzvAsYy15nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzVwUzQzMThyTWFmanY3OGRUTzhDeGpMWG1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80YzZkODgtZjgyOC00M2Y5LTk2NDEt
YjFhOWJkMjg2NTFlLzEvNzVwUzQzMThyTWFmanY3OGRUTzhDeGpMWG1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80YzZkODgtZjgyOC00M2Y5LTk2NDEtYjFhOWJkMjg2NTFl
LzEvNzVwUzQzMThyTWFmanY3OGRUTzhDeGpMWG1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu3w5Lnwz
nj7ArMRrXzKyHnvzajQhB+43HDFoGbYU5STLCaivXXFzggyHeXq3jusaMnm3tWy1
EvQbPLmhXWSBwCd8qm8cZEmmAlqB4uMM6xPCo1bRjcRdY+zufb4ibWKTnvq+iilU
/He2hiU2+2htNqtM6A8iUoHJWGu/eLtvgUz5uoUNTw+dcthbUpU3YOXUe4DSEqmE
0SLKZLH67w582yjNqEJHqVNpAVQFcQPVjQae5dzIo43JkMIBpELVHTmtzZDa1hKW
vKNCL4Ot8ibCwXRVAwMvZQRU21Em1gwISlaow5kP3XFGne53uAAvCMpjYOWOgsRP
TSNhrjDDbUuXXw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:48:32 2025 by rpki-client