Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.mft
File: _h7q315_VCD2dKjrh7tLE3fNvWQ.mft (raw, json)
Hash identifier: odkF8Fh7PlLLUB8JsL0agIeLHUWGB36p5+7lITiuuH0=
Subject key identifier: 3B:DF:5A:F5:23:FF:9A:C2:4B:A5:B2:1C:C3:7E:2B:4A:3D:0F:5A:AA
Authority key identifier: FE:1E:EA:DF:5E:7F:54:20:F6:74:A8:EB:87:BB:4B:13:77:CD:BD:64
Certificate issuer: /CN=fe1eeadf5e7f5420f674a8eb87bb4b1377cdbd64
Certificate serial: 0196748B9B5D9A3FCBEB1C385D3DA13C243E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h7q315_VCD2dKjrh7tLE3fNvWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.mft
Manifest number: 0172
Signing time: Sun 27 Apr 2025 00:00:28 +0000
Manifest this update: Sun 27 Apr 2025 00:00:28 +0000
Manifest next update: Mon 28 Apr 2025 00:00:28 +0000
Files and hashes: 1: _h7q315_VCD2dKjrh7tLE3fNvWQ.crl (hash: 7VfW2caIehgbwhIhFMSRN3INQgGXGNiMZiuVtjUQI1w=)
2: doL4Cn2ma0kPf9AhJrRKrVG3Az0.roa (hash: SUzYz5u/F8jt5TpzuvWgvwZ7xHoIJE9Sk3avrITgKS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_h7q315_VCD2dKjrh7tLE3fNvWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:9b:5d:9a:3f:cb:eb:1c:38:5d:3d:a1:3c:24:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1eeadf5e7f5420f674a8eb87bb4b1377cdbd64
Validity
Not Before: Apr 27 00:00:28 2025 GMT
Not After : Apr 28 00:00:28 2025 GMT
Subject: CN=3bdf5af523ff9ac24ba5b21cc37e2b4a3d0f5aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:99:69:6b:e0:ca:8b:a4:69:4d:cc:f9:0e:
44:47:24:f1:48:0f:61:5d:de:6e:db:72:91:d2:e6:
9d:20:a5:56:f8:2b:e4:44:30:01:27:f0:f3:a8:fa:
3b:75:0f:95:13:34:6c:27:1c:64:10:44:c5:98:02:
e5:e2:b6:27:18:e5:6a:63:d4:fd:90:0a:83:08:6a:
b4:03:c8:95:cf:b0:10:b6:79:c9:a0:04:0b:79:1d:
8c:33:0e:bd:49:7f:7b:01:c3:b2:5a:c8:db:95:6d:
f1:7a:f9:c5:43:85:ae:07:3f:c0:9d:ee:b2:fd:c0:
ac:73:01:19:ec:e6:0c:b5:d7:ed:8d:66:ed:0d:6c:
5f:f5:45:06:3c:d2:d0:43:29:0e:0f:07:ca:e7:56:
8e:0c:08:c9:a0:96:73:aa:a7:6d:00:02:4f:35:6b:
be:e2:1c:37:ce:27:32:d1:52:a0:3c:1a:67:a9:30:
65:50:81:49:86:ac:48:a0:8b:0b:6d:ae:0c:17:9e:
a5:3a:0e:50:05:59:6d:26:4d:4a:83:19:40:11:af:
2b:55:20:1a:2f:96:db:04:ce:9e:04:b9:79:01:dc:
63:71:03:d0:ec:59:ab:84:68:13:95:9e:98:23:f7:
84:64:ea:fe:1a:44:c0:39:82:af:56:fe:21:eb:2a:
14:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DF:5A:F5:23:FF:9A:C2:4B:A5:B2:1C:C3:7E:2B:4A:3D:0F:5A:AA
X509v3 Authority Key Identifier:
keyid:FE:1E:EA:DF:5E:7F:54:20:F6:74:A8:EB:87:BB:4B:13:77:CD:BD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h7q315_VCD2dKjrh7tLE3fNvWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:07:d1:43:a5:12:5a:75:2f:a1:39:11:b5:4b:fe:de:7d:22:
47:c9:86:f3:fa:14:0b:ae:f7:5a:c9:e3:7c:3b:1a:2c:6f:e6:
e9:5f:d2:09:d1:03:dd:70:05:48:57:5d:dd:78:55:3c:e6:2b:
9b:a6:49:41:76:4e:51:ba:34:ab:85:0c:ba:da:f5:3e:76:92:
ea:12:70:df:01:76:7d:61:e0:29:6b:01:08:cd:4c:54:62:2b:
4e:f7:98:7f:cb:27:90:bd:be:9d:58:58:8d:bd:6d:4f:3c:eb:
43:b4:ec:c8:62:14:b3:80:76:7b:aa:67:a4:c8:d2:f2:3e:d9:
4e:55:d9:19:2f:bd:9f:ec:80:38:fe:49:2f:fa:16:dd:61:c9:
3b:63:09:bf:5a:3b:6b:4d:d8:0f:f5:bf:91:24:5a:44:c4:14:
0e:cb:44:bd:13:58:45:9f:cf:04:90:b2:62:aa:df:81:91:13:
18:28:ab:f8:4f:72:2e:c1:4a:26:72:33:09:13:89:d4:72:a9:
c6:64:a1:74:12:99:5e:42:bc:50:e1:e4:a2:55:6f:a5:cf:f3:
ac:56:82:d6:22:fc:98:e2:b0:ca:9c:94:66:cb:4d:62:68:34:
a8:1b:93:bf:35:dc:75:e1:a8:91:61:f3:7e:cd:87:a7:a6:bc:
f1:98:ac:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0i5tdmj/L6xw4XT2hPCQ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMWVlYWRmNWU3ZjU0MjBmNjc0YThlYjg3YmI0YjEzNzdj
ZGJkNjQwHhcNMjUwNDI3MDAwMDI4WhcNMjUwNDI4MDAwMDI4WjAzMTEwLwYDVQQD
EygzYmRmNWFmNTIzZmY5YWMyNGJhNWIyMWNjMzdlMmI0YTNkMGY1YWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrqZaWvgyoukaU3M+Q5ERyTxSA9h
Xd5u23KR0uadIKVW+CvkRDABJ/DzqPo7dQ+VEzRsJxxkEETFmALl4rYnGOVqY9T9
kAqDCGq0A8iVz7AQtnnJoAQLeR2MMw69SX97AcOyWsjblW3xevnFQ4WuBz/Ane6y
/cCscwEZ7OYMtdftjWbtDWxf9UUGPNLQQykODwfK51aODAjJoJZzqqdtAAJPNWu+
4hw3zicy0VKgPBpnqTBlUIFJhqxIoIsLba4MF56lOg5QBVltJk1KgxlAEa8rVSAa
L5bbBM6eBLl5AdxjcQPQ7FmrhGgTlZ6YI/eEZOr+GkTAOYKvVv4h6yoURwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvfWvUj/5rCS6WyHMN+K0o9D1qqMB8GA1UdIwQY
MBaAFP4e6t9ef1Qg9nSo64e7SxN3zb1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2g3cTMxNV9WQ0QyZEtqcmg3dExFM2ZOdldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83OWJkZDAtYzNjOS00YzQyLWI5YzUt
MzUwN2RmZmExZWYyLzEvX2g3cTMxNV9WQ0QyZEtqcmg3dExFM2ZOdldRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83OWJkZDAtYzNjOS00YzQyLWI5YzUtMzUwN2RmZmExZWYy
LzEvX2g3cTMxNV9WQ0QyZEtqcmg3dExFM2ZOdldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqgfRQ6US
WnUvoTkRtUv+3n0iR8mG8/oUC673WsnjfDsaLG/m6V/SCdED3XAFSFdd3XhVPOYr
m6ZJQXZOUbo0q4UMutr1PnaS6hJw3wF2fWHgKWsBCM1MVGIrTveYf8snkL2+nVhY
jb1tTzzrQ7TsyGIUs4B2e6pnpMjS8j7ZTlXZGS+9n+yAOP5JL/oW3WHJO2MJv1o7
a03YD/W/kSRaRMQUDstEvRNYRZ/PBJCyYqrfgZETGCir+E9yLsFKJnIzCROJ1HKp
xmShdBKZXkK8UOHkolVvpc/zrFaC1iL8mOKwypyUZstNYmg0qBuTvzXcdeGokWHz
fs2Hp6a88ZisMw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:31:35 2025 by rpki-client