Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier: taHe4hWGURkNm6SWbJZSH6hXQi5CpWA/UrYi5IOPDCE=
Subject key identifier: C2:4B:D9:13:A3:3C:FC:98:47:F3:2D:02:2B:23:52:4F:FA:11:C8:26
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 019671C24B8897A8B96CCCE5EC4A46C0663E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number: 150C
Signing time: Sat 26 Apr 2025 11:01:20 +0000
Manifest this update: Sat 26 Apr 2025 11:01:20 +0000
Manifest next update: Sun 27 Apr 2025 11:01:20 +0000
Files and hashes: 1: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: mSqd5yiZb83Myw+5qKbDwP53VA8cUEN6cbUldXHGeMg=)
2: jJfOPh4XYz0bStaxv-izcSg_mmc.roa (hash: I9zOxo3FRJE3Zqu7rer6Rr4TRL9Sp9aojJllGRgbeX0=)
3: pp9HRbSEXg1Djpwq9U2x1ut0P3A.roa (hash: eLTqAfDKOrIieHKE4CKftQ8WCB5K7yV6FjmVMCdNg0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:c2:4b:88:97:a8:b9:6c:cc:e5:ec:4a:46:c0:66:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Apr 26 11:01:20 2025 GMT
Not After : Apr 27 11:01:20 2025 GMT
Subject: CN=c24bd913a33cfc9847f32d022b23524ffa11c826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:37:63:57:1c:f6:89:98:fe:d7:2a:d7:f3:
4f:6d:c2:1f:c6:89:47:9a:34:b6:df:7c:8a:5d:4f:
b1:0e:fe:99:4d:df:d7:87:c2:a5:08:00:4f:6a:1a:
03:e6:ad:5d:0c:49:eb:50:68:34:82:ea:cf:16:0c:
c3:b4:d4:14:a2:8f:f1:ab:a7:ff:17:72:4a:18:f8:
2f:6f:13:1d:a7:da:6c:a8:b7:05:f7:44:eb:19:ca:
8d:17:f5:3e:35:e7:44:6f:ba:6b:c3:34:a3:de:f5:
c1:36:63:66:67:5b:c8:7c:e9:10:3e:73:c6:c9:3c:
98:ab:2c:cc:72:ee:65:3a:44:32:3f:21:d8:0f:62:
57:93:07:3c:7d:d5:19:20:99:fc:54:7b:7d:2f:b9:
67:32:40:b3:70:e6:a4:67:04:a7:8b:86:de:46:c6:
0d:6b:ba:51:5c:e2:47:77:0d:8e:60:81:4e:c3:e3:
4c:01:ba:c5:d9:33:c0:0e:27:54:72:ed:2d:bc:87:
62:24:73:4e:cf:13:7f:e4:b1:12:e2:0f:bc:8c:3e:
d1:f6:0f:b7:f6:76:f1:e5:e6:99:58:11:4b:37:c4:
6e:f1:95:3d:c3:61:04:07:04:bb:f1:02:25:a6:c4:
74:0e:ee:b8:2c:a3:11:4b:10:22:84:06:c9:cc:44:
5b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4B:D9:13:A3:3C:FC:98:47:F3:2D:02:2B:23:52:4F:FA:11:C8:26
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:57:04:61:7e:8f:a4:30:47:4d:82:4b:7f:e9:74:13:05:b4:
b0:2b:0a:8d:8c:ee:c8:e3:63:c1:f2:a4:dc:69:6a:b0:af:4c:
3e:eb:8d:65:06:c9:f6:2a:0b:6d:62:40:32:64:bd:0b:d0:ef:
53:f8:6b:54:bb:b7:1e:f2:48:95:94:c3:45:0a:06:f2:cf:da:
c2:63:da:b3:d3:0a:31:b2:b5:95:7c:67:f1:b2:56:f7:0a:a1:
9d:f4:30:a0:ee:cb:da:bb:0d:1d:4b:e0:e0:81:31:e2:c1:b1:
70:4a:69:16:47:a8:1b:ba:87:48:da:bc:68:6a:22:f4:a0:1e:
3b:53:49:83:e7:19:1c:11:15:cd:a7:78:a0:2f:00:74:b2:20:
85:88:82:e1:fa:41:25:05:07:1f:ff:b5:0c:61:e8:f1:9f:51:
f8:57:ca:5c:90:51:53:6a:48:b1:d2:ca:92:7b:82:89:41:65:
db:3e:3c:73:e1:78:b3:79:8c:b3:ca:ad:1b:b6:72:40:c7:a0:
99:08:bd:a0:0a:cd:67:f8:9f:02:b3:e9:ae:06:1f:a3:66:e5:
be:82:a6:12:d4:67:07:47:09:3e:8c:9c:95:96:d9:2f:c1:bd:
12:91:29:72:8d:75:13:05:db:d8:c5:6b:4e:8b:f6:47:6d:b4:
9f:3a:ff:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZxwkuIl6i5bMzl7EpGwGY+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZjU0YmUxYjVlZDVmZDU5MmZhY2E0NjhkZjExMTAwOTVm
M2VhMGEwHhcNMjUwNDI2MTEwMTIwWhcNMjUwNDI3MTEwMTIwWjAzMTEwLwYDVQQD
EyhjMjRiZDkxM2EzM2NmYzk4NDdmMzJkMDIyYjIzNTI0ZmZhMTFjODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnw3Y1cc9omY/tcq1/NPbcIfxolH
mjS233yKXU+xDv6ZTd/Xh8KlCABPahoD5q1dDEnrUGg0gurPFgzDtNQUoo/xq6f/
F3JKGPgvbxMdp9psqLcF90TrGcqNF/U+NedEb7prwzSj3vXBNmNmZ1vIfOkQPnPG
yTyYqyzMcu5lOkQyPyHYD2JXkwc8fdUZIJn8VHt9L7lnMkCzcOakZwSni4beRsYN
a7pRXOJHdw2OYIFOw+NMAbrF2TPADidUcu0tvIdiJHNOzxN/5LES4g+8jD7R9g+3
9nbx5eaZWBFLN8Ru8ZU9w2EEBwS78QIlpsR0Du64LKMRSxAihAbJzERbEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJL2ROjPPyYR/MtAisjUk/6EcgmMB8GA1UdIwQY
MBaAFO31S+G17V/VkvrKRo3xEQCV8+oKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80MGQ4OTMtZTA5OS00MTQ4LWIyOGUt
OWU2MTRmNDQ2NmM1LzEvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80MGQ4OTMtZTA5OS00MTQ4LWIyOGUtOWU2MTRmNDQ2NmM1
LzEvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglcEYX6P
pDBHTYJLf+l0EwW0sCsKjYzuyONjwfKk3GlqsK9MPuuNZQbJ9ioLbWJAMmS9C9Dv
U/hrVLu3HvJIlZTDRQoG8s/awmPas9MKMbK1lXxn8bJW9wqhnfQwoO7L2rsNHUvg
4IEx4sGxcEppFkeoG7qHSNq8aGoi9KAeO1NJg+cZHBEVzad4oC8AdLIghYiC4fpB
JQUHH/+1DGHo8Z9R+FfKXJBRU2pIsdLKknuCiUFl2z48c+F4s3mMs8qtG7ZyQMeg
mQi9oArNZ/ifArPprgYfo2blvoKmEtRnB0cJPoyclZbZL8G9EpEpco11EwXb2MVr
Tov2R220nzr/tA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:14:53 2025 by rpki-client