Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier: pstNz0MoCOoW67iZ1AEL6EVYbylILr3Vv90ugsaMyno=
Subject key identifier: D2:15:07:A1:9C:CC:20:30:42:00:4B:82:06:04:D0:4F:F0:05:77:4B
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 01967FB4F34AF49553F8BAB4C68E997823F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number: 062A
Signing time: Tue 29 Apr 2025 04:01:27 +0000
Manifest this update: Tue 29 Apr 2025 04:01:27 +0000
Manifest next update: Wed 30 Apr 2025 04:01:27 +0000
Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: JozCQxDhfIw6mivAKeVsOmOBiAya0mqBudkZ4COHWV0=)
2: e156A2TTFNsUHYceE64LHXFN6g0.roa (hash: nO0mYNmn3X/br3j4EpG5tdC2In3Gz3kRvtjW6m8kRsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:f3:4a:f4:95:53:f8:ba:b4:c6:8e:99:78:23:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: Apr 29 04:01:27 2025 GMT
Not After : Apr 30 04:01:27 2025 GMT
Subject: CN=d21507a19ccc203042004b820604d04ff005774b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9f:05:0a:7a:59:0c:c1:36:3e:77:82:45:4e:
be:4e:3d:41:f8:f0:df:3a:c9:33:04:e0:69:6e:6f:
32:3c:6a:10:15:81:96:fa:3b:0b:58:1e:ba:9d:b5:
f2:b6:ba:ed:af:6b:5d:b1:36:da:b1:ca:71:31:4a:
d1:dd:b6:bc:e7:31:39:3e:7f:25:c0:8b:6b:2d:5f:
13:83:e0:a7:c0:8c:c3:9b:bd:99:c4:33:3c:1c:bb:
fb:55:0d:a0:96:25:d2:8e:2c:27:66:24:21:5a:19:
c7:29:d0:11:01:74:52:a6:5d:19:9b:f5:8b:dc:e4:
c9:22:6e:ec:ea:c9:96:0d:b8:a1:60:d0:e5:08:15:
07:40:1a:24:40:70:3c:d5:32:b6:68:26:99:2f:a2:
b6:ac:15:85:20:9a:37:f0:5a:8d:46:d7:10:83:8a:
57:de:3c:ea:7f:96:40:b4:ca:21:76:bf:57:dd:9d:
57:6f:19:01:51:76:ba:a7:22:93:a3:84:2b:7d:e6:
97:07:e1:dd:bb:ac:40:ed:18:e9:d0:4a:6d:d4:66:
47:ab:12:42:b6:cb:33:ed:14:1a:c0:d3:48:1b:6b:
34:37:71:72:cb:63:e6:05:c7:9b:f0:f8:e5:49:ae:
ce:4d:6b:57:6a:7e:10:a6:01:59:f1:52:a7:8e:3b:
76:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:15:07:A1:9C:CC:20:30:42:00:4B:82:06:04:D0:4F:F0:05:77:4B
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:20:16:61:48:e8:da:cb:b5:65:e5:1f:81:8f:53:8b:17:54:
14:63:97:21:72:79:8f:13:02:95:16:67:6c:b7:8f:dc:7c:5c:
98:8a:7d:9b:52:e3:b9:0c:27:eb:ff:dc:3f:92:33:9f:da:da:
27:68:14:d1:20:7f:c3:bc:b0:51:24:6a:19:8b:e2:6c:92:4d:
6c:83:6d:ec:3c:d8:74:d8:ea:cd:65:e2:01:35:12:77:7f:f3:
e4:5c:45:7d:49:57:0f:0d:d6:4c:19:0f:e1:cf:4e:62:3e:6c:
6f:b0:11:11:35:7f:4d:42:7f:50:7f:51:8f:ed:61:ad:14:7d:
b2:14:22:d7:34:f6:a4:39:fc:ab:4a:99:99:42:13:07:26:b8:
d6:a6:2b:66:ba:41:aa:75:3b:78:c1:29:d4:4f:63:e0:9a:85:
90:ce:e3:bd:7b:1c:9b:3f:3d:20:74:46:43:fa:1b:63:db:bd:
15:d2:9f:43:f3:44:fc:93:af:ea:03:91:df:c5:8a:f7:05:9f:
6b:09:57:c4:23:ba:2d:29:6e:d2:f5:47:f0:90:3a:fd:3b:a9:
b3:fc:3c:45:7a:f6:ba:97:67:d3:d5:b4:5e:5d:61:9d:73:6e:
93:94:a6:e7:d0:dd:b6:df:8e:ef:6b:44:ea:cc:4a:0f:c5:4c:
a9:10:ba:12
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZ/tPNK9JVT+Lq0xo6ZeCP3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTQ4NTBjN2FiMzBiYmI4YWY4MGRjZjlhYWJjNmI5NTFh
YTY1YTQwHhcNMjUwNDI5MDQwMTI3WhcNMjUwNDMwMDQwMTI3WjAzMTEwLwYDVQQD
EyhkMjE1MDdhMTljY2MyMDMwNDIwMDRiODIwNjA0ZDA0ZmYwMDU3NzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ8FCnpZDME2PneCRU6+Tj1B+PDf
OskzBOBpbm8yPGoQFYGW+jsLWB66nbXytrrtr2tdsTbascpxMUrR3ba85zE5Pn8l
wItrLV8Tg+CnwIzDm72ZxDM8HLv7VQ2gliXSjiwnZiQhWhnHKdARAXRSpl0Zm/WL
3OTJIm7s6smWDbihYNDlCBUHQBokQHA81TK2aCaZL6K2rBWFIJo38FqNRtcQg4pX
3jzqf5ZAtMohdr9X3Z1XbxkBUXa6pyKTo4QrfeaXB+Hdu6xA7Rjp0Ept1GZHqxJC
tssz7RQawNNIG2s0N3Fyy2PmBceb8PjlSa7OTWtXan4QpgFZ8VKnjjt2CwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNIVB6GczCAwQgBLggYE0E/wBXdLMB8GA1UdIwQY
MBaAFPikhQx6swu7ivgNz5qrxrlRqmWkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LU0ZESHF6Qzd1Sy1BM1BtcXZHdVZHcVphUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvMzg5NjlkLTcyNzYtNGYyNy05ZTFj
LTcyODZhYzBhOTA3Yi8xLzEtS1NGREhxekM3dUstQTNQbXF2R3VWR3FaYVEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMxLzM4OTY5ZC03Mjc2LTRmMjctOWUxYy03Mjg2YWMwYTkw
N2IvMS8xLUtTRkRIcXpDN3VLLUEzUG1xdkd1VkdxWmFRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSAW
YUjo2su1ZeUfgY9TixdUFGOXIXJ5jxMClRZnbLeP3HxcmIp9m1LjuQwn6//cP5Iz
n9raJ2gU0SB/w7ywUSRqGYvibJJNbINt7DzYdNjqzWXiATUSd3/z5FxFfUlXDw3W
TBkP4c9OYj5sb7ARETV/TUJ/UH9Rj+1hrRR9shQi1zT2pDn8q0qZmUITBya41qYr
ZrpBqnU7eMEp1E9j4JqFkM7jvXscmz89IHRGQ/obY9u9FdKfQ/NE/JOv6gOR38WK
9wWfawlXxCO6LSlu0vVH8JA6/Tups/w8RXr2updn09W0Xl1hnXNuk5Sm59Ddtt+O
72tE6sxKD8VMqRC6Eg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:46:51 2025 by rpki-client