Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
File: 1-9W1c_sNJpmSp5qea0XN1iDezBE.mft (raw, json)
Hash identifier: ppVaiTHaa/xfgvo16iYk/ZNKWo2Y8k6TFFAWCsWmptw=
Subject key identifier: 65:A0:CA:75:8F:2F:D4:C6:D2:C4:29:D2:12:14:43:FC:66:B1:85:42
Authority key identifier: FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
Certificate issuer: /CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Certificate serial: 01967755A543BCFFCD95C9C28CB25E7C9E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
Manifest number: 059A
Signing time: Sun 27 Apr 2025 13:00:23 +0000
Manifest this update: Sun 27 Apr 2025 13:00:23 +0000
Manifest next update: Mon 28 Apr 2025 13:00:23 +0000
Files and hashes: 1: 1-9W1c_sNJpmSp5qea0XN1iDezBE.crl (hash: wyKAf/S+VZNTaFc8ztMOYLxsIx93g8wkTZyA2buG6Dg=)
2: xxpwWq99h2UC8fGaA57WvXmJQIY.roa (hash: hB0aBJhUko4vLE69LgJZtcXWGS9cGGQQvN4ZagAecyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:a5:43:bc:ff:cd:95:c9:c2:8c:b2:5e:7c:9e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Validity
Not Before: Apr 27 13:00:23 2025 GMT
Not After : Apr 28 13:00:23 2025 GMT
Subject: CN=65a0ca758f2fd4c6d2c429d2121443fc66b18542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:d9:93:24:60:74:31:c9:10:e7:c3:d3:62:
5e:0a:38:69:2e:f5:da:32:15:53:e4:ac:97:1f:b2:
49:91:5d:70:49:2c:57:5e:1c:22:96:a1:98:1f:84:
26:fe:fd:46:c0:fe:ba:7d:35:d8:9f:64:08:67:6e:
71:a3:89:e7:a5:ae:bd:ae:7b:e1:a9:0f:70:a3:dd:
3c:df:a1:98:6a:e9:10:04:8c:d1:08:d7:8a:18:da:
b8:8d:b5:8f:cd:0b:05:de:89:a2:00:c0:58:34:b7:
de:21:40:81:93:c3:50:cc:9e:3e:2a:e4:f8:07:40:
6d:58:54:67:a1:fa:7e:14:2b:15:d5:16:c3:cb:d0:
d7:fb:62:ba:51:ff:e5:f1:3c:19:0d:33:99:ea:51:
79:33:28:80:78:fe:2b:e6:a1:19:2f:03:8d:cd:7e:
65:97:45:f5:77:ec:3a:7b:ea:d8:0b:67:35:de:ff:
f7:34:3a:06:fa:d8:f6:b8:0c:d6:df:57:1c:1b:33:
59:e7:9c:d1:d4:4a:98:f0:71:40:91:8c:94:ad:17:
34:ed:6b:c2:b2:5c:dc:71:c2:15:a2:bf:39:00:da:
ca:f8:7e:84:1e:d2:b6:cf:24:96:aa:cb:e6:12:d7:
12:79:9d:3a:df:0f:7e:31:30:f4:ce:e7:4d:1b:e3:
cf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A0:CA:75:8F:2F:D4:C6:D2:C4:29:D2:12:14:43:FC:66:B1:85:42
X509v3 Authority Key Identifier:
keyid:FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:1e:23:6b:82:df:2f:76:4d:eb:5b:a1:06:fe:50:72:fc:9a:
11:ba:47:6e:f4:98:2b:d2:fc:b6:75:31:0a:e8:4d:bd:3a:62:
10:a3:95:7f:69:45:3f:77:c6:f6:a4:e7:b1:7a:6f:c4:4e:82:
2f:2e:ce:9c:ec:f4:2c:74:ad:c1:a4:01:93:ec:f9:7c:bc:11:
9e:c5:30:46:ab:bd:5c:ff:46:26:9d:45:f1:2c:55:d9:5d:64:
fe:fb:28:73:ae:31:91:24:8d:29:6e:d1:36:ff:6b:29:b0:b0:
e8:9a:af:66:72:12:a1:d0:c5:7b:92:64:13:d2:82:da:92:27:
81:15:2a:a9:74:c0:c8:5c:73:d5:1a:fe:ce:cf:1a:90:30:45:
a7:d6:12:1c:21:e3:64:ee:80:e3:c5:35:cb:3f:da:72:79:f4:
26:c6:f3:76:50:31:78:b0:7b:b1:d7:5a:43:c3:38:74:0e:db:
d2:b3:31:02:af:6e:4f:3e:5c:90:67:04:bb:f0:cf:a3:28:04:
a2:a0:58:d3:dd:34:46:e9:97:c9:a6:9f:cb:a7:53:73:b9:30:
a4:6b:35:ca:d8:fb:3e:ad:b5:a2:29:b4:39:f7:9a:48:ca:fd:
9e:1f:73:31:09:8e:7d:23:07:12:7e:d9:74:47:3a:52:06:54:
8d:b9:4e:2e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZ3VaVDvP/NlcnCjLJefJ5/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZDViNTczZmIwZDI2OTk5MmE3OWE5ZTZiNDVjZGQ2MjBk
ZWNjMTEwHhcNMjUwNDI3MTMwMDIzWhcNMjUwNDI4MTMwMDIzWjAzMTEwLwYDVQQD
Eyg2NWEwY2E3NThmMmZkNGM2ZDJjNDI5ZDIxMjE0NDNmYzY2YjE4NTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhDZkyRgdDHJEOfD02JeCjhpLvXa
MhVT5KyXH7JJkV1wSSxXXhwilqGYH4Qm/v1GwP66fTXYn2QIZ25xo4nnpa69rnvh
qQ9wo90836GYaukQBIzRCNeKGNq4jbWPzQsF3omiAMBYNLfeIUCBk8NQzJ4+KuT4
B0BtWFRnofp+FCsV1RbDy9DX+2K6Uf/l8TwZDTOZ6lF5MyiAeP4r5qEZLwONzX5l
l0X1d+w6e+rYC2c13v/3NDoG+tj2uAzW31ccGzNZ55zR1EqY8HFAkYyUrRc07WvC
slzcccIVor85ANrK+H6EHtK2zySWqsvmEtcSeZ063w9+MTD0zudNG+PPwwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGWgynWPL9TG0sQp0hIUQ/xmsYVCMB8GA1UdIwQY
MBaAFPvVtXP7DSaZkqeanmtFzdYg3swRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05VzFjX3NOSnBtU3A1cWVhMFhOMWlEZXpCRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvNjQzOGMwLTU0ZTUtNGIzMy05NTAy
LTUwZjNkMWFlOTQ0Mi8xLzEtOVcxY19zTkpwbVNwNXFlYTBYTjFpRGV6QkUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRiLzY0MzhjMC01NGU1LTRiMzMtOTUwMi01MGYzZDFhZTk0
NDIvMS8xLTlXMWNfc05KcG1TcDVxZWEwWE4xaURlekJFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyh4j
a4LfL3ZN61uhBv5QcvyaEbpHbvSYK9L8tnUxCuhNvTpiEKOVf2lFP3fG9qTnsXpv
xE6CLy7OnOz0LHStwaQBk+z5fLwRnsUwRqu9XP9GJp1F8SxV2V1k/vsoc64xkSSN
KW7RNv9rKbCw6JqvZnISodDFe5JkE9KC2pIngRUqqXTAyFxz1Rr+zs8akDBFp9YS
HCHjZO6A48U1yz/acnn0JsbzdlAxeLB7sddaQ8M4dA7b0rMxAq9uTz5ckGcEu/DP
oygEoqBY0900RumXyaafy6dTc7kwpGs1ytj7Pq21oim0OfeaSMr9nh9zMQmOfSMH
En7ZdEc6UgZUjblOLg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:35:35 2025 by rpki-client