Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
File: IsFSYGEl62bVIiY_oDEJu_C7o9o.mft (raw, json)
Hash identifier: ga23wrSmt4wX9W7n5b+4wxAcoNkj9zH/HzNqh9oEEb4=
Subject key identifier: 2A:68:17:69:21:37:83:07:44:70:23:EB:28:F5:07:E3:70:6E:7D:1F
Authority key identifier: 22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA
Certificate issuer: /CN=22c152606125eb66d522263fa03109bbf0bba3da
Certificate serial: 0196741E2607AC1B0EF551B2A1523AB4B552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
Manifest number: 1511
Signing time: Sat 26 Apr 2025 22:00:54 +0000
Manifest this update: Sat 26 Apr 2025 22:00:54 +0000
Manifest next update: Sun 27 Apr 2025 22:00:54 +0000
Files and hashes: 1: IsFSYGEl62bVIiY_oDEJu_C7o9o.crl (hash: SRL0LBieXJi6JJiNsAbHSVPvBSaE/PWGYvks7NO/cBM=)
2: sY4zDGKaTiswT3v9bquB0z3xZ38.roa (hash: UFeTme0jN/PK2GkSjMta2wryPzRGN56pgsmPYrOPfD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:26:07:ac:1b:0e:f5:51:b2:a1:52:3a:b4:b5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c152606125eb66d522263fa03109bbf0bba3da
Validity
Not Before: Apr 26 22:00:54 2025 GMT
Not After : Apr 27 22:00:54 2025 GMT
Subject: CN=2a68176921378307447023eb28f507e3706e7d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:8a:8e:3e:b3:b0:54:f5:39:a4:64:92:87:
3f:d1:47:31:0e:0b:ab:40:68:10:87:19:a3:17:a7:
fe:bb:40:43:7a:85:09:3d:da:9a:73:75:4a:7a:63:
4a:b9:d5:61:53:9f:f9:74:85:54:80:ec:b1:9a:e9:
e5:06:93:24:66:0d:48:4f:1f:46:fa:16:7e:60:7c:
37:8d:b8:af:02:48:68:92:1c:13:1b:aa:98:24:d2:
a3:8d:28:78:ea:ca:00:0a:2e:6a:18:df:aa:44:60:
bb:0d:e8:47:b1:e7:24:5f:06:86:b2:fc:f2:74:5b:
a1:fd:37:0f:c1:c6:d3:b6:52:ad:8d:e2:62:7b:40:
fe:18:8f:85:57:a4:95:e3:09:1f:ce:85:e4:b9:39:
8e:a3:0d:86:b3:90:78:fc:43:97:43:45:52:cd:dc:
c6:f8:71:42:d8:90:60:e4:6e:96:22:64:46:63:79:
92:0c:30:f8:57:37:cb:a1:17:3d:2a:90:96:7d:2c:
c4:bc:b4:fe:df:b1:65:1c:69:36:20:c4:8e:35:2c:
9b:93:14:1f:95:d9:2d:b2:6b:49:90:86:d6:52:20:
42:b8:5e:d9:32:10:b5:e3:66:c0:66:4d:3c:4b:df:
d3:f8:ba:1d:94:49:d2:36:19:86:61:ae:d5:f0:0e:
5a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:68:17:69:21:37:83:07:44:70:23:EB:28:F5:07:E3:70:6E:7D:1F
X509v3 Authority Key Identifier:
keyid:22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c7:f7:82:7d:aa:4f:4f:c6:5b:fc:4d:34:bc:fd:03:fa:06:
c4:43:6e:44:35:7f:e9:ae:47:5d:77:b5:4f:c3:27:87:de:75:
0b:59:8e:ee:22:eb:d7:91:19:64:6d:fd:32:e9:2e:7f:d9:f1:
d0:9a:a9:50:56:90:f8:1f:0f:49:c7:70:2b:6d:98:22:94:9c:
8b:81:5a:30:d0:12:0e:61:ac:8c:91:8a:f7:ae:14:d3:e5:04:
10:64:6d:38:a5:c0:33:c6:64:2e:3c:12:d7:52:f8:c3:54:ff:
25:8d:d4:15:24:ed:28:44:10:b2:c8:36:21:97:de:92:78:b3:
b9:62:42:fb:14:ba:d2:59:54:d1:fb:25:e9:be:35:12:9b:36:
d1:2d:4e:da:ba:26:96:d7:f9:a7:0e:22:8a:9e:94:69:49:22:
32:5e:29:d3:cb:48:9c:5c:27:04:74:f3:e5:63:95:31:90:1d:
9b:3f:13:cb:59:03:66:de:63:72:35:ff:e4:7e:e8:3f:29:86:
1e:53:4e:4f:66:92:2d:95:f6:86:73:9d:c7:84:7f:79:0d:4c:
00:70:cd:cd:a6:44:e6:4e:e9:3e:fd:a8:46:fd:91:e2:28:d8:
9b:1f:7d:62:34:c3:94:98:f8:50:77:19:fb:63:75:1d:42:13:
b3:47:9f:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0HiYHrBsO9VGyoVI6tLVSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzE1MjYwNjEyNWViNjZkNTIyMjYzZmEwMzEwOWJiZjBi
YmEzZGEwHhcNMjUwNDI2MjIwMDU0WhcNMjUwNDI3MjIwMDU0WjAzMTEwLwYDVQQD
EygyYTY4MTc2OTIxMzc4MzA3NDQ3MDIzZWIyOGY1MDdlMzcwNmU3ZDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDuKjj6zsFT1OaRkkoc/0UcxDgur
QGgQhxmjF6f+u0BDeoUJPdqac3VKemNKudVhU5/5dIVUgOyxmunlBpMkZg1ITx9G
+hZ+YHw3jbivAkhokhwTG6qYJNKjjSh46soACi5qGN+qRGC7DehHseckXwaGsvzy
dFuh/TcPwcbTtlKtjeJie0D+GI+FV6SV4wkfzoXkuTmOow2Gs5B4/EOXQ0VSzdzG
+HFC2JBg5G6WImRGY3mSDDD4VzfLoRc9KpCWfSzEvLT+37FlHGk2IMSONSybkxQf
ldktsmtJkIbWUiBCuF7ZMhC142bAZk08S9/T+LodlEnSNhmGYa7V8A5adQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpoF2khN4MHRHAj6yj1B+Nwbn0fMB8GA1UdIwQY
MBaAFCLBUmBhJetm1SImP6AxCbvwu6PaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNGU1lHRWw2MmJWSWlZX29ERUp1X0M3bzlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hYzI1YjQtMTk0ZS00OWM0LWFhYjEt
MGZlNGQ3ZjdkYjNkLzEvSXNGU1lHRWw2MmJWSWlZX29ERUp1X0M3bzlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hYzI1YjQtMTk0ZS00OWM0LWFhYjEtMGZlNGQ3ZjdkYjNk
LzEvSXNGU1lHRWw2MmJWSWlZX29ERUp1X0M3bzlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacf3gn2q
T0/GW/xNNLz9A/oGxENuRDV/6a5HXXe1T8Mnh951C1mO7iLr15EZZG39Mukuf9nx
0JqpUFaQ+B8PScdwK22YIpSci4FaMNASDmGsjJGK964U0+UEEGRtOKXAM8ZkLjwS
11L4w1T/JY3UFSTtKEQQssg2IZfeknizuWJC+xS60llU0fsl6b41Eps20S1O2rom
ltf5pw4iip6UaUkiMl4p08tInFwnBHTz5WOVMZAdmz8Ty1kDZt5jcjX/5H7oPymG
HlNOT2aSLZX2hnOdx4R/eQ1MAHDNzaZE5k7pPv2oRv2R4ijYmx99YjTDlJj4UHcZ
+2N1HUITs0ef3w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:33:32 2025 by rpki-client