Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft
File: _JgxNwQvyMSSFwfU622l9sSnmls.mft (raw, json)
Hash identifier: /uYfscDHpfdiz1AUWbdzo7loDPyhNfCJxY4fY1co7bs=
Subject key identifier: 0F:AB:77:DD:91:A6:28:F0:A4:2D:E2:C2:67:1F:EC:87:51:82:35:74
Authority key identifier: FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
Certificate issuer: /CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Certificate serial: 0196865AC6037D90F0CA387F0F456364BD07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft
Manifest number: 151B
Signing time: Wed 30 Apr 2025 11:00:17 +0000
Manifest this update: Wed 30 Apr 2025 11:00:17 +0000
Manifest next update: Thu 01 May 2025 11:00:17 +0000
Files and hashes: 1: SXZm8wbMg3xM60shH7B8R-_NnKM.roa (hash: L4R596s7KyX9eES8kDOckvjATz5MXeTWz01yNs2zMaw=)
2: TSzzT-wDXDGDMx-4wmmQgF1l3HA.roa (hash: yUpCizyCuVdygvZFqIzlfSb6NuJnZoyRJzdQ53d5l/A=)
3: _JgxNwQvyMSSFwfU622l9sSnmls.crl (hash: b0PNrCSV2olpwulgfji5fRWKr/0MFV28OEIVnQ6hC64=)
4: _L_G56aRVg6nD-NomNA5jLK-OFc.roa (hash: pqPipm6sSmIrz6wz+oGLMWSdr2XRQ9UIYUQfzfKl1sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5a:c6:03:7d:90:f0:ca:38:7f:0f:45:63:64:bd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Validity
Not Before: Apr 30 11:00:17 2025 GMT
Not After : May 1 11:00:17 2025 GMT
Subject: CN=0fab77dd91a628f0a42de2c2671fec8751823574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:dd:f5:86:2c:07:0b:62:d9:e4:3a:19:1f:
1c:d4:ff:8c:f9:75:56:8c:2e:23:40:a4:89:ad:6f:
3f:7d:85:4e:9f:7b:18:20:e5:f6:bc:73:57:20:fc:
a0:67:c1:b8:49:cc:95:34:78:5d:20:2c:2f:f6:19:
7d:f7:65:b3:63:f2:ea:0a:e6:36:89:a3:2f:29:dc:
29:f8:6f:81:51:b2:ae:d5:9a:a5:f4:f9:0f:bd:f7:
28:27:7e:34:0b:a4:b0:55:d4:6f:63:20:be:f7:7d:
dd:ad:a6:60:50:f2:64:22:a9:59:ca:aa:19:75:f9:
0f:9f:40:e7:53:1e:ac:c8:68:d7:9a:e4:3f:2b:32:
6f:41:0e:b9:57:91:79:bf:5d:90:67:06:a1:62:57:
9f:4d:4d:7f:82:f7:d5:9b:6e:e5:8e:ae:77:be:c3:
4c:2b:20:32:a4:9e:a3:c2:98:53:10:40:ab:1a:af:
57:a0:a5:8e:6f:5b:6e:bf:2c:32:63:a8:59:bf:17:
5b:00:1b:10:fe:6b:6b:8d:18:64:1b:30:ef:42:f7:
ed:7e:44:cf:48:0b:00:4a:3a:96:fa:0b:63:b6:b6:
d8:ee:88:6d:8d:9a:d5:fd:e3:3f:90:c6:b9:91:82:
9b:4a:62:83:08:21:4b:3d:59:28:17:5d:68:69:59:
ed:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AB:77:DD:91:A6:28:F0:A4:2D:E2:C2:67:1F:EC:87:51:82:35:74
X509v3 Authority Key Identifier:
keyid:FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:11:31:30:ef:3d:79:ef:99:dd:6b:bc:a2:6d:56:50:a1:ab:
d7:2a:eb:8d:2d:51:c1:69:46:4c:ba:0e:8e:b2:03:f2:39:ef:
30:9f:83:fd:3d:be:7d:8e:52:b8:17:9d:dc:12:92:10:8d:08:
1b:79:b0:bc:71:b0:af:11:d4:3c:fc:f4:a2:da:a9:27:c0:bc:
f7:96:af:84:23:6f:f7:1b:55:da:37:70:36:39:59:2a:98:44:
f6:8c:4b:b3:9c:8e:76:8e:53:7a:e5:e0:f7:78:49:f1:96:83:
88:1f:9b:cb:a8:8e:85:1e:54:9f:c5:7c:bb:bb:7b:d0:c2:2c:
8b:3c:5f:55:12:98:76:83:2f:c3:c3:3f:58:d9:2b:60:ca:e2:
c0:8b:ec:23:89:bb:44:27:d9:90:a7:70:76:59:05:9e:46:35:
f8:5d:b1:a1:dd:b9:3d:75:d4:c8:02:73:5b:6a:94:96:e4:16:
11:e3:78:54:d0:ce:a6:ad:74:df:d3:b8:91:c8:5f:6e:d4:f7:
d4:b8:64:34:de:eb:2f:18:4f:99:08:d6:48:32:6d:81:0a:3d:
b2:43:ba:50:5b:77:e0:66:44:ac:cb:75:7b:63:5e:2c:52:02:
0c:c1:78:f7:d4:42:21:df:a6:fd:8f:18:98:6f:0b:9e:72:fc:
58:7a:3f:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaGWsYDfZDwyjh/D0VjZL0HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOTgzMTM3MDQyZmM4YzQ5MjE3MDdkNGViNmRhNWY2YzRh
NzlhNWIwHhcNMjUwNDMwMTEwMDE3WhcNMjUwNTAxMTEwMDE3WjAzMTEwLwYDVQQD
EygwZmFiNzdkZDkxYTYyOGYwYTQyZGUyYzI2NzFmZWM4NzUxODIzNTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl7d9YYsBwti2eQ6GR8c1P+M+XVW
jC4jQKSJrW8/fYVOn3sYIOX2vHNXIPygZ8G4ScyVNHhdICwv9hl992WzY/LqCuY2
iaMvKdwp+G+BUbKu1Zql9PkPvfcoJ340C6SwVdRvYyC+933draZgUPJkIqlZyqoZ
dfkPn0DnUx6syGjXmuQ/KzJvQQ65V5F5v12QZwahYlefTU1/gvfVm27ljq53vsNM
KyAypJ6jwphTEECrGq9XoKWOb1tuvywyY6hZvxdbABsQ/mtrjRhkGzDvQvftfkTP
SAsASjqW+gtjtrbY7ohtjZrV/eM/kMa5kYKbSmKDCCFLPVkoF11oaVntxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+rd92RpijwpC3iwmcf7IdRgjV0MB8GA1UdIwQY
MBaAFPyYMTcEL8jEkhcH1OttpfbEp5pbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0pneE53UXZ5TVNTRndmVTYyMmw5c1NubWxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MjFjODAtZWQzYS00N2ZkLThkMmMt
MjI0ZjEwYTk4MWZlLzEvX0pneE53UXZ5TVNTRndmVTYyMmw5c1NubWxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80MjFjODAtZWQzYS00N2ZkLThkMmMtMjI0ZjEwYTk4MWZl
LzEvX0pneE53UXZ5TVNTRndmVTYyMmw5c1NubWxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxExMO89
ee+Z3Wu8om1WUKGr1yrrjS1RwWlGTLoOjrID8jnvMJ+D/T2+fY5SuBed3BKSEI0I
G3mwvHGwrxHUPPz0otqpJ8C895avhCNv9xtV2jdwNjlZKphE9oxLs5yOdo5TeuXg
93hJ8ZaDiB+by6iOhR5Un8V8u7t70MIsizxfVRKYdoMvw8M/WNkrYMriwIvsI4m7
RCfZkKdwdlkFnkY1+F2xod25PXXUyAJzW2qUluQWEeN4VNDOpq1039O4kchfbtT3
1LhkNN7rLxhPmQjWSDJtgQo9skO6UFt34GZErMt1e2NeLFICDMF499RCId+m/Y8Y
mG8LnnL8WHo/8g==
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:14:29 2025 by rpki-client