Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
File: fBbp1X79rNP3vH6YSWtxn63Frkg.mft (raw, json)
Hash identifier: SVq3KcxZl7qM172KibSfnLF8WQGQ6ywOfJdbW7GgtEE=
Subject key identifier: 37:AF:21:C4:58:B6:2E:64:14:58:36:43:CE:97:01:83:57:19:BA:AE
Authority key identifier: 7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48
Certificate issuer: /CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
Certificate serial: 019679445644F25F772D77382519C14D7D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
Manifest number: 085B
Signing time: Sun 27 Apr 2025 22:00:43 +0000
Manifest this update: Sun 27 Apr 2025 22:00:43 +0000
Manifest next update: Mon 28 Apr 2025 22:00:43 +0000
Files and hashes: 1: 9x0C1ycahYIp0jhnR--av7frEvs.roa (hash: TxO2zK2Lq7rKbvn4CVYDpMwFmpWv6oOsKAtfhF9aA3s=)
2: JiDLUAEWCf0QMkfngpohCbhKNuQ.roa (hash: g9GotTDpZgVRPRfg5qW5M4wBYQLWFDrkzBNLKf+GOCs=)
3: fBbp1X79rNP3vH6YSWtxn63Frkg.crl (hash: XheweRFVSwROg7VnF+MwbCWK3LfWWz4pxHN7jbQplhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:56:44:f2:5f:77:2d:77:38:25:19:c1:4d:7d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
Validity
Not Before: Apr 27 22:00:43 2025 GMT
Not After : Apr 28 22:00:43 2025 GMT
Subject: CN=37af21c458b62e6414583643ce9701835719baae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:83:9c:3c:d4:c6:2e:9f:6b:7d:29:a3:28:c4:
56:16:52:0c:00:44:ef:09:85:52:5d:bf:3f:0f:25:
7c:97:9f:32:f7:47:70:3d:4a:27:6e:1a:2a:8d:fe:
92:4a:54:f3:ad:63:d0:77:b4:70:12:26:61:2c:7d:
49:55:39:44:20:19:cc:a6:4c:d3:cf:d7:e8:9e:e8:
c2:1d:f2:0b:12:dd:f5:8c:a6:33:be:a5:b3:bf:00:
3c:26:55:7c:f3:63:2a:6f:d9:94:ca:fb:04:b5:cd:
35:2b:58:31:cc:89:89:f2:e0:42:56:24:9d:5c:3a:
67:35:43:c5:6d:09:70:93:7c:a6:cb:29:c2:0b:c6:
46:31:bd:f4:fb:c6:32:05:d1:45:d1:a4:42:77:a5:
4b:a6:db:be:7c:73:83:4f:29:56:7e:65:83:f1:99:
9b:6c:12:71:4d:ed:4c:ab:88:7d:fd:f5:06:32:95:
a3:42:36:e7:aa:36:8f:b6:84:52:88:76:61:af:ca:
ef:87:b3:0e:af:6f:20:85:35:42:8c:95:f2:fd:46:
a5:8a:e9:b1:d4:51:92:60:88:b7:e5:61:7e:f2:87:
6e:9e:a1:57:e7:17:16:73:ca:7a:a2:54:a7:f9:8d:
fb:37:81:e2:76:e6:66:8e:9e:bd:76:38:cb:ab:47:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AF:21:C4:58:B6:2E:64:14:58:36:43:CE:97:01:83:57:19:BA:AE
X509v3 Authority Key Identifier:
keyid:7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:25:bc:16:44:5d:d1:f6:3c:5e:63:61:8b:e5:db:f8:f0:7c:
c4:05:83:3b:3c:f9:a9:2e:7a:45:79:2b:ea:f3:f2:1c:9d:12:
f2:ea:80:bd:2a:8f:36:b6:1b:d6:17:82:f2:51:de:54:40:9e:
7a:13:48:c0:b8:98:61:8a:fe:e3:d7:4d:83:18:99:ca:68:92:
d0:6e:d4:04:11:75:c4:05:5f:69:82:dd:5b:29:96:c4:c7:eb:
ed:f9:ad:22:fb:7a:fe:5f:5a:94:ba:e8:b5:ba:0b:ec:55:4c:
5d:43:3a:74:8b:86:bb:d6:c9:ac:39:49:f3:c2:b3:1d:75:f2:
8f:0b:f2:0f:aa:81:2f:a0:83:c5:cc:d6:2f:c2:c0:cc:dd:85:
a8:7e:a1:fb:ad:81:37:70:17:96:1d:b0:7e:90:0a:ee:7c:9b:
e1:b1:69:da:0c:c7:d8:4d:04:40:3e:49:70:29:23:e2:d9:69:
9c:b9:08:f2:b2:1f:9c:b8:f7:24:ff:51:00:ba:0e:e6:59:5b:
50:d4:7a:a9:3a:d4:84:5a:c7:e6:d7:58:0a:33:07:3a:2a:e3:
18:fc:c5:d1:b9:56:67:cf:7c:b7:10:33:98:72:96:30:54:4b:
40:7b:de:15:8e:47:a1:4e:ae:a7:8d:d6:b3:95:90:4f:ae:41:
27:06:3a:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5RFZE8l93LXc4JRnBTX1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMTZlOWQ1N2VmZGFjZDNmN2JjN2U5ODQ5NmI3MTlmYWRj
NWFlNDgwHhcNMjUwNDI3MjIwMDQzWhcNMjUwNDI4MjIwMDQzWjAzMTEwLwYDVQQD
EygzN2FmMjFjNDU4YjYyZTY0MTQ1ODM2NDNjZTk3MDE4MzU3MTliYWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIOcPNTGLp9rfSmjKMRWFlIMAETv
CYVSXb8/DyV8l58y90dwPUonbhoqjf6SSlTzrWPQd7RwEiZhLH1JVTlEIBnMpkzT
z9fonujCHfILEt31jKYzvqWzvwA8JlV882Mqb9mUyvsEtc01K1gxzImJ8uBCViSd
XDpnNUPFbQlwk3ymyynCC8ZGMb30+8YyBdFF0aRCd6VLptu+fHODTylWfmWD8Zmb
bBJxTe1Mq4h9/fUGMpWjQjbnqjaPtoRSiHZhr8rvh7MOr28ghTVCjJXy/Ualiumx
1FGSYIi35WF+8odunqFX5xcWc8p6olSn+Y37N4HiduZmjp69djjLq0e5+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDevIcRYti5kFFg2Q86XAYNXGbquMB8GA1UdIwQY
MBaAFHwW6dV+/azT97x+mElrcZ+txa5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkJicDFYNzlyTlAzdkg2WVNXdHhuNjNGcmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMTk3ZDAtYTU0MC00ODgyLWE2N2Et
YjhhMjMyZWZmMmY2LzEvZkJicDFYNzlyTlAzdkg2WVNXdHhuNjNGcmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9mMTk3ZDAtYTU0MC00ODgyLWE2N2EtYjhhMjMyZWZmMmY2
LzEvZkJicDFYNzlyTlAzdkg2WVNXdHhuNjNGcmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSW8FkRd
0fY8XmNhi+Xb+PB8xAWDOzz5qS56RXkr6vPyHJ0S8uqAvSqPNrYb1heC8lHeVECe
ehNIwLiYYYr+49dNgxiZymiS0G7UBBF1xAVfaYLdWymWxMfr7fmtIvt6/l9alLro
tboL7FVMXUM6dIuGu9bJrDlJ88KzHXXyjwvyD6qBL6CDxczWL8LAzN2FqH6h+62B
N3AXlh2wfpAK7nyb4bFp2gzH2E0EQD5JcCkj4tlpnLkI8rIfnLj3JP9RALoO5llb
UNR6qTrUhFrH5tdYCjMHOirjGPzF0blWZ898txAzmHKWMFRLQHveFY5HoU6up43W
s5WQT65BJwY6rQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:37:20 2025 by rpki-client