Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
File: d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft (raw, json)
Hash identifier: RFpZGMeKMgVa6NMXPsG3Zab+o78Gsg0ZELpgPPwpyAU=
Subject key identifier: F0:57:50:33:28:F3:3F:C8:2C:6B:72:C6:3A:CC:E9:F4:3E:1B:0F:36
Authority key identifier: 77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
Certificate issuer: /CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Certificate serial: 019675D4FD2652B4FD6AE731EA38C594FE94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
Manifest number: 1115
Signing time: Sun 27 Apr 2025 06:00:14 +0000
Manifest this update: Sun 27 Apr 2025 06:00:14 +0000
Manifest next update: Mon 28 Apr 2025 06:00:14 +0000
Files and hashes: 1: LfrSVtlH9do-60_TEx27lHKNfrQ.roa (hash: TpFdLJ2bXCpVRx0+Pt6yo0AUPtighW1Vwfu+RYNR6uM=)
2: Y5oWWSqH2f4PzIF1caWpoS6C0uI.roa (hash: 1+Bd1mblfzXz4N7C24HyQvcSfHhcXd/iMBMWLlVj9RQ=)
3: d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl (hash: tXmuzn3EjypjdUq5cnXGNHjadiYAGIP0MgxttDGZFYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d4:fd:26:52:b4:fd:6a:e7:31:ea:38:c5:94:fe:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Validity
Not Before: Apr 27 06:00:14 2025 GMT
Not After : Apr 28 06:00:14 2025 GMT
Subject: CN=f057503328f33fc82c6b72c63acce9f43e1b0f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4a:d1:6f:94:55:0a:52:bf:90:6a:ad:39:83:
c1:68:38:de:13:83:4e:65:7b:4b:a7:88:4e:1d:a6:
ec:e6:ae:2b:57:36:a9:7d:18:fa:20:51:55:b2:ef:
21:b0:4c:b8:12:c5:99:3f:29:f6:19:a9:a4:23:7f:
25:b3:a2:a2:1c:91:c5:f3:b9:b1:0e:74:71:95:75:
f3:f5:7a:26:a5:d1:da:46:09:55:be:1c:cc:19:a2:
c2:90:2e:5a:3b:aa:a2:d7:c7:6d:3b:19:0c:ab:37:
97:68:df:87:e6:a1:df:4e:cc:83:02:2d:dc:e9:28:
2f:5d:a7:fc:13:50:3b:dd:28:a3:f3:00:af:1c:1c:
ad:62:6e:d9:6a:1e:09:de:4f:1e:0e:41:ae:1b:ee:
bb:60:13:02:7b:c0:6a:4b:b0:f3:46:46:ef:0d:06:
51:c9:d3:bc:2d:05:4e:48:53:8d:ac:0f:20:d3:d4:
26:9c:c4:82:0c:3c:6f:d6:a1:23:a9:fd:85:3c:2e:
23:00:52:6a:5b:7a:2c:21:4c:ca:c7:8f:59:23:5f:
1b:ca:81:f0:82:fc:f6:5a:44:1b:f9:0e:ab:fd:69:
eb:aa:8e:dc:84:97:91:08:16:ec:8f:77:bb:95:ef:
29:fe:37:c4:a0:61:dc:3d:f6:d6:34:52:51:41:64:
7e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:57:50:33:28:F3:3F:C8:2C:6B:72:C6:3A:CC:E9:F4:3E:1B:0F:36
X509v3 Authority Key Identifier:
keyid:77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:65:bc:c9:38:ed:65:a4:51:c1:be:72:21:14:83:79:ad:6b:
8f:7a:aa:b0:9a:b4:a4:b9:22:e3:f0:b4:43:7e:0d:20:d6:f6:
31:65:53:93:2e:a3:5a:e9:33:e2:f0:2f:09:0c:65:de:85:45:
a6:18:11:6a:a1:88:a8:59:35:30:2d:ca:6d:cb:1a:41:59:7d:
3a:93:a0:79:4c:f4:44:75:a7:9f:80:15:a9:3b:63:34:70:00:
15:5a:ed:64:0e:ed:5e:fe:5e:29:f6:ec:5d:d0:af:fd:87:fc:
43:7e:67:a9:5a:09:ef:a5:c6:d8:71:08:25:32:63:d1:e5:3f:
d9:77:57:78:47:db:21:51:f5:59:4e:3e:4a:43:65:40:95:a4:
57:e3:d4:8b:54:85:7b:89:95:db:3d:bf:65:76:58:94:ec:2c:
b2:b4:3d:ac:1b:b6:f1:8f:74:ca:94:e2:81:e6:8f:bf:80:6d:
50:d4:ab:8d:6e:52:66:41:eb:56:e9:c9:9a:19:3e:64:e2:b0:
76:8d:8d:b3:bb:4f:75:a2:27:af:f0:34:bd:b1:45:4b:ab:63:
65:34:49:10:31:35:a2:70:98:06:8f:02:c3:b5:b4:a9:01:4f:
c4:33:1a:09:0e:5f:28:44:6f:58:c3:b5:05:2c:8d:52:69:d1:
74:89:00:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ11P0mUrT9aucx6jjFlP6UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZThiYmY4NjQzYWJkNjJmZjNmNDJiZWM0YzBiMmRiOTc3
NTk2ZDcwHhcNMjUwNDI3MDYwMDE0WhcNMjUwNDI4MDYwMDE0WjAzMTEwLwYDVQQD
EyhmMDU3NTAzMzI4ZjMzZmM4MmM2YjcyYzYzYWNjZTlmNDNlMWIwZjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ErRb5RVClK/kGqtOYPBaDjeE4NO
ZXtLp4hOHabs5q4rVzapfRj6IFFVsu8hsEy4EsWZPyn2GamkI38ls6KiHJHF87mx
DnRxlXXz9XompdHaRglVvhzMGaLCkC5aO6qi18dtOxkMqzeXaN+H5qHfTsyDAi3c
6SgvXaf8E1A73Sij8wCvHBytYm7Zah4J3k8eDkGuG+67YBMCe8BqS7DzRkbvDQZR
ydO8LQVOSFONrA8g09QmnMSCDDxv1qEjqf2FPC4jAFJqW3osIUzKx49ZI18byoHw
gvz2WkQb+Q6r/Wnrqo7chJeRCBbsj3e7le8p/jfEoGHcPfbWNFJRQWR+BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBXUDMo8z/ILGtyxjrM6fQ+Gw82MB8GA1UdIwQY
MBaAFHfou/hkOr1i/z9CvsTAstuXdZbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZC1pNy1HUTZ2V0xfUDBLLXhNQ3kyNWQxbHRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iODcwZTctN2YxZS00OWNlLWIxZjkt
NDRjY2QxYjUxZjEwLzEvZC1pNy1HUTZ2V0xfUDBLLXhNQ3kyNWQxbHRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iODcwZTctN2YxZS00OWNlLWIxZjktNDRjY2QxYjUxZjEw
LzEvZC1pNy1HUTZ2V0xfUDBLLXhNQ3kyNWQxbHRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy2W8yTjt
ZaRRwb5yIRSDea1rj3qqsJq0pLki4/C0Q34NINb2MWVTky6jWukz4vAvCQxl3oVF
phgRaqGIqFk1MC3KbcsaQVl9OpOgeUz0RHWnn4AVqTtjNHAAFVrtZA7tXv5eKfbs
XdCv/Yf8Q35nqVoJ76XG2HEIJTJj0eU/2XdXeEfbIVH1WU4+SkNlQJWkV+PUi1SF
e4mV2z2/ZXZYlOwssrQ9rBu28Y90ypTigeaPv4BtUNSrjW5SZkHrVunJmhk+ZOKw
do2Ns7tPdaInr/A0vbFFS6tjZTRJEDE1onCYBo8Cw7W0qQFPxDMaCQ5fKERvWMO1
BSyNUmnRdIkAHg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:08:02 2025 by rpki-client