Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
File: fsZmdy15vXuyEZmiq9r-IgJRHHA.mft (raw, json)
Hash identifier: j5CP630TKJyA2uyKuZWCJHW9kEPZM7P2Ab5pUSH+t6w=
Subject key identifier: C4:1A:E0:89:79:79:63:8A:69:C0:54:EB:E0:27:CB:CB:8B:B4:63:BD
Authority key identifier: 7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70
Certificate issuer: /CN=7ec666772d79bd7bb21199a2abdafe2202511c70
Certificate serial: 01967D209FB8FFF093AA1E99D0E7730A10FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
Manifest number: 0C26
Signing time: Mon 28 Apr 2025 16:00:12 +0000
Manifest this update: Mon 28 Apr 2025 16:00:12 +0000
Manifest next update: Tue 29 Apr 2025 16:00:12 +0000
Files and hashes: 1: dWmsOWayzQrhACw6PZROUA9TY4k.roa (hash: k+N79FADkE2zFtD7FMss3oaOymFQNUYiml90eSHs5KE=)
2: fsZmdy15vXuyEZmiq9r-IgJRHHA.crl (hash: iFnPUejaMWVOb6F6XxohLtlkyyH1uOTJE47gUev6fzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:20:9f:b8:ff:f0:93:aa:1e:99:d0:e7:73:0a:10:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec666772d79bd7bb21199a2abdafe2202511c70
Validity
Not Before: Apr 28 16:00:12 2025 GMT
Not After : Apr 29 16:00:12 2025 GMT
Subject: CN=c41ae0897979638a69c054ebe027cbcb8bb463bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cf:08:7d:26:5e:cc:f1:da:d2:42:bf:a6:0e:
57:66:94:82:55:e2:cf:5a:48:ef:7f:40:44:d2:44:
fd:b7:61:9b:52:92:9c:09:04:62:8e:87:21:0e:57:
0f:7e:8b:4c:c3:e2:dc:82:9f:6f:4d:78:49:e2:8d:
66:b3:2f:51:b9:ef:9d:f1:a0:98:0b:33:9f:94:a1:
61:83:a3:3e:67:04:45:c9:c6:a1:81:f8:c7:83:66:
65:b9:25:b7:36:7f:b3:a7:38:5b:68:8c:b3:43:11:
20:86:41:98:66:e1:88:4f:aa:41:4d:93:f4:54:ef:
ba:9a:51:54:5a:1b:35:4e:86:f6:ca:1f:3b:7b:53:
12:40:53:34:93:33:83:d1:d0:65:9a:40:b4:ff:92:
04:bc:5d:84:56:1a:7c:87:65:c1:61:59:a8:1a:29:
75:3d:b8:21:f6:7f:be:32:6c:23:d1:e0:dc:47:ce:
6c:a5:84:8e:9b:57:6c:ca:06:d6:86:7d:d1:87:d1:
7f:94:2a:13:55:a7:42:9a:ed:65:ec:1a:8f:6a:f8:
ce:99:1b:11:e0:69:ea:9f:f7:b2:5a:0c:37:17:f6:
07:47:d6:a2:bb:d4:2a:b4:93:b2:44:b9:ba:84:b0:
bf:13:d4:e3:1e:53:4f:5a:82:0b:9e:42:2b:02:36:
91:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1A:E0:89:79:79:63:8A:69:C0:54:EB:E0:27:CB:CB:8B:B4:63:BD
X509v3 Authority Key Identifier:
keyid:7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2f:5e:46:4e:40:41:23:aa:f1:e7:66:cc:bf:f8:73:10:f1:
6c:28:db:6a:3c:6d:69:53:ce:51:4f:29:ba:4e:89:cc:9f:8a:
de:6d:5b:d8:3b:05:41:0f:2b:f2:6f:d6:b4:a0:af:80:fd:93:
64:59:09:87:e4:0c:e1:3f:af:31:c2:a9:a4:c0:6a:56:7c:29:
04:11:e6:87:b9:69:9a:f2:04:ad:1e:74:52:5f:c3:5b:41:a9:
30:5f:22:c7:dd:21:00:17:bd:bd:f6:25:d3:8e:ef:b7:ca:71:
b8:c3:0e:11:eb:75:23:5e:b3:a6:f3:61:44:92:7a:95:a2:80:
24:cc:4d:89:8f:82:5a:64:df:95:23:e6:33:0c:d0:a3:e5:37:
95:cc:3d:04:13:92:30:27:f1:5b:65:ba:37:77:79:56:ba:93:
85:cf:f6:d0:45:97:05:68:8b:6e:41:e6:c7:bb:f0:31:0d:e7:
fe:c9:11:97:1d:a4:55:d5:5c:6f:99:2e:b0:be:d4:61:31:ad:
a7:ac:8e:b9:4f:bb:12:cc:05:c2:8d:c7:a2:28:9f:4d:d6:d4:
d7:65:9d:53:c2:f1:c0:66:ea:86:3b:d7:27:8d:60:9d:29:e3:
16:eb:23:bd:49:63:64:f5:b6:c1:34:50:8b:e3:7b:a1:3f:24:
0a:01:24:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9IJ+4//CTqh6Z0OdzChD6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzY2Njc3MmQ3OWJkN2JiMjExOTlhMmFiZGFmZTIyMDI1
MTFjNzAwHhcNMjUwNDI4MTYwMDEyWhcNMjUwNDI5MTYwMDEyWjAzMTEwLwYDVQQD
EyhjNDFhZTA4OTc5Nzk2MzhhNjljMDU0ZWJlMDI3Y2JjYjhiYjQ2M2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA288IfSZezPHa0kK/pg5XZpSCVeLP
Wkjvf0BE0kT9t2GbUpKcCQRijochDlcPfotMw+Lcgp9vTXhJ4o1msy9Rue+d8aCY
CzOflKFhg6M+ZwRFycahgfjHg2ZluSW3Nn+zpzhbaIyzQxEghkGYZuGIT6pBTZP0
VO+6mlFUWhs1Tob2yh87e1MSQFM0kzOD0dBlmkC0/5IEvF2EVhp8h2XBYVmoGil1
Pbgh9n++Mmwj0eDcR85spYSOm1dsygbWhn3Rh9F/lCoTVadCmu1l7BqPavjOmRsR
4Gnqn/eyWgw3F/YHR9aiu9QqtJOyRLm6hLC/E9TjHlNPWoILnkIrAjaREwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQa4Il5eWOKacBU6+Any8uLtGO9MB8GA1UdIwQY
MBaAFH7GZncteb17shGZoqva/iICURxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNabWR5MTV2WHV5RVptaXE5ci1JZ0pSSEhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hNmQ2NjAtYjFiOC00MjVlLWJiODIt
OTE2NTFkOWI4NTZhLzEvZnNabWR5MTV2WHV5RVptaXE5ci1JZ0pSSEhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9hNmQ2NjAtYjFiOC00MjVlLWJiODItOTE2NTFkOWI4NTZh
LzEvZnNabWR5MTV2WHV5RVptaXE5ci1JZ0pSSEhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADi9eRk5A
QSOq8edmzL/4cxDxbCjbajxtaVPOUU8puk6JzJ+K3m1b2DsFQQ8r8m/WtKCvgP2T
ZFkJh+QM4T+vMcKppMBqVnwpBBHmh7lpmvIErR50Ul/DW0GpMF8ix90hABe9vfYl
047vt8pxuMMOEet1I16zpvNhRJJ6laKAJMxNiY+CWmTflSPmMwzQo+U3lcw9BBOS
MCfxW2W6N3d5VrqThc/20EWXBWiLbkHmx7vwMQ3n/skRlx2kVdVcb5kusL7UYTGt
p6yOuU+7EswFwo3HoiifTdbU12WdU8LxwGbqhjvXJ41gnSnjFusjvUljZPW2wTRQ
i+N7oT8kCgEkCQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:35:46 2025 by rpki-client