Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
File: 1-_zUUVtJMDkhZ1jec45PGujjIkw.mft (raw, json)
Hash identifier: lOvUCibXhIYJSrTA8vf5OA0vE8FLS6HknsGHMSvyWq0=
Subject key identifier: 22:80:C6:6C:29:15:DB:B5:8A:E1:BB:35:DE:CF:DC:38:DF:5E:C6:49
Authority key identifier: FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
Certificate issuer: /CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Certificate serial: 01967A20272F6EB8A726BBBD4A489A1702C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
Manifest number: 0F33
Signing time: Mon 28 Apr 2025 02:00:49 +0000
Manifest this update: Mon 28 Apr 2025 02:00:49 +0000
Manifest next update: Tue 29 Apr 2025 02:00:49 +0000
Files and hashes: 1: 1-_zUUVtJMDkhZ1jec45PGujjIkw.crl (hash: 9lhfY1n+AmXk42SyWi0aw3vTQ2o9ybQOAiRxTV7cMtU=)
2: eWonEOCqO1vviTWWC4HukImo8zA.roa (hash: sMT1P9/4Uirj38sOSO6BfhAmJiAf2rmN1xaNoG1qFVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:20:27:2f:6e:b8:a7:26:bb:bd:4a:48:9a:17:02:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Validity
Not Before: Apr 28 02:00:49 2025 GMT
Not After : Apr 29 02:00:49 2025 GMT
Subject: CN=2280c66c2915dbb58ae1bb35decfdc38df5ec649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:12:e3:41:9f:22:c8:e4:b8:b5:b1:8a:04:
b7:7b:a6:7c:29:30:57:6e:63:59:0b:86:de:ab:06:
18:ed:98:38:43:c2:f5:9f:a0:e6:33:a7:bb:5c:7f:
2a:86:a0:82:fd:23:21:5d:55:63:72:fb:c8:8e:4b:
ce:7d:26:59:40:70:00:19:56:8f:df:7c:18:52:dc:
0c:8d:e6:4c:d5:20:95:38:6b:4f:7a:df:78:0b:5d:
50:30:3c:50:9b:19:dd:d8:70:d3:18:84:18:aa:5e:
f1:52:aa:eb:1a:67:35:63:d1:6b:10:ec:0b:05:33:
4d:e1:84:8a:0e:d3:65:6b:93:af:62:17:50:0e:66:
6a:1c:1f:a5:0e:24:73:f3:a3:7b:09:77:c2:f1:5f:
7d:57:ea:0a:90:31:43:3a:47:07:17:60:80:5c:26:
70:92:68:00:c9:00:9d:90:2d:9f:9b:99:7e:f8:d3:
15:64:87:e3:27:4b:f2:5d:00:81:31:6d:d5:52:d4:
05:33:eb:01:c9:e2:6d:80:fe:85:13:d2:0c:0c:ea:
c9:c4:b3:4f:13:ef:0e:c4:03:6a:47:93:ae:01:eb:
bd:83:1b:e7:03:ac:ca:3e:1e:37:c7:b7:cd:63:47:
47:6b:d3:7a:b8:42:b0:6a:61:1f:f6:ea:cb:45:15:
28:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:80:C6:6C:29:15:DB:B5:8A:E1:BB:35:DE:CF:DC:38:DF:5E:C6:49
X509v3 Authority Key Identifier:
keyid:FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:77:ee:32:b2:31:3b:91:f4:f7:bf:34:c7:6e:56:44:11:3d:
12:63:3d:b9:d1:1d:75:d5:5e:25:20:51:a3:a7:26:8d:34:56:
82:c7:c5:be:f1:e0:5a:dc:45:ae:e2:9c:df:43:0e:e1:47:ff:
c9:c1:a6:f9:f8:6c:07:ef:2b:89:82:cc:56:63:05:4c:77:ed:
80:fc:56:7f:62:00:f6:2a:86:3f:41:b1:92:8c:09:eb:09:c9:
57:2f:97:41:9d:99:fd:51:32:aa:95:50:39:a3:aa:f3:40:7a:
80:64:ef:aa:68:6f:19:1f:ca:4f:f8:b0:c2:83:bc:50:a3:e0:
3a:42:c0:79:1f:92:0a:e0:ea:01:da:35:ce:46:cb:04:50:9e:
2a:1c:1d:98:17:71:91:ae:c4:0a:b1:65:9f:3a:66:c8:ac:e2:
eb:3e:fe:c3:ef:cc:46:b6:bc:b5:5a:94:73:51:c8:dc:67:f6:
48:d8:42:09:eb:11:0c:f8:ef:b9:a3:db:a5:e7:f3:19:2a:4e:
3c:6f:3f:f7:9c:dd:e5:a5:62:4f:c2:48:c5:3b:9c:d4:49:75:
96:f6:57:e0:4f:36:7d:a8:29:8f:99:ce:ab:f8:a6:1e:5d:7e:
82:92:c8:c0:db:49:ce:a4:79:26:be:ee:9a:c2:41:d4:e0:72:
36:4f:89:40
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZ6ICcvbrinJru9SkiaFwLHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZmNkNDUxNWI0OTMwMzkyMTY3NThkZTczOGU0ZjFhZThl
MzIyNGMwHhcNMjUwNDI4MDIwMDQ5WhcNMjUwNDI5MDIwMDQ5WjAzMTEwLwYDVQQD
EygyMjgwYzY2YzI5MTVkYmI1OGFlMWJiMzVkZWNmZGMzOGRmNWVjNjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0gS40GfIsjkuLWxigS3e6Z8KTBX
bmNZC4beqwYY7Zg4Q8L1n6DmM6e7XH8qhqCC/SMhXVVjcvvIjkvOfSZZQHAAGVaP
33wYUtwMjeZM1SCVOGtPet94C11QMDxQmxnd2HDTGIQYql7xUqrrGmc1Y9FrEOwL
BTNN4YSKDtNla5OvYhdQDmZqHB+lDiRz86N7CXfC8V99V+oKkDFDOkcHF2CAXCZw
kmgAyQCdkC2fm5l++NMVZIfjJ0vyXQCBMW3VUtQFM+sByeJtgP6FE9IMDOrJxLNP
E+8OxANqR5OuAeu9gxvnA6zKPh43x7fNY0dHa9N6uEKwamEf9urLRRUo1wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCKAxmwpFdu1iuG7Nd7P3DjfXsZJMB8GA1UdIwQY
MBaAFPv81FFbSTA5IWdY3nOOTxro4yJMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1felVVVnRKTURraFoxamVjNDVQR3Vqaklrdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvZDY0ODZhLThmZjctNDI2Zi04ZDg2
LTA5OGQwNGNlNTFiMi8xLzEtX3pVVVZ0Sk1Ea2haMWplYzQ1UEd1ampJa3cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY4L2Q2NDg2YS04ZmY3LTQyNmYtOGQ4Ni0wOThkMDRjZTUx
YjIvMS8xLV96VVVWdEpNRGtoWjFqZWM0NVBHdWpqSWt3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3fu
MrIxO5H09780x25WRBE9EmM9udEdddVeJSBRo6cmjTRWgsfFvvHgWtxFruKc30MO
4Uf/ycGm+fhsB+8riYLMVmMFTHftgPxWf2IA9iqGP0GxkowJ6wnJVy+XQZ2Z/VEy
qpVQOaOq80B6gGTvqmhvGR/KT/iwwoO8UKPgOkLAeR+SCuDqAdo1zkbLBFCeKhwd
mBdxka7ECrFlnzpmyKzi6z7+w+/MRra8tVqUc1HI3Gf2SNhCCesRDPjvuaPbpefz
GSpOPG8/95zd5aViT8JIxTuc1El1lvZX4E82fagpj5nOq/imHl1+gpLIwNtJzqR5
Jr7umsJB1OByNk+JQA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:02:07 2025 by rpki-client