Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft
File: 1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft (raw, json)
Hash identifier: AVtVkawL+kD7BI6/xBHx5nLR9ctVQ89ZgNV4vetUsKY=
Subject key identifier: 0F:A8:CB:E8:F4:0A:3E:BE:F3:22:BD:67:54:5C:D4:15:93:EB:E7:D8
Authority key identifier: D6:F2:E1:42:C4:4D:5D:51:BC:7E:42:CA:07:10:F6:B6:4E:F1:10:91
Certificate issuer: /CN=d6f2e142c44d5d51bc7e42ca0710f6b64ef11091
Certificate serial: 019677C3BE44CEBF5D37A7EFB7B20016AF28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 15:00:38 +0000
Manifest this update: Sun 27 Apr 2025 15:00:38 +0000
Manifest next update: Mon 28 Apr 2025 15:00:38 +0000
Files and hashes: 1: 1vLhQsRNXVG8fkLKBxD2tk7xEJE.crl (hash: vMucVBiw64PihhGhmF5hfAa2DUTrOi/afsozhXTjY2E=)
2: LYJYFx2T8LJuRb12iyxKMr93evo.roa (hash: YqeTPnX1EtI+d0+m7mdzwt1Rn2TJyLXd1g7Ztcm9f4Y=)
3: Xj3oVMUCt01u8YFkgqP2XNxNOYc.roa (hash: 6auuGJzllRElAKkh+2dzfD1kSlIMjRra0ICkRJJ17wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:be:44:ce:bf:5d:37:a7:ef:b7:b2:00:16:af:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f2e142c44d5d51bc7e42ca0710f6b64ef11091
Validity
Not Before: Apr 27 15:00:38 2025 GMT
Not After : Apr 28 15:00:38 2025 GMT
Subject: CN=0fa8cbe8f40a3ebef322bd67545cd41593ebe7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5b:b2:29:9e:4b:09:e5:94:a4:83:1c:03:5f:
72:50:04:ba:8e:5d:ea:c2:e7:8e:af:2c:0c:84:92:
ea:6a:95:75:b6:44:a7:a3:dd:4c:5c:13:fe:07:ac:
fa:de:86:c7:02:d7:b1:81:58:fe:3c:2a:4b:4c:bd:
11:f7:18:17:88:78:fa:b5:93:6c:cd:42:ed:5c:1f:
d7:97:1b:08:51:de:a1:ae:07:ef:73:ec:bb:90:16:
38:0d:cf:c1:06:e8:42:c4:af:ab:16:b7:e4:7e:5d:
23:06:0e:0a:30:6f:0a:e6:94:3d:9c:26:dc:80:7e:
70:c6:f6:2a:3b:0b:15:aa:93:84:ed:de:88:d8:e8:
3a:f2:23:40:03:de:76:66:3b:8c:71:d9:9d:8e:28:
1b:6d:11:0c:32:80:dd:f6:26:4a:7b:ab:1e:d3:d4:
92:88:df:b0:81:c4:ed:d6:0c:f1:5d:4e:ef:8c:e2:
01:4a:7e:04:fe:01:9b:7b:cb:37:fe:7f:89:18:f0:
da:9b:b8:40:f8:45:32:cf:91:6c:d6:89:62:2f:ec:
98:eb:ce:54:9e:1b:0c:22:34:cb:6d:ac:36:64:46:
5e:61:42:e3:eb:1b:b0:12:df:15:be:62:86:33:b6:
8a:95:81:07:7f:5b:0f:cb:2d:4f:cd:64:b1:25:06:
6f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A8:CB:E8:F4:0A:3E:BE:F3:22:BD:67:54:5C:D4:15:93:EB:E7:D8
X509v3 Authority Key Identifier:
keyid:D6:F2:E1:42:C4:4D:5D:51:BC:7E:42:CA:07:10:F6:B6:4E:F1:10:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:63:81:88:ca:b8:ac:08:e5:6a:26:bc:e7:79:b9:b1:7e:30:
1e:82:b0:1c:49:d0:84:47:27:72:d7:24:e2:f4:7f:0e:a8:ef:
b1:d6:1b:20:e6:29:2b:61:5a:fe:8d:ae:cf:16:45:13:29:09:
a2:c6:73:74:86:ae:15:6b:ab:1e:b1:19:8d:dc:17:85:00:d4:
b1:1d:f0:cc:c7:5f:73:50:fe:22:ed:c6:4e:21:45:9a:ec:df:
d2:66:1f:d4:cb:05:9a:f7:bd:11:a8:38:6d:8e:16:5f:39:ab:
ad:cb:05:5c:75:73:8f:67:c2:1d:3c:48:5c:2c:74:b7:65:7b:
6b:b3:58:04:1a:ba:55:71:ee:4e:b6:ea:8b:3b:f1:ff:58:bc:
41:2d:bc:b1:0e:88:04:b2:00:04:9e:b9:eb:e1:7a:6a:ce:af:
b5:9e:59:d2:a8:04:a5:35:62:0e:38:b7:31:15:82:9a:c5:91:
38:2c:f5:4f:f8:71:d8:aa:c2:f4:f7:51:e9:a0:9f:eb:e8:90:
eb:cc:4e:79:f4:63:33:79:f8:f8:7e:d5:ad:14:8b:a1:97:fc:
62:8f:15:6f:01:7c:86:20:ff:32:9b:d4:ec:54:cb:6d:60:82:
bb:bf:69:b9:24:d7:19:0d:a6:9b:19:d6:47:ab:e5:2b:fb:0d:
34:e9:24:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3w75Ezr9dN6fvt7IAFq8oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZjJlMTQyYzQ0ZDVkNTFiYzdlNDJjYTA3MTBmNmI2NGVm
MTEwOTEwHhcNMjUwNDI3MTUwMDM4WhcNMjUwNDI4MTUwMDM4WjAzMTEwLwYDVQQD
EygwZmE4Y2JlOGY0MGEzZWJlZjMyMmJkNjc1NDVjZDQxNTkzZWJlN2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFuyKZ5LCeWUpIMcA19yUAS6jl3q
wueOrywMhJLqapV1tkSno91MXBP+B6z63obHAtexgVj+PCpLTL0R9xgXiHj6tZNs
zULtXB/XlxsIUd6hrgfvc+y7kBY4Dc/BBuhCxK+rFrfkfl0jBg4KMG8K5pQ9nCbc
gH5wxvYqOwsVqpOE7d6I2Og68iNAA952ZjuMcdmdjigbbREMMoDd9iZKe6se09SS
iN+wgcTt1gzxXU7vjOIBSn4E/gGbe8s3/n+JGPDam7hA+EUyz5Fs1oliL+yY685U
nhsMIjTLbaw2ZEZeYULj6xuwEt8VvmKGM7aKlYEHf1sPyy1PzWSxJQZvmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+oy+j0Cj6+8yK9Z1Rc1BWT6+fYMB8GA1UdIwQY
MBaAFNby4ULETV1RvH5CygcQ9rZO8RCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZMaFFzUk5YVkc4ZmtMS0J4RDJ0azd4RUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yZTg4MWEtODE0MS00NGEwLThmM2Mt
Y2I3YzllY2M3Nzk4LzEvMXZMaFFzUk5YVkc4ZmtMS0J4RDJ0azd4RUpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8yZTg4MWEtODE0MS00NGEwLThmM2MtY2I3YzllY2M3Nzk4
LzEvMXZMaFFzUk5YVkc4ZmtMS0J4RDJ0azd4RUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGOBiMq4
rAjlaia853m5sX4wHoKwHEnQhEcnctck4vR/DqjvsdYbIOYpK2Fa/o2uzxZFEykJ
osZzdIauFWurHrEZjdwXhQDUsR3wzMdfc1D+Iu3GTiFFmuzf0mYf1MsFmve9Eag4
bY4WXzmrrcsFXHVzj2fCHTxIXCx0t2V7a7NYBBq6VXHuTrbqizvx/1i8QS28sQ6I
BLIABJ656+F6as6vtZ5Z0qgEpTViDji3MRWCmsWROCz1T/hx2KrC9PdR6aCf6+iQ
68xOefRjM3n4+H7VrRSLoZf8Yo8VbwF8hiD/MpvU7FTLbWCCu79puSTXGQ2mmxnW
R6vlK/sNNOkkbw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:11:31 2025 by rpki-client