Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
File: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft (raw, json)
Hash identifier: cdS+153yhOjnxq/jiGi6FrJPOZgaLczmDNaLEIbKB04=
Subject key identifier: FD:12:30:9B:12:F0:A4:24:80:5E:B8:57:52:83:72:C3:CF:32:A3:06
Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
Certificate issuer: /CN=1b68656126198373d07886bf4ab8fb06b9006780
Certificate serial: 019692CD27ABCE68D9D26859345B2E1F9147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
Manifest number: 1520
Signing time: Fri 02 May 2025 21:00:40 +0000
Manifest this update: Fri 02 May 2025 21:00:40 +0000
Manifest next update: Sat 03 May 2025 21:00:40 +0000
Files and hashes: 1: FseoG8adiLo0RLAf1UjvghOTljU.roa (hash: KjYrZHqJ+HstyQr/uUASJXDHhJKgj2NLAuGOtjEwvqg=)
2: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl (hash: MbvyWuZY6zwI0ZQ7djKQ3DGDsB5FjL7ucQlgGUm1Bow=)
3: HZwokTuDHsI8h-fzTOEC6oBOUUI.roa (hash: WM7QJ6OQyLcuKoO0U9leXRvAuei8nXuZdEOZY6w3qXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:92:cd:27:ab:ce:68:d9:d2:68:59:34:5b:2e:1f:91:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780
Validity
Not Before: May 2 21:00:40 2025 GMT
Not After : May 3 21:00:40 2025 GMT
Subject: CN=fd12309b12f0a424805eb857528372c3cf32a306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1a:af:60:86:08:e8:42:59:a6:16:53:48:75:
52:d0:87:0d:f4:9b:1f:3f:58:7d:ef:22:6a:8e:75:
1f:ac:ee:58:e9:50:77:83:d5:c6:a1:4e:02:45:49:
de:8c:5c:5b:46:ab:59:06:d2:9e:7a:d2:29:7a:26:
3c:ea:26:f1:ca:60:8f:b0:3d:7e:6d:77:82:83:48:
58:ee:3b:e0:e7:96:eb:64:37:3b:72:c8:35:f8:fe:
35:06:c3:67:dc:06:60:f1:f7:06:00:20:ea:9d:40:
6d:61:ed:d9:6f:36:aa:57:f0:b9:b2:9a:05:47:89:
08:fb:44:90:ac:13:50:50:6b:31:b8:c1:e0:83:1d:
41:b3:fc:b4:7c:36:a9:cb:54:4f:ae:b3:03:df:4d:
00:cb:b2:00:14:bf:c4:d7:7e:90:c0:6b:90:ae:42:
5c:95:4a:76:ea:d0:96:6b:7d:39:10:5b:28:37:ef:
8e:da:76:d5:ea:29:a2:c8:e9:2c:15:05:56:a3:86:
7b:13:1b:ff:5b:f6:1d:f7:e3:e3:0f:4d:57:67:c0:
b9:7c:3a:4a:4c:18:45:af:a4:bd:f9:64:48:27:6c:
e7:d3:b9:bd:b6:b7:8b:a1:77:83:c0:e1:b8:31:5b:
9c:61:81:5d:20:c6:bc:cf:ab:10:6d:10:46:97:c9:
4c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:12:30:9B:12:F0:A4:24:80:5E:B8:57:52:83:72:C3:CF:32:A3:06
X509v3 Authority Key Identifier:
keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b8:82:c4:4e:cb:8c:9e:57:46:01:ab:4a:81:6b:cc:a2:a3:
b4:2b:3b:c4:4a:61:a4:9b:26:14:30:37:12:9a:68:86:83:9e:
aa:42:4b:16:02:30:12:37:4a:c9:b3:98:d0:e1:2d:b5:25:d7:
45:f8:98:36:f4:0f:ac:0a:72:ad:f8:34:4f:1b:64:f4:80:d1:
27:ae:f0:d4:c5:81:d2:21:93:68:95:be:82:ff:3e:58:c1:f5:
1f:7e:10:46:34:4a:51:5a:f9:7a:bc:e0:31:72:f8:58:e6:7e:
c5:b5:f3:0a:0a:1a:3b:20:0f:95:b9:b3:93:1a:0e:c9:5f:13:
e5:75:d4:45:11:30:8c:29:6c:95:eb:f4:f4:27:e0:0f:30:04:
a5:6f:d6:09:4d:1d:7f:db:d4:f6:6f:4b:6c:7b:78:4e:fc:51:
73:7c:43:7e:66:2d:06:39:85:74:5f:23:bc:d6:5b:e4:8e:2b:
55:5e:24:b8:cf:47:90:c0:15:a1:9f:eb:e9:03:83:b4:dd:53:
eb:47:f0:23:26:e1:1c:76:10:1b:ac:41:3c:ca:b0:ea:84:53:
6e:63:b8:37:54:47:57:42:17:f2:06:29:4d:b7:ea:cd:2a:89:
a0:e4:6c:bc:69:60:3f:4f:b6:47:dc:b8:c0:64:b2:d5:90:c6:
b0:96:2c:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaSzSerzmjZ0mhZNFsuH5FHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNjg2NTYxMjYxOTgzNzNkMDc4ODZiZjRhYjhmYjA2Yjkw
MDY3ODAwHhcNMjUwNTAyMjEwMDQwWhcNMjUwNTAzMjEwMDQwWjAzMTEwLwYDVQQD
EyhmZDEyMzA5YjEyZjBhNDI0ODA1ZWI4NTc1MjgzNzJjM2NmMzJhMzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BqvYIYI6EJZphZTSHVS0IcN9Jsf
P1h97yJqjnUfrO5Y6VB3g9XGoU4CRUnejFxbRqtZBtKeetIpeiY86ibxymCPsD1+
bXeCg0hY7jvg55brZDc7csg1+P41BsNn3AZg8fcGACDqnUBtYe3ZbzaqV/C5spoF
R4kI+0SQrBNQUGsxuMHggx1Bs/y0fDapy1RPrrMD300Ay7IAFL/E136QwGuQrkJc
lUp26tCWa305EFsoN++O2nbV6imiyOksFQVWo4Z7Exv/W/Yd9+PjD01XZ8C5fDpK
TBhFr6S9+WRIJ2zn07m9treLoXeDwOG4MVucYYFdIMa8z6sQbRBGl8lMnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0SMJsS8KQkgF64V1KDcsPPMqMGMB8GA1UdIwQY
MBaAFBtoZWEmGYNz0HiGv0q4+wa5AGeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJobFlTWVpnM1BRZUlhX1NyajdCcmtBWjRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81MzEwMGYtMWJiMy00MjE5LTljODIt
MjM5ODcwNGFiNTBjLzEvRzJobFlTWVpnM1BRZUlhX1NyajdCcmtBWjRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS81MzEwMGYtMWJiMy00MjE5LTljODItMjM5ODcwNGFiNTBj
LzEvRzJobFlTWVpnM1BRZUlhX1NyajdCcmtBWjRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADriCxE7L
jJ5XRgGrSoFrzKKjtCs7xEphpJsmFDA3EppohoOeqkJLFgIwEjdKybOY0OEttSXX
RfiYNvQPrApyrfg0Txtk9IDRJ67w1MWB0iGTaJW+gv8+WMH1H34QRjRKUVr5erzg
MXL4WOZ+xbXzCgoaOyAPlbmzkxoOyV8T5XXURREwjClslev09CfgDzAEpW/WCU0d
f9vU9m9LbHt4TvxRc3xDfmYtBjmFdF8jvNZb5I4rVV4kuM9HkMAVoZ/r6QODtN1T
60fwIybhHHYQG6xBPMqw6oRTbmO4N1RHV0IX8gYpTbfqzSqJoORsvGlgP0+2R9y4
wGSy1ZDGsJYsAQ==
-----END CERTIFICATE-----
Generated at Sat May 3 00:08:51 2025 by rpki-client