Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.mft
File: f_dNq9TrGqEUcUThWwJmnpgv3k0.mft (raw, json)
Hash identifier: S63xmGJGex1YC/95xQCa3W+Jn8rlvJ6bRrX3XQXJ+MQ=
Subject key identifier: AF:70:31:12:C0:43:3A:BC:B3:CF:0F:81:93:71:75:08:F0:02:01:22
Authority key identifier: 7F:F7:4D:AB:D4:EB:1A:A1:14:71:44:E1:5B:02:66:9E:98:2F:DE:4D
Certificate issuer: /CN=7ff74dabd4eb1aa1147144e15b02669e982fde4d
Certificate serial: 019683C7EDF1EB57092554AD3F292218E277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_dNq9TrGqEUcUThWwJmnpgv3k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.mft
Manifest number: 04C1
Signing time: Tue 29 Apr 2025 23:00:39 +0000
Manifest this update: Tue 29 Apr 2025 23:00:39 +0000
Manifest next update: Wed 30 Apr 2025 23:00:39 +0000
Files and hashes: 1: 2MgYI85TPEBCwm2elQTNgUHdzmQ.roa (hash: YR8wZ7h+NpjeTm3CMSeXFipDMaRQTBJNPwjk/7JOMyM=)
2: f_dNq9TrGqEUcUThWwJmnpgv3k0.crl (hash: a9bgKDEz+pH1lPeX/BdG/ktEf+949zcxxKPkaQUOnQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_dNq9TrGqEUcUThWwJmnpgv3k0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:ed:f1:eb:57:09:25:54:ad:3f:29:22:18:e2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff74dabd4eb1aa1147144e15b02669e982fde4d
Validity
Not Before: Apr 29 23:00:39 2025 GMT
Not After : Apr 30 23:00:39 2025 GMT
Subject: CN=af703112c0433abcb3cf0f8193717508f0020122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:48:35:dc:a3:80:b3:77:ca:4a:47:69:a9:
a5:df:c3:22:64:1e:b4:1b:51:a1:8e:fe:81:a3:48:
ee:13:93:10:de:b4:e4:42:32:b0:79:79:04:66:5d:
12:4c:a1:cf:2a:b4:6e:61:be:53:1a:87:52:96:e6:
c8:d1:fe:b5:ed:90:2e:b3:cf:ca:08:3b:9a:34:e7:
a1:91:79:3b:23:43:d8:b5:a9:35:6e:9a:4f:83:79:
88:97:b7:6e:79:61:29:14:c4:fd:4e:44:97:97:ac:
e1:f5:de:6d:d0:72:4b:c8:00:4a:29:e0:64:26:f1:
67:f2:b4:d6:7c:46:4c:99:e4:7d:69:76:9e:b6:49:
a9:ee:37:66:d4:57:17:5d:20:d1:97:0b:e3:ae:d4:
90:5b:b6:63:d8:03:39:dc:a9:2d:94:e4:07:6b:cf:
a2:35:1d:f5:2d:51:3c:a5:87:3d:8f:5b:17:4d:ff:
74:8c:c0:fa:c1:27:c4:ca:43:c7:97:52:02:8b:e2:
c3:9b:2a:94:f1:89:07:c6:4b:09:f1:42:b7:2e:38:
7e:4f:7b:2b:c9:7d:7a:bd:c8:f8:f1:db:4c:a4:69:
cf:b8:3b:5c:d9:b8:8a:c5:ad:d5:4b:d3:ad:8c:89:
07:3b:f6:99:41:1d:ca:79:bc:4c:22:ca:e5:b0:3b:
e3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:70:31:12:C0:43:3A:BC:B3:CF:0F:81:93:71:75:08:F0:02:01:22
X509v3 Authority Key Identifier:
keyid:7F:F7:4D:AB:D4:EB:1A:A1:14:71:44:E1:5B:02:66:9E:98:2F:DE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_dNq9TrGqEUcUThWwJmnpgv3k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:36:b2:60:0f:25:32:9d:87:e9:f1:c5:4f:ee:de:b7:59:35:
97:1c:cd:37:0e:3c:8a:60:d8:1a:45:3d:31:84:d1:07:60:72:
0b:60:fe:ef:9a:aa:17:83:1a:16:d2:56:f1:ee:67:b0:bd:52:
dd:73:cc:f4:40:71:92:60:31:b9:34:48:0f:99:7f:3a:24:5a:
7b:a3:f0:5c:cf:68:9d:8a:8f:9a:77:60:71:15:ef:1f:79:90:
b8:0c:73:76:57:c5:f4:a0:82:e1:c4:b6:15:cd:46:90:8c:1b:
37:b0:d0:39:56:fa:24:17:1d:e7:e5:71:10:99:7a:0c:dc:80:
44:69:22:51:67:f3:07:38:ae:6c:a8:cf:0c:43:2d:92:99:0b:
14:86:70:6b:ed:f9:34:17:45:fd:47:86:76:9c:b6:cf:92:86:
54:2e:30:3e:00:04:80:3a:01:6c:bc:76:74:ec:64:5d:62:99:
82:47:d8:bb:ef:e3:79:36:f6:18:8f:17:88:9b:3d:b4:7a:50:
11:86:34:32:0f:a6:e0:08:e0:47:04:61:2f:04:90:61:84:8f:
d7:e6:b6:eb:49:ff:c1:1f:61:3c:c9:bd:9c:b5:1c:77:76:0a:
8d:33:a6:4d:6c:93:5d:13:02:b4:9f:d6:45:50:7c:d1:9a:fb:
28:5e:7e:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDx+3x61cJJVStPykiGOJ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZjc0ZGFiZDRlYjFhYTExNDcxNDRlMTViMDI2NjllOTgy
ZmRlNGQwHhcNMjUwNDI5MjMwMDM5WhcNMjUwNDMwMjMwMDM5WjAzMTEwLwYDVQQD
EyhhZjcwMzExMmMwNDMzYWJjYjNjZjBmODE5MzcxNzUwOGYwMDIwMTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB9INdyjgLN3ykpHaaml38MiZB60
G1Ghjv6Bo0juE5MQ3rTkQjKweXkEZl0STKHPKrRuYb5TGodSlubI0f617ZAus8/K
CDuaNOehkXk7I0PYtak1bppPg3mIl7dueWEpFMT9TkSXl6zh9d5t0HJLyABKKeBk
JvFn8rTWfEZMmeR9aXaetkmp7jdm1FcXXSDRlwvjrtSQW7Zj2AM53KktlOQHa8+i
NR31LVE8pYc9j1sXTf90jMD6wSfEykPHl1ICi+LDmyqU8YkHxksJ8UK3Ljh+T3sr
yX16vcj48dtMpGnPuDtc2biKxa3VS9OtjIkHO/aZQR3KebxMIsrlsDvjvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9wMRLAQzq8s88PgZNxdQjwAgEiMB8GA1UdIwQY
MBaAFH/3TavU6xqhFHFE4VsCZp6YL95NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZl9kTnE5VHJHcUVVY1VUaFd3Sm1ucGd2M2swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wZmJiZjUtYzgzZC00Yjk3LTljZWEt
MDU1YzQ5YWM2ODI4LzEvZl9kTnE5VHJHcUVVY1VUaFd3Sm1ucGd2M2swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8wZmJiZjUtYzgzZC00Yjk3LTljZWEtMDU1YzQ5YWM2ODI4
LzEvZl9kTnE5VHJHcUVVY1VUaFd3Sm1ucGd2M2swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqzayYA8l
Mp2H6fHFT+7et1k1lxzNNw48imDYGkU9MYTRB2ByC2D+75qqF4MaFtJW8e5nsL1S
3XPM9EBxkmAxuTRID5l/OiRae6PwXM9onYqPmndgcRXvH3mQuAxzdlfF9KCC4cS2
Fc1GkIwbN7DQOVb6JBcd5+VxEJl6DNyARGkiUWfzBziubKjPDEMtkpkLFIZwa+35
NBdF/UeGdpy2z5KGVC4wPgAEgDoBbLx2dOxkXWKZgkfYu+/jeTb2GI8XiJs9tHpQ
EYY0Mg+m4AjgRwRhLwSQYYSP1+a260n/wR9hPMm9nLUcd3YKjTOmTWyTXRMCtJ/W
RVB80Zr7KF5+tQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:32:14 2025 by rpki-client