Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
File: fiyz0KZBdpx4AcSBYSAVwsyztlU.mft (raw, json)
Hash identifier: 8MFNHiypwJTtMNn7u/1Mu0VowQIGWCLTVepb8S/p4tg=
Subject key identifier: 07:05:B0:9F:72:27:37:CC:11:DB:2C:3C:4D:99:D7:7A:ED:F8:C3:E0
Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
Certificate issuer: /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Certificate serial: 0196729D86CA323108B03EF5CECBDCC78067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
Manifest number: 1511
Signing time: Sat 26 Apr 2025 15:00:48 +0000
Manifest this update: Sat 26 Apr 2025 15:00:48 +0000
Manifest next update: Sun 27 Apr 2025 15:00:48 +0000
Files and hashes: 1: M3Ha07iuSnJt99v-sGLNUx8BBLI.roa (hash: IIpH3NsZ7PItLDv9GEILJ6qdrVTgVESMLfrKLW1hfuA=)
2: RP3f5WWvkrYQJc7jqMUs8Y1XTtU.roa (hash: hk9tzETRgkzSw8scjlpsIlP6fKBNwXAqFAfpPNKquL8=)
3: SinlQ5z34pUrW8vj7b8roBMhucc.roa (hash: l2JuiUg6/TaOO5OR8orwqynZnR5QYj967JWl5ck7FYw=)
4: fiyz0KZBdpx4AcSBYSAVwsyztlU.crl (hash: +zZI2OjQyM5ZqpG+2jmGyPDjkAyNl09SZMgIgSDgXHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:86:ca:32:31:08:b0:3e:f5:ce:cb:dc:c7:80:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Validity
Not Before: Apr 26 15:00:48 2025 GMT
Not After : Apr 27 15:00:48 2025 GMT
Subject: CN=0705b09f722737cc11db2c3c4d99d77aedf8c3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:72:be:ad:58:76:3e:fc:c4:4f:12:0e:a2:51:
0d:a2:ba:0a:f1:a0:c9:90:a1:d8:35:78:e8:ff:a6:
92:0b:01:3c:07:5a:39:d1:ea:df:4f:c0:54:59:e5:
33:dc:d3:0a:76:ba:64:b7:17:05:5f:45:61:2b:af:
e2:2f:cf:74:b5:ee:b1:f2:08:8c:2a:d5:3e:1d:26:
7e:55:b3:99:4e:75:b7:2f:c6:1a:2e:a6:51:a8:18:
22:62:f0:bc:ef:a5:f0:94:26:bd:b9:b2:79:d5:9f:
92:a7:e5:ed:c3:75:17:92:22:f0:b3:dd:76:65:66:
2d:67:32:60:f3:29:ed:e7:0e:3b:03:a4:bb:04:37:
91:62:3e:34:1e:6d:4a:45:cb:52:c6:eb:aa:be:8d:
17:73:69:9e:7a:8f:eb:47:b9:12:78:be:51:a5:4b:
a9:bf:72:95:e3:7e:62:9e:f4:46:dd:21:57:b0:e3:
be:4e:44:42:86:10:59:7e:aa:33:bb:ad:30:82:08:
1c:5d:e3:6e:15:dd:8a:98:f8:70:99:8b:59:bb:81:
b5:09:9e:2a:5c:34:26:c4:ad:2c:1b:e2:39:35:74:
49:56:51:03:db:b4:68:4c:5e:90:59:20:7c:73:f4:
bd:b7:43:33:68:35:44:b4:e2:73:e3:96:77:99:df:
aa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:05:B0:9F:72:27:37:CC:11:DB:2C:3C:4D:99:D7:7A:ED:F8:C3:E0
X509v3 Authority Key Identifier:
keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f5:d4:9c:51:16:e2:1f:48:92:b5:d1:7a:a2:6b:95:03:20:
d6:20:fa:9f:51:75:08:1d:87:31:db:6f:1f:72:58:1d:e4:9f:
50:4e:f0:e9:05:10:a2:59:c3:e1:07:66:0a:ce:f4:69:2c:18:
31:fd:5a:cb:43:ee:a8:d3:f9:f6:fc:56:4c:9e:3c:67:3f:21:
98:55:a2:ca:32:0a:86:70:65:b7:bb:61:03:8e:03:8d:12:04:
53:9e:b6:94:3e:40:4a:87:13:45:62:35:7b:21:4b:1f:37:26:
19:56:02:37:b6:43:f3:c0:1f:46:50:f6:bb:a9:02:66:a0:02:
b4:18:2a:04:15:11:0f:1d:27:bd:c8:e9:54:5a:8d:7f:5a:2c:
85:65:f7:ad:bc:3d:46:3a:ac:b0:bb:22:36:40:86:cc:c1:da:
b7:fc:6e:8b:d6:bb:3e:84:a7:8e:b6:ad:48:6d:c6:76:a8:a7:
6e:a5:1e:2f:e9:7a:56:04:3b:0b:53:f1:ee:5c:98:2b:f2:83:
02:65:5c:c4:9d:29:54:1f:70:69:a9:03:b4:51:78:66:fb:5a:
4c:64:ea:50:94:0e:c0:7a:ef:7a:3d:90:8c:b7:3a:53:64:37:
f8:f0:f4:35:9b:69:c5:04:45:0c:a9:f3:24:a2:11:7e:92:10:
a3:a7:ca:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZynYbKMjEIsD71zsvcx4BnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMmNiM2QwYTY0MTc2OWM3ODAxYzQ4MTYxMjAxNWMyY2Ni
M2I2NTUwHhcNMjUwNDI2MTUwMDQ4WhcNMjUwNDI3MTUwMDQ4WjAzMTEwLwYDVQQD
EygwNzA1YjA5ZjcyMjczN2NjMTFkYjJjM2M0ZDk5ZDc3YWVkZjhjM2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHK+rVh2PvzETxIOolENoroK8aDJ
kKHYNXjo/6aSCwE8B1o50erfT8BUWeUz3NMKdrpktxcFX0VhK6/iL890te6x8giM
KtU+HSZ+VbOZTnW3L8YaLqZRqBgiYvC876XwlCa9ubJ51Z+Sp+Xtw3UXkiLws912
ZWYtZzJg8ynt5w47A6S7BDeRYj40Hm1KRctSxuuqvo0Xc2meeo/rR7kSeL5RpUup
v3KV435invRG3SFXsOO+TkRChhBZfqozu60wgggcXeNuFd2KmPhwmYtZu4G1CZ4q
XDQmxK0sG+I5NXRJVlED27RoTF6QWSB8c/S9t0MzaDVEtOJz45Z3md+qmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcFsJ9yJzfMEdssPE2Z13rt+MPgMB8GA1UdIwQY
MBaAFH4ss9CmQXaceAHEgWEgFcLMs7ZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZml5ejBLWkJkcHg0QWNTQllTQVZ3c3l6dGxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80MzFkZjEtMDlmNC00NzVjLWEwNDUt
ZjViYjI4NDNjODllLzEvZml5ejBLWkJkcHg0QWNTQllTQVZ3c3l6dGxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80MzFkZjEtMDlmNC00NzVjLWEwNDUtZjViYjI4NDNjODll
LzEvZml5ejBLWkJkcHg0QWNTQllTQVZ3c3l6dGxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmvXUnFEW
4h9IkrXReqJrlQMg1iD6n1F1CB2HMdtvH3JYHeSfUE7w6QUQolnD4QdmCs70aSwY
Mf1ay0PuqNP59vxWTJ48Zz8hmFWiyjIKhnBlt7thA44DjRIEU562lD5ASocTRWI1
eyFLHzcmGVYCN7ZD88AfRlD2u6kCZqACtBgqBBURDx0nvcjpVFqNf1oshWX3rbw9
RjqssLsiNkCGzMHat/xui9a7PoSnjratSG3GdqinbqUeL+l6VgQ7C1Px7lyYK/KD
AmVcxJ0pVB9waakDtFF4ZvtaTGTqUJQOwHrvej2QjLc6U2Q3+PD0NZtpxQRFDKnz
JKIRfpIQo6fKuw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:27:56 2025 by rpki-client