Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
File: fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft (raw, json)
Hash identifier: mN5HOoRmfEJAfj9H09saiQR+QtcOjZ25rUkgtkhhDv0=
Subject key identifier: BC:15:74:93:8E:20:C6:4C:F8:28:A5:7D:74:84:9C:C3:D4:DA:02:4B
Authority key identifier: 7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC
Certificate issuer: /CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
Certificate serial: 0196741E0331ED79D5C6B2ABA4E9478C7BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
Manifest number: 05E7
Signing time: Sat 26 Apr 2025 22:00:45 +0000
Manifest this update: Sat 26 Apr 2025 22:00:45 +0000
Manifest next update: Sun 27 Apr 2025 22:00:45 +0000
Files and hashes: 1: Jd1eIDGJl1QDh5fslVgvr-P3ab4.roa (hash: 9NueyDXROvnNhsWjg24Z8AlYJzokwM8j1MgR7VDXl1s=)
2: fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl (hash: +ZkOSgz6hk9wNq27bgxYm9uYxFum4EEtb0v6TLF/N8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:03:31:ed:79:d5:c6:b2:ab:a4:e9:47:8c:7b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
Validity
Not Before: Apr 26 22:00:45 2025 GMT
Not After : Apr 27 22:00:45 2025 GMT
Subject: CN=bc1574938e20c64cf828a57d74849cc3d4da024b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:23:c4:c0:fd:95:1f:32:79:84:88:50:24:0d:
c3:b9:1f:89:15:c2:1f:99:a1:46:91:81:f4:80:36:
8c:0c:c0:96:49:76:9a:cd:77:53:6c:9f:3e:48:34:
02:14:58:b3:31:32:51:09:c4:ae:f8:f0:a8:c6:6c:
1a:c3:b1:cc:72:b5:fb:ec:94:6a:a3:fe:de:0f:e9:
83:e9:f6:3b:6e:4e:25:95:66:13:9e:8d:96:cd:01:
e7:c1:47:da:6a:67:12:8f:12:0e:68:a2:a7:92:2f:
00:dc:71:aa:88:55:4b:40:a5:87:b7:7e:92:76:0b:
f2:54:e4:f0:01:6f:c4:d3:a7:ca:7b:d7:46:43:0d:
22:74:2e:13:af:35:26:37:fe:86:53:73:7f:23:a9:
8b:89:42:86:8d:2c:32:64:bc:b8:f4:3e:39:98:44:
53:1f:6b:1b:0e:69:65:57:e7:48:b9:a1:b7:23:7a:
ec:81:b2:08:12:16:58:25:ca:cc:03:89:d1:0e:60:
45:6f:12:23:c8:25:8f:ab:6b:3b:d1:fb:a2:d3:62:
04:d2:ae:0b:3a:28:86:10:32:d0:d9:b3:9a:e0:fa:
2a:d3:ea:d7:14:48:fb:fc:9f:76:6f:d7:27:45:82:
7c:41:3e:00:26:37:0c:02:65:28:2e:02:b9:4f:32:
2c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:15:74:93:8E:20:C6:4C:F8:28:A5:7D:74:84:9C:C3:D4:DA:02:4B
X509v3 Authority Key Identifier:
keyid:7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e5:b9:a2:a2:88:5c:c4:ed:04:6f:7f:9a:31:0b:58:2b:2c:
26:7a:ed:f0:91:a8:f2:1a:6e:9f:58:34:03:dc:c2:1f:f0:be:
47:39:2f:fd:2b:6d:49:a9:4d:77:80:38:90:ed:00:18:a5:b1:
19:83:ea:e6:dc:58:74:73:ed:19:f7:95:c8:c0:8b:d9:fd:b2:
0c:47:fc:2f:7f:0b:2b:51:e0:15:93:32:6a:fc:79:8a:59:6c:
a4:96:85:fc:34:1a:11:48:cf:fd:f5:31:77:77:4e:b7:70:dc:
b2:1f:54:b5:dd:01:94:30:02:a7:50:11:d0:9a:19:cf:fc:47:
7c:0a:3e:06:c9:4d:68:b6:b7:da:da:ef:16:56:05:10:a7:e1:
3d:17:f1:66:76:fa:e2:c6:31:dd:a7:11:98:b0:27:f1:44:4e:
95:ce:49:6d:b5:85:89:19:68:86:f1:36:f5:04:2c:ab:d2:4f:
4b:81:56:11:0f:f0:68:32:c4:ef:df:fd:8e:23:a6:f8:eb:87:
82:5f:4e:44:57:65:de:96:45:d3:80:7b:52:c5:56:65:aa:f1:
72:15:c4:0a:20:26:5d:e8:95:8e:5f:d4:e1:58:19:9f:c8:13:
8c:a4:7b:14:3b:ff:b0:80:ed:ab:8f:ef:9b:22:ae:cf:0c:6d:
53:8a:2c:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0HgMx7XnVxrKrpOlHjHvJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMzc4ZDVlOWY2ZTIyODMyZjk0MzZkZTQyYTAwMDAzYTM1
ZTVhZGMwHhcNMjUwNDI2MjIwMDQ1WhcNMjUwNDI3MjIwMDQ1WjAzMTEwLwYDVQQD
EyhiYzE1NzQ5MzhlMjBjNjRjZjgyOGE1N2Q3NDg0OWNjM2Q0ZGEwMjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SPEwP2VHzJ5hIhQJA3DuR+JFcIf
maFGkYH0gDaMDMCWSXaazXdTbJ8+SDQCFFizMTJRCcSu+PCoxmwaw7HMcrX77JRq
o/7eD+mD6fY7bk4llWYTno2WzQHnwUfaamcSjxIOaKKnki8A3HGqiFVLQKWHt36S
dgvyVOTwAW/E06fKe9dGQw0idC4TrzUmN/6GU3N/I6mLiUKGjSwyZLy49D45mERT
H2sbDmllV+dIuaG3I3rsgbIIEhZYJcrMA4nRDmBFbxIjyCWPq2s70fui02IE0q4L
OiiGEDLQ2bOa4Poq0+rXFEj7/J92b9cnRYJ8QT4AJjcMAmUoLgK5TzIslwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwVdJOOIMZM+CilfXSEnMPU2gJLMB8GA1UdIwQY
MBaAFH03jV6fbiKDL5Q23kKgAAOjXlrcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlRlTlhwOXVJb012bERiZVFxQUFBNk5lV3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy80YjVjNTgtNWU4ZS00Yzk3LWI3YzAt
NjQwODlmMjI4MjZiLzEvZlRlTlhwOXVJb012bERiZVFxQUFBNk5lV3R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy80YjVjNTgtNWU4ZS00Yzk3LWI3YzAtNjQwODlmMjI4MjZi
LzEvZlRlTlhwOXVJb012bERiZVFxQUFBNk5lV3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQuW5oqKI
XMTtBG9/mjELWCssJnrt8JGo8hpun1g0A9zCH/C+Rzkv/SttSalNd4A4kO0AGKWx
GYPq5txYdHPtGfeVyMCL2f2yDEf8L38LK1HgFZMyavx5illspJaF/DQaEUjP/fUx
d3dOt3Dcsh9Utd0BlDACp1AR0JoZz/xHfAo+BslNaLa32trvFlYFEKfhPRfxZnb6
4sYx3acRmLAn8UROlc5JbbWFiRlohvE29QQsq9JPS4FWEQ/waDLE79/9jiOm+OuH
gl9ORFdl3pZF04B7UsVWZarxchXECiAmXeiVjl/U4VgZn8gTjKR7FDv/sIDtq4/v
myKuzwxtU4oslg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:17:02 2025 by rpki-client