Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json)
Hash identifier: mDIQdD71zrqxG2gfeCGFUzjn1XHUO3TjxtdNFiYWcB4=
Subject key identifier: D6:F4:3D:96:30:17:60:43:5F:6C:35:8F:00:88:FB:AF:E6:6E:B9:7E
Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Certificate serial: 0196846CAEF2E943992211A7C16FF91EFA69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
Manifest number: 151D
Signing time: Wed 30 Apr 2025 02:00:37 +0000
Manifest this update: Wed 30 Apr 2025 02:00:37 +0000
Manifest next update: Thu 01 May 2025 02:00:37 +0000
Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: ukrne3xr1X6jkLwgx4pYFOwU0+Jm9qVnRTRXssBsyNU=)
2: Om_TmuMO8XG3pBM8gxAFde2dWMw.roa (hash: FbjCGDaIAC98JtiXhpiG2iZAAlR6dEBdv+iVw78RCUo=)
3: VZwnOlrac1s2Zb9Y96cCEjN1ihI.roa (hash: VbMoQoBhuySW3f8b4z7vMMYAoL+G6xfxVZmjVv4iceM=)
4: pY1evXi7L-RhS1kANnlGqZjoa4g.roa (hash: MHMoXswoxGYwux8eQ8dSbb24gK19/XF6bugh3G8kZT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:ae:f2:e9:43:99:22:11:a7:c1:6f:f9:1e:fa:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Validity
Not Before: Apr 30 02:00:37 2025 GMT
Not After : May 1 02:00:37 2025 GMT
Subject: CN=d6f43d96301760435f6c358f0088fbafe66eb97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:58:ea:d4:88:4f:75:1f:64:62:7d:2a:27:
87:e9:03:42:7e:52:45:12:42:6c:1b:70:25:f8:cf:
2b:18:05:95:85:41:90:68:8b:50:94:7b:fa:62:75:
a2:c0:35:51:8d:8f:d0:06:39:f4:c0:26:fd:be:6d:
21:e8:8d:08:16:b6:1f:0c:8b:19:4c:e4:59:3b:6b:
4a:22:06:bc:44:8d:e6:72:b8:ca:ef:24:8b:3c:66:
ab:2a:3f:17:4c:8a:d0:25:14:77:0e:7d:63:aa:59:
6b:11:30:1a:18:e3:4b:96:21:78:91:c9:85:9d:ad:
d0:30:7b:0d:93:8b:ec:c6:a5:ef:08:74:02:ff:a7:
ec:d4:5f:e5:4a:2f:4e:4b:ef:a1:d8:61:01:56:b1:
ae:98:76:7a:e9:68:fc:15:e3:3c:91:37:02:e1:cf:
aa:91:72:de:34:ac:30:9c:74:0a:d1:e9:e1:35:80:
b9:e2:ea:c3:d5:32:ef:af:18:8f:4b:87:8f:8a:85:
f0:08:83:e5:7e:1b:d3:50:d7:ab:14:bd:a5:39:63:
6b:6d:68:50:e0:95:91:0d:44:b1:5a:f5:77:74:f0:
cd:eb:a1:ba:4f:cf:40:6e:22:e0:ee:3b:f1:f1:ff:
47:0e:c9:0a:71:1b:57:9b:45:59:50:2d:5f:f2:bf:
15:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F4:3D:96:30:17:60:43:5F:6C:35:8F:00:88:FB:AF:E6:6E:B9:7E
X509v3 Authority Key Identifier:
keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:db:8d:94:c2:b2:fb:6e:2e:2a:94:4a:1f:8e:e8:c1:f0:59:
01:71:7a:bb:82:8b:b0:83:9b:ca:55:55:b8:22:21:f8:32:e1:
7d:85:36:92:de:c5:e9:b3:e2:7a:c0:68:8a:dd:3d:8e:56:12:
b1:88:75:5c:89:c1:83:d8:a2:67:ab:39:95:4e:4a:60:4c:86:
f0:59:38:48:87:b7:2f:02:c8:f8:b9:5a:b5:b4:4c:4e:31:b6:
ba:38:df:01:f0:7a:2d:f7:02:59:f7:d7:35:c6:fa:2e:1a:34:
d2:ce:40:f2:4f:67:bd:75:bc:f7:e1:7a:f8:3e:d9:9d:21:87:
1f:85:9b:38:2f:53:df:7b:d8:4c:7a:25:6f:08:c3:e2:8a:90:
4f:ef:fb:a5:1a:aa:ae:48:ff:5e:46:19:e4:f4:42:ae:b2:a9:
2d:45:fc:f1:16:d3:cb:1c:a1:04:e1:b4:0f:16:27:81:d4:64:
47:74:29:5e:51:86:43:49:91:30:f0:6c:ca:ec:6c:39:5d:cf:
4a:13:5e:bb:99:0c:a0:5f:45:66:94:61:aa:4f:ab:21:51:6c:
bd:fe:81:7e:71:1f:88:d8:8e:21:2f:b0:78:86:56:a5:38:53:
b1:ec:e2:15:96:8f:68:50:c7:d4:3d:29:30:31:22:17:c9:56:
eb:e7:57:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaEbK7y6UOZIhGnwW/5HvppMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZjdmMTZiMDVhMTEyMzE1MWE2NzdhNDdhYzJkOGQ5MDYx
ZGYzOTAwHhcNMjUwNDMwMDIwMDM3WhcNMjUwNTAxMDIwMDM3WjAzMTEwLwYDVQQD
EyhkNmY0M2Q5NjMwMTc2MDQzNWY2YzM1OGYwMDg4ZmJhZmU2NmViOTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz5Y6tSIT3UfZGJ9KieH6QNCflJF
EkJsG3Al+M8rGAWVhUGQaItQlHv6YnWiwDVRjY/QBjn0wCb9vm0h6I0IFrYfDIsZ
TORZO2tKIga8RI3mcrjK7ySLPGarKj8XTIrQJRR3Dn1jqllrETAaGONLliF4kcmF
na3QMHsNk4vsxqXvCHQC/6fs1F/lSi9OS++h2GEBVrGumHZ66Wj8FeM8kTcC4c+q
kXLeNKwwnHQK0enhNYC54urD1TLvrxiPS4ePioXwCIPlfhvTUNerFL2lOWNrbWhQ
4JWRDUSxWvV3dPDN66G6T89AbiLg7jvx8f9HDskKcRtXm0VZUC1f8r8V4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNb0PZYwF2BDX2w1jwCI+6/mbrl+MB8GA1UdIwQY
MBaAFNf38WsFoRIxUaZ3pHrC2NkGHfOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYt
NmNiZTk0OTUzMmU0LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYtNmNiZTk0OTUzMmU0
LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtuNlMKy
+24uKpRKH47owfBZAXF6u4KLsIObylVVuCIh+DLhfYU2kt7F6bPiesBoit09jlYS
sYh1XInBg9iiZ6s5lU5KYEyG8Fk4SIe3LwLI+LlatbRMTjG2ujjfAfB6LfcCWffX
Ncb6Lho00s5A8k9nvXW89+F6+D7ZnSGHH4WbOC9T33vYTHolbwjD4oqQT+/7pRqq
rkj/XkYZ5PRCrrKpLUX88RbTyxyhBOG0DxYngdRkR3QpXlGGQ0mRMPBsyuxsOV3P
ShNeu5kMoF9FZpRhqk+rIVFsvf6BfnEfiNiOIS+weIZWpThTseziFZaPaFDH1D0p
MDEiF8lW6+dXPg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 11:56:46 2025 by rpki-client