Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
File: f0LSfCHahsfp-_RK4OVsmPPS-As.mft (raw, json)
Hash identifier: OcS2eEqtCleAMbz75z8IaEDxdW3LnwjU+//SR7KnZw0=
Subject key identifier: CD:0D:A2:43:B8:1D:D5:A2:19:98:FC:A0:BC:52:82:ED:EE:A3:FA:2A
Authority key identifier: 7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
Certificate issuer: /CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Certificate serial: 019675D5457F5CA938E5FE73098D627311AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
Manifest number: 0CAC
Signing time: Sun 27 Apr 2025 06:00:33 +0000
Manifest this update: Sun 27 Apr 2025 06:00:33 +0000
Manifest next update: Mon 28 Apr 2025 06:00:33 +0000
Files and hashes: 1: f0LSfCHahsfp-_RK4OVsmPPS-As.crl (hash: LefzVWRbvV319VlohZKNYQRSU9AB9xSScN0w23GF2Bw=)
2: ldAiZGhEA6PQQSWSUu13vFbKCqU.roa (hash: sA9s3rJXQHu5BKgisYTJyKuldiob4VBrcuXc+pLot6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:45:7f:5c:a9:38:e5:fe:73:09:8d:62:73:11:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Validity
Not Before: Apr 27 06:00:33 2025 GMT
Not After : Apr 28 06:00:33 2025 GMT
Subject: CN=cd0da243b81dd5a21998fca0bc5282edeea3fa2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3f:c1:5b:dd:e9:42:5b:f9:77:97:e0:0c:6a:
94:03:dc:9a:ed:76:3a:27:2c:30:14:e4:07:9b:c1:
9d:6f:14:b8:69:91:7a:ee:c2:b6:f2:44:47:8a:87:
5d:83:2e:12:44:71:83:80:41:6d:00:6c:98:69:f3:
74:5b:87:b3:b4:2a:0a:7e:cf:12:6e:32:11:32:7e:
36:f9:8f:e8:bd:06:9d:09:aa:88:a8:57:7d:b7:1e:
e6:26:bc:46:cc:e8:ae:10:ef:56:dc:fc:1c:d6:63:
18:bd:9e:ac:45:a9:5b:de:99:e1:18:0e:72:fa:44:
74:bc:27:df:52:3f:9c:f7:72:81:56:11:c8:ab:06:
82:f2:83:11:b5:dc:ac:8b:89:b9:da:36:55:03:be:
48:8a:56:85:e8:a4:06:01:f7:ad:ba:44:3c:81:eb:
b3:b5:a4:da:79:c9:ce:ea:51:82:de:06:e9:a0:39:
63:6d:71:a4:c3:70:18:30:d2:8a:aa:79:dd:5e:88:
fc:c8:ff:79:7f:4a:fd:25:5c:99:6d:18:2f:9c:f4:
e8:c9:8c:55:e3:b9:15:0a:c2:d4:8e:86:d0:85:39:
31:6e:c4:60:02:8f:d8:51:83:ef:51:d8:5b:8b:47:
e7:1c:0f:7d:3c:9c:c6:17:62:86:a8:55:5d:4c:d4:
5f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0D:A2:43:B8:1D:D5:A2:19:98:FC:A0:BC:52:82:ED:EE:A3:FA:2A
X509v3 Authority Key Identifier:
keyid:7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1e:e0:7d:fb:3d:24:23:31:15:cf:56:47:c1:07:2c:4e:c4:
63:3c:0c:c4:af:04:7e:f3:97:0a:27:19:8f:3d:7d:c1:d4:c7:
f5:45:bb:eb:11:98:39:11:b9:f6:b7:5c:ad:4f:ca:ba:50:d3:
65:47:07:18:6c:e1:67:13:85:8a:31:56:48:11:d2:a3:d6:07:
50:ed:5b:88:b2:92:bb:44:93:f0:ba:95:43:47:4e:c3:8d:66:
0b:90:db:2e:6d:ae:27:83:91:5a:43:fd:d7:fb:0e:8e:e0:2a:
b2:13:da:25:04:31:72:33:65:17:d6:1d:72:28:b6:dd:db:c4:
68:11:3f:ba:1a:a9:3a:35:07:d6:61:c6:df:00:03:ee:ce:82:
ce:25:c2:11:a9:a6:82:de:67:9b:7d:01:c1:f8:17:25:01:c6:
2b:7d:b3:c7:97:79:48:68:9c:a7:69:bd:2a:9b:9a:5a:10:66:
52:2c:53:8c:0d:6c:1e:c9:32:19:ff:00:6c:4a:fb:c7:b3:11:
62:29:d4:e0:00:88:64:04:8f:11:e1:c4:5e:8a:9d:85:59:e9:
f6:9d:3c:dd:bb:2f:d3:f0:73:3f:7e:60:03:0e:83:fc:01:17:
b3:cf:be:74:34:db:17:2f:af:b3:54:66:9c:54:8c:1b:7f:8f:
8f:d8:3d:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ11UV/XKk45f5zCY1icxGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNDJkMjdjMjFkYTg2YzdlOWZiZjQ0YWUwZTU2Yzk4ZjNk
MmY4MGIwHhcNMjUwNDI3MDYwMDMzWhcNMjUwNDI4MDYwMDMzWjAzMTEwLwYDVQQD
EyhjZDBkYTI0M2I4MWRkNWEyMTk5OGZjYTBiYzUyODJlZGVlYTNmYTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT/BW93pQlv5d5fgDGqUA9ya7XY6
JywwFOQHm8GdbxS4aZF67sK28kRHioddgy4SRHGDgEFtAGyYafN0W4eztCoKfs8S
bjIRMn42+Y/ovQadCaqIqFd9tx7mJrxGzOiuEO9W3Pwc1mMYvZ6sRalb3pnhGA5y
+kR0vCffUj+c93KBVhHIqwaC8oMRtdysi4m52jZVA75IilaF6KQGAfetukQ8geuz
taTaecnO6lGC3gbpoDljbXGkw3AYMNKKqnndXoj8yP95f0r9JVyZbRgvnPToyYxV
47kVCsLUjobQhTkxbsRgAo/YUYPvUdhbi0fnHA99PJzGF2KGqFVdTNRfFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0NokO4HdWiGZj8oLxSgu3uo/oqMB8GA1UdIwQY
MBaAFH9C0nwh2obH6fv0SuDlbJjz0vgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjBMU2ZDSGFoc2ZwLV9SSzRPVnNtUFBTLUFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85OGIwMjQtOWQ4Zi00ODY5LWEyYTkt
MGFmYjdjM2ZiZjMwLzEvZjBMU2ZDSGFoc2ZwLV9SSzRPVnNtUFBTLUFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS85OGIwMjQtOWQ4Zi00ODY5LWEyYTktMGFmYjdjM2ZiZjMw
LzEvZjBMU2ZDSGFoc2ZwLV9SSzRPVnNtUFBTLUFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQx7gffs9
JCMxFc9WR8EHLE7EYzwMxK8EfvOXCicZjz19wdTH9UW76xGYORG59rdcrU/KulDT
ZUcHGGzhZxOFijFWSBHSo9YHUO1biLKSu0ST8LqVQ0dOw41mC5DbLm2uJ4ORWkP9
1/sOjuAqshPaJQQxcjNlF9Ydcii23dvEaBE/uhqpOjUH1mHG3wAD7s6CziXCEamm
gt5nm30BwfgXJQHGK32zx5d5SGicp2m9KpuaWhBmUixTjA1sHskyGf8AbEr7x7MR
YinU4ACIZASPEeHEXoqdhVnp9p083bsv0/BzP35gAw6D/AEXs8++dDTbFy+vs1Rm
nFSMG3+Pj9g9uQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:08:53 2025 by rpki-client