Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft
File: 1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft (raw, json)
Hash identifier: KmSG4RFjjjfrzz7FiCDP1k4hgYLcnguVOuQA+/24CRc=
Subject key identifier: F5:96:30:10:36:DC:4E:78:12:C6:03:F2:62:25:66:19:2D:EA:8B:6C
Authority key identifier: FA:F8:14:DF:85:75:98:6D:D9:04:A9:86:87:58:3C:13:87:68:A1:14
Certificate issuer: /CN=faf814df8575986dd904a98687583c138768a114
Certificate serial: 01968511715D7E9B39DA617D5A71D85AAE16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft
Manifest number: 0FB2
Signing time: Wed 30 Apr 2025 05:00:34 +0000
Manifest this update: Wed 30 Apr 2025 05:00:34 +0000
Manifest next update: Thu 01 May 2025 05:00:34 +0000
Files and hashes: 1: 1-vgU34V1mG3ZBKmGh1g8E4dooRQ.crl (hash: hgBt4CB7NLTESROzOgruGGeSmg72buVmBiYPFT1jJkw=)
2: PSDe4mK_6sDHN2_ikwrsB7r4x8E.roa (hash: +rSMz15QPdcNrfCJaZ0raaYeAdhGu+UnOVTPQ1q0l6Q=)
3: s5uswa19Uff22iB-dXtqkkmV_rE.roa (hash: nIij+OFtE0vEkYeQJJWHSLDLEYsBsVEmFRZ+nuktJgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:71:5d:7e:9b:39:da:61:7d:5a:71:d8:5a:ae:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf814df8575986dd904a98687583c138768a114
Validity
Not Before: Apr 30 05:00:34 2025 GMT
Not After : May 1 05:00:34 2025 GMT
Subject: CN=f596301036dc4e7812c603f2622566192dea8b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:30:03:62:6b:04:39:66:cd:63:66:03:dd:3b:
7f:a0:e7:a6:e5:e0:7a:05:64:4d:9a:a8:0d:82:f5:
48:19:59:ed:9e:64:50:36:a6:b5:f2:10:7d:f9:9c:
85:e2:14:07:2e:ac:fb:fe:5e:1a:9d:14:ad:8f:1e:
84:17:e9:5b:aa:a4:80:2e:5e:67:e8:31:8f:10:7e:
d1:7c:d7:41:24:b2:19:0b:a7:de:95:93:96:ac:da:
3e:8e:9b:41:01:36:e4:33:6d:23:55:50:ce:11:89:
4a:48:68:2e:e7:83:62:e5:12:d2:f8:93:19:fd:46:
08:28:b8:8b:37:41:ff:43:d3:2e:bb:3d:07:e6:2a:
e2:a3:5e:3f:83:56:b5:fe:6d:66:7e:2e:dc:ad:3f:
35:f8:4c:9f:d9:42:e7:bb:68:f6:70:f0:a6:dd:ca:
fd:23:af:3f:10:1b:2c:e8:57:98:cd:81:7a:6c:17:
78:2c:63:5e:bc:43:0a:9c:63:c8:6f:d0:63:0e:06:
cf:d2:00:ee:40:3b:9f:80:bd:d7:f5:bb:be:a2:bf:
b5:dc:6d:ab:2d:a7:4a:6d:a1:81:48:b8:8c:47:94:
6b:84:a3:8b:6f:7e:96:ff:d3:57:12:12:ab:3e:56:
3d:7e:9d:04:f2:17:1f:ff:39:3d:8d:4e:e7:65:5f:
ea:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:96:30:10:36:DC:4E:78:12:C6:03:F2:62:25:66:19:2D:EA:8B:6C
X509v3 Authority Key Identifier:
keyid:FA:F8:14:DF:85:75:98:6D:D9:04:A9:86:87:58:3C:13:87:68:A1:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b0:bc:96:49:28:cc:33:b2:8f:83:f1:f1:d7:3b:29:48:6c:
9d:ba:c1:f3:d5:d5:45:7e:15:a3:6a:21:5c:11:c6:18:28:7f:
f3:93:4a:7d:43:81:13:62:a5:07:2a:ea:b6:01:5f:39:bf:ed:
b3:a6:e0:75:49:1b:2c:8e:f0:c4:a4:49:8a:41:45:69:5e:bf:
17:58:62:ac:d1:e8:f9:a6:ae:7f:0c:76:7e:6b:6a:2e:87:62:
b2:c4:cf:35:ec:f1:bc:f8:d8:5f:1b:96:3b:7c:60:ca:8e:ef:
b8:68:71:2b:2f:9f:e3:f6:c1:b6:56:cf:b5:27:63:94:7e:38:
67:da:9d:3c:cd:23:a5:e9:e2:39:02:a4:87:f4:80:4d:dc:8e:
8a:c2:f5:d2:97:b6:79:16:fc:38:3d:f3:df:cd:c2:ca:c1:e9:
e7:de:bc:10:f2:c9:78:d6:ae:f8:c3:cc:61:86:ed:55:38:71:
9a:f8:9d:f2:6f:d2:6a:da:d2:fb:de:25:c8:8f:76:20:3f:c4:
ac:c6:02:09:3c:15:f6:59:60:3a:7d:85:1a:63:03:b4:03:44:
55:0f:fe:62:57:87:19:69:ee:03:a6:77:86:06:29:82:7a:36:
60:e4:7e:38:25:1b:d0:f9:86:16:12:6d:19:b3:77:03:41:b2:
a2:39:1e:9f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZaFEXFdfps52mF9WnHYWq4WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZjgxNGRmODU3NTk4NmRkOTA0YTk4Njg3NTgzYzEzODc2
OGExMTQwHhcNMjUwNDMwMDUwMDM0WhcNMjUwNTAxMDUwMDM0WjAzMTEwLwYDVQQD
EyhmNTk2MzAxMDM2ZGM0ZTc4MTJjNjAzZjI2MjI1NjYxOTJkZWE4YjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zADYmsEOWbNY2YD3Tt/oOem5eB6
BWRNmqgNgvVIGVntnmRQNqa18hB9+ZyF4hQHLqz7/l4anRStjx6EF+lbqqSALl5n
6DGPEH7RfNdBJLIZC6felZOWrNo+jptBATbkM20jVVDOEYlKSGgu54Ni5RLS+JMZ
/UYIKLiLN0H/Q9Muuz0H5irio14/g1a1/m1mfi7crT81+Eyf2ULnu2j2cPCm3cr9
I68/EBss6FeYzYF6bBd4LGNevEMKnGPIb9BjDgbP0gDuQDufgL3X9bu+or+13G2r
LadKbaGBSLiMR5RrhKOLb36W/9NXEhKrPlY9fp0E8hcf/zk9jU7nZV/qDQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPWWMBA23E54EsYD8mIlZhkt6otsMB8GA1UdIwQY
MBaAFPr4FN+FdZht2QSphodYPBOHaKEUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS12Z1UzNFYxbUczWkJLbUdoMWc4RTRkb29SUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvNmZiYmVkLTg3MWYtNDg1Yi1hZDFh
LTQ2MjY5ZDE3ZTlmMS8xLzEtdmdVMzRWMW1HM1pCS21HaDFnOEU0ZG9vUlEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2FhLzZmYmJlZC04NzFmLTQ4NWItYWQxYS00NjI2OWQxN2U5
ZjEvMS8xLXZnVTM0VjFtRzNaQkttR2gxZzhFNGRvb1JRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuLC8
lkkozDOyj4Px8dc7KUhsnbrB89XVRX4Vo2ohXBHGGCh/85NKfUOBE2KlByrqtgFf
Ob/ts6bgdUkbLI7wxKRJikFFaV6/F1hirNHo+aaufwx2fmtqLodissTPNezxvPjY
XxuWO3xgyo7vuGhxKy+f4/bBtlbPtSdjlH44Z9qdPM0jpeniOQKkh/SATdyOisL1
0pe2eRb8OD3z383CysHp5968EPLJeNau+MPMYYbtVThxmvid8m/SatrS+94lyI92
ID/ErMYCCTwV9llgOn2FGmMDtANEVQ/+YleHGWnuA6Z3hgYpgno2YOR+OCUb0PmG
FhJtGbN3A0Gyojkenw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 13:29:20 2025 by rpki-client