Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
File: fCnC9XI_KexeDnk-c6tVuKHIa6k.mft (raw, json)
Hash identifier: HJvWl8mrn2yekqIZzZ+RpYnGoQMPqs1KVxjziyS/wZ0=
Subject key identifier: 12:31:D8:4A:DA:F0:CB:34:F9:BF:37:E4:16:2C:CC:E5:29:2D:8F:D2
Authority key identifier: 7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
Certificate issuer: /CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Certificate serial: 01967FB3D9EC12DC756576838FE1D90D3011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
Manifest number: 04BF
Signing time: Tue 29 Apr 2025 04:00:15 +0000
Manifest this update: Tue 29 Apr 2025 04:00:15 +0000
Manifest next update: Wed 30 Apr 2025 04:00:15 +0000
Files and hashes: 1: NdI4eek8jOjsWz1VECAlKFSlieY.roa (hash: KdGGoQzPMHoGucfApjzpne/EBBMfi+F0OYkvglIdCSE=)
2: OEhtadn0DUNS84bfQrg1WlzSzCQ.roa (hash: HF+3GH/+d8FVR6v6MNdyNa599Q4jMft4g5RBqFNqn7s=)
3: fCnC9XI_KexeDnk-c6tVuKHIa6k.crl (hash: 11LzaId0jYibo5aSQOyEGy4nCrzlwfS69QnTWb8cB1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b3:d9:ec:12:dc:75:65:76:83:8f:e1:d9:0d:30:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Validity
Not Before: Apr 29 04:00:15 2025 GMT
Not After : Apr 30 04:00:15 2025 GMT
Subject: CN=1231d84adaf0cb34f9bf37e4162ccce5292d8fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:e2:28:69:37:31:be:07:19:ee:8d:42:eb:
00:90:28:2a:29:b2:c5:a0:ee:b3:cc:fd:ae:24:dc:
c0:a0:b5:ac:03:41:78:47:13:0f:e4:81:57:23:4a:
2a:da:2a:95:10:47:40:7a:bc:06:e0:ce:30:ae:cd:
f1:df:8a:72:5a:da:c4:84:f8:aa:a1:a5:d6:6a:34:
4a:fc:a2:f3:d8:f0:fd:30:82:d4:78:f1:e9:6e:29:
35:e9:8f:4b:55:c0:71:27:c2:b4:8b:e8:c4:95:6e:
ab:3b:0b:e5:46:f5:77:1a:0d:46:6b:f7:a2:db:d2:
04:23:a8:af:7e:85:a2:89:6d:67:d6:a7:ed:b4:0d:
bb:00:40:fa:f8:60:b1:2f:56:4b:e6:e3:8c:39:17:
e6:4c:d2:3d:2c:3e:af:10:bb:2d:26:5b:68:86:8b:
dd:a6:8f:df:0f:af:06:cf:e0:67:0c:ab:f2:03:b7:
d7:80:bf:fa:35:90:5f:73:bf:b2:ba:6a:91:02:45:
08:f0:e2:52:69:70:ee:b1:c3:f2:97:24:ca:94:59:
a8:22:0b:64:7a:af:52:90:b8:6b:69:8f:ff:6c:e2:
df:7b:94:d6:21:50:02:be:da:56:64:85:30:77:3a:
93:1a:70:ff:d1:36:e0:af:7e:0c:bc:ae:61:9a:3e:
64:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:31:D8:4A:DA:F0:CB:34:F9:BF:37:E4:16:2C:CC:E5:29:2D:8F:D2
X509v3 Authority Key Identifier:
keyid:7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:32:a4:54:9f:bf:33:8b:b0:e4:74:5b:83:38:d0:70:9c:62:
22:ba:9e:37:fb:46:15:c9:d9:7d:eb:9c:5a:d0:ee:31:63:30:
33:b1:8d:2d:77:b3:4c:33:50:02:8b:a5:1f:de:29:94:96:49:
72:2f:52:14:3b:2d:b5:9a:d7:40:e1:6b:63:1d:c3:5e:d6:13:
66:3e:e5:c9:63:c7:0c:c5:32:c3:1b:79:1a:51:c6:c1:de:15:
bf:cf:96:5d:bd:50:52:a4:1b:26:04:ee:90:e1:b2:c3:e2:b0:
7a:23:20:51:c8:29:8d:f4:d2:1c:0f:12:b5:8b:eb:51:25:2b:
04:b6:32:28:44:05:6b:83:bb:8b:1f:f2:09:e6:3a:57:5b:66:
3a:c9:5c:f5:97:ff:e9:65:ec:31:28:da:91:74:5d:e9:49:ec:
27:64:a7:3e:82:89:3f:af:5b:4f:9e:58:0d:e3:d5:5b:ee:ad:
92:ef:83:b2:ac:0c:b9:ca:b0:56:d4:e7:6b:6c:17:7c:fe:1c:
3e:6f:64:f9:e4:15:8d:41:d0:21:eb:29:b1:21:28:ac:51:0d:
56:bc:73:08:91:da:af:a6:84:a9:5f:b6:34:9f:56:35:02:b3:
c8:86:f0:c0:bf:8a:1e:15:96:8d:d7:e5:25:44:43:42:42:37:
5c:89:7b:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/s9nsEtx1ZXaDj+HZDTARMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMjljMmY1NzIzZjI5ZWM1ZTBlNzkzZTczYWI1NWI4YTFj
ODZiYTkwHhcNMjUwNDI5MDQwMDE1WhcNMjUwNDMwMDQwMDE1WjAzMTEwLwYDVQQD
EygxMjMxZDg0YWRhZjBjYjM0ZjliZjM3ZTQxNjJjY2NlNTI5MmQ4ZmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOPiKGk3Mb4HGe6NQusAkCgqKbLF
oO6zzP2uJNzAoLWsA0F4RxMP5IFXI0oq2iqVEEdAerwG4M4wrs3x34pyWtrEhPiq
oaXWajRK/KLz2PD9MILUePHpbik16Y9LVcBxJ8K0i+jElW6rOwvlRvV3Gg1Ga/ei
29IEI6ivfoWiiW1n1qfttA27AED6+GCxL1ZL5uOMORfmTNI9LD6vELstJltohovd
po/fD68Gz+BnDKvyA7fXgL/6NZBfc7+yumqRAkUI8OJSaXDuscPylyTKlFmoIgtk
eq9SkLhraY//bOLfe5TWIVACvtpWZIUwdzqTGnD/0Tbgr34MvK5hmj5k8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIx2Era8Ms0+b835BYszOUpLY/SMB8GA1UdIwQY
MBaAFHwpwvVyPynsXg55PnOrVbihyGupMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kOTlmYWMtMzVkYy00ZjJjLThmOTUt
ZjE5NTIyM2QwM2IzLzEvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kOTlmYWMtMzVkYy00ZjJjLThmOTUtZjE5NTIyM2QwM2Iz
LzEvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqjKkVJ+/
M4uw5HRbgzjQcJxiIrqeN/tGFcnZfeucWtDuMWMwM7GNLXezTDNQAoulH94plJZJ
ci9SFDsttZrXQOFrYx3DXtYTZj7lyWPHDMUywxt5GlHGwd4Vv8+WXb1QUqQbJgTu
kOGyw+KweiMgUcgpjfTSHA8StYvrUSUrBLYyKEQFa4O7ix/yCeY6V1tmOslc9Zf/
6WXsMSjakXRd6UnsJ2SnPoKJP69bT55YDePVW+6tku+DsqwMucqwVtTna2wXfP4c
Pm9k+eQVjUHQIespsSEorFENVrxzCJHar6aEqV+2NJ9WNQKzyIbwwL+KHhWWjdfl
JURDQkI3XIl7Vw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:02:50 2025 by rpki-client