Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
File: fSroDN5c12nI8UTmwmYRO_rt7D4.mft (raw, json)
Hash identifier: jl/nuh2AiYRDWWwQXcUNh4pRxysYLzGquRFvTMzMN3c=
Subject key identifier: 3E:12:5D:ED:68:9B:0E:03:25:C9:27:14:89:28:49:66:71:55:0D:C7
Authority key identifier: 7D:2A:E8:0C:DE:5C:D7:69:C8:F1:44:E6:C2:66:11:3B:FA:ED:EC:3E
Certificate issuer: /CN=7d2ae80cde5cd769c8f144e6c266113bfaedec3e
Certificate serial: 01967A20039F67672467B3BF890D463F7D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 02:00:40 +0000
Manifest this update: Mon 28 Apr 2025 02:00:40 +0000
Manifest next update: Tue 29 Apr 2025 02:00:40 +0000
Files and hashes: 1: fSroDN5c12nI8UTmwmYRO_rt7D4.crl (hash: pHHW8M1Ph+ld68hMt61aPAbiAmMVqIYGWU7/F+os9Co=)
2: sxNlViRMFBeyCKHK1V0sQojloaU.roa (hash: B7neqRuXw3EzuRHFQ3Xdq+BC5xmWvSgD18hq8QHGols=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:20:03:9f:67:67:24:67:b3:bf:89:0d:46:3f:7d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ae80cde5cd769c8f144e6c266113bfaedec3e
Validity
Not Before: Apr 28 02:00:40 2025 GMT
Not After : Apr 29 02:00:40 2025 GMT
Subject: CN=3e125ded689b0e0325c927148928496671550dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:34:2a:b6:50:4a:ea:39:9f:e1:22:02:54:83:
05:f1:5c:06:9a:31:33:83:2a:83:5c:25:dd:99:fe:
c4:d1:7c:41:5e:fa:1a:e1:31:f2:e0:6e:6f:c6:ed:
b4:8b:94:93:a3:47:ca:4c:e6:72:73:3a:ed:be:25:
fe:d7:12:6b:9f:c0:09:c1:ca:59:fa:b6:be:d6:b8:
6c:6c:42:88:69:e3:52:c4:c1:a8:17:7b:dd:be:9c:
48:d7:5c:65:a2:49:13:26:31:eb:86:9e:3b:45:41:
aa:45:c9:07:47:71:37:85:f3:4c:19:6c:a0:f6:1e:
40:c8:4c:76:e6:89:bf:4c:29:b4:5c:a6:a2:af:42:
79:b8:5d:f9:d4:56:dc:0d:b9:17:2a:70:e3:fc:5b:
b7:d4:26:eb:19:38:7b:39:a6:79:a0:a9:73:b5:09:
96:56:ac:5f:38:0a:13:12:70:7c:ae:bb:42:9e:cd:
56:20:61:de:60:8e:46:03:d1:4a:c4:95:d5:c5:f9:
df:06:16:f5:94:1c:c4:74:f5:7b:2a:91:f0:fd:36:
9a:5d:ec:1a:dd:51:d9:5a:f5:34:a0:42:3c:fe:11:
3c:1a:60:e4:33:ee:eb:e2:fe:0c:08:a3:3d:0a:5e:
20:53:97:6f:91:a3:ed:19:ed:96:31:18:f3:83:b3:
ff:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:12:5D:ED:68:9B:0E:03:25:C9:27:14:89:28:49:66:71:55:0D:C7
X509v3 Authority Key Identifier:
keyid:7D:2A:E8:0C:DE:5C:D7:69:C8:F1:44:E6:C2:66:11:3B:FA:ED:EC:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:82:3d:9e:76:d0:58:26:32:f7:de:ed:3a:d6:58:67:01:38:
65:bf:2a:d7:a6:9f:03:6e:62:0a:a1:c9:d8:29:8c:2b:c7:b7:
d1:82:f1:7d:e8:6c:5c:94:e6:29:d5:4b:c7:51:69:05:59:fe:
71:4e:f8:0d:ab:72:26:83:8e:67:c6:02:bc:97:c3:f9:df:be:
82:dc:8f:49:d4:78:17:51:ab:cf:7e:99:59:0e:44:12:ff:0b:
61:68:dc:db:f1:c4:b6:06:01:1b:f0:3b:f7:fa:e8:15:8b:2b:
9e:98:94:41:00:20:8e:b9:46:79:aa:a9:7b:74:98:d4:ef:7d:
6f:4a:ff:25:86:7e:f5:08:72:ab:f2:a1:0e:aa:33:ba:4c:eb:
81:de:81:be:61:14:99:94:21:49:a3:88:54:c6:50:ba:2f:66:
0e:70:7f:2c:39:45:74:d5:53:f1:54:21:54:e6:f2:f6:89:45:
ba:7d:55:80:60:b2:88:46:3d:c6:0b:6d:79:68:b5:34:29:10:
a1:a9:b4:6d:5b:e9:da:41:2a:5b:fb:d5:11:95:10:48:1a:99:
42:d2:e7:08:bb:92:8b:a0:ed:e1:b3:23:bf:56:50:ba:1e:c0:
76:9b:f0:d2:19:19:f6:c2:0f:ac:b2:21:e2:29:37:34:b3:e4:
03:c3:96:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6IAOfZ2ckZ7O/iQ1GP30wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMmFlODBjZGU1Y2Q3NjljOGYxNDRlNmMyNjYxMTNiZmFl
ZGVjM2UwHhcNMjUwNDI4MDIwMDQwWhcNMjUwNDI5MDIwMDQwWjAzMTEwLwYDVQQD
EygzZTEyNWRlZDY4OWIwZTAzMjVjOTI3MTQ4OTI4NDk2NjcxNTUwZGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjQqtlBK6jmf4SICVIMF8VwGmjEz
gyqDXCXdmf7E0XxBXvoa4THy4G5vxu20i5STo0fKTOZyczrtviX+1xJrn8AJwcpZ
+ra+1rhsbEKIaeNSxMGoF3vdvpxI11xlokkTJjHrhp47RUGqRckHR3E3hfNMGWyg
9h5AyEx25om/TCm0XKair0J5uF351FbcDbkXKnDj/Fu31CbrGTh7OaZ5oKlztQmW
VqxfOAoTEnB8rrtCns1WIGHeYI5GA9FKxJXVxfnfBhb1lBzEdPV7KpHw/TaaXewa
3VHZWvU0oEI8/hE8GmDkM+7r4v4MCKM9Cl4gU5dvkaPtGe2WMRjzg7P/1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4SXe1omw4DJcknFIkoSWZxVQ3HMB8GA1UdIwQY
MBaAFH0q6AzeXNdpyPFE5sJmETv67ew+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlNyb0RONWMxMm5JOFVUbXdtWVJPX3J0N0Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hMmVhNTEtODdhNi00ODE0LTliODIt
Mjc4Y2JiMGI0ZTczLzEvZlNyb0RONWMxMm5JOFVUbXdtWVJPX3J0N0Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hMmVhNTEtODdhNi00ODE0LTliODItMjc4Y2JiMGI0ZTcz
LzEvZlNyb0RONWMxMm5JOFVUbXdtWVJPX3J0N0Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYI9nnbQ
WCYy997tOtZYZwE4Zb8q16afA25iCqHJ2CmMK8e30YLxfehsXJTmKdVLx1FpBVn+
cU74DatyJoOOZ8YCvJfD+d++gtyPSdR4F1Grz36ZWQ5EEv8LYWjc2/HEtgYBG/A7
9/roFYsrnpiUQQAgjrlGeaqpe3SY1O99b0r/JYZ+9Qhyq/KhDqozukzrgd6BvmEU
mZQhSaOIVMZQui9mDnB/LDlFdNVT8VQhVOby9olFun1VgGCyiEY9xgtteWi1NCkQ
oam0bVvp2kEqW/vVEZUQSBqZQtLnCLuSi6Dt4bMjv1ZQuh7Adpvw0hkZ9sIPrLIh
4ik3NLPkA8OWhQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:33:43 2025 by rpki-client