Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
File: 55GFFoC3LJaRIl4b82xHJg6iRPo.mft (raw, json)
Hash identifier: qXLmgk1+VpR+DCgArFIaQ6DK1mpRh1jLNndLN48OCS4=
Subject key identifier: FC:F3:AF:55:6E:7B:46:A7:82:51:98:7A:02:EA:B0:4A:43:CB:7C:8B
Authority key identifier: E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA
Certificate issuer: /CN=e791851680b72c9691225e1bf36c47260ea244fa
Certificate serial: 0196760CAAF56F3266809C330F065A35DC71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
Manifest number: 100C
Signing time: Sun 27 Apr 2025 07:01:03 +0000
Manifest this update: Sun 27 Apr 2025 07:01:03 +0000
Manifest next update: Mon 28 Apr 2025 07:01:03 +0000
Files and hashes: 1: 55GFFoC3LJaRIl4b82xHJg6iRPo.crl (hash: TF7LNhgMLDwhNY3B34AL7BD9D+LdlAFkcMLTnYvUcyw=)
2: _F8TtMCr-GrK1-WadHxYHdaqsV8.roa (hash: OhF5DdkGtGDTUS9hafqNY2D1lnp3rhyFQSObJeOPCts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:aa:f5:6f:32:66:80:9c:33:0f:06:5a:35:dc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e791851680b72c9691225e1bf36c47260ea244fa
Validity
Not Before: Apr 27 07:01:03 2025 GMT
Not After : Apr 28 07:01:03 2025 GMT
Subject: CN=fcf3af556e7b46a78251987a02eab04a43cb7c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:14:db:8e:d3:05:97:dd:ca:22:89:b7:fc:
70:fe:0e:93:33:fc:aa:fb:bf:3e:9b:4f:6a:d4:30:
02:9e:99:db:c3:d9:e2:79:38:8c:7e:e2:2e:55:86:
62:c9:48:c2:a6:23:21:3b:7a:d6:d3:f7:01:c1:ff:
55:62:d0:00:9b:21:67:ab:d5:1b:18:92:55:1e:e4:
5e:8e:5f:5c:ec:65:b0:4c:fc:89:82:e0:a5:4c:2d:
b9:19:74:36:6b:40:f2:6b:68:8d:b9:4e:b5:9b:d9:
90:44:41:19:f2:44:72:0b:33:b6:4a:89:0b:43:90:
88:db:23:8b:97:c3:67:55:3c:83:4b:5a:2d:d4:0c:
0e:e9:b6:e5:8e:29:59:a7:62:c1:1f:ce:84:71:5c:
0f:0c:f0:d4:4c:37:80:91:66:c8:c8:d8:35:b8:21:
16:95:ca:14:5b:27:9b:dc:b9:db:7d:0a:62:55:77:
95:c6:26:20:54:77:98:34:be:91:f0:98:7d:fa:cb:
8c:44:35:d2:ac:54:82:bf:61:fd:c6:8f:83:54:e4:
80:3b:74:c7:20:d5:bb:7d:d7:0c:47:15:75:ae:50:
9c:a8:48:1c:e5:a2:9e:a2:50:c9:d8:ef:9f:27:f1:
4d:4b:6c:bd:3a:34:a9:77:2a:44:c0:ba:60:65:ab:
fb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F3:AF:55:6E:7B:46:A7:82:51:98:7A:02:EA:B0:4A:43:CB:7C:8B
X509v3 Authority Key Identifier:
keyid:E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a8:f0:3d:84:45:e1:d4:8d:b7:4b:d9:28:ed:1b:96:8d:1f:
00:07:b1:1c:f4:88:8b:8a:81:4f:08:6c:d9:23:63:6d:2e:59:
f4:ae:ee:b9:45:c4:c4:d1:41:9e:90:13:08:aa:e9:97:8b:22:
f6:b6:54:ec:22:d2:2f:c1:59:fe:8c:4f:08:4c:fd:ea:a5:39:
6e:0c:c4:c3:7b:ca:11:7a:27:bb:f3:44:12:56:eb:ad:28:0a:
ae:e3:b8:1a:cd:3a:39:ce:18:f9:c3:c0:ff:2b:01:92:e9:f6:
1b:51:34:d8:23:59:be:c5:d4:11:b6:54:4b:d1:f1:2b:89:aa:
ce:73:d8:f8:2f:14:56:51:8f:fc:68:00:d9:06:66:44:c9:72:
fc:1a:6e:24:94:5c:30:f7:9b:2b:b2:a7:01:f3:01:5d:54:f9:
dd:91:2d:a7:fb:c9:06:07:8a:b3:60:ae:9d:67:db:1e:94:fc:
cc:09:78:e9:6d:70:08:4e:9c:d6:5d:20:a1:98:32:0d:e1:e3:
4b:ea:62:e4:8c:b3:8b:8a:bf:d1:2b:cd:21:dc:83:d0:bb:40:
12:0c:55:23:35:f8:83:af:16:15:df:09:7a:e1:d4:68:3c:74:
14:7c:ff:56:70:97:41:89:95:78:8c:c7:31:50:9b:e7:49:a4:
95:9c:db:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DKr1bzJmgJwzDwZaNdxxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OTE4NTE2ODBiNzJjOTY5MTIyNWUxYmYzNmM0NzI2MGVh
MjQ0ZmEwHhcNMjUwNDI3MDcwMTAzWhcNMjUwNDI4MDcwMTAzWjAzMTEwLwYDVQQD
EyhmY2YzYWY1NTZlN2I0NmE3ODI1MTk4N2EwMmVhYjA0YTQzY2I3YzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXkU247TBZfdyiKJt/xw/g6TM/yq
+78+m09q1DACnpnbw9nieTiMfuIuVYZiyUjCpiMhO3rW0/cBwf9VYtAAmyFnq9Ub
GJJVHuRejl9c7GWwTPyJguClTC25GXQ2a0Dya2iNuU61m9mQREEZ8kRyCzO2SokL
Q5CI2yOLl8NnVTyDS1ot1AwO6bbljilZp2LBH86EcVwPDPDUTDeAkWbIyNg1uCEW
lcoUWyeb3LnbfQpiVXeVxiYgVHeYNL6R8Jh9+suMRDXSrFSCv2H9xo+DVOSAO3TH
INW7fdcMRxV1rlCcqEgc5aKeolDJ2O+fJ/FNS2y9OjSpdypEwLpgZav7vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzzr1Vue0anglGYegLqsEpDy3yLMB8GA1UdIwQY
MBaAFOeRhRaAtyyWkSJeG/NsRyYOokT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTVHRkZvQzNMSmFSSWw0YjgyeEhKZzZpUlBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS81ZmVjNTUtNGQ0YS00ZmE1LWE3NjQt
NDJiZDkyZjMwYTk3LzEvNTVHRkZvQzNMSmFSSWw0YjgyeEhKZzZpUlBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS81ZmVjNTUtNGQ0YS00ZmE1LWE3NjQtNDJiZDkyZjMwYTk3
LzEvNTVHRkZvQzNMSmFSSWw0YjgyeEhKZzZpUlBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKjwPYRF
4dSNt0vZKO0blo0fAAexHPSIi4qBTwhs2SNjbS5Z9K7uuUXExNFBnpATCKrpl4si
9rZU7CLSL8FZ/oxPCEz96qU5bgzEw3vKEXonu/NEElbrrSgKruO4Gs06Oc4Y+cPA
/ysBkun2G1E02CNZvsXUEbZUS9HxK4mqznPY+C8UVlGP/GgA2QZmRMly/BpuJJRc
MPebK7KnAfMBXVT53ZEtp/vJBgeKs2CunWfbHpT8zAl46W1wCE6c1l0goZgyDeHj
S+pi5Iyzi4q/0SvNIdyD0LtAEgxVIzX4g68WFd8JeuHUaDx0FHz/VnCXQYmVeIzH
MVCb50mklZzbgw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:16:24 2025 by rpki-client