Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
File: 1-z2QpIni1JxWTgijovNEX7LI1AQ.mft (raw, json)
Hash identifier: yh/Xp/Y/a3lma49T/nhCTAHFWCAOqpB/kwnwAHFUGwY=
Subject key identifier: 96:7A:06:9B:49:10:B4:E1:B3:4B:5E:21:1A:A9:F1:E8:CD:8C:99:C1
Authority key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
Certificate issuer: /CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Certificate serial: 01968BEF621B2F222F91344AAF3FD68C8A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
Manifest number: 0FB2
Signing time: Thu 01 May 2025 13:00:43 +0000
Manifest this update: Thu 01 May 2025 13:00:43 +0000
Manifest next update: Fri 02 May 2025 13:00:43 +0000
Files and hashes: 1: 1-z2QpIni1JxWTgijovNEX7LI1AQ.crl (hash: hKay/3obJQbkCaRcRnl0soweGgCWZH7I8Z10YUJ7JoY=)
2: D-kvzPrAwGbNDxb_KzLw4lsFxes.roa (hash: JU5Ry1WiWCRnSvWFUZ6oaKSDfbBv9sPRmk3mHwJb9y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:ef:62:1b:2f:22:2f:91:34:4a:af:3f:d6:8c:8a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Validity
Not Before: May 1 13:00:43 2025 GMT
Not After : May 2 13:00:43 2025 GMT
Subject: CN=967a069b4910b4e1b34b5e211aa9f1e8cd8c99c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:44:6a:0b:48:eb:9c:2f:eb:20:65:65:c4:
5b:6b:f6:99:a2:de:de:ea:bf:4a:48:d6:58:73:58:
57:28:bc:91:66:74:6e:f6:6d:1a:fc:3f:c6:5f:e7:
99:37:04:cc:aa:50:42:5f:9c:07:a5:f9:41:ea:72:
ff:15:96:04:93:12:74:f0:80:81:17:04:b7:3c:6c:
d3:a0:fc:a4:62:c6:41:0a:6d:1f:84:12:39:b6:9c:
2e:96:d1:6e:45:d0:63:14:e6:e2:90:29:c6:81:52:
2a:81:ea:5b:9a:b8:a9:f3:47:53:fb:31:81:a0:fe:
44:92:85:28:63:f0:23:9a:74:ce:1c:ca:d8:c3:8d:
bb:b6:48:d6:11:5f:bd:6b:82:f0:0a:be:5d:f1:ad:
3a:24:ee:67:ef:30:e7:6b:13:ea:8f:95:0f:7e:c9:
d2:ec:75:cc:97:81:6f:ba:89:3b:d5:08:89:6a:56:
e4:d9:d1:0d:ff:80:38:68:cb:97:d4:8e:d4:39:aa:
94:a6:82:fe:33:7c:35:ac:e6:74:13:1d:7e:47:04:
18:76:05:e0:e5:ed:d0:f7:68:3f:ab:e9:7b:fe:da:
8a:d0:e2:a2:34:5c:26:33:0a:0c:2a:42:85:0a:d7:
0d:a8:57:17:4d:29:80:6a:70:2d:99:c7:34:be:89:
8a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7A:06:9B:49:10:B4:E1:B3:4B:5E:21:1A:A9:F1:E8:CD:8C:99:C1
X509v3 Authority Key Identifier:
keyid:FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a2:c3:81:56:5c:ee:cc:3f:09:ba:f3:1d:39:e0:f4:bc:78:
42:6c:a9:5a:f6:c7:be:0a:4e:a4:cb:f4:03:a3:f7:ae:8c:d9:
c5:43:11:76:97:76:af:cc:ee:18:33:81:c7:73:c9:3d:03:5c:
a5:3f:95:20:65:16:9b:3e:0f:e2:d4:e3:ef:3a:30:5e:18:33:
40:c3:1c:7b:00:9c:0f:eb:f0:8c:1f:6b:6f:dc:7f:e8:73:be:
a2:c5:0c:a7:cf:2b:0f:16:6a:28:5a:54:c9:64:17:6a:3b:c6:
e5:67:64:ce:fd:1f:59:10:98:c6:30:dd:17:86:70:30:59:e0:
f6:34:e7:f4:f9:d9:cd:50:06:be:09:5b:58:32:6e:1b:92:cc:
43:ea:9b:ca:d7:7a:0b:89:a4:e0:f7:e7:02:3d:e1:48:14:76:
fa:d4:02:3e:ec:1e:40:23:95:06:5b:17:6e:b7:07:25:dc:4f:
da:b8:b8:f7:af:a6:c5:c9:66:e2:ae:e3:98:17:c5:76:9d:3f:
f3:2f:80:97:ed:99:1b:d0:df:be:c7:17:06:0f:c5:d9:0d:54:
f2:be:8f:5a:0c:dc:8e:53:75:b6:61:ff:1b:e7:87:38:17:c0:
f0:7d:2f:b8:ab:8f:ab:9f:75:57:25:b5:3a:3c:e3:97:91:69:
a6:2a:ff:e5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZaL72IbLyIvkTRKrz/WjIo/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiM2Q5MGE0ODllMmQ0OWM1NjRlMDhhM2EyZjM0NDVmYjJj
OGQ0MDQwHhcNMjUwNTAxMTMwMDQzWhcNMjUwNTAyMTMwMDQzWjAzMTEwLwYDVQQD
Eyg5NjdhMDY5YjQ5MTBiNGUxYjM0YjVlMjExYWE5ZjFlOGNkOGM5OWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU9EagtI65wv6yBlZcRba/aZot7e
6r9KSNZYc1hXKLyRZnRu9m0a/D/GX+eZNwTMqlBCX5wHpflB6nL/FZYEkxJ08ICB
FwS3PGzToPykYsZBCm0fhBI5tpwultFuRdBjFObikCnGgVIqgepbmrip80dT+zGB
oP5EkoUoY/AjmnTOHMrYw427tkjWEV+9a4LwCr5d8a06JO5n7zDnaxPqj5UPfsnS
7HXMl4Fvuok71QiJalbk2dEN/4A4aMuX1I7UOaqUpoL+M3w1rOZ0Ex1+RwQYdgXg
5e3Q92g/q+l7/tqK0OKiNFwmMwoMKkKFCtcNqFcXTSmAanAtmcc0vomKEQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJZ6BptJELThs0teIRqp8ejNjJnBMB8GA1UdIwQY
MBaAFPs9kKSJ4tScVk4Io6LzRF+yyNQEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS16MlFwSW5pMUp4V1RnaWpvdk5FWDdMSTFBUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvMzBhNTVkLTk5NTktNDhlOC05YTgx
LTlhYjBmZjg3MGQyMy8xLzEtejJRcEluaTFKeFdUZ2lqb3ZORVg3TEkxQVEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JlLzMwYTU1ZC05OTU5LTQ4ZTgtOWE4MS05YWIwZmY4NzBk
MjMvMS8xLXoyUXBJbmkxSnhXVGdpam92TkVYN0xJMUFRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6LD
gVZc7sw/CbrzHTng9Lx4QmypWvbHvgpOpMv0A6P3rozZxUMRdpd2r8zuGDOBx3PJ
PQNcpT+VIGUWmz4P4tTj7zowXhgzQMMcewCcD+vwjB9rb9x/6HO+osUMp88rDxZq
KFpUyWQXajvG5Wdkzv0fWRCYxjDdF4ZwMFng9jTn9PnZzVAGvglbWDJuG5LMQ+qb
ytd6C4mk4PfnAj3hSBR2+tQCPuweQCOVBlsXbrcHJdxP2ri496+mxclm4q7jmBfF
dp0/8y+Al+2ZG9DfvscXBg/F2Q1U8r6PWgzcjlN1tmH/G+eHOBfA8H0vuKuPq591
VyW1Ojzjl5Fppir/5Q==
-----END CERTIFICATE-----
Generated at Thu May 1 21:37:42 2025 by rpki-client