Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
File: fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft (raw, json)
Hash identifier: Fo1YMCHfh/8xygWYDalGWuZvfvOhWNHH0Ql7RjX5uUY=
Subject key identifier: 6E:77:81:40:AF:41:0C:E9:65:6C:15:94:BC:0C:96:12:BF:0D:1A:CE
Authority key identifier: 7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
Certificate issuer: /CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Certificate serial: 019685ED1447C181AABD6C01DF29927DC331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
Manifest number: 0D71
Signing time: Wed 30 Apr 2025 09:00:29 +0000
Manifest this update: Wed 30 Apr 2025 09:00:29 +0000
Manifest next update: Thu 01 May 2025 09:00:29 +0000
Files and hashes: 1: fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl (hash: JMslWiWk1HxuIP+vWbyZo685RKCrxp0nIkBOMYvVKVA=)
2: r6JJsn0eajhp7sOEpygQyvJsZMU.roa (hash: cxRi0/gis8Ga5ROT0QtFOFL60z01cmboldkWqbkptMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:14:47:c1:81:aa:bd:6c:01:df:29:92:7d:c3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Validity
Not Before: Apr 30 09:00:29 2025 GMT
Not After : May 1 09:00:29 2025 GMT
Subject: CN=6e778140af410ce9656c1594bc0c9612bf0d1ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:6f:e1:d6:8f:39:34:7e:ee:f8:90:c3:42:
90:7c:28:c0:e5:e7:f3:26:89:d1:cd:2f:fa:48:dd:
f7:18:ba:ec:ee:3f:48:86:57:1a:73:f1:7a:42:c5:
1b:3b:31:6f:bb:3b:ba:fe:b0:69:13:3c:cf:df:ed:
d7:bf:a4:d4:94:0a:f5:87:2a:d0:5a:52:3b:12:3e:
31:f4:70:51:f2:8d:c3:52:c9:e3:7c:c7:49:b1:7e:
6c:bc:61:ef:09:59:2b:f0:0b:e2:ce:78:b9:46:3a:
52:06:36:7c:43:25:b2:ae:db:38:e4:f9:fc:52:a5:
2f:19:2d:7e:e5:34:7b:ab:2d:5f:9b:9d:a2:b1:78:
75:95:9a:e6:63:ef:01:7b:2b:f4:aa:60:a2:fa:1a:
d9:3c:be:b7:64:01:2d:5a:a9:e5:d8:a2:14:73:39:
4e:3d:83:97:25:c1:ba:08:43:1e:cf:d4:e1:d7:f0:
92:c0:f5:1b:62:35:24:bf:43:79:6e:ba:3d:4a:7d:
3e:d9:3e:93:02:0a:32:0f:46:87:67:ad:ad:4b:05:
f0:06:bf:90:45:9a:ca:c2:61:ee:fe:95:a8:57:e0:
75:14:43:2e:be:de:72:44:bb:d0:50:ae:ac:b1:8e:
8a:db:94:83:be:83:96:b1:d4:5a:2c:ea:d1:f3:a3:
e4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:77:81:40:AF:41:0C:E9:65:6C:15:94:BC:0C:96:12:BF:0D:1A:CE
X509v3 Authority Key Identifier:
keyid:7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0c:1e:ae:ed:72:b8:4d:a3:d6:6d:38:df:32:8b:ff:e0:30:
e7:a3:5b:f5:48:99:61:0a:82:03:47:e2:a5:b6:c3:4b:41:07:
15:3a:4a:5e:e4:80:2f:45:1e:90:6c:e2:66:4a:a2:62:39:6b:
91:bc:a4:72:29:55:4e:f4:7c:47:32:6c:ff:d8:24:37:cf:b3:
1c:2b:57:70:80:8c:5f:9a:e1:5c:d0:62:d8:b1:b7:de:e4:59:
af:eb:d5:43:9c:b9:34:21:a7:93:44:ba:31:da:54:7d:10:a1:
0d:27:a0:16:00:20:c9:31:ec:d6:39:49:0a:d9:32:5e:d8:55:
85:2b:97:d6:57:63:4e:b7:68:98:3b:8b:b2:c3:49:e5:3a:c9:
77:81:e3:bf:99:b6:ca:5d:c0:c4:11:c0:a7:79:e4:96:b8:4e:
96:62:d2:6a:92:f4:f7:98:2d:a1:85:78:59:58:fb:99:74:79:
05:02:85:dd:56:d2:c0:24:93:c6:c5:f6:9c:dc:6a:cc:a6:83:
88:24:b0:68:c3:ad:74:a8:8d:8a:fd:bd:45:c5:e7:4a:e8:7a:
22:83:75:e6:a3:5a:30:7e:c8:c5:af:ac:26:42:4b:9f:f5:b8:
5b:a5:e8:99:72:be:d1:17:3a:d8:98:e1:33:4b:36:3a:a4:6e:
59:20:2e:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaF7RRHwYGqvWwB3ymSfcMxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2NjYTM0MTljOGFiMTViM2FkNGVkNzQ0MzhlNTNmNGZi
NjEwZGYwHhcNMjUwNDMwMDkwMDI5WhcNMjUwNTAxMDkwMDI5WjAzMTEwLwYDVQQD
Eyg2ZTc3ODE0MGFmNDEwY2U5NjU2YzE1OTRiYzBjOTYxMmJmMGQxYWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhZv4daPOTR+7viQw0KQfCjA5efz
JonRzS/6SN33GLrs7j9Ihlcac/F6QsUbOzFvuzu6/rBpEzzP3+3Xv6TUlAr1hyrQ
WlI7Ej4x9HBR8o3DUsnjfMdJsX5svGHvCVkr8Avizni5RjpSBjZ8QyWyrts45Pn8
UqUvGS1+5TR7qy1fm52isXh1lZrmY+8Beyv0qmCi+hrZPL63ZAEtWqnl2KIUczlO
PYOXJcG6CEMez9Th1/CSwPUbYjUkv0N5bro9Sn0+2T6TAgoyD0aHZ62tSwXwBr+Q
RZrKwmHu/pWoV+B1FEMuvt5yRLvQUK6ssY6K25SDvoOWsdRaLOrR86PkRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG53gUCvQQzpZWwVlLwMlhK/DRrOMB8GA1UdIwQY
MBaAFHw8yjQZyKsVs61O10Q45T9PthDfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkR6S05CbklxeFd6clU3WFJEamxQMC0yRU44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80OGYyZWMtZDNhNy00MzU0LTkzZmYt
MGY1Yzk1OWFjYTBiLzEvZkR6S05CbklxeFd6clU3WFJEamxQMC0yRU44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS80OGYyZWMtZDNhNy00MzU0LTkzZmYtMGY1Yzk1OWFjYTBi
LzEvZkR6S05CbklxeFd6clU3WFJEamxQMC0yRU44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARwweru1y
uE2j1m043zKL/+Aw56Nb9UiZYQqCA0fipbbDS0EHFTpKXuSAL0UekGziZkqiYjlr
kbykcilVTvR8RzJs/9gkN8+zHCtXcICMX5rhXNBi2LG33uRZr+vVQ5y5NCGnk0S6
MdpUfRChDSegFgAgyTHs1jlJCtkyXthVhSuX1ldjTrdomDuLssNJ5TrJd4Hjv5m2
yl3AxBHAp3nklrhOlmLSapL095gtoYV4WVj7mXR5BQKF3VbSwCSTxsX2nNxqzKaD
iCSwaMOtdKiNiv29RcXnSuh6IoN15qNaMH7Ixa+sJkJLn/W4W6XomXK+0Rc62Jjh
M0s2OqRuWSAubA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 13:38:02 2025 by rpki-client