Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
File: _ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft (raw, json)
Hash identifier: FMJtNFbAi7gzvUslU1sNStctSfLjk2XvccPIY/mMgiI=
Subject key identifier: 04:67:8A:D8:E5:6D:F3:7F:B7:B9:90:2E:B6:0E:50:04:FF:1D:D7:B4
Authority key identifier: FD:E7:2D:43:F4:C8:2B:11:46:73:7B:11:61:97:23:18:30:BF:65:D6
Certificate issuer: /CN=fde72d43f4c82b1146737b116197231830bf65d6
Certificate serial: 019679E9A01FC07478BDFF4E4ED5BF5ED869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
Manifest number: 1510
Signing time: Mon 28 Apr 2025 01:01:16 +0000
Manifest this update: Mon 28 Apr 2025 01:01:16 +0000
Manifest next update: Tue 29 Apr 2025 01:01:16 +0000
Files and hashes: 1: NEbsKu77gYfpibY3_TC8dQH80XA.roa (hash: aeVQJbng3C7RHWncwne+AehQ3FDANQdssqp/Bjc9vag=)
2: _ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl (hash: VFAeQfNyQ9gq6s04Qcdrp7qG6rOH0wJIpPdClH+Spc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:a0:1f:c0:74:78:bd:ff:4e:4e:d5:bf:5e:d8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde72d43f4c82b1146737b116197231830bf65d6
Validity
Not Before: Apr 28 01:01:16 2025 GMT
Not After : Apr 29 01:01:16 2025 GMT
Subject: CN=04678ad8e56df37fb7b9902eb60e5004ff1dd7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:14:68:e9:3d:10:e9:6b:7d:f6:04:08:b1:91:
06:18:26:45:2e:25:88:75:3c:e0:a2:ae:4d:b7:f4:
23:b9:8b:47:85:d6:9e:d6:32:a7:bf:5d:da:e1:bd:
e0:1a:e6:eb:a9:de:fa:8f:04:3b:44:c4:36:3f:de:
b7:ac:fe:50:73:f3:fc:e4:09:53:c4:56:9d:9c:9f:
db:d7:73:af:e5:8a:bc:d6:97:90:09:c4:65:7f:a4:
a3:4f:7f:99:82:cd:52:e0:fc:c0:e8:4d:34:9e:31:
43:54:79:0d:75:07:89:1a:22:2e:f6:b0:d7:32:d0:
76:0e:9d:7e:f2:30:50:d7:fa:1c:7f:97:fd:ba:7a:
59:a2:ca:71:cf:bd:dc:e3:3f:7d:07:c0:eb:de:a7:
ac:67:76:55:3a:a4:94:02:29:3c:6a:a2:f8:1f:ec:
97:92:06:0d:e9:6a:c5:06:15:06:d7:ca:88:54:71:
43:38:85:41:cd:bb:76:7d:be:2d:cc:ff:97:37:c9:
d0:10:ba:b1:a6:38:61:83:c3:3a:72:aa:46:de:c3:
f5:6a:4c:cb:5d:22:61:a2:e5:f9:1e:95:3e:5a:b5:
dd:12:11:45:aa:ac:d2:fc:89:73:b5:14:bb:57:68:
71:4b:41:ba:c8:64:e2:fb:69:f1:01:5d:53:74:d5:
41:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:67:8A:D8:E5:6D:F3:7F:B7:B9:90:2E:B6:0E:50:04:FF:1D:D7:B4
X509v3 Authority Key Identifier:
keyid:FD:E7:2D:43:F4:C8:2B:11:46:73:7B:11:61:97:23:18:30:BF:65:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:6e:93:a8:7e:6f:2c:e1:9a:63:21:b3:22:c0:c4:b4:92:d8:
54:b5:84:cf:cc:99:9e:cd:b4:a5:eb:64:c0:c0:df:5d:74:fe:
a3:43:87:1a:85:08:0c:9e:c4:7c:63:eb:fc:aa:a1:de:bd:ac:
5e:49:a7:ac:1f:27:b4:1c:b7:e9:4d:9b:8e:30:de:b4:8c:10:
28:7e:be:f0:f4:c2:37:2c:c3:a6:09:fb:f9:36:b4:b8:ef:3a:
a6:c6:56:5b:2d:06:dc:32:07:08:17:af:d8:bc:0c:f1:67:49:
3d:d2:94:ce:1f:a5:75:42:ea:3c:de:32:de:be:82:44:12:94:
8b:9f:04:55:41:9f:d1:29:08:a4:ec:f5:74:c6:06:c7:c9:b6:
98:78:f9:bc:c9:74:8d:34:7b:c2:60:de:9b:73:9d:b7:76:45:
c3:b9:87:d1:b3:47:63:f2:0e:3a:75:22:1f:65:7e:df:d2:b6:
05:25:02:a0:7b:cd:8a:b8:05:9a:36:94:80:01:13:67:a9:54:
88:d8:93:65:5e:7c:ba:4b:aa:d3:6f:dc:5b:8b:65:1f:38:fc:
af:83:ea:e2:35:1f:b1:b3:55:91:ff:f0:e5:3b:4d:43:69:e7:
39:b5:a0:fa:2f:83:ba:72:1f:cc:d8:2c:2c:d7:e3:67:06:0b:
29:2c:37:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ56aAfwHR4vf9OTtW/XthpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZTcyZDQzZjRjODJiMTE0NjczN2IxMTYxOTcyMzE4MzBi
ZjY1ZDYwHhcNMjUwNDI4MDEwMTE2WhcNMjUwNDI5MDEwMTE2WjAzMTEwLwYDVQQD
EygwNDY3OGFkOGU1NmRmMzdmYjdiOTkwMmViNjBlNTAwNGZmMWRkN2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRRo6T0Q6Wt99gQIsZEGGCZFLiWI
dTzgoq5Nt/QjuYtHhdae1jKnv13a4b3gGubrqd76jwQ7RMQ2P963rP5Qc/P85AlT
xFadnJ/b13Ov5Yq81peQCcRlf6SjT3+Zgs1S4PzA6E00njFDVHkNdQeJGiIu9rDX
MtB2Dp1+8jBQ1/ocf5f9unpZospxz73c4z99B8Dr3qesZ3ZVOqSUAik8aqL4H+yX
kgYN6WrFBhUG18qIVHFDOIVBzbt2fb4tzP+XN8nQELqxpjhhg8M6cqpG3sP1akzL
XSJhouX5HpU+WrXdEhFFqqzS/IlztRS7V2hxS0G6yGTi+2nxAV1TdNVBJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARnitjlbfN/t7mQLrYOUAT/Hde0MB8GA1UdIwQY
MBaAFP3nLUP0yCsRRnN7EWGXIxgwv2XWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2VjdFFfVElLeEZHYzNzUllaY2pHRENfWmRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9kZWJjMjktNWIyYi00YmFiLWI0Zjct
ZTFjOTE5OGNkZDg4LzEvX2VjdFFfVElLeEZHYzNzUllaY2pHRENfWmRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9kZWJjMjktNWIyYi00YmFiLWI0ZjctZTFjOTE5OGNkZDg4
LzEvX2VjdFFfVElLeEZHYzNzUllaY2pHRENfWmRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIm6TqH5v
LOGaYyGzIsDEtJLYVLWEz8yZns20petkwMDfXXT+o0OHGoUIDJ7EfGPr/Kqh3r2s
XkmnrB8ntBy36U2bjjDetIwQKH6+8PTCNyzDpgn7+Ta0uO86psZWWy0G3DIHCBev
2LwM8WdJPdKUzh+ldULqPN4y3r6CRBKUi58EVUGf0SkIpOz1dMYGx8m2mHj5vMl0
jTR7wmDem3Odt3ZFw7mH0bNHY/IOOnUiH2V+39K2BSUCoHvNirgFmjaUgAETZ6lU
iNiTZV58ukuq02/cW4tlHzj8r4Pq4jUfsbNVkf/w5TtNQ2nnObWg+i+DunIfzNgs
LNfjZwYLKSw30g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 07:17:53 2025 by rpki-client