Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
File: 1-75S2DTiaNxpiDApL95LY8faOS4.mft (raw, json)
Hash identifier: sOBpGvi7syV6XQ5GfuLJ9EqJLPb/UThtyEABpv1D9eY=
Subject key identifier: 11:B5:09:FE:03:8D:AE:1B:DB:C2:9F:1E:B4:6D:97:31:7F:29:43:0D
Authority key identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
Certificate issuer: /CN=fbbe52d834e268dc698830292fde4b63c7da392e
Certificate serial: 01967FB495F73ED0CFED20299FED161365F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
Manifest number: 0A95
Signing time: Tue 29 Apr 2025 04:01:03 +0000
Manifest this update: Tue 29 Apr 2025 04:01:03 +0000
Manifest next update: Wed 30 Apr 2025 04:01:03 +0000
Files and hashes: 1: 1-75S2DTiaNxpiDApL95LY8faOS4.crl (hash: zt4vUvlX/vBubFAQYCHU0GSKL4Lq51/tnIJUsNYi8AM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:95:f7:3e:d0:cf:ed:20:29:9f:ed:16:13:65:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe52d834e268dc698830292fde4b63c7da392e
Validity
Not Before: Apr 29 04:01:03 2025 GMT
Not After : Apr 30 04:01:03 2025 GMT
Subject: CN=11b509fe038dae1bdbc29f1eb46d97317f29430d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ea:68:21:ed:1f:e0:71:cf:69:91:8b:5f:9b:
2d:9e:2c:49:87:5e:99:7a:be:31:8e:75:39:ec:d7:
28:6a:5c:f8:d7:3a:0f:4f:39:29:0b:d7:32:52:60:
80:1f:55:2f:38:09:a5:ff:0b:9c:ca:45:99:11:a3:
3a:60:57:3f:c1:4e:47:fb:e7:88:ad:a3:5c:b3:6d:
ec:8a:25:06:c4:72:55:5f:f4:24:70:00:07:57:85:
15:e9:9e:f4:5d:aa:a4:fe:b3:23:9e:96:ee:d0:a4:
b1:02:cd:2f:cc:36:2a:bb:c9:12:10:71:3b:aa:ea:
38:4e:54:89:a1:1f:90:5b:1d:8b:5c:25:eb:57:56:
4c:a2:e7:77:8f:2e:c9:f8:71:54:03:c4:ee:e9:00:
6a:e4:aa:33:dd:c5:0e:38:49:19:ce:5e:89:1d:39:
db:1e:77:96:74:92:e8:98:26:9a:14:19:a0:2c:24:
01:9d:5d:fc:71:7b:2c:8a:e9:e7:94:22:9b:af:a4:
66:ad:a6:4d:f5:30:27:2c:a8:d6:b4:82:38:a0:28:
27:05:c2:e7:a1:3f:98:d9:3f:12:2f:e6:a0:5e:02:
03:45:0b:85:d8:f8:16:2c:8d:15:5e:88:b1:36:78:
de:63:de:3e:84:4c:3b:a4:de:bf:c2:26:e0:a1:32:
62:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B5:09:FE:03:8D:AE:1B:DB:C2:9F:1E:B4:6D:97:31:7F:29:43:0D
X509v3 Authority Key Identifier:
keyid:FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:4b:af:54:45:00:7f:bc:3d:00:3b:82:8a:52:e7:77:2f:06:
43:8d:ba:12:be:c2:2c:23:65:25:2e:8e:9c:a5:d4:05:43:c1:
6b:7f:49:91:44:17:ef:7e:65:35:ee:e4:76:76:e8:50:b9:19:
22:c8:49:6f:ea:5c:16:94:09:77:aa:fb:90:57:12:88:46:b0:
bb:56:c0:1f:16:da:55:cd:85:16:af:db:b0:e0:6c:d1:45:cd:
09:11:2a:d1:f8:8e:f7:d5:c3:ff:cd:58:ee:e5:5f:b2:b0:91:
b3:a4:72:2e:d2:00:dc:94:8f:76:c8:66:6f:eb:b6:07:49:eb:
ea:16:27:9d:0f:c0:39:94:a4:b6:be:e9:ff:53:22:dc:56:ad:
e4:5a:0e:5d:1e:0d:28:94:93:20:c8:89:24:72:09:af:f9:4f:
fb:d8:86:05:d5:fd:5f:82:12:a8:89:2a:f9:67:04:ae:d8:fd:
57:34:20:bc:dd:76:55:98:b9:da:cc:0e:85:b4:c8:38:8d:72:
b8:ae:cf:d4:89:0c:4e:be:43:b3:cd:3b:52:25:fb:0c:a5:14:
a8:41:9a:14:92:39:c1:8f:96:14:e5:03:b6:1f:a7:36:02:e1:
19:fc:15:cc:b5:b7:77:fd:54:db:d2:b3:9f:d1:bc:b2:57:90:
77:67:e1:d7
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZ/tJX3PtDP7SApn+0WE2X3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYmU1MmQ4MzRlMjY4ZGM2OTg4MzAyOTJmZGU0YjYzYzdk
YTM5MmUwHhcNMjUwNDI5MDQwMTAzWhcNMjUwNDMwMDQwMTAzWjAzMTEwLwYDVQQD
EygxMWI1MDlmZTAzOGRhZTFiZGJjMjlmMWViNDZkOTczMTdmMjk0MzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+poIe0f4HHPaZGLX5stnixJh16Z
er4xjnU57Ncoalz41zoPTzkpC9cyUmCAH1UvOAml/wucykWZEaM6YFc/wU5H++eI
raNcs23siiUGxHJVX/QkcAAHV4UV6Z70Xaqk/rMjnpbu0KSxAs0vzDYqu8kSEHE7
quo4TlSJoR+QWx2LXCXrV1ZMoud3jy7J+HFUA8Tu6QBq5Koz3cUOOEkZzl6JHTnb
HneWdJLomCaaFBmgLCQBnV38cXssiunnlCKbr6RmraZN9TAnLKjWtII4oCgnBcLn
oT+Y2T8SL+agXgIDRQuF2PgWLI0VXoixNnjeY94+hEw7pN6/wibgoTJiRwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBG1Cf4Dja4b28KfHrRtlzF/KUMNMB8GA1UdIwQY
MBaAFPu+Utg04mjcaYgwKS/eS2PH2jkuMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS03NVMyRFRpYU54cGlEQXBMOTVMWThmYU9TNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvZDg0YjdhLTdlYjAtNDZhMi04YThh
LTAyNjYyNmFlMzFmNS8xLzEtNzVTMkRUaWFOeHBpREFwTDk1TFk4ZmFPUzQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M5L2Q4NGI3YS03ZWIwLTQ2YTItOGE4YS0wMjY2MjZhZTMx
ZjUvMS8xLTc1UzJEVGlhTnhwaURBcEw5NUxZOGZhT1M0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwUuv
VEUAf7w9ADuCilLndy8GQ426Er7CLCNlJS6OnKXUBUPBa39JkUQX735lNe7kdnbo
ULkZIshJb+pcFpQJd6r7kFcSiEawu1bAHxbaVc2FFq/bsOBs0UXNCREq0fiO99XD
/81Y7uVfsrCRs6RyLtIA3JSPdshmb+u2B0nr6hYnnQ/AOZSktr7p/1Mi3Fat5FoO
XR4NKJSTIMiJJHIJr/lP+9iGBdX9X4ISqIkq+WcErtj9VzQgvN12VZi52swOhbTI
OI1yuK7P1IkMTr5Ds807UiX7DKUUqEGaFJI5wY+WFOUDth+nNgLhGfwVzLW3d/1U
29Kzn9G8sleQd2fh1w==
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:47:50 2025 by rpki-client