Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
File: 1i15SeaYRB2-mrxWCcSerKc8l5Y.mft (raw, json)
Hash identifier: eK4AbpF3u9l79qyqfcFng+9N99Rj65rtqJTr6/f7DXs=
Subject key identifier: 4D:43:98:F2:CB:34:25:CD:7A:DF:8F:2D:52:7D:7D:18:AF:83:D5:5D
Authority key identifier: D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
Certificate issuer: /CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Certificate serial: 019677FAF6790A3E2C070AF287BD0C52DA71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
Manifest number: 0E7C
Signing time: Sun 27 Apr 2025 16:00:57 +0000
Manifest this update: Sun 27 Apr 2025 16:00:57 +0000
Manifest next update: Mon 28 Apr 2025 16:00:57 +0000
Files and hashes: 1: 1i15SeaYRB2-mrxWCcSerKc8l5Y.crl (hash: PhzHBdRUnfxOAAikTT+AmjThnbSu024elOSjmvfJLZk=)
2: d6njcJAvU5XAKbAJO-1stP-sI3c.roa (hash: Qb51F1ZjPbC9UkzfA0CmXmJOGj7X7JIQuEBdAlbn5BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:f6:79:0a:3e:2c:07:0a:f2:87:bd:0c:52:da:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Validity
Not Before: Apr 27 16:00:57 2025 GMT
Not After : Apr 28 16:00:57 2025 GMT
Subject: CN=4d4398f2cb3425cd7adf8f2d527d7d18af83d55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9e:ed:ed:03:de:a4:3c:19:79:13:9b:a0:55:
bd:c1:7c:cd:de:53:2f:2f:da:48:2a:8d:3a:01:de:
bb:40:bd:74:08:31:fc:bd:a3:ba:1b:bf:f8:56:43:
6e:d3:2b:c8:18:25:52:40:c8:bc:03:1a:f2:85:0e:
b7:43:2f:aa:e1:bc:bf:81:93:d8:dd:ff:08:45:5e:
2c:10:34:12:14:d1:3f:5f:ca:a2:e8:e1:59:4d:40:
aa:30:22:7b:32:b7:e5:0b:b9:27:96:3d:83:71:d4:
53:8a:3c:e5:16:4b:e1:e9:b9:9a:ac:8a:92:d0:c5:
ac:3c:46:83:0e:47:b6:cf:71:8d:a2:26:60:69:91:
ab:eb:62:e7:7b:06:65:98:c3:8f:46:40:a3:9a:51:
0f:4a:78:e9:d2:cd:f3:21:58:8c:3f:be:5b:50:be:
3f:2d:cc:f4:a4:bc:70:45:e8:01:e8:67:a3:ef:d0:
57:8f:76:4f:fc:5e:b5:6f:b4:06:64:f1:83:44:87:
67:f1:26:84:b4:d9:de:12:0e:c6:cc:d8:2d:b8:9d:
c6:14:ce:95:70:c7:e0:8a:2a:2c:47:3c:bc:7d:7a:
be:9a:3d:77:4c:b9:7e:d2:ef:23:d4:1a:23:cb:89:
2b:5a:6f:e4:6a:ef:9c:8e:bf:09:45:e5:56:46:86:
5b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:43:98:F2:CB:34:25:CD:7A:DF:8F:2D:52:7D:7D:18:AF:83:D5:5D
X509v3 Authority Key Identifier:
keyid:D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:7f:70:92:99:0a:8c:01:55:cf:9b:95:20:8b:07:6e:04:76:
d7:88:9f:6c:ec:ea:27:b6:3a:a1:ba:05:1d:39:c1:1b:a7:ba:
68:79:4e:c0:f1:e0:6b:b6:05:5a:59:8d:7b:39:d2:32:07:38:
6b:2a:33:a3:87:02:03:89:cd:cb:77:1f:4f:61:fb:98:df:d2:
54:5a:b2:a5:97:70:4d:f3:17:24:a3:22:ae:33:a7:98:54:eb:
88:63:67:9e:a5:20:55:6b:80:b6:42:4f:7e:f8:1b:6d:ba:e5:
32:93:1e:16:2d:5f:b1:a9:81:e7:56:a6:0b:de:5b:a9:82:e0:
03:fc:98:88:97:75:94:5f:eb:f3:39:90:54:3c:10:5f:17:7b:
6d:78:cf:d7:6b:de:0f:7a:db:15:f9:6a:31:19:ae:e7:08:e8:
20:c4:57:58:6d:4f:35:bf:cd:b4:78:6e:37:24:69:bf:6f:92:
08:be:c5:f5:95:b5:5a:af:65:a8:bd:f3:70:82:bc:10:66:10:
57:e9:d1:6b:cd:eb:03:5b:4d:f1:16:f1:ec:18:73:c5:b3:b1:
e7:1e:56:bd:71:cb:e4:c7:8c:ae:b7:1d:b0:9d:0e:17:25:13:
1d:f9:18:c3:05:5b:86:0b:9e:f8:20:d0:84:eb:54:6b:ed:79:
35:f3:56:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+vZ5Cj4sBwryh70MUtpxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MmQ3OTQ5ZTY5ODQ0MWRiZTlhYmM1NjA5YzQ5ZWFjYTcz
Yzk3OTYwHhcNMjUwNDI3MTYwMDU3WhcNMjUwNDI4MTYwMDU3WjAzMTEwLwYDVQQD
Eyg0ZDQzOThmMmNiMzQyNWNkN2FkZjhmMmQ1MjdkN2QxOGFmODNkNTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ7t7QPepDwZeROboFW9wXzN3lMv
L9pIKo06Ad67QL10CDH8vaO6G7/4VkNu0yvIGCVSQMi8AxryhQ63Qy+q4by/gZPY
3f8IRV4sEDQSFNE/X8qi6OFZTUCqMCJ7MrflC7knlj2DcdRTijzlFkvh6bmarIqS
0MWsPEaDDke2z3GNoiZgaZGr62LnewZlmMOPRkCjmlEPSnjp0s3zIViMP75bUL4/
Lcz0pLxwRegB6Gej79BXj3ZP/F61b7QGZPGDRIdn8SaEtNneEg7GzNgtuJ3GFM6V
cMfgiiosRzy8fXq+mj13TLl+0u8j1Bojy4krWm/kau+cjr8JReVWRoZbewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1DmPLLNCXNet+PLVJ9fRivg9VdMB8GA1UdIwQY
MBaAFNYteUnmmEQdvpq8VgnEnqynPJeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hYzA5MjMtN2ViMS00YTVmLTkxMDUt
MTViMjFhOWI0MzI1LzEvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hYzA5MjMtN2ViMS00YTVmLTkxMDUtMTViMjFhOWI0MzI1
LzEvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoX9wkpkK
jAFVz5uVIIsHbgR214ifbOzqJ7Y6oboFHTnBG6e6aHlOwPHga7YFWlmNeznSMgc4
ayozo4cCA4nNy3cfT2H7mN/SVFqypZdwTfMXJKMirjOnmFTriGNnnqUgVWuAtkJP
fvgbbbrlMpMeFi1fsamB51amC95bqYLgA/yYiJd1lF/r8zmQVDwQXxd7bXjP12ve
D3rbFflqMRmu5wjoIMRXWG1PNb/NtHhuNyRpv2+SCL7F9ZW1Wq9lqL3zcIK8EGYQ
V+nRa83rA1tN8Rbx7BhzxbOx5x5WvXHL5MeMrrcdsJ0OFyUTHfkYwwVbhgue+CDQ
hOtUa+15NfNWMQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:19:21 2025 by rpki-client