
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
File: fUd7pApydSv1DkLAADdl5NdHPkY.mft (raw, json)
Hash identifier: s6DM82RG5wD4QSQO6sk9d6DUpEQnu2qMfXJqskZi75o=
Subject key identifier: 90:C5:65:AF:11:6B:C0:3E:2E:16:7F:72:81:72:65:26:72:3F:DF:83
Authority key identifier: 7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
Certificate issuer: /CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Certificate serial: 0196760C698BC0C45D063192BF04752E13BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 07:00:46 +0000
Manifest this update: Sun 27 Apr 2025 07:00:46 +0000
Manifest next update: Mon 28 Apr 2025 07:00:46 +0000
Files and hashes: 1: fUd7pApydSv1DkLAADdl5NdHPkY.crl (hash: L8sor0tZ2oNbjjZo98pQGop8r5y1POHF5usGxPTE8gk=)
2: txL1fO8y0T0j5IS_C5y7fOIOxHU.roa (hash: kwDxX3obWOhODfrryMMC7f740mdS1jAQgVwH1EYVsHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:69:8b:c0:c4:5d:06:31:92:bf:04:75:2e:13:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Validity
Not Before: Apr 27 07:00:46 2025 GMT
Not After : Apr 28 07:00:46 2025 GMT
Subject: CN=90c565af116bc03e2e167f7281726526723fdf83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:1a:2d:a0:d1:e1:ab:da:4d:e2:38:21:95:
6f:3c:0a:2b:84:63:57:69:f2:23:df:e0:60:3e:95:
06:66:d1:34:fd:b1:05:f1:41:91:a4:84:44:7c:47:
fa:fe:12:2c:b9:3f:df:4e:1c:f9:d9:9a:51:bc:2c:
5c:4c:e2:b3:48:b6:b9:93:4c:ae:08:5a:20:7c:ca:
b6:75:df:04:00:1f:ee:ea:dc:f6:e1:a3:90:c2:09:
8f:30:08:10:81:3f:34:b0:d7:38:50:aa:a4:fe:0f:
af:c0:35:00:f1:be:27:dc:02:a3:b2:ca:ac:fa:d0:
7d:76:d9:6a:d9:ed:e8:41:7c:f3:1a:90:ba:95:91:
80:89:be:13:de:29:ce:f3:55:50:a3:40:af:00:5d:
18:5c:68:7e:69:ab:ad:82:07:30:a1:f2:e7:97:9a:
e6:ae:db:26:ab:82:36:d8:52:5b:58:f6:e2:b5:09:
6b:0f:66:1a:42:74:bf:2c:92:3e:42:f4:16:c2:8f:
aa:e8:35:0b:2b:05:b0:6b:8b:c7:37:68:e5:9f:da:
f6:df:f3:98:36:84:a3:54:7f:55:1c:00:e2:0f:20:
0e:be:c7:b2:31:5c:f0:27:4e:84:00:08:f2:d9:c7:
64:2c:2b:6a:44:fd:c8:67:0e:b9:29:e4:4c:95:4c:
37:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C5:65:AF:11:6B:C0:3E:2E:16:7F:72:81:72:65:26:72:3F:DF:83
X509v3 Authority Key Identifier:
keyid:7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7e:83:0c:72:88:5d:89:fb:b3:25:d0:e5:eb:17:4b:68:71:
cf:d4:78:f7:c7:64:27:3e:2c:51:86:51:e5:de:22:40:88:63:
19:bd:eb:45:84:4f:6d:e3:b1:1a:eb:55:c7:a0:f7:4c:f7:fd:
21:7d:c4:a3:60:7c:7e:a6:70:1f:6d:ed:ed:63:5e:0b:b2:48:
20:47:fa:25:87:03:c1:09:60:cf:f3:4e:e4:d6:6f:b7:f1:fd:
f6:d6:ce:74:92:f3:52:f1:70:92:48:79:3e:dc:b7:ca:63:69:
ab:a8:bd:83:80:b4:1a:a8:86:59:67:19:58:16:46:c1:35:43:
11:68:83:59:5b:91:42:3f:bc:bd:18:0a:c1:5c:71:b4:e7:ec:
16:ab:51:5b:2e:b1:9f:a4:d0:e9:5a:52:58:3b:68:68:63:03:
ff:7a:14:94:34:01:89:59:9c:b4:0a:91:5d:96:3d:a8:3a:d8:
a4:7e:fc:88:63:92:c8:1f:f6:b2:6d:05:23:f1:64:da:91:12:
a2:91:36:da:80:40:58:9a:47:bf:68:28:75:af:57:8b:63:ed:
56:c7:05:2d:84:90:3c:5b:36:cf:52:b0:f0:cd:a9:7d:67:fa:
c5:73:ab:a7:fb:f3:10:1b:6c:12:d3:58:ea:38:bc:31:f2:77:
9d:d4:46:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DGmLwMRdBjGSvwR1LhO7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNDc3YmE0MGE3Mjc1MmJmNTBlNDJjMDAwMzc2NWU0ZDc0
NzNlNDYwHhcNMjUwNDI3MDcwMDQ2WhcNMjUwNDI4MDcwMDQ2WjAzMTEwLwYDVQQD
Eyg5MGM1NjVhZjExNmJjMDNlMmUxNjdmNzI4MTcyNjUyNjcyM2ZkZjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmYaLaDR4avaTeI4IZVvPAorhGNX
afIj3+BgPpUGZtE0/bEF8UGRpIREfEf6/hIsuT/fThz52ZpRvCxcTOKzSLa5k0yu
CFogfMq2dd8EAB/u6tz24aOQwgmPMAgQgT80sNc4UKqk/g+vwDUA8b4n3AKjssqs
+tB9dtlq2e3oQXzzGpC6lZGAib4T3inO81VQo0CvAF0YXGh+aautggcwofLnl5rm
rtsmq4I22FJbWPbitQlrD2YaQnS/LJI+QvQWwo+q6DULKwWwa4vHN2jln9r23/OY
NoSjVH9VHADiDyAOvseyMVzwJ06EAAjy2cdkLCtqRP3IZw65KeRMlUw3wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDFZa8Ra8A+LhZ/coFyZSZyP9+DMB8GA1UdIwQY
MBaAFH1He6QKcnUr9Q5CwAA3ZeTXRz5GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlVkN3BBcHlkU3YxRGtMQUFEZGw1TmRIUGtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iYThjMjUtNDBlZi00YmFiLWFhM2Et
OWE3ZTE0NjQ4NjJhLzEvZlVkN3BBcHlkU3YxRGtMQUFEZGw1TmRIUGtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9iYThjMjUtNDBlZi00YmFiLWFhM2EtOWE3ZTE0NjQ4NjJh
LzEvZlVkN3BBcHlkU3YxRGtMQUFEZGw1TmRIUGtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ36DDHKI
XYn7syXQ5esXS2hxz9R498dkJz4sUYZR5d4iQIhjGb3rRYRPbeOxGutVx6D3TPf9
IX3Eo2B8fqZwH23t7WNeC7JIIEf6JYcDwQlgz/NO5NZvt/H99tbOdJLzUvFwkkh5
Pty3ymNpq6i9g4C0GqiGWWcZWBZGwTVDEWiDWVuRQj+8vRgKwVxxtOfsFqtRWy6x
n6TQ6VpSWDtoaGMD/3oUlDQBiVmctAqRXZY9qDrYpH78iGOSyB/2sm0FI/Fk2pES
opE22oBAWJpHv2goda9Xi2PtVscFLYSQPFs2z1Kw8M2pfWf6xXOrp/vzEBtsEtNY
6ji8MfJ3ndRGfA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:22:57 2025 by rpki-client