Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File: 1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier: U7Us6M09UYW1+cUOfP73leN62JcoL9aZpSlXwKMbtlY=
Subject key identifier: A2:1C:FB:B9:0D:CA:A1:9A:BA:12:2C:41:81:34:6E:91:74:3F:15:31
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial: 019678D6A752A319F9B5F81C951C2785433A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number: 14CF
Signing time: Sun 27 Apr 2025 20:00:55 +0000
Manifest this update: Sun 27 Apr 2025 20:00:55 +0000
Manifest next update: Mon 28 Apr 2025 20:00:55 +0000
Files and hashes: 1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: QQNUtVH+gpo9O+6NGkPGdRg1tZctHt3bicMcryjFrdc=)
2: 1-kqFnbhB2LCPJU3KtgP3OhHNEbM.roa (hash: sYai5O0I+e4s9fEjeNx81CRmECPgFmQDJeWhDrbRAeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:a7:52:a3:19:f9:b5:f8:1c:95:1c:27:85:43:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
Validity
Not Before: Apr 27 20:00:55 2025 GMT
Not After : Apr 28 20:00:55 2025 GMT
Subject: CN=a21cfbb90dcaa19aba122c4181346e91743f1531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:96:17:b8:80:2e:31:d4:0e:2c:91:02:80:bc:
0c:20:25:83:64:59:6f:83:3d:99:06:bd:7a:6d:e6:
1f:21:7e:34:4a:a3:94:2b:ed:ac:d3:16:99:11:1d:
79:25:a0:26:25:61:b3:7a:bd:83:ba:f0:3d:4d:67:
18:d0:b5:60:0b:3c:04:99:6c:da:a5:0d:ec:83:59:
44:0e:22:73:a1:ac:ed:70:17:17:71:f9:c7:15:33:
b2:f8:14:e2:fb:5d:5d:e9:e4:73:04:63:4d:67:9b:
d3:97:d0:00:c5:a0:3e:36:9c:a4:5a:ba:e4:d8:14:
1b:5a:75:c5:49:9a:18:18:07:61:17:35:7b:90:61:
93:0f:54:4d:aa:bc:50:51:57:12:9e:21:be:39:06:
2a:b4:f1:71:26:4f:c7:9c:1d:f9:89:b2:27:01:53:
f2:7b:6a:cf:77:05:23:cd:09:ec:56:f7:3c:dd:af:
9b:62:1e:c3:5b:f1:5e:5e:fe:7e:b6:40:ea:09:53:
95:33:1a:98:16:5b:63:de:1d:6d:a8:1f:c9:46:db:
6d:62:2b:40:53:e6:f6:63:eb:2d:6e:6f:8c:71:7a:
2a:2a:4d:75:a2:3f:7e:62:d0:46:6d:f0:53:de:17:
8a:77:a6:10:8f:83:da:db:ac:80:22:d6:98:57:47:
f4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1C:FB:B9:0D:CA:A1:9A:BA:12:2C:41:81:34:6E:91:74:3F:15:31
X509v3 Authority Key Identifier:
keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:12:51:2b:37:e3:7e:18:d7:a2:aa:66:b1:2d:cb:42:ca:d1:
fb:fe:9d:ce:2e:bf:99:e6:2a:68:de:eb:7b:58:fb:17:e0:7a:
a7:4f:30:f2:19:d5:53:7b:cf:a1:3d:d4:87:e3:52:30:74:01:
a3:e6:88:34:c4:74:fd:0f:da:59:9e:00:8f:12:c8:bd:b5:ec:
cb:0b:3b:a2:8f:7c:30:1f:21:41:de:f0:ad:c8:53:40:33:fa:
b4:8e:52:30:8f:b1:df:95:e5:77:ad:d8:f0:b2:06:43:39:c1:
f6:8c:b6:c7:e5:5c:51:f3:d2:c6:e4:90:1d:11:a8:58:91:c0:
66:46:85:bd:a1:c5:fd:47:61:50:91:01:26:3a:46:a0:07:5b:
ed:7d:95:9c:77:d4:a2:16:db:40:55:56:bb:2d:f3:5e:78:c3:
aa:9b:65:93:6f:37:f9:ee:c6:2b:79:27:70:07:00:6e:7c:ee:
b8:e5:0a:dd:9a:1d:8b:af:4a:c2:f1:93:5d:90:85:12:7d:1d:
57:ae:db:b8:f5:70:64:fd:38:7f:35:91:e4:82:c8:d3:33:36:
3e:8a:6b:75:ab:b1:87:7a:a4:9c:95:c9:b8:d0:06:7b:4e:d6:
08:f6:d3:43:0b:db:8e:24:36:67:08:ad:ff:59:2e:b3:c0:db:
9e:c5:b7:0f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZ41qdSoxn5tfgclRwnhUM6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NzQyZDc3N2QwODI0MTZhMmQ4NDdkNDAwM2EzMzFiNTBl
MjQyM2UwHhcNMjUwNDI3MjAwMDU1WhcNMjUwNDI4MjAwMDU1WjAzMTEwLwYDVQQD
EyhhMjFjZmJiOTBkY2FhMTlhYmExMjJjNDE4MTM0NmU5MTc0M2YxNTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZYXuIAuMdQOLJECgLwMICWDZFlv
gz2ZBr16beYfIX40SqOUK+2s0xaZER15JaAmJWGzer2DuvA9TWcY0LVgCzwEmWza
pQ3sg1lEDiJzoaztcBcXcfnHFTOy+BTi+11d6eRzBGNNZ5vTl9AAxaA+NpykWrrk
2BQbWnXFSZoYGAdhFzV7kGGTD1RNqrxQUVcSniG+OQYqtPFxJk/HnB35ibInAVPy
e2rPdwUjzQnsVvc83a+bYh7DW/FeXv5+tkDqCVOVMxqYFltj3h1tqB/JRtttYitA
U+b2Y+stbm+McXoqKk11oj9+YtBGbfBT3heKd6YQj4Pa26yAItaYV0f0TQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKIc+7kNyqGauhIsQYE0bpF0PxUxMB8GA1UdIwQY
MBaAFPl0LXd9CCQWothH1AA6MxtQ4kI+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1YUXRkMzBJSkJhaTJFZlVBRG96RzFEaVFqNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvNDgyNzA4LWMxZDQtNDBmYy05MzIx
LTY2OThiOTMyMzNkNi8xLzEtWFF0ZDMwSUpCYWkyRWZVQURvekcxRGlRajQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Q0LzQ4MjcwOC1jMWQ0LTQwZmMtOTMyMS02Njk4YjkzMjMz
ZDYvMS8xLVhRdGQzMElKQmFpMkVmVUFEb3pHMURpUWo0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghJR
KzfjfhjXoqpmsS3LQsrR+/6dzi6/meYqaN7re1j7F+B6p08w8hnVU3vPoT3Uh+NS
MHQBo+aINMR0/Q/aWZ4AjxLIvbXsyws7oo98MB8hQd7wrchTQDP6tI5SMI+x35Xl
d63Y8LIGQznB9oy2x+VcUfPSxuSQHRGoWJHAZkaFvaHF/UdhUJEBJjpGoAdb7X2V
nHfUohbbQFVWuy3zXnjDqptlk283+e7GK3kncAcAbnzuuOUK3Zodi69KwvGTXZCF
En0dV67buPVwZP04fzWR5ILI0zM2Poprdauxh3qknJXJuNAGe07WCPbTQwvbjiQ2
Zwit/1kus8DbnsW3Dw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:07:11 2025 by rpki-client