Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
File: V0U31U828UIjG8gXA4hyy2B7Iec.mft (raw, json)
Hash identifier: jFP1gF5+31o9HUxEqZ5XnHyggvZ7RJzis6OtErP15sQ=
Subject key identifier: BF:50:21:D0:C1:BE:D5:36:1C:42:16:07:EE:5B:75:63:5D:85:57:21
Authority key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
Certificate issuer: /CN=574537d54f36f142231bc817038872cb607b21e7
Certificate serial: 01967831B261F8261DCA31AA2E97AE7E8AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
Manifest number: 1514
Signing time: Sun 27 Apr 2025 17:00:44 +0000
Manifest this update: Sun 27 Apr 2025 17:00:44 +0000
Manifest next update: Mon 28 Apr 2025 17:00:44 +0000
Files and hashes: 1: NG7h3MLl7rsjKfJWWMgCk14YKA8.roa (hash: TfduHN4QjBYJ2zJVMdkqYrJchaPgW7zgFk7X9cdWumk=)
2: V0U31U828UIjG8gXA4hyy2B7Iec.crl (hash: 7oEsgiAuWS0RqIUHaU9RRTsc9WBerD6cMNb+ejCOT+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:b2:61:f8:26:1d:ca:31:aa:2e:97:ae:7e:8a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574537d54f36f142231bc817038872cb607b21e7
Validity
Not Before: Apr 27 17:00:44 2025 GMT
Not After : Apr 28 17:00:44 2025 GMT
Subject: CN=bf5021d0c1bed5361c421607ee5b75635d855721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:04:7d:00:c4:89:4e:35:90:e7:29:c7:aa:
4b:f0:57:19:50:f0:e0:ca:1a:b6:66:31:fc:2a:8f:
9a:15:24:64:5f:93:18:eb:3c:69:d5:be:98:da:3c:
ea:e1:99:17:96:ac:ef:01:54:9f:dc:38:f4:dd:fc:
fb:74:b7:31:85:f7:d3:34:89:aa:3c:96:71:89:75:
a3:2d:ad:75:d5:e2:b5:26:0b:7a:88:9d:e5:c8:bc:
4a:53:62:79:32:05:b0:92:61:f0:cc:87:42:39:82:
f9:77:f8:a2:ae:91:0d:54:38:6d:10:81:32:d7:07:
27:35:c6:8c:0f:f9:7f:84:08:cf:27:bb:9d:c9:07:
b4:36:e7:ba:95:54:c0:d7:c1:06:60:d8:2a:1f:c1:
08:5f:6b:a6:5d:8d:87:fc:da:e0:79:b4:70:35:62:
f7:ba:31:66:fc:8d:c4:6c:33:49:58:56:43:a5:2d:
09:86:31:22:f6:d8:d0:3c:98:68:56:d9:b6:70:cb:
3a:0f:4e:8a:2e:c7:0f:b1:c3:63:76:6b:f3:e6:0a:
77:2d:4d:3a:df:de:2f:30:25:22:af:20:cb:9b:ae:
10:30:d3:43:74:a6:0b:3a:fd:f7:de:4e:69:af:17:
11:57:06:ea:92:f3:25:e8:40:bd:e7:c2:67:d2:83:
31:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:50:21:D0:C1:BE:D5:36:1C:42:16:07:EE:5B:75:63:5D:85:57:21
X509v3 Authority Key Identifier:
keyid:57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1c:ca:bd:3f:0f:36:9c:ec:01:16:d3:07:da:e9:c2:7a:ba:
d5:62:ca:c5:1b:e5:5e:7b:9b:e3:97:1d:b1:bc:b3:55:ff:d7:
83:11:6e:fd:b0:d3:34:9e:44:0a:4d:5a:cb:18:e5:e7:7b:ab:
00:42:c4:f6:1f:a7:d4:91:54:5e:8a:9c:c8:6d:c4:d2:20:6b:
d9:02:3d:af:54:99:0b:3c:7a:d8:b7:b0:a2:3a:0b:13:ac:46:
0c:ed:36:5f:b4:5e:27:f2:43:cf:b5:db:da:5c:03:bc:8f:73:
18:22:bb:72:d8:f7:47:a5:2d:9b:fb:3a:ee:84:23:3a:9d:0b:
34:45:88:54:cd:bc:8b:2a:4e:40:01:4b:6f:dc:15:b6:ba:38:
01:43:72:a1:66:64:40:c0:06:4f:f1:a9:35:7e:ef:e0:76:94:
6d:07:3d:d6:65:3d:fc:d1:3c:53:f0:e9:5d:02:22:d0:d1:48:
b9:9a:a3:ed:a1:b9:84:80:08:3b:90:67:ee:cc:e3:2e:50:52:
ca:64:ca:ad:2c:c5:9a:47:01:ad:6f:31:39:cd:7d:2e:29:57:
db:67:40:56:c9:08:dd:a4:ec:fa:fe:46:c6:a7:49:6a:2f:5a:
c2:10:51:42:d4:94:23:62:1f:8e:d5:c9:7a:6a:b6:dc:77:81:
f8:99:b0:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4MbJh+CYdyjGqLpeuforuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NDUzN2Q1NGYzNmYxNDIyMzFiYzgxNzAzODg3MmNiNjA3
YjIxZTcwHhcNMjUwNDI3MTcwMDQ0WhcNMjUwNDI4MTcwMDQ0WjAzMTEwLwYDVQQD
EyhiZjUwMjFkMGMxYmVkNTM2MWM0MjE2MDdlZTViNzU2MzVkODU1NzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9MEfQDEiU41kOcpx6pL8FcZUPDg
yhq2ZjH8Ko+aFSRkX5MY6zxp1b6Y2jzq4ZkXlqzvAVSf3Dj03fz7dLcxhffTNImq
PJZxiXWjLa111eK1Jgt6iJ3lyLxKU2J5MgWwkmHwzIdCOYL5d/iirpENVDhtEIEy
1wcnNcaMD/l/hAjPJ7udyQe0Nue6lVTA18EGYNgqH8EIX2umXY2H/NrgebRwNWL3
ujFm/I3EbDNJWFZDpS0JhjEi9tjQPJhoVtm2cMs6D06KLscPscNjdmvz5gp3LU06
394vMCUiryDLm64QMNNDdKYLOv333k5prxcRVwbqkvMl6EC958Jn0oMxKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9QIdDBvtU2HEIWB+5bdWNdhVchMB8GA1UdIwQY
MBaAFFdFN9VPNvFCIxvIFwOIcstgeyHnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mZGQyNWQtYzAzNC00OWYzLTg5MGQt
NGI4OWQzNzc4MDhlLzEvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mZGQyNWQtYzAzNC00OWYzLTg5MGQtNGI4OWQzNzc4MDhl
LzEvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxzKvT8P
NpzsARbTB9rpwnq61WLKxRvlXnub45cdsbyzVf/XgxFu/bDTNJ5ECk1ayxjl53ur
AELE9h+n1JFUXoqcyG3E0iBr2QI9r1SZCzx62LewojoLE6xGDO02X7ReJ/JDz7Xb
2lwDvI9zGCK7ctj3R6Utm/s67oQjOp0LNEWIVM28iypOQAFLb9wVtro4AUNyoWZk
QMAGT/GpNX7v4HaUbQc91mU9/NE8U/DpXQIi0NFIuZqj7aG5hIAIO5Bn7szjLlBS
ymTKrSzFmkcBrW8xOc19LilX22dAVskI3aTs+v5GxqdJai9awhBRQtSUI2IfjtXJ
emq23HeB+Jmw7g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:19:26 2025 by rpki-client