Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
File: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft (raw, json)
Hash identifier: 0+3TK+vttola0seNfVnr/izTSg4DE8zcwaZTwbdiopE=
Subject key identifier: B6:EF:F9:BE:58:F1:CD:C3:B0:DB:15:59:A5:93:90:5F:73:21:7A:C1
Authority key identifier: FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
Certificate issuer: /CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Certificate serial: 01967755C1D6D5237C3DF07B825C3852D668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
Manifest number: 0DA1
Signing time: Sun 27 Apr 2025 13:00:30 +0000
Manifest this update: Sun 27 Apr 2025 13:00:30 +0000
Manifest next update: Mon 28 Apr 2025 13:00:30 +0000
Files and hashes: 1: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl (hash: ITJGKOoJv3CmcWQ1bMrKL0TxGlac6zJ2jJFKXdgCemA=)
2: cOp1cqfBELUzDJ5OCVCcFEeZSnw.roa (hash: TeUirEuTA43EYVzOUWEt62Nw9bA/6GjvRc1N3Wwsl64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:c1:d6:d5:23:7c:3d:f0:7b:82:5c:38:52:d6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Validity
Not Before: Apr 27 13:00:30 2025 GMT
Not After : Apr 28 13:00:30 2025 GMT
Subject: CN=b6eff9be58f1cdc3b0db1559a593905f73217ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:a5:b0:4a:95:32:dc:bd:50:70:ae:19:24:
53:75:cb:aa:ee:d1:a1:e0:15:19:a1:61:9c:cc:dc:
83:48:ca:c5:71:74:3f:1e:c5:7f:f6:9c:3c:ac:ca:
6c:af:ef:9e:b5:e2:24:b3:c4:16:e5:e2:19:b0:1b:
03:83:69:40:f4:09:e9:01:2b:63:8b:e8:d3:66:aa:
8c:14:d6:25:ce:d2:9e:0d:91:06:3b:7c:91:76:dd:
66:85:fd:d5:90:f9:85:fa:f4:de:c1:f1:90:ad:ae:
df:3d:26:0c:ac:64:6a:50:39:d5:05:10:93:b2:cf:
a1:96:91:4d:d2:98:d9:db:e0:90:a7:55:c1:99:42:
56:ea:e0:0c:0f:83:1a:18:52:ca:97:7b:6b:a1:f7:
b6:6a:fe:c1:db:1b:d1:fe:0b:ba:ed:fe:de:77:41:
33:b6:da:2e:a8:03:37:6a:5a:10:cd:e4:30:63:95:
76:e0:3f:3a:fb:5f:71:c8:dc:90:45:7e:22:e5:5b:
64:6e:4c:0b:02:10:7f:91:44:13:7a:03:fd:82:09:
13:84:df:1c:9f:bb:b9:c2:2c:76:e7:12:18:87:57:
7f:12:f5:2c:ba:32:2b:be:90:62:80:60:03:f1:4b:
3a:9c:46:f8:73:4e:88:67:b9:c2:cc:ea:17:ef:dd:
d8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EF:F9:BE:58:F1:CD:C3:B0:DB:15:59:A5:93:90:5F:73:21:7A:C1
X509v3 Authority Key Identifier:
keyid:FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:83:0d:af:8b:00:c7:80:76:8f:7c:bd:81:33:ea:71:b9:cb:
40:e0:1f:80:a5:55:81:67:4b:e5:38:81:b2:62:47:10:21:22:
4b:fc:ef:f9:9f:ca:bd:45:c4:64:a2:b1:29:fa:07:45:a7:b9:
ea:0b:48:3e:99:92:45:8e:58:5d:12:e4:86:d2:7e:13:ff:8e:
f8:a6:05:8e:6c:8a:b2:57:9a:f8:3f:11:1d:66:f5:5e:20:58:
b2:b9:9b:53:26:e5:1d:5b:3a:55:e6:a5:2b:ca:cf:fe:5f:e0:
42:f6:7e:01:3a:98:bc:22:a8:20:39:f7:c6:c9:a3:f1:91:30:
a4:f5:96:98:ae:5a:c0:79:74:99:ff:29:b8:60:41:d7:c5:35:
f2:f2:61:97:de:59:17:73:38:88:12:ba:58:0a:32:6d:34:69:
0e:97:4a:f3:41:5b:14:ce:df:95:76:ca:7d:19:51:b9:fb:73:
74:ab:3b:62:4f:f0:de:6d:e8:02:5a:ef:2a:ea:bb:4b:80:67:
ff:df:f5:6a:f9:60:de:71:c0:44:25:3e:dc:75:dd:9c:81:75:
49:b2:ae:a1:13:7e:f5:73:ba:23:14:e7:7b:78:3e:7b:63:e9:
9b:22:9c:8b:61:8e:b9:39:c3:9d:87:00:a6:6f:0a:5f:e4:49:
e4:07:6e:10
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZ3VcHW1SN8PfB7glw4UtZoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNmRmNTNjOWZkMmM1ZmM3NGYxZGI3MTgzNGQ3ZTQ2YTc2
ZTkxZDcwHhcNMjUwNDI3MTMwMDMwWhcNMjUwNDI4MTMwMDMwWjAzMTEwLwYDVQQD
EyhiNmVmZjliZTU4ZjFjZGMzYjBkYjE1NTlhNTkzOTA1ZjczMjE3YWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0OlsEqVMty9UHCuGSRTdcuq7tGh
4BUZoWGczNyDSMrFcXQ/HsV/9pw8rMpsr++eteIks8QW5eIZsBsDg2lA9AnpAStj
i+jTZqqMFNYlztKeDZEGO3yRdt1mhf3VkPmF+vTewfGQra7fPSYMrGRqUDnVBRCT
ss+hlpFN0pjZ2+CQp1XBmUJW6uAMD4MaGFLKl3trofe2av7B2xvR/gu67f7ed0Ez
ttouqAM3aloQzeQwY5V24D86+19xyNyQRX4i5VtkbkwLAhB/kUQTegP9ggkThN8c
n7u5wix25xIYh1d/EvUsujIrvpBigGAD8Us6nEb4c06IZ7nCzOoX793YPQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLbv+b5Y8c3DsNsVWaWTkF9zIXrBMB8GA1UdIwQY
MBaAFPpt9Tyf0sX8dPHbcYNNfkanbpHXMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1tMzFQSl9TeGZ4MDhkdHhnMDEtUnFkdWtkYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvYTk0NzgwLTFiZjMtNDY3YS05MzY5
LWU5OGZmMzNmNjk3Yy8xLzEtbTMxUEpfU3hmeDA4ZHR4ZzAxLVJxZHVrZGMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2UzL2E5NDc4MC0xYmYzLTQ2N2EtOTM2OS1lOThmZjMzZjY5
N2MvMS8xLW0zMVBKX1N4ZngwOGR0eGcwMS1ScWR1a2RjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIMN
r4sAx4B2j3y9gTPqcbnLQOAfgKVVgWdL5TiBsmJHECEiS/zv+Z/KvUXEZKKxKfoH
Rae56gtIPpmSRY5YXRLkhtJ+E/+O+KYFjmyKslea+D8RHWb1XiBYsrmbUyblHVs6
VealK8rP/l/gQvZ+ATqYvCKoIDn3xsmj8ZEwpPWWmK5awHl0mf8puGBB18U18vJh
l95ZF3M4iBK6WAoybTRpDpdK80FbFM7flXbKfRlRuftzdKs7Yk/w3m3oAlrvKuq7
S4Bn/9/1avlg3nHARCU+3HXdnIF1SbKuoRN+9XO6IxTne3g+e2PpmyKci2GOuTnD
nYcApm8KX+RJ5AduEA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:18:42 2025 by rpki-client