Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
File: fVexU-7RELy9FNx-M_1H8C4v4HE.mft (raw, json)
Hash identifier: eX/I6CFTlbVYVn7pITubLrF1wrvWTQUJxSVDo+N7XCU=
Subject key identifier: 67:1E:00:16:57:0A:8E:19:90:F2:4B:BA:4F:91:B0:1A:78:DC:00:FC
Authority key identifier: 7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
Certificate issuer: /CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Certificate serial: 019675D5594416F1B1195B7B05987674D9F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 06:00:38 +0000
Manifest this update: Sun 27 Apr 2025 06:00:38 +0000
Manifest next update: Mon 28 Apr 2025 06:00:38 +0000
Files and hashes: 1: 1gktZR41lM7jL9DWPWwIpWV6M78.roa (hash: HJiBs8EKqMUy6AK9Z/fItBE1opDLfro1xaIJHGboLfU=)
2: fVexU-7RELy9FNx-M_1H8C4v4HE.crl (hash: gIwcWpElA3jMBDDOMKZR731CwDQAM9v/r5z9ovIGQkA=)
3: kUIltMqyJJ6z_MdFBE4UK_gpE0M.roa (hash: pWOc8zM/cAP0pnHrLKIMmGeqVgPcNsErRAC9f0Wl2a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:59:44:16:f1:b1:19:5b:7b:05:98:76:74:d9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Validity
Not Before: Apr 27 06:00:38 2025 GMT
Not After : Apr 28 06:00:38 2025 GMT
Subject: CN=671e0016570a8e1990f24bba4f91b01a78dc00fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:ec:03:6e:23:0a:2d:73:58:87:e9:fc:34:
85:93:f4:7d:47:82:09:b5:70:61:ce:33:a1:68:58:
74:06:2e:e1:10:02:48:07:2d:42:65:6b:4e:75:a0:
e4:4f:45:00:f6:31:4f:41:59:d5:27:51:bd:b9:cf:
bf:f5:11:6c:cb:1d:9a:98:25:be:8e:4e:da:9c:42:
70:cd:f3:81:fb:03:5a:c4:fb:1a:c0:73:f6:fb:f6:
a6:ae:71:79:7a:7f:e8:12:b8:32:08:42:51:5d:63:
bc:82:d5:d8:3f:65:7e:32:4c:0c:76:6b:42:ce:c5:
0a:ef:fa:3a:c2:8d:ad:83:95:33:3a:83:e7:90:3b:
31:17:c6:7b:5d:31:70:ef:af:bd:30:fb:58:bb:ad:
0e:d3:59:0d:19:44:02:5e:c0:60:ef:a7:42:9e:10:
dd:40:74:11:61:05:02:21:e4:86:06:99:e3:88:6a:
81:e9:d2:69:50:eb:e2:cc:ea:a1:30:59:b1:63:a8:
b8:70:45:c7:21:b9:0f:94:6d:54:9b:e8:f0:7e:a3:
dc:6d:e2:43:37:95:2a:eb:b3:21:53:b4:e1:8f:40:
f7:98:e6:04:1b:b0:df:ca:00:c3:81:95:a8:a8:48:
9a:f5:45:09:1a:c6:23:a4:8f:40:34:84:3b:11:b9:
90:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1E:00:16:57:0A:8E:19:90:F2:4B:BA:4F:91:B0:1A:78:DC:00:FC
X509v3 Authority Key Identifier:
keyid:7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:31:59:02:b3:e7:de:98:23:f2:43:ec:1a:1c:da:3c:db:24:
b8:fd:82:0c:24:61:56:82:18:e0:3c:ac:e2:04:93:9a:46:bc:
a6:99:e6:4f:d8:da:8f:d6:0c:c6:1a:09:7c:7a:7d:31:f3:22:
be:91:af:1c:7c:6e:b1:95:cd:6c:3e:be:ea:da:3e:ab:e8:c3:
7a:93:e8:4a:cc:94:62:73:7b:51:1c:fc:b6:85:d0:75:23:ec:
76:dc:1b:fd:90:aa:3e:72:63:4e:dd:04:62:7c:ad:a7:a7:fc:
5a:6f:04:56:bb:bb:c7:83:31:9a:54:01:eb:c7:1f:11:d9:31:
4a:ff:ec:b3:e1:34:61:39:e5:42:85:8c:cb:44:5c:a6:bd:87:
f0:9a:41:65:6b:fc:15:4a:76:3b:96:15:ce:4d:d3:c1:ec:73:
29:50:28:88:2a:45:3c:61:1e:39:ef:6c:51:34:94:93:d1:9d:
e3:50:03:6f:79:90:51:81:4f:17:ed:b2:ad:40:76:79:8b:54:
0a:0c:e3:2a:a4:67:db:bb:7a:10:cc:03:80:d3:1e:cf:39:42:
28:60:b6:1e:24:f5:de:52:a1:6e:38:5a:8e:06:e1:dd:f1:2b:
14:d0:65:40:de:1b:58:6a:49:6a:44:cd:6a:6a:22:dc:9a:03:
53:c5:ff:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ11VlEFvGxGVt7BZh2dNn5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTdiMTUzZWVkMTEwYmNiZDE0ZGM3ZTMzZmQ0N2YwMmUy
ZmUwNzEwHhcNMjUwNDI3MDYwMDM4WhcNMjUwNDI4MDYwMDM4WjAzMTEwLwYDVQQD
Eyg2NzFlMDAxNjU3MGE4ZTE5OTBmMjRiYmE0ZjkxYjAxYTc4ZGMwMGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVrsA24jCi1zWIfp/DSFk/R9R4IJ
tXBhzjOhaFh0Bi7hEAJIBy1CZWtOdaDkT0UA9jFPQVnVJ1G9uc+/9RFsyx2amCW+
jk7anEJwzfOB+wNaxPsawHP2+/amrnF5en/oErgyCEJRXWO8gtXYP2V+MkwMdmtC
zsUK7/o6wo2tg5UzOoPnkDsxF8Z7XTFw76+9MPtYu60O01kNGUQCXsBg76dCnhDd
QHQRYQUCIeSGBpnjiGqB6dJpUOvizOqhMFmxY6i4cEXHIbkPlG1Um+jwfqPcbeJD
N5Uq67MhU7Thj0D3mOYEG7DfygDDgZWoqEia9UUJGsYjpI9ANIQ7EbmQZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGceABZXCo4ZkPJLuk+RsBp43AD8MB8GA1UdIwQY
MBaAFH1XsVPu0RC8vRTcfjP9R/AuL+BxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZleFUtN1JFTHk5Rk54LU1fMUg4QzR2NEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hOGQ2ZDgtZDJhNS00YWYyLWJiNDQt
MDgwNzA5MWFhNzdkLzEvZlZleFUtN1JFTHk5Rk54LU1fMUg4QzR2NEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hOGQ2ZDgtZDJhNS00YWYyLWJiNDQtMDgwNzA5MWFhNzdk
LzEvZlZleFUtN1JFTHk5Rk54LU1fMUg4QzR2NEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARTFZArPn
3pgj8kPsGhzaPNskuP2CDCRhVoIY4Dys4gSTmka8ppnmT9jaj9YMxhoJfHp9MfMi
vpGvHHxusZXNbD6+6to+q+jDepPoSsyUYnN7URz8toXQdSPsdtwb/ZCqPnJjTt0E
Ynytp6f8Wm8EVru7x4MxmlQB68cfEdkxSv/ss+E0YTnlQoWMy0Rcpr2H8JpBZWv8
FUp2O5YVzk3TwexzKVAoiCpFPGEeOe9sUTSUk9Gd41ADb3mQUYFPF+2yrUB2eYtU
CgzjKqRn27t6EMwDgNMezzlCKGC2HiT13lKhbjhajgbh3fErFNBlQN4bWGpJakTN
amoi3JoDU8X/Fg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 14:35:12 2025 by rpki-client