Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
File: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft (raw, json)
Hash identifier: X+Hjzglq6idoBWxJJ/rHaOpLfe5aHblrdvrKKcJ83RI=
Subject key identifier: D9:C2:A5:78:EE:75:67:BE:AF:BF:AF:11:8F:DC:8D:11:81:4C:E8:60
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 019680FDDBDB383F0F6F5DA6C08697EEEB1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
Manifest number: 1530
Signing time: Tue 29 Apr 2025 10:00:42 +0000
Manifest this update: Tue 29 Apr 2025 10:00:42 +0000
Manifest next update: Wed 30 Apr 2025 10:00:42 +0000
Files and hashes: 1: 0PRh-Ryf5Bbnr0lOh4NNRU5Dvtk.roa (hash: jgK2NNDoTbWiQ7uIBzHm15T4lQ1IK4iXj6RZrP5o0x4=)
2: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl (hash: vi/exbbyiBu9/1Ecd4NAk0Fx5T4qAhYKtuxiYtVxhIU=)
3: 2LNh2IK4jZn1zUGBoSeuOCdHsXI.roa (hash: oJ1ixo11Dgt3gqct0Oh6zVb2kz2NqX0+yoE97/FL8Fc=)
4: Mj33PSIVDFEMWJHgu59FVh30wBE.roa (hash: LnMHKUsXF7KzdF90MCgfrbR5YbM5UFpQOfqwvOjdFkc=)
5: X3rPCUQOCzHRW1aOB1JMsXT6ETw.roa (hash: Mnw7vSeAR5wWc2r0nd1dxOLcS1XganxG0iGji5vuiZQ=)
6: eV94BXe8LtEfrEreyIQkc6VGevg.roa (hash: n/7ce91I2ejVxdCN2rHxzeGGcgk6A9ogkMPQOK3FmSQ=)
7: y219uopaZvXSdvuyVN0z8hSAj3g.roa (hash: yOxEDrbHVzQ3D4oMaRFodYyQEbnpgrKDN1hHuSZgDh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:db:db:38:3f:0f:6f:5d:a6:c0:86:97:ee:eb:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Apr 29 10:00:42 2025 GMT
Not After : Apr 30 10:00:42 2025 GMT
Subject: CN=d9c2a578ee7567beafbfaf118fdc8d11814ce860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:0a:a3:17:98:d7:6c:40:80:c1:6f:ef:ff:
35:fe:d4:96:71:ff:59:57:41:cf:34:34:48:a6:5a:
a1:6e:6d:40:fd:0e:58:69:e7:b7:5e:bc:87:a5:86:
8c:91:33:3a:87:36:c2:ab:21:9d:9e:55:38:3e:31:
b6:cd:1b:3c:28:4a:eb:b4:aa:b2:16:a5:b1:be:8e:
c1:cb:01:2c:fd:db:48:c4:7a:3d:83:60:51:28:23:
b0:bf:e3:85:d4:36:6a:52:c8:26:85:d7:eb:18:95:
fa:a4:c5:14:88:14:54:ee:eb:bf:d0:4a:72:e9:c3:
b7:1a:d5:4a:dd:f1:3f:17:18:af:16:be:75:2f:4f:
42:15:5d:aa:49:cd:a9:cb:bd:89:ed:17:82:da:23:
c5:e1:90:8f:66:b9:ac:50:14:73:cf:04:a6:bf:40:
cd:b5:c8:f0:eb:0c:86:58:f9:60:d9:6b:70:75:d6:
22:3c:16:3e:9d:1d:39:a3:0e:86:b6:8c:83:f1:4f:
3b:ef:b5:ff:48:6c:49:e0:0d:69:9f:b5:8c:d9:41:
64:c7:a7:6f:44:ca:78:7b:f8:df:9f:02:6f:7b:bb:
0e:13:80:1d:3e:92:de:7b:10:eb:b7:90:fb:d9:3f:
62:84:1e:ee:a6:e0:3d:7e:82:a1:f9:e3:77:9d:c6:
7f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C2:A5:78:EE:75:67:BE:AF:BF:AF:11:8F:DC:8D:11:81:4C:E8:60
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:dd:ca:e5:26:cd:db:4d:99:44:30:d1:54:61:6a:da:e5:c4:
74:d4:44:3e:0a:1f:7d:96:ff:c4:cc:7b:d6:7e:84:05:9d:f8:
23:d3:2a:19:0b:e5:08:c5:84:dc:90:d8:a6:79:41:ac:57:a8:
de:c7:2a:1d:5e:7a:cd:73:95:80:c8:1f:a7:d7:3f:b9:d2:e9:
44:02:4f:82:62:a3:10:be:6e:0c:61:b3:0e:6b:00:95:7c:83:
d9:83:1d:b5:db:e0:47:da:a2:22:a4:b1:63:87:bf:81:fd:76:
d8:18:0a:13:7a:53:f8:b1:cc:dc:ae:ea:2a:d1:44:25:5a:38:
9c:c8:5a:18:34:e5:e5:56:91:1c:88:ae:62:64:70:ab:f2:e5:
55:bd:8d:94:89:58:2a:e9:f1:59:09:7b:2b:5e:d9:fc:d1:e5:
05:62:6e:2b:b8:35:85:ed:3f:dc:f3:a0:24:2b:cd:09:9d:4a:
22:d9:a8:a2:a1:78:05:28:13:a9:d7:e0:b5:52:64:02:f2:88:
89:20:e7:25:b0:15:78:33:80:2c:75:3e:a8:9d:65:dd:05:c5:
f9:b7:4b:bd:ce:c2:c3:00:83:1d:eb:a2:84:c0:4e:61:22:23:
17:33:1e:87:d6:ea:06:c3:ef:d9:6d:af:a3:e2:56:3f:30:6f:
a1:85:86:a2
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZaA/dvbOD8Pb12mwIaX7useMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMDYxYTM5ZjBhMDM3OTIzMTEzZDZiOGJiOWI1YmRhYjVi
MmY0NjYwHhcNMjUwNDI5MTAwMDQyWhcNMjUwNDMwMTAwMDQyWjAzMTEwLwYDVQQD
EyhkOWMyYTU3OGVlNzU2N2JlYWZiZmFmMTE4ZmRjOGQxMTgxNGNlODYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjwKoxeY12xAgMFv7/81/tSWcf9Z
V0HPNDRIplqhbm1A/Q5Yaee3XryHpYaMkTM6hzbCqyGdnlU4PjG2zRs8KErrtKqy
FqWxvo7BywEs/dtIxHo9g2BRKCOwv+OF1DZqUsgmhdfrGJX6pMUUiBRU7uu/0Epy
6cO3GtVK3fE/FxivFr51L09CFV2qSc2py72J7ReC2iPF4ZCPZrmsUBRzzwSmv0DN
tcjw6wyGWPlg2WtwddYiPBY+nR05ow6GtoyD8U8777X/SGxJ4A1pn7WM2UFkx6dv
RMp4e/jfnwJve7sOE4AdPpLeexDrt5D72T9ihB7upuA9foKh+eN3ncZ/ZwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNnCpXjudWe+r7+vEY/cjRGBTOhgMB8GA1UdIwQY
MBaAFPsGGjnwoDeSMRPWuLubW9q1svRmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS13WWFPZkNnTjVJeEU5YTR1NXRiMnJXeTlHWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvYTMyOTRiLWQ0NzgtNGRiZC1hYWU1
LWZkMTY3YWQ5MmE5ZC8xLzEtd1lhT2ZDZ041SXhFOWE0dTV0YjJyV3k5R1kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2YzL2EzMjk0Yi1kNDc4LTRkYmQtYWFlNS1mZDE2N2FkOTJh
OWQvMS8xLXdZYU9mQ2dONUl4RTlhNHU1dGIycld5OUdZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjt3K
5SbN202ZRDDRVGFq2uXEdNREPgoffZb/xMx71n6EBZ34I9MqGQvlCMWE3JDYpnlB
rFeo3scqHV56zXOVgMgfp9c/udLpRAJPgmKjEL5uDGGzDmsAlXyD2YMdtdvgR9qi
IqSxY4e/gf122BgKE3pT+LHM3K7qKtFEJVo4nMhaGDTl5VaRHIiuYmRwq/LlVb2N
lIlYKunxWQl7K17Z/NHlBWJuK7g1he0/3POgJCvNCZ1KItmooqF4BSgTqdfgtVJk
AvKIiSDnJbAVeDOALHU+qJ1l3QXF+bdLvc7CwwCDHeuihMBOYSIjFzMeh9bqBsPv
2W2vo+JWPzBvoYWGog==
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:50:44 2025 by rpki-client