Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json)
Hash identifier: /dUyeJCFJG4MioZ88QquxSjleiS/OXmxgnmI/u57gvk=
Subject key identifier: 4E:1B:BD:C5:98:A5:C7:C2:21:09:9E:18:B0:67:CB:7C:99:CC:58:39
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 0196797B61186AE9535A56D095C47056D08F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
Manifest number: 1517
Signing time: Sun 27 Apr 2025 23:00:51 +0000
Manifest this update: Sun 27 Apr 2025 23:00:51 +0000
Manifest next update: Mon 28 Apr 2025 23:00:51 +0000
Files and hashes: 1: 5yD7BMGOx_QxkEbApVWEDtAyJTc.roa (hash: 7HUgyfi698gsVlFHfeKtkaA7m5SlO3zRzjiuZrYZF5I=)
2: RqGemHASq4a3yEktWB8WjU_L-0c.roa (hash: vaorPMqPLbSGClI0kn7HOZCELp91/Z7k6rtXVGnH8yc=)
3: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: eNkAtGv+Nm+kj2oV9m8jB8H/8Esy11yKoYusaO2Y1R4=)
4: ryABSBgMLByw-XFfZ_8SVzjoEH4.roa (hash: Qmf/YZ6xzpzD9CwzHR2N62ZnpRrAxDW7s9aRsiehW1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:61:18:6a:e9:53:5a:56:d0:95:c4:70:56:d0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Apr 27 23:00:51 2025 GMT
Not After : Apr 28 23:00:51 2025 GMT
Subject: CN=4e1bbdc598a5c7c221099e18b067cb7c99cc5839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:4f:87:d8:d2:d5:22:cf:6f:1a:8a:38:1f:
98:4f:2b:8b:e9:3f:83:6c:5a:3f:30:0a:d8:5a:de:
9a:36:eb:0d:0b:be:68:8c:ca:eb:27:34:20:6a:02:
95:5e:cc:47:40:9c:a5:c6:3c:43:ad:3e:40:d7:d9:
0c:51:7b:c6:d3:dc:11:50:1e:d3:67:f6:c6:a1:cc:
10:f1:ff:e4:6e:67:1d:82:57:a6:8a:4a:f3:c1:a9:
23:97:e4:8d:3b:78:e5:7f:7b:a5:93:b4:17:ca:7f:
71:6c:ba:33:59:5a:f9:a2:b3:fa:36:09:6f:11:b6:
ed:5e:b3:a0:3e:b1:90:86:76:af:0f:d2:9a:e5:8d:
e6:45:45:1e:18:cc:e2:31:18:81:45:9b:1c:6f:1e:
8d:42:92:49:a7:55:d9:45:97:31:79:22:ac:d4:96:
c4:24:94:72:68:b1:5c:6f:8e:1e:aa:92:dc:08:be:
b9:35:b5:ab:55:e7:5c:6f:72:af:89:07:67:2f:2e:
9c:51:b0:2b:8c:0a:42:12:fe:21:66:80:90:7b:2e:
43:e8:34:1e:c5:5c:d3:69:51:06:e1:ef:30:42:71:
24:83:be:64:34:84:82:87:f7:56:3d:f3:18:1d:e7:
eb:e9:b7:9f:ea:e1:0d:a2:2f:44:23:01:c8:24:f4:
18:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1B:BD:C5:98:A5:C7:C2:21:09:9E:18:B0:67:CB:7C:99:CC:58:39
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:35:de:36:42:6d:97:e5:fd:ba:f3:2c:2b:55:d8:26:e9:66:
9d:06:b2:7b:75:c1:46:af:e7:43:86:2c:17:d4:85:42:ff:af:
94:95:75:06:51:34:5b:89:c0:de:c5:66:cf:b4:42:a9:aa:e9:
bb:04:70:2d:54:6d:28:89:34:1d:19:40:b9:db:92:b1:0e:cf:
79:40:21:f0:31:82:80:eb:ac:37:b6:68:78:03:dc:cf:b8:43:
ba:1b:45:ab:51:97:ad:40:74:01:55:a0:0a:f0:70:2b:69:c4:
94:77:dc:33:2a:81:04:54:0e:87:10:2e:a3:a0:35:e0:e1:1c:
83:37:0a:35:c1:c3:d3:6d:f0:2d:08:f1:2d:95:d4:ca:86:cf:
e3:fc:10:15:dd:0d:dc:b1:b6:82:de:d0:f4:a2:62:ab:d2:51:
68:2d:f1:06:a7:3a:82:98:37:e5:d3:ba:bf:64:63:26:a3:79:
7a:62:ce:c6:48:e8:68:64:ba:92:a1:24:88:d1:b2:f9:a7:5e:
70:50:3c:0b:89:fb:e2:41:48:d7:25:a9:57:08:78:60:74:42:
a1:ac:65:fa:40:b4:e5:05:ac:1a:db:7c:b0:ab:3f:f1:8f:f0:
81:fa:cf:32:63:83:db:02:7c:33:2c:fb:a9:07:08:7b:36:77:
a6:10:b3:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5e2EYaulTWlbQlcRwVtCPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YjAyMDMwODg2NWMzMzYwZGFiMTlmM2E1NzAzMzQxODY0
ZTlmNTAwHhcNMjUwNDI3MjMwMDUxWhcNMjUwNDI4MjMwMDUxWjAzMTEwLwYDVQQD
Eyg0ZTFiYmRjNTk4YTVjN2MyMjEwOTllMThiMDY3Y2I3Yzk5Y2M1ODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG9Ph9jS1SLPbxqKOB+YTyuL6T+D
bFo/MArYWt6aNusNC75ojMrrJzQgagKVXsxHQJylxjxDrT5A19kMUXvG09wRUB7T
Z/bGocwQ8f/kbmcdglemikrzwakjl+SNO3jlf3ulk7QXyn9xbLozWVr5orP6Nglv
EbbtXrOgPrGQhnavD9Ka5Y3mRUUeGMziMRiBRZscbx6NQpJJp1XZRZcxeSKs1JbE
JJRyaLFcb44eqpLcCL65NbWrVedcb3KviQdnLy6cUbArjApCEv4hZoCQey5D6DQe
xVzTaVEG4e8wQnEkg75kNISCh/dWPfMYHefr6bef6uENoi9EIwHIJPQY+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4bvcWYpcfCIQmeGLBny3yZzFg5MB8GA1UdIwQY
MBaAFHewIDCIZcM2DasZ86VwM0GGTp9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kMmFhYjAtODM2My00YjE0LTljYzIt
YzhiYjhlYTM5ODA0LzEvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9kMmFhYjAtODM2My00YjE0LTljYzItYzhiYjhlYTM5ODA0
LzEvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTXeNkJt
l+X9uvMsK1XYJulmnQaye3XBRq/nQ4YsF9SFQv+vlJV1BlE0W4nA3sVmz7RCqarp
uwRwLVRtKIk0HRlAuduSsQ7PeUAh8DGCgOusN7ZoeAPcz7hDuhtFq1GXrUB0AVWg
CvBwK2nElHfcMyqBBFQOhxAuo6A14OEcgzcKNcHD023wLQjxLZXUyobP4/wQFd0N
3LG2gt7Q9KJiq9JRaC3xBqc6gpg35dO6v2RjJqN5emLOxkjoaGS6kqEkiNGy+ade
cFA8C4n74kFI1yWpVwh4YHRCoaxl+kC05QWsGtt8sKs/8Y/wgfrPMmOD2wJ8Myz7
qQcIezZ3phCzXg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:11:42 2025 by rpki-client