
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
File: fi7aaVKwPoukWZe-YV16vuF4T4M.mft (raw, json)
Hash identifier: p22TCfnN1GQzQDkdbQJ3NdLSOTtuAVucq++LCu7AyAw=
Subject key identifier: CE:40:09:F0:60:35:D7:59:BA:DD:1F:AA:D1:5E:1B:38:33:2F:5D:3E
Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
Certificate issuer: /CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Certificate serial: 0196CB3C2C5D78DF7E9C0FEAC0DF2E3B56D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
Manifest number: 0961
Signing time: Tue 13 May 2025 20:00:40 +0000
Manifest this update: Tue 13 May 2025 20:00:40 +0000
Manifest next update: Wed 14 May 2025 20:00:40 +0000
Files and hashes: 1: CIh-n620dapiChf7Qz9UJJ0kAYM.roa (hash: FBemJczTUCPxIUZPk0jDQbmKS7wDmu5CZBeaJ9h/Hsg=)
2: fi7aaVKwPoukWZe-YV16vuF4T4M.crl (hash: kjz49zyW4gPyYW0e34P/hJAq26Atke+16i3MyuZkvRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:3c:2c:5d:78:df:7e:9c:0f:ea:c0:df:2e:3b:56:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Validity
Not Before: May 13 20:00:40 2025 GMT
Not After : May 14 20:00:40 2025 GMT
Subject: CN=ce4009f06035d759badd1faad15e1b38332f5d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:66:c4:9e:a0:18:c5:1c:20:77:fa:be:97:
61:f4:38:3a:79:fb:2f:7e:d8:2e:b1:8d:76:c3:17:
1a:03:9d:cb:ee:04:1b:ac:bd:01:06:c7:dd:b2:a5:
2d:d9:5e:63:d6:81:e9:1f:a3:01:d6:d3:e3:3a:83:
56:a4:ee:39:fc:34:b0:ed:24:8c:be:99:cd:59:15:
b6:9c:e1:e2:11:a9:9f:e3:09:f0:37:69:02:14:a8:
0c:b7:02:ff:8a:e5:75:ca:63:8e:ed:e7:4a:80:e8:
5c:85:cf:b5:c0:f1:c4:88:d0:2a:86:e4:60:95:76:
b4:fd:d1:6b:a5:7b:3a:5b:65:8a:0b:b3:f4:a9:7d:
65:a4:98:4f:36:6e:f0:3a:19:c2:86:5a:c2:e8:04:
b4:16:d3:23:94:7b:7e:f7:41:56:36:e2:06:f5:39:
8d:3f:7f:36:af:b0:4f:42:af:9d:d2:22:cb:16:72:
40:85:2f:02:a8:b1:e5:62:26:6a:45:2f:85:38:1b:
29:61:21:f8:2c:b1:27:03:2d:48:d6:45:1b:13:00:
bd:6b:b0:dc:a7:05:81:98:20:8c:0a:99:a8:9c:59:
8b:01:cf:bb:b3:63:b2:12:fd:7e:45:77:b8:8a:1f:
a9:ec:8f:02:0c:67:e1:db:e3:ec:e4:4c:0b:18:44:
18:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:40:09:F0:60:35:D7:59:BA:DD:1F:AA:D1:5E:1B:38:33:2F:5D:3E
X509v3 Authority Key Identifier:
keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b7:31:87:b8:36:57:6e:f5:f6:0e:b5:82:d2:58:09:0f:1c:
e2:b8:b7:d3:36:93:a1:d8:37:01:b6:a3:62:39:4a:a2:5d:e6:
22:0f:f2:86:f9:29:4b:63:01:62:f6:52:c7:31:42:aa:b6:30:
1c:a0:6a:c4:e6:ff:7d:d6:d9:96:c0:e2:ff:75:8b:ca:65:4b:
f7:26:b5:03:00:f4:95:c8:86:bf:ab:0e:ac:b6:6a:bd:ff:b0:
f3:f1:41:7e:82:39:a3:a1:16:9a:fa:c9:76:8c:46:f4:ab:2a:
26:5e:67:70:67:84:23:58:75:75:f2:2b:f4:9e:d8:ed:c6:9e:
be:24:1c:8e:c4:0a:f4:a1:65:8c:2c:77:74:dd:08:99:ba:c5:
08:a9:6a:a6:0d:4c:d4:3f:3e:d1:b6:06:4a:9e:29:13:45:cf:
6e:8b:c7:6c:3b:68:12:13:07:d3:8c:e0:a9:12:fe:d9:a3:4b:
2f:69:3e:1c:cf:ed:9d:56:60:87:8e:5a:f1:6e:13:c8:04:ac:
95:67:27:5d:f1:f1:c1:b1:c2:b4:86:5a:6a:c2:f9:b5:14:73:
0e:be:04:64:d2:72:92:51:da:1b:5c:62:cb:83:e9:11:07:c3:
54:54:e1:dc:f2:cd:74:7f:d6:fe:99:17:bc:c4:f5:6d:2f:50:
80:74:08:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLPCxdeN9+nA/qwN8uO1bZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMmVkYTY5NTJiMDNlOGJhNDU5OTdiZTYxNWQ3YWJlZTE3
ODRmODMwHhcNMjUwNTEzMjAwMDQwWhcNMjUwNTE0MjAwMDQwWjAzMTEwLwYDVQQD
EyhjZTQwMDlmMDYwMzVkNzU5YmFkZDFmYWFkMTVlMWIzODMzMmY1ZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxRmxJ6gGMUcIHf6vpdh9Dg6efsv
ftgusY12wxcaA53L7gQbrL0BBsfdsqUt2V5j1oHpH6MB1tPjOoNWpO45/DSw7SSM
vpnNWRW2nOHiEamf4wnwN2kCFKgMtwL/iuV1ymOO7edKgOhchc+1wPHEiNAqhuRg
lXa0/dFrpXs6W2WKC7P0qX1lpJhPNm7wOhnChlrC6AS0FtMjlHt+90FWNuIG9TmN
P382r7BPQq+d0iLLFnJAhS8CqLHlYiZqRS+FOBspYSH4LLEnAy1I1kUbEwC9a7Dc
pwWBmCCMCpmonFmLAc+7s2OyEv1+RXe4ih+p7I8CDGfh2+Ps5EwLGEQYHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5ACfBgNddZut0fqtFeGzgzL10+MB8GA1UdIwQY
MBaAFH4u2mlSsD6LpFmXvmFder7heE+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmk3YWFWS3dQb3VrV1plLVlWMTZ2dUY0VDRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zODA0MDAtZGMyZS00OTRhLTg5MWEt
MmYyMzAwYjZlM2Q5LzEvZmk3YWFWS3dQb3VrV1plLVlWMTZ2dUY0VDRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zODA0MDAtZGMyZS00OTRhLTg5MWEtMmYyMzAwYjZlM2Q5
LzEvZmk3YWFWS3dQb3VrV1plLVlWMTZ2dUY0VDRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbcxh7g2
V2719g61gtJYCQ8c4ri30zaTodg3AbajYjlKol3mIg/yhvkpS2MBYvZSxzFCqrYw
HKBqxOb/fdbZlsDi/3WLymVL9ya1AwD0lciGv6sOrLZqvf+w8/FBfoI5o6EWmvrJ
doxG9KsqJl5ncGeEI1h1dfIr9J7Y7caeviQcjsQK9KFljCx3dN0ImbrFCKlqpg1M
1D8+0bYGSp4pE0XPbovHbDtoEhMH04zgqRL+2aNLL2k+HM/tnVZgh45a8W4TyASs
lWcnXfHxwbHCtIZaasL5tRRzDr4EZNJyklHaG1xiy4PpEQfDVFTh3PLNdH/W/pkX
vMT1bS9QgHQIfg==
-----END CERTIFICATE-----
Generated at Wed May 14 00:01:07 2025 by rpki-client