Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft
File: fE1IJUsiup1SREgNc0E0brz1wPc.mft (raw, json)
Hash identifier: gt/Vt0h3rsj7vlpNZom17yiq2+r6fLXumKu1DG3vez4=
Subject key identifier: DD:0F:0B:EA:E2:89:47:B8:2A:B6:D3:F5:4E:EE:25:92:BA:D5:86:31
Authority key identifier: 7C:4D:48:25:4B:22:BA:9D:52:44:48:0D:73:41:34:6E:BC:F5:C0:F7
Certificate issuer: /CN=7c4d48254b22ba9d5244480d7341346ebcf5c0f7
Certificate serial: 0196DDB01A0E986B596E27F5A3B69024D49F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE1IJUsiup1SREgNc0E0brz1wPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft
Manifest number: 0354
Signing time: Sat 17 May 2025 10:00:27 +0000
Manifest this update: Sat 17 May 2025 10:00:27 +0000
Manifest next update: Sun 18 May 2025 10:00:27 +0000
Files and hashes: 1: fE1IJUsiup1SREgNc0E0brz1wPc.crl (hash: PD8CVU4r66K7OEMadt1M+zeFgo+Ptfo5chn/me5hXdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fE1IJUsiup1SREgNc0E0brz1wPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dd:b0:1a:0e:98:6b:59:6e:27:f5:a3:b6:90:24:d4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4d48254b22ba9d5244480d7341346ebcf5c0f7
Validity
Not Before: May 17 10:00:27 2025 GMT
Not After : May 18 10:00:27 2025 GMT
Subject: CN=dd0f0beae28947b82ab6d3f54eee2592bad58631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b0:e6:03:4b:6f:da:25:11:b5:1b:ce:1f:a4:
bd:57:ea:f6:a9:73:69:07:cf:47:b4:5f:cb:05:8b:
dd:d5:8a:8d:ac:41:ec:12:24:eb:e4:ee:fc:20:2f:
06:67:7d:12:35:58:fd:50:8a:e8:27:c1:52:42:ff:
4d:fe:77:07:b3:fc:d4:ab:b3:5a:0e:e8:a5:fc:6c:
9c:6f:00:45:0d:9f:05:2a:e3:8a:23:15:d8:4c:0c:
32:a0:c5:58:5b:69:ab:89:c6:fa:31:15:0f:a9:36:
08:ec:ab:04:80:98:7a:dd:bc:b1:4b:bd:d3:f4:9e:
5f:d8:4b:bf:a5:bb:a7:17:52:7a:eb:cc:e2:6d:ca:
47:eb:e8:2f:97:38:b7:15:46:83:42:25:51:fb:5a:
42:2f:85:0e:f3:33:f9:c1:b0:73:ce:db:1f:ff:11:
f8:dc:53:f1:68:e4:32:0d:93:8e:e1:94:c5:6d:71:
c0:da:a4:c4:27:21:d5:f1:4a:ab:5e:dc:c7:3e:6b:
fb:ce:88:96:38:e2:84:0b:e5:0d:ab:1d:6d:98:c3:
93:31:65:5a:1f:4a:28:9a:6e:c9:b9:a6:84:34:ed:
98:98:ab:5b:19:be:46:4c:04:71:54:69:f9:8e:82:
14:98:d7:d3:33:88:18:a3:2a:73:e1:4d:24:46:dc:
6d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0F:0B:EA:E2:89:47:B8:2A:B6:D3:F5:4E:EE:25:92:BA:D5:86:31
X509v3 Authority Key Identifier:
keyid:7C:4D:48:25:4B:22:BA:9D:52:44:48:0D:73:41:34:6E:BC:F5:C0:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE1IJUsiup1SREgNc0E0brz1wPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e2:7f:77:8a:0b:22:3d:cd:f0:6d:69:a3:b7:7b:b3:db:81:
01:22:21:1e:0b:83:9f:ed:12:ac:3e:94:81:d9:aa:81:98:63:
29:49:b9:74:a3:45:1a:8f:ad:95:44:e7:60:18:5a:07:66:b2:
82:a1:a5:95:f9:6f:e9:2d:ca:92:03:48:ec:f3:04:07:0b:fe:
a2:61:54:b2:c1:e6:67:02:7d:59:ca:74:03:cb:bb:3d:67:35:
ac:2a:d3:b5:d6:ec:94:d8:62:59:d8:ec:ed:0a:6d:6b:61:d8:
54:2a:fc:ab:ee:61:c9:ff:fe:82:7e:76:bb:2a:ff:37:fb:c4:
0c:3c:c9:7d:e6:91:5e:82:88:c5:39:b4:6e:a5:17:d2:80:0e:
11:84:2e:de:26:20:ca:4c:5b:28:56:e0:43:59:9f:aa:7a:0d:
35:07:62:f6:ed:e9:a7:95:79:23:37:a5:0c:9a:ea:e9:34:a0:
38:27:bf:48:0e:f6:b5:cf:43:bb:d4:f9:f8:73:ca:b0:ae:14:
5f:e9:af:86:bb:7e:7b:ac:77:eb:e9:02:62:cf:79:fd:39:37:
0b:08:d0:db:39:b6:38:48:21:ff:82:3d:5b:6f:67:12:26:2f:
ae:8a:60:4f:ee:49:3d:44:23:f1:87:53:f9:f7:33:eb:d7:43:
ed:c6:50:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbdsBoOmGtZbif1o7aQJNSfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNGQ0ODI1NGIyMmJhOWQ1MjQ0NDgwZDczNDEzNDZlYmNm
NWMwZjcwHhcNMjUwNTE3MTAwMDI3WhcNMjUwNTE4MTAwMDI3WjAzMTEwLwYDVQQD
EyhkZDBmMGJlYWUyODk0N2I4MmFiNmQzZjU0ZWVlMjU5MmJhZDU4NjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLDmA0tv2iURtRvOH6S9V+r2qXNp
B89HtF/LBYvd1YqNrEHsEiTr5O78IC8GZ30SNVj9UIroJ8FSQv9N/ncHs/zUq7Na
Duil/GycbwBFDZ8FKuOKIxXYTAwyoMVYW2mricb6MRUPqTYI7KsEgJh63byxS73T
9J5f2Eu/pbunF1J668zibcpH6+gvlzi3FUaDQiVR+1pCL4UO8zP5wbBzztsf/xH4
3FPxaOQyDZOO4ZTFbXHA2qTEJyHV8UqrXtzHPmv7zoiWOOKEC+UNqx1tmMOTMWVa
H0oomm7JuaaENO2YmKtbGb5GTARxVGn5joIUmNfTM4gYoypz4U0kRtxt2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0PC+riiUe4KrbT9U7uJZK61YYxMB8GA1UdIwQY
MBaAFHxNSCVLIrqdUkRIDXNBNG689cD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkUxSUpVc2l1cDFTUkVnTmMwRTBicnoxd1BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lMTFjZjgtY2FlMC00Y2MzLWJlYTAt
NGM4YjVkYWJkYWM0LzEvZkUxSUpVc2l1cDFTUkVnTmMwRTBicnoxd1BjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9lMTFjZjgtY2FlMC00Y2MzLWJlYTAtNGM4YjVkYWJkYWM0
LzEvZkUxSUpVc2l1cDFTUkVnTmMwRTBicnoxd1BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdeJ/d4oL
Ij3N8G1po7d7s9uBASIhHguDn+0SrD6UgdmqgZhjKUm5dKNFGo+tlUTnYBhaB2ay
gqGllflv6S3KkgNI7PMEBwv+omFUssHmZwJ9Wcp0A8u7PWc1rCrTtdbslNhiWdjs
7Qpta2HYVCr8q+5hyf/+gn52uyr/N/vEDDzJfeaRXoKIxTm0bqUX0oAOEYQu3iYg
ykxbKFbgQ1mfqnoNNQdi9u3pp5V5IzelDJrq6TSgOCe/SA72tc9Du9T5+HPKsK4U
X+mvhrt+e6x36+kCYs95/Tk3CwjQ2zm2OEgh/4I9W29nEiYvropgT+5JPUQj8YdT
+fcz69dD7cZQnA==
-----END CERTIFICATE-----
Generated at Sat May 17 19:34:16 2025 by rpki-client