Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
File: isfq5knZVHsK0KsAerTopI3tTV0.mft (raw, json)
Hash identifier: 5wUMcvtdbkxGO6wSxMzQHb8N/mZKMivKnLs0+zwO41c=
Subject key identifier: 4B:0D:4C:53:16:F8:BD:FF:85:C3:0C:91:43:A4:89:65:AD:B1:99:55
Authority key identifier: 8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
Certificate issuer: /CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Certificate serial: 0196B10E3892A368EDE3172CC429FE071478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
Manifest number: 1533
Signing time: Thu 08 May 2025 18:00:21 +0000
Manifest this update: Thu 08 May 2025 18:00:21 +0000
Manifest next update: Fri 09 May 2025 18:00:21 +0000
Files and hashes: 1: isfq5knZVHsK0KsAerTopI3tTV0.crl (hash: 2Z+RIvBoojrA9qZUoDqYig/W9hv9Jp1q4PjzDXzOcRY=)
2: vASHsaghbXrziZGVrZp3z_dQ0hY.roa (hash: +D8Rri+Xk/SVSUJL6LzaxDMlSw5qtTcPP6AjI3TjSIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:0e:38:92:a3:68:ed:e3:17:2c:c4:29:fe:07:14:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Validity
Not Before: May 8 18:00:21 2025 GMT
Not After : May 9 18:00:21 2025 GMT
Subject: CN=4b0d4c5316f8bdff85c30c9143a48965adb19955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:d2:85:f6:1e:c7:ad:11:62:b0:6e:8b:98:
98:a4:e4:32:0d:a5:5e:3f:67:a4:b5:82:f1:79:90:
55:5c:74:6c:13:ed:10:e6:f7:82:7b:4c:76:8f:98:
15:2f:0d:b6:96:de:35:69:3e:65:6a:1e:7d:01:f9:
25:a5:c1:72:60:5f:f5:95:71:bc:e3:c6:ed:6b:08:
c1:cd:0f:fe:80:60:c1:ba:c5:b7:8d:3d:95:97:0b:
0d:aa:f2:d0:58:08:3a:18:ce:10:33:35:7a:9b:5c:
c5:0e:b0:a7:fc:b8:d0:64:b2:ad:16:28:8e:1c:57:
71:81:9e:c8:a0:c6:c2:0f:5c:34:5d:16:bb:8f:ad:
43:cd:c4:e3:d4:c6:1e:c3:1f:00:af:31:65:65:b0:
99:78:70:ec:f0:74:3e:19:9d:b4:63:bf:bc:c5:78:
6f:f6:6d:e3:aa:72:dd:3e:a3:c1:18:4b:1d:10:94:
a3:b7:de:1d:06:00:67:03:c8:b3:59:18:18:23:a4:
8c:7e:73:c2:b9:71:0f:eb:85:8c:fb:9f:c3:80:66:
d8:2f:bd:58:27:6f:80:3c:a5:01:37:2f:79:22:d9:
e6:7d:04:82:3b:8d:45:d5:2d:c6:63:77:c8:2b:76:
8a:2c:a9:26:36:15:84:51:70:8d:0a:cd:ea:b1:f6:
2b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0D:4C:53:16:F8:BD:FF:85:C3:0C:91:43:A4:89:65:AD:B1:99:55
X509v3 Authority Key Identifier:
keyid:8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:cf:eb:05:39:0a:f5:c6:62:0e:44:53:26:60:33:48:7a:02:
41:1f:bc:48:45:a2:66:bc:80:70:d7:91:65:f0:57:62:39:6d:
de:f3:23:ce:35:2d:4d:5e:36:83:bd:96:00:69:31:04:a6:ac:
d8:fc:d8:7a:88:34:57:22:2c:a2:06:4b:a1:a5:fd:91:0f:86:
89:a4:99:81:fc:2b:bb:38:f5:99:d7:9b:c5:aa:51:21:68:3a:
62:08:6a:5a:be:20:27:f7:a4:8f:b1:8d:61:26:c5:98:51:02:
f8:73:7f:20:ca:3b:5f:56:7d:ee:a5:39:0f:2a:1c:6d:2f:d6:
ad:0d:18:56:96:78:de:50:09:0a:3c:ae:82:fb:dd:e6:c3:24:
5e:ab:7a:70:0e:d2:5b:1e:e6:9b:b0:b7:a4:ca:c8:24:83:61:
4f:27:63:10:84:9b:d5:61:d8:b3:e7:a5:9d:40:a9:88:03:cc:
4c:fb:a3:2e:3f:87:eb:83:04:45:60:60:93:e5:b0:52:e4:a6:
a1:9a:38:58:d6:4c:39:0f:d1:4c:6a:ec:02:4a:7e:f5:d1:b9:
ff:58:4e:87:94:b9:07:aa:fc:a4:50:15:0b:c2:70:43:46:fb:
10:d5:ce:a5:8b:da:65:81:c0:bb:1a:04:02:fe:7b:4a:99:dd:
7a:b9:78:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaxDjiSo2jt4xcsxCn+BxR4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYzdlYWU2NDlkOTU0N2IwYWQwYWIwMDdhYjRlOGE0OGRl
ZDRkNWQwHhcNMjUwNTA4MTgwMDIxWhcNMjUwNTA5MTgwMDIxWjAzMTEwLwYDVQQD
Eyg0YjBkNGM1MzE2ZjhiZGZmODVjMzBjOTE0M2E0ODk2NWFkYjE5OTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEbShfYex60RYrBui5iYpOQyDaVe
P2ektYLxeZBVXHRsE+0Q5veCe0x2j5gVLw22lt41aT5lah59AfklpcFyYF/1lXG8
48btawjBzQ/+gGDBusW3jT2VlwsNqvLQWAg6GM4QMzV6m1zFDrCn/LjQZLKtFiiO
HFdxgZ7IoMbCD1w0XRa7j61DzcTj1MYewx8ArzFlZbCZeHDs8HQ+GZ20Y7+8xXhv
9m3jqnLdPqPBGEsdEJSjt94dBgBnA8izWRgYI6SMfnPCuXEP64WM+5/DgGbYL71Y
J2+APKUBNy95ItnmfQSCO41F1S3GY3fIK3aKLKkmNhWEUXCNCs3qsfYrZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsNTFMW+L3/hcMMkUOkiWWtsZlVMB8GA1UdIwQY
MBaAFIrH6uZJ2VR7CtCrAHq06KSN7U1dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXNmcTVrblpWSHNLMEtzQWVyVG9wSTN0VFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC82N2RiMGItMWQxMC00Yzk3LTlhZjYt
YWMwMWYwYzU2NjJiLzEvaXNmcTVrblpWSHNLMEtzQWVyVG9wSTN0VFYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC82N2RiMGItMWQxMC00Yzk3LTlhZjYtYWMwMWYwYzU2NjJi
LzEvaXNmcTVrblpWSHNLMEtzQWVyVG9wSTN0VFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8/rBTkK
9cZiDkRTJmAzSHoCQR+8SEWiZryAcNeRZfBXYjlt3vMjzjUtTV42g72WAGkxBKas
2PzYeog0VyIsogZLoaX9kQ+GiaSZgfwruzj1mdebxapRIWg6YghqWr4gJ/ekj7GN
YSbFmFEC+HN/IMo7X1Z97qU5DyocbS/WrQ0YVpZ43lAJCjyugvvd5sMkXqt6cA7S
Wx7mm7C3pMrIJINhTydjEISb1WHYs+elnUCpiAPMTPujLj+H64MERWBgk+WwUuSm
oZo4WNZMOQ/RTGrsAkp+9dG5/1hOh5S5B6r8pFAVC8JwQ0b7ENXOpYvaZYHAuxoE
Av57Spnderl4aQ==
-----END CERTIFICATE-----
Generated at Fri May 9 02:51:28 2025 by rpki-client