Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
File: fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft (raw, json)
Hash identifier: Og5ZN7M2mCd4Iz73UIl3oydk76RWSXq3NeBC44qTOI0=
Subject key identifier: B4:CD:7C:13:C7:DB:B0:DD:92:D1:89:F4:F0:57:79:82:70:5F:14:C7
Authority key identifier: 7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
Certificate issuer: /CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Certificate serial: 0196BB5B2CF09EE4D7F128F4A815151E3E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
Manifest number: 0D4D
Signing time: Sat 10 May 2025 18:00:36 +0000
Manifest this update: Sat 10 May 2025 18:00:36 +0000
Manifest next update: Sun 11 May 2025 18:00:36 +0000
Files and hashes: 1: fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl (hash: IX5+LtPDDf6Jccc/oKv2Eainh0XeSo6T/r6dFCgT7vU=)
2: oC-GTHXGtoWIH_akxEXPO1Ui9dA.roa (hash: lh9QUHwP4a4QOFQ3TSIIf/mF/GalRL/fqqfPZQYfIfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:2c:f0:9e:e4:d7:f1:28:f4:a8:15:15:1e:3e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Validity
Not Before: May 10 18:00:36 2025 GMT
Not After : May 11 18:00:36 2025 GMT
Subject: CN=b4cd7c13c7dbb0dd92d189f4f0577982705f14c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a7:94:cd:f7:19:fc:70:ff:b7:80:d4:ab:06:
e7:07:db:c9:dc:8e:9e:28:13:3f:60:52:8e:71:c5:
74:a9:29:29:ed:67:3e:2d:68:f0:e8:43:2d:05:6a:
08:75:9f:f4:15:9b:70:f9:2f:76:3d:b7:73:2a:1b:
ff:a0:6b:77:d1:01:52:92:a3:10:4f:13:0b:57:1f:
39:2c:1f:df:33:5e:2d:bf:f3:0b:b9:aa:df:62:0e:
22:66:bf:6c:34:81:ab:e4:fd:ed:02:78:66:a3:13:
2c:44:05:56:e0:e4:60:34:f9:40:8b:59:42:d7:9f:
28:b1:cc:44:82:ed:3f:cb:b0:33:ae:83:93:8c:24:
cd:f4:cc:1e:bb:d6:f9:1f:aa:23:c4:bc:1b:48:88:
be:fc:c6:60:63:ac:02:5b:9b:44:ae:c1:21:58:c9:
43:7e:02:3d:87:63:f0:e6:ee:68:91:e8:18:60:4c:
f3:4a:32:90:a0:21:78:28:1d:6c:80:dc:e0:ec:1b:
87:da:47:c2:77:a0:96:4a:b3:28:c5:53:1a:a9:db:
bb:fb:49:a7:91:9e:57:ab:26:66:a4:23:40:f7:fa:
3a:54:d4:42:d4:ee:37:76:70:12:c8:9a:b7:70:13:
f2:db:e7:3c:de:8d:af:c8:ce:05:a7:20:64:74:2c:
66:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CD:7C:13:C7:DB:B0:DD:92:D1:89:F4:F0:57:79:82:70:5F:14:C7
X509v3 Authority Key Identifier:
keyid:7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a5:6e:45:52:1b:53:f8:e0:6c:7b:09:d3:d9:c2:5d:d3:a4:
31:71:64:a2:03:3d:e0:70:50:fa:ca:33:f1:0f:55:4a:5e:cc:
de:04:2e:f1:e8:c2:08:e3:f0:31:cc:a1:d3:96:de:e3:f9:f0:
6a:e8:0f:a9:06:ce:d0:96:40:56:a0:51:c9:4f:d8:d8:2f:2e:
26:8b:d6:af:d1:41:33:35:fd:67:ff:cf:ac:b2:4a:a8:56:a9:
81:3f:5e:c2:02:df:df:e6:90:44:1f:35:20:f8:42:df:e8:06:
5a:97:9d:a7:bf:cf:fe:03:8a:3a:3b:b3:3f:18:3a:23:02:fe:
ae:58:86:ff:8c:9a:1e:3c:bf:50:0f:d2:bc:19:b0:83:e5:bc:
2b:31:bb:66:86:be:c1:14:82:cb:c4:ea:4d:57:6c:14:c8:8c:
a3:b1:7a:3c:62:dc:13:01:fd:8b:b9:c9:91:31:1b:34:76:61:
0b:22:42:b6:85:33:ab:e9:c1:d6:1b:25:d3:58:7c:65:e8:38:
02:74:41:37:d2:4d:b3:59:47:b6:6d:b1:18:45:8a:c6:59:31:
21:0e:a3:08:e9:8e:0d:e2:f2:7c:f2:3a:fb:be:2b:ef:60:ca:
5a:23:87:a2:1f:6f:27:b7:ca:54:a5:65:2f:ab:2c:25:84:50:
4f:e6:23:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7WyzwnuTX8Sj0qBUVHj6RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYTg4OThmZjYyMTJiNGQ2NWNmMzIzZmM4MzMwYWY5ODgw
M2JmNzYwHhcNMjUwNTEwMTgwMDM2WhcNMjUwNTExMTgwMDM2WjAzMTEwLwYDVQQD
EyhiNGNkN2MxM2M3ZGJiMGRkOTJkMTg5ZjRmMDU3Nzk4MjcwNWYxNGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qeUzfcZ/HD/t4DUqwbnB9vJ3I6e
KBM/YFKOccV0qSkp7Wc+LWjw6EMtBWoIdZ/0FZtw+S92PbdzKhv/oGt30QFSkqMQ
TxMLVx85LB/fM14tv/MLuarfYg4iZr9sNIGr5P3tAnhmoxMsRAVW4ORgNPlAi1lC
158oscxEgu0/y7AzroOTjCTN9Mweu9b5H6ojxLwbSIi+/MZgY6wCW5tErsEhWMlD
fgI9h2Pw5u5okegYYEzzSjKQoCF4KB1sgNzg7BuH2kfCd6CWSrMoxVMaqdu7+0mn
kZ5XqyZmpCNA9/o6VNRC1O43dnASyJq3cBPy2+c83o2vyM4FpyBkdCxmVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTNfBPH27DdktGJ9PBXeYJwXxTHMB8GA1UdIwQY
MBaAFHyoiY/2IStNZc8yP8gzCvmIA792MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZktpSmpfWWhLMDFsenpJX3lETUstWWdEdjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zYjRlMjEtMGZjMS00NTRmLTk3ZGYt
Y2VlMmQxNDMwZTZjLzEvZktpSmpfWWhLMDFsenpJX3lETUstWWdEdjNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zYjRlMjEtMGZjMS00NTRmLTk3ZGYtY2VlMmQxNDMwZTZj
LzEvZktpSmpfWWhLMDFsenpJX3lETUstWWdEdjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKVuRVIb
U/jgbHsJ09nCXdOkMXFkogM94HBQ+soz8Q9VSl7M3gQu8ejCCOPwMcyh05be4/nw
augPqQbO0JZAVqBRyU/Y2C8uJovWr9FBMzX9Z//PrLJKqFapgT9ewgLf3+aQRB81
IPhC3+gGWpedp7/P/gOKOjuzPxg6IwL+rliG/4yaHjy/UA/SvBmwg+W8KzG7Zoa+
wRSCy8TqTVdsFMiMo7F6PGLcEwH9i7nJkTEbNHZhCyJCtoUzq+nB1hsl01h8Zeg4
AnRBN9JNs1lHtm2xGEWKxlkxIQ6jCOmODeLyfPI6+74r72DKWiOHoh9vJ7fKVKVl
L6ssJYRQT+YjlQ==
-----END CERTIFICATE-----
Generated at Sun May 11 03:55:31 2025 by rpki-client