Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
File: 93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft (raw, json)
Hash identifier: +/2DZjbRoyxnTrKD24EbCHDoqyVfcXR/b3V3TMU/7ts=
Subject key identifier: 1F:C0:A4:F6:08:1C:27:B6:87:C8:73:34:23:9A:5E:EF:42:DC:81:0F
Authority key identifier: F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83
Certificate issuer: /CN=f77390fc61608c01785d1a80685ae9e56a5b2583
Certificate serial: 0196A12D7AFC9A89B98F8E65619BAABB244B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 16:00:34 +0000
Manifest this update: Mon 05 May 2025 16:00:34 +0000
Manifest next update: Tue 06 May 2025 16:00:34 +0000
Files and hashes: 1: 93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl (hash: mHAHd5tiEr9ywDmbB7PYxkgJp3VdTjVIi/pgOUK75TE=)
2: J5xD8x8Eiwgy4zGdsrXk1K8DYiA.roa (hash: 7newoFO3EDGu7SMDbRmvP5ZCWRW7z0PexC6y00oZBYU=)
3: pzjmaLlAYg1GtB1-BPGxf_97w2k.roa (hash: TucPjnv7DB9fKhYA4FsUC+p2EKxC7XMfjGbXhyo7OXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:2d:7a:fc:9a:89:b9:8f:8e:65:61:9b:aa:bb:24:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77390fc61608c01785d1a80685ae9e56a5b2583
Validity
Not Before: May 5 16:00:34 2025 GMT
Not After : May 6 16:00:34 2025 GMT
Subject: CN=1fc0a4f6081c27b687c87334239a5eef42dc810f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0c:74:b9:32:9b:76:3d:b5:f8:25:c3:26:41:
bd:20:68:66:93:8e:a3:6c:e1:75:1f:e2:ae:aa:ee:
67:f0:74:0c:af:80:6a:8b:e2:38:6e:2f:d7:82:8f:
f8:ab:f9:5d:b5:a6:4b:e1:9e:97:35:06:10:67:ec:
60:69:72:67:c8:db:f7:13:a2:ae:06:67:ab:91:8f:
d3:2b:83:81:59:bc:14:ab:2c:4d:73:06:73:38:20:
93:f5:d5:0b:df:25:bc:33:23:8f:13:e1:01:60:b8:
6e:85:d6:e7:a8:fb:95:d7:31:67:8a:c8:2e:45:01:
1c:37:30:40:42:ac:18:4b:44:76:58:9c:b3:bc:d3:
e9:d1:dd:8a:08:a5:03:1b:43:0f:a6:79:41:86:f8:
40:da:b3:16:39:b4:d3:c2:38:dc:40:31:33:06:0f:
26:ba:c1:28:cc:0c:3c:37:49:79:cf:bf:8f:aa:65:
6d:32:ff:45:6d:4b:35:c8:44:00:23:44:b6:52:ba:
78:e3:e2:b4:60:ef:d2:bb:21:69:dc:de:f6:7b:92:
2c:f5:3d:0c:61:86:9c:7f:1b:f1:17:25:ec:c9:d7:
e6:3b:46:44:d6:93:d9:db:f1:77:c3:87:18:be:b5:
23:27:10:5b:db:1b:a2:67:8c:27:ea:bc:31:5c:89:
d2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C0:A4:F6:08:1C:27:B6:87:C8:73:34:23:9A:5E:EF:42:DC:81:0F
X509v3 Authority Key Identifier:
keyid:F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:30:db:7d:34:2d:7b:8a:0c:4b:9a:70:9e:5a:48:8c:11:75:
48:bd:e8:dc:51:b1:68:89:e1:70:73:17:dd:50:9a:44:14:53:
39:50:63:60:6f:1f:dd:a6:8f:4b:bf:aa:fa:1b:cf:b2:2b:85:
55:61:8b:d9:f5:4f:12:0d:62:b7:57:8c:32:39:58:41:8d:10:
e8:87:94:74:f1:40:8a:d6:06:2a:e8:c1:fc:cf:f9:70:05:96:
90:c5:8e:98:50:52:e0:05:2c:e4:87:9f:43:5a:b0:16:0e:47:
5b:03:01:8b:b0:ad:9a:59:90:cc:03:74:7f:99:80:1b:88:99:
75:51:07:d1:c3:4e:72:55:81:f1:85:80:a9:ee:9d:ba:5d:19:
d4:07:5e:7b:85:da:89:7d:42:28:f2:9d:4f:a5:ad:a5:73:d3:
6a:35:d2:66:9a:96:ba:2d:40:7f:fa:0f:00:c6:20:43:80:4c:
d3:5c:39:21:f1:5e:15:bf:c2:91:04:78:94:d5:a2:c4:31:81:
56:bd:1d:a8:c4:3b:4f:81:33:cb:96:05:74:e3:39:7f:34:f9:
1d:ea:b9:c7:25:19:08:6d:3d:58:73:39:fa:33:8c:60:e2:ad:
de:62:ee:bf:0b:0b:88:61:25:e4:d1:e3:57:fb:4d:41:66:7e:
39:f7:c7:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZahLXr8mom5j45lYZuquyRLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzM5MGZjNjE2MDhjMDE3ODVkMWE4MDY4NWFlOWU1NmE1
YjI1ODMwHhcNMjUwNTA1MTYwMDM0WhcNMjUwNTA2MTYwMDM0WjAzMTEwLwYDVQQD
EygxZmMwYTRmNjA4MWMyN2I2ODdjODczMzQyMzlhNWVlZjQyZGM4MTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gx0uTKbdj21+CXDJkG9IGhmk46j
bOF1H+Kuqu5n8HQMr4Bqi+I4bi/Xgo/4q/ldtaZL4Z6XNQYQZ+xgaXJnyNv3E6Ku
BmerkY/TK4OBWbwUqyxNcwZzOCCT9dUL3yW8MyOPE+EBYLhuhdbnqPuV1zFnisgu
RQEcNzBAQqwYS0R2WJyzvNPp0d2KCKUDG0MPpnlBhvhA2rMWObTTwjjcQDEzBg8m
usEozAw8N0l5z7+PqmVtMv9FbUs1yEQAI0S2Urp44+K0YO/SuyFp3N72e5Is9T0M
YYacfxvxFyXsydfmO0ZE1pPZ2/F3w4cYvrUjJxBb2xuiZ4wn6rwxXInSTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/ApPYIHCe2h8hzNCOaXu9C3IEPMB8GA1UdIwQY
MBaAFPdzkPxhYIwBeF0agGha6eVqWyWDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNPUV9HRmdqQUY0WFJxQWFGcnA1V3BiSllNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy82NTY4YzYtN2RkOC00NDFhLTgwMmYt
NjNhYmY2MTk4ZjU4LzEvOTNPUV9HRmdqQUY0WFJxQWFGcnA1V3BiSllNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy82NTY4YzYtN2RkOC00NDFhLTgwMmYtNjNhYmY2MTk4ZjU4
LzEvOTNPUV9HRmdqQUY0WFJxQWFGcnA1V3BiSllNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETDbfTQt
e4oMS5pwnlpIjBF1SL3o3FGxaInhcHMX3VCaRBRTOVBjYG8f3aaPS7+q+hvPsiuF
VWGL2fVPEg1it1eMMjlYQY0Q6IeUdPFAitYGKujB/M/5cAWWkMWOmFBS4AUs5Ief
Q1qwFg5HWwMBi7CtmlmQzAN0f5mAG4iZdVEH0cNOclWB8YWAqe6dul0Z1Adee4Xa
iX1CKPKdT6WtpXPTajXSZpqWui1Af/oPAMYgQ4BM01w5IfFeFb/CkQR4lNWixDGB
Vr0dqMQ7T4Ezy5YFdOM5fzT5Heq5xyUZCG09WHM5+jOMYOKt3mLuvwsLiGEl5NHj
V/tNQWZ+OffHeA==
-----END CERTIFICATE-----
Generated at Mon May 5 23:07:49 2025 by rpki-client