Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
File: 7d1hus9lTmZdkSp23o9jtQBMfkg.mft (raw, json)
Hash identifier: Vfk1AT7pv3eFGwiqvrJ50Q5DVQmPMjZvimG5D/ubsX8=
Subject key identifier: 17:C9:0E:83:8E:12:83:E1:84:CC:FC:70:70:89:7D:1E:6C:4F:DB:FD
Authority key identifier: ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
Certificate issuer: /CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Certificate serial: 0196BC6E3B89C2AD62A0A7EF27ED7D41BF4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 23:01:02 +0000
Manifest this update: Sat 10 May 2025 23:01:02 +0000
Manifest next update: Sun 11 May 2025 23:01:02 +0000
Files and hashes: 1: 36Bb65z44MAsVTDbQRVeDeDmufQ.roa (hash: uPSc0dWD/LjqPKmpNOCLQpNBH6/TFH+CbImLmGpMPVg=)
2: 7d1hus9lTmZdkSp23o9jtQBMfkg.crl (hash: ScWlRsGWAHhcm7RU9+MWJKGTw7f4N31H3MFAJkPeaA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:3b:89:c2:ad:62:a0:a7:ef:27:ed:7d:41:bf:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Validity
Not Before: May 10 23:01:02 2025 GMT
Not After : May 11 23:01:02 2025 GMT
Subject: CN=17c90e838e1283e184ccfc7070897d1e6c4fdbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:af:0f:7f:1d:16:86:17:2a:bb:0c:e6:5b:3f:
c0:4a:f8:89:14:5f:de:0f:62:c2:f3:0e:ca:a2:a7:
cc:89:6d:2f:30:05:ee:22:a4:ba:87:21:6e:bc:22:
42:3b:ac:53:70:e5:49:44:4f:99:3a:58:23:45:47:
50:45:f4:ed:42:48:d6:54:39:47:8a:2f:89:91:2c:
44:a8:e1:05:7b:ef:cd:e8:cb:41:af:c1:2d:81:eb:
10:22:41:d5:c2:5d:e3:ff:17:d1:b7:1c:c8:33:af:
cb:4c:40:6d:fa:7d:b9:f7:af:4b:27:2b:2a:2a:77:
aa:0b:84:c8:61:0b:9d:61:ce:43:aa:61:83:3e:c3:
d3:21:56:56:af:d0:29:7e:ad:85:8e:17:91:8c:0e:
0a:1c:4f:d3:9e:5e:10:36:8c:6c:45:5f:36:6e:e9:
93:78:58:16:ea:f8:9d:47:93:6e:9f:1e:6d:14:9a:
f3:cd:79:49:47:ad:83:69:0f:72:0a:61:46:be:c8:
cc:c7:bf:d9:6a:af:5b:3c:06:cc:c0:a0:1c:3e:eb:
76:d4:da:b0:cb:83:16:ae:2c:25:2a:e4:41:56:2f:
c7:60:da:ea:03:9a:38:82:f6:e2:5d:6a:66:a6:05:
ec:07:44:99:80:ed:ff:a2:4b:5c:45:13:95:40:6b:
af:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C9:0E:83:8E:12:83:E1:84:CC:FC:70:70:89:7D:1E:6C:4F:DB:FD
X509v3 Authority Key Identifier:
keyid:ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:38:ce:fc:96:e8:65:af:40:cd:2f:73:15:e5:92:e3:4f:45:
9b:d3:24:9c:06:c1:4b:e3:34:1a:be:8f:5d:d5:f1:f4:69:1c:
f4:67:28:b1:66:a6:71:12:52:be:49:16:8f:73:34:e1:48:a0:
89:0f:6b:d4:c6:76:9b:91:de:43:5d:33:b4:d7:d7:16:03:cb:
d6:1f:0e:d2:94:a0:fd:e8:21:43:ce:61:7b:67:5a:00:36:b7:
85:05:66:19:ad:7c:6d:03:32:d5:7a:56:9a:85:0c:ca:9d:d8:
6c:7f:40:54:6b:77:58:9a:94:fb:27:03:21:a5:34:ea:1c:f7:
14:98:c5:78:d4:2b:12:71:78:8d:35:ec:e5:91:1f:9c:fc:11:
d4:12:9b:fb:c4:1d:e5:20:14:c9:17:96:53:68:34:f4:2e:cb:
17:37:a1:93:4d:6c:0e:47:c4:3b:2b:41:85:6d:f6:0d:75:11:
00:7e:d1:b7:41:30:92:e1:8d:b2:ba:e6:ac:48:a9:a4:13:c5:
75:b4:7e:91:5f:78:9c:1f:5f:e9:fd:8b:ef:d4:fe:5a:8c:60:
63:66:9b:67:df:7a:3b:ef:39:3a:f6:9d:00:ef:9c:10:37:80:
6c:bf:65:4e:66:fe:8a:01:08:05:2e:d1:3e:3e:0b:6d:70:d8:
6c:10:2a:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8bjuJwq1ioKfvJ+19Qb9LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZGQ2MWJhY2Y2NTRlNjY1ZDkxMmE3NmRlOGY2M2I1MDA0
YzdlNDgwHhcNMjUwNTEwMjMwMTAyWhcNMjUwNTExMjMwMTAyWjAzMTEwLwYDVQQD
EygxN2M5MGU4MzhlMTI4M2UxODRjY2ZjNzA3MDg5N2QxZTZjNGZkYmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq8Pfx0WhhcquwzmWz/ASviJFF/e
D2LC8w7KoqfMiW0vMAXuIqS6hyFuvCJCO6xTcOVJRE+ZOlgjRUdQRfTtQkjWVDlH
ii+JkSxEqOEFe+/N6MtBr8EtgesQIkHVwl3j/xfRtxzIM6/LTEBt+n25969LJysq
KneqC4TIYQudYc5DqmGDPsPTIVZWr9Apfq2FjheRjA4KHE/Tnl4QNoxsRV82bumT
eFgW6vidR5Nunx5tFJrzzXlJR62DaQ9yCmFGvsjMx7/Zaq9bPAbMwKAcPut21Nqw
y4MWriwlKuRBVi/HYNrqA5o4gvbiXWpmpgXsB0SZgO3/oktcRROVQGuvXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfJDoOOEoPhhMz8cHCJfR5sT9v9MB8GA1UdIwQY
MBaAFO3dYbrPZU5mXZEqdt6PY7UATH5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2QxaHVzOWxUbVpka1NwMjNvOWp0UUJNZmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wNDVhMzgtZTBiYS00ODdmLWI0NjEt
NzI2NmFmYzk4ZGJhLzEvN2QxaHVzOWxUbVpka1NwMjNvOWp0UUJNZmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wNDVhMzgtZTBiYS00ODdmLWI0NjEtNzI2NmFmYzk4ZGJh
LzEvN2QxaHVzOWxUbVpka1NwMjNvOWp0UUJNZmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMTjO/Jbo
Za9AzS9zFeWS409Fm9MknAbBS+M0Gr6PXdXx9Gkc9GcosWamcRJSvkkWj3M04Uig
iQ9r1MZ2m5HeQ10ztNfXFgPL1h8O0pSg/eghQ85he2daADa3hQVmGa18bQMy1XpW
moUMyp3YbH9AVGt3WJqU+ycDIaU06hz3FJjFeNQrEnF4jTXs5ZEfnPwR1BKb+8Qd
5SAUyReWU2g09C7LFzehk01sDkfEOytBhW32DXURAH7Rt0EwkuGNsrrmrEippBPF
dbR+kV94nB9f6f2L79T+WoxgY2abZ996O+85OvadAO+cEDeAbL9lTmb+igEIBS7R
Pj4LbXDYbBAqQQ==
-----END CERTIFICATE-----
Generated at Sun May 11 01:49:48 2025 by rpki-client