Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
File: 1-9JdpktGOvOLRE_zcxGxVm31_LI.mft (raw, json)
Hash identifier: rJsXW1e04mH0UL1UHsDsdViEoex3p4JLs7Yrt/A2/98=
Subject key identifier: 21:FB:CA:2F:41:19:B3:33:F6:73:FC:19:41:B5:02:6F:51:63:5F:53
Authority key identifier: FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
Certificate issuer: /CN=fbd25da64b463af38b444ff37311b1566df5fcb2
Certificate serial: 0196C75F5ABADC6D8CEE99E2FB369F7091B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 02:00:37 +0000
Manifest this update: Tue 13 May 2025 02:00:37 +0000
Manifest next update: Wed 14 May 2025 02:00:37 +0000
Files and hashes: 1: 1-9JdpktGOvOLRE_zcxGxVm31_LI.crl (hash: +/8XSYUShR1V9hhhC3ZNVLDDh3DNGwmqBohFAIB8Gsc=)
2: 3GvpHIxxSBOh_JH9oQawEJfN78g.roa (hash: m/cK1kN4KKcnsjbPKB2PXLCdGbbG3lcfoo431XMf3kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:5f:5a:ba:dc:6d:8c:ee:99:e2:fb:36:9f:70:91:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd25da64b463af38b444ff37311b1566df5fcb2
Validity
Not Before: May 13 02:00:37 2025 GMT
Not After : May 14 02:00:37 2025 GMT
Subject: CN=21fbca2f4119b333f673fc1941b5026f51635f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ad:43:72:4a:8a:aa:91:cd:0e:30:5e:12:2c:
b4:2b:57:73:6e:8d:66:72:59:38:e8:b8:76:e8:b5:
cc:1a:ad:f9:56:96:77:23:11:bf:72:63:2d:83:81:
5b:d9:2a:6c:5f:05:7b:af:c3:e8:83:5c:22:92:72:
73:df:32:f3:7e:ac:8c:c6:a7:a4:65:d8:f0:91:2f:
43:f6:52:87:88:96:c0:61:d4:84:5e:2f:87:1e:16:
51:35:08:41:66:50:49:d6:2d:61:4f:e9:3c:a4:0e:
fd:09:a2:fe:1b:0b:ab:fa:52:6d:c5:23:a8:47:1f:
8e:39:dc:dc:09:db:bc:3c:63:39:5c:a4:f6:04:7d:
b0:d0:8d:ba:01:d6:f9:e8:cf:40:09:b1:12:66:3a:
f4:ad:e9:b8:52:a3:49:10:e8:ea:08:d8:e0:01:af:
7c:b2:49:7e:3e:8e:21:9c:6c:6c:9d:d3:87:51:22:
b4:0c:22:54:92:44:97:bd:18:3c:ec:31:99:be:cf:
42:d7:16:89:21:9d:7e:af:0a:21:5c:ba:11:a1:09:
74:72:ab:b4:ee:84:49:48:cd:e5:67:fb:f2:1a:86:
30:0c:23:c5:32:6f:f1:92:35:5c:7f:31:77:ad:d0:
e0:3c:eb:f2:51:0a:dc:b8:8a:18:3c:96:51:43:eb:
31:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FB:CA:2F:41:19:B3:33:F6:73:FC:19:41:B5:02:6F:51:63:5F:53
X509v3 Authority Key Identifier:
keyid:FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:93:08:97:5f:2f:73:3f:28:b8:a6:43:6b:2d:5c:72:22:bd:
3c:83:e4:ee:55:98:e8:59:0b:c8:8b:fa:81:8c:52:5f:00:8a:
0f:05:37:b3:ab:15:38:5a:4e:9c:ac:08:f1:5f:5f:55:fb:3b:
f1:60:ed:a4:a2:e3:8f:7f:5b:56:08:f8:67:2d:13:86:e2:60:
fc:b5:4e:c7:48:fe:ce:b5:e4:7c:b6:96:0f:90:c3:52:63:6b:
4b:4b:08:45:ee:e7:39:3a:98:fd:ca:e8:1d:95:1e:ed:4e:94:
28:cb:76:fd:50:76:15:bf:24:6f:aa:d7:d2:69:3a:a2:d9:20:
83:ab:ee:62:b0:46:51:e0:e1:9d:8a:66:61:8d:d2:ed:21:4e:
b0:de:38:65:64:1e:b2:52:95:33:d2:05:e4:95:d1:a2:ef:ac:
17:30:7a:85:53:2a:a8:1b:54:db:9b:b2:9e:72:22:68:4c:49:
2f:3e:eb:20:c0:1c:76:73:7f:d1:3a:ce:f9:b6:3f:b7:e9:ba:
64:15:2b:cf:ed:27:1a:2c:aa:fa:72:a7:21:ee:9b:77:66:1a:
07:32:00:36:7a:a4:57:c7:1e:08:75:62:41:07:b0:9f:a3:73:
06:44:eb:a3:80:69:f9:2b:18:21:1b:94:dd:a3:e9:5c:c8:22:
52:ac:0c:f3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZbHX1q63G2M7pni+zafcJGzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZDI1ZGE2NGI0NjNhZjM4YjQ0NGZmMzczMTFiMTU2NmRm
NWZjYjIwHhcNMjUwNTEzMDIwMDM3WhcNMjUwNTE0MDIwMDM3WjAzMTEwLwYDVQQD
EygyMWZiY2EyZjQxMTliMzMzZjY3M2ZjMTk0MWI1MDI2ZjUxNjM1ZjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh61DckqKqpHNDjBeEiy0K1dzbo1m
clk46Lh26LXMGq35VpZ3IxG/cmMtg4Fb2SpsXwV7r8Pog1wiknJz3zLzfqyMxqek
ZdjwkS9D9lKHiJbAYdSEXi+HHhZRNQhBZlBJ1i1hT+k8pA79CaL+Gwur+lJtxSOo
Rx+OOdzcCdu8PGM5XKT2BH2w0I26Adb56M9ACbESZjr0rem4UqNJEOjqCNjgAa98
skl+Po4hnGxsndOHUSK0DCJUkkSXvRg87DGZvs9C1xaJIZ1+rwohXLoRoQl0cqu0
7oRJSM3lZ/vyGoYwDCPFMm/xkjVcfzF3rdDgPOvyUQrcuIoYPJZRQ+sxwwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCH7yi9BGbMz9nP8GUG1Am9RY19TMB8GA1UdIwQY
MBaAFPvSXaZLRjrzi0RP83MRsVZt9fyyMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05SmRwa3RHT3ZPTFJFX3pjeEd4Vm0zMV9MSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvZmE2NWU4LWU1OTctNDczOC04Mzk2
LTgyNWVjMTA3NWRlNi8xLzEtOUpkcGt0R092T0xSRV96Y3hHeFZtMzFfTEkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQxL2ZhNjVlOC1lNTk3LTQ3MzgtODM5Ni04MjVlYzEwNzVk
ZTYvMS8xLTlKZHBrdEdPdk9MUkVfemN4R3hWbTMxX0xJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJMI
l18vcz8ouKZDay1cciK9PIPk7lWY6FkLyIv6gYxSXwCKDwU3s6sVOFpOnKwI8V9f
Vfs78WDtpKLjj39bVgj4Zy0ThuJg/LVOx0j+zrXkfLaWD5DDUmNrS0sIRe7nOTqY
/croHZUe7U6UKMt2/VB2Fb8kb6rX0mk6otkgg6vuYrBGUeDhnYpmYY3S7SFOsN44
ZWQeslKVM9IF5JXRou+sFzB6hVMqqBtU25uynnIiaExJLz7rIMAcdnN/0TrO+bY/
t+m6ZBUrz+0nGiyq+nKnIe6bd2YaBzIANnqkV8ceCHViQQewn6NzBkTro4Bp+SsY
IRuU3aPpXMgiUqwM8w==
-----END CERTIFICATE-----
Generated at Tue May 13 11:17:57 2025 by rpki-client