Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
File: _cHyXKV_M_2E0mZg6CMFhW1P9U4.mft (raw, json)
Hash identifier: OxjCW/KJVTrcMMN37+qtNIOVhtymnNYSdfU8z8XlAgM=
Subject key identifier: 78:E3:34:FA:B9:BF:9C:E7:08:BB:4E:1F:FE:87:DA:1C:34:28:89:08
Authority key identifier: FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E
Certificate issuer: /CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e
Certificate serial: 0196CD2A38128D081F35C63AFC8C448123AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
Manifest number: 0924
Signing time: Wed 14 May 2025 05:00:18 +0000
Manifest this update: Wed 14 May 2025 05:00:18 +0000
Manifest next update: Thu 15 May 2025 05:00:18 +0000
Files and hashes: 1: _cHyXKV_M_2E0mZg6CMFhW1P9U4.crl (hash: J+oCoKNTADvT5mJIYJSJdGvKSPe2j4d5oI8jKBcdQGU=)
2: wnJRh-4CUXkPHnOwTdcWOQViBQs.roa (hash: +Cv+ZEGLAnj74mF/vlyspj0D6dG5P9lPHFBp/dI5sxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:2a:38:12:8d:08:1f:35:c6:3a:fc:8c:44:81:23:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e
Validity
Not Before: May 14 05:00:18 2025 GMT
Not After : May 15 05:00:18 2025 GMT
Subject: CN=78e334fab9bf9ce708bb4e1ffe87da1c34288908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ac:39:b6:24:da:5e:66:23:db:28:19:d3:c2:
79:53:38:1a:d8:35:9e:cd:97:d1:b4:3f:bf:1a:29:
b0:39:1b:ae:12:a9:88:19:cd:98:ba:f8:4b:2d:05:
99:94:3e:83:85:a9:ab:12:f5:42:da:5e:0f:6f:6f:
ac:8d:97:c3:80:ad:93:6d:8b:bb:c0:6f:d0:74:23:
e3:e8:06:6f:dc:ce:29:65:e5:54:a3:36:01:7a:10:
85:d8:44:5d:89:47:98:b0:0d:fe:a4:dd:56:d1:43:
8c:7d:93:7a:78:ae:cf:a8:bb:de:80:d7:aa:06:23:
d8:52:7d:55:87:5f:da:a1:8f:af:6a:a3:ff:bd:05:
49:62:4f:fa:d3:76:c7:31:b8:68:41:13:87:93:4b:
1a:75:82:09:2d:37:1b:f4:7e:f0:8b:47:07:6b:3d:
93:d9:97:c9:6e:d8:d1:38:85:fd:12:0e:72:72:bb:
36:97:5a:c1:36:6c:b9:43:a5:0e:78:96:7f:2f:fa:
0c:14:65:62:6a:52:94:78:cf:68:98:1e:88:b7:ed:
de:06:0b:17:c1:f6:56:52:86:6c:ef:f2:ef:12:95:
e3:80:61:26:43:4f:03:65:a6:99:57:52:55:1c:09:
b8:95:8d:ba:e7:9f:24:a2:e8:c9:ac:6d:90:00:08:
1f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E3:34:FA:B9:BF:9C:E7:08:BB:4E:1F:FE:87:DA:1C:34:28:89:08
X509v3 Authority Key Identifier:
keyid:FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c2:be:e1:3a:56:8b:ce:ab:29:fe:74:94:23:88:72:76:a1:
2c:1f:06:19:28:07:2d:4a:57:01:d0:a4:67:07:bd:86:c0:b2:
c5:04:d3:04:d3:aa:88:69:37:96:6e:7d:b7:84:55:44:93:1a:
f7:47:87:9f:d0:7d:58:1c:71:fa:ee:ae:91:f5:6c:c5:35:41:
cc:3e:8a:68:fa:29:62:6d:ff:51:1f:dc:67:f3:77:7b:ef:fb:
1d:15:95:0e:f1:05:85:fa:1e:14:f7:29:84:45:f1:2e:5c:7c:
71:0d:c3:05:0c:21:a6:cb:8f:02:39:06:06:6c:6a:33:31:ff:
92:0d:d7:30:04:99:43:95:a0:60:e2:a7:f3:43:e6:87:e2:41:
93:35:81:58:86:b4:25:f1:1b:9a:c7:f3:d0:bd:17:4b:d5:c9:
f5:d2:98:59:94:22:88:9d:9a:fe:2b:96:19:7c:e6:4a:bb:a1:
eb:fa:b8:eb:6e:b8:48:5a:47:f4:16:9a:25:f8:e0:6d:6b:2e:
b0:5d:0c:30:6d:c9:d3:0f:b7:35:28:fa:36:e7:11:e3:30:e6:
2f:ae:48:8b:5b:6d:ea:5b:58:60:da:a5:ff:9c:c7:56:b2:6e:
e4:e6:6d:d3:ef:49:77:c4:ae:a7:c4:ec:48:da:bb:36:0a:52:
35:42:58:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbNKjgSjQgfNcY6/IxEgSOsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkYzFmMjVjYTU3ZjMzZmQ4NGQyNjY2MGU4MjMwNTg1NmQ0
ZmY1NGUwHhcNMjUwNTE0MDUwMDE4WhcNMjUwNTE1MDUwMDE4WjAzMTEwLwYDVQQD
Eyg3OGUzMzRmYWI5YmY5Y2U3MDhiYjRlMWZmZTg3ZGExYzM0Mjg4OTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6w5tiTaXmYj2ygZ08J5Uzga2DWe
zZfRtD+/GimwORuuEqmIGc2YuvhLLQWZlD6DhamrEvVC2l4Pb2+sjZfDgK2TbYu7
wG/QdCPj6AZv3M4pZeVUozYBehCF2ERdiUeYsA3+pN1W0UOMfZN6eK7PqLvegNeq
BiPYUn1Vh1/aoY+vaqP/vQVJYk/603bHMbhoQROHk0sadYIJLTcb9H7wi0cHaz2T
2ZfJbtjROIX9Eg5ycrs2l1rBNmy5Q6UOeJZ/L/oMFGVialKUeM9omB6It+3eBgsX
wfZWUoZs7/LvEpXjgGEmQ08DZaaZV1JVHAm4lY26558koujJrG2QAAgfDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjjNPq5v5znCLtOH/6H2hw0KIkIMB8GA1UdIwQY
MBaAFP3B8lylfzP9hNJmYOgjBYVtT/VOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2NIeVhLVl9NXzJFMG1aZzZDTUZoVzFQOVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kNzU4NjktYWUwZC00NDZkLTkzZWQt
MDBhMGEzMjhiYjczLzEvX2NIeVhLVl9NXzJFMG1aZzZDTUZoVzFQOVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9kNzU4NjktYWUwZC00NDZkLTkzZWQtMDBhMGEzMjhiYjcz
LzEvX2NIeVhLVl9NXzJFMG1aZzZDTUZoVzFQOVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8K+4TpW
i86rKf50lCOIcnahLB8GGSgHLUpXAdCkZwe9hsCyxQTTBNOqiGk3lm59t4RVRJMa
90eHn9B9WBxx+u6ukfVsxTVBzD6KaPopYm3/UR/cZ/N3e+/7HRWVDvEFhfoeFPcp
hEXxLlx8cQ3DBQwhpsuPAjkGBmxqMzH/kg3XMASZQ5WgYOKn80Pmh+JBkzWBWIa0
JfEbmsfz0L0XS9XJ9dKYWZQiiJ2a/iuWGXzmSruh6/q46264SFpH9BaaJfjgbWsu
sF0MMG3J0w+3NSj6NucR4zDmL65Ii1tt6ltYYNql/5zHVrJu5OZt0+9Jd8Sup8Ts
SNq7NgpSNUJYLg==
-----END CERTIFICATE-----
Generated at Wed May 14 11:21:08 2025 by rpki-client