Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.mft
File: 1-2d6wpD-CR-iNunaZquveM0sjGE.mft (raw, json)
Hash identifier: KffRJwk29RkVJOG07fnLbdQWJN7G+5EAzaK+zvdQ9Ns=
Subject key identifier: 8B:2A:0F:0C:8E:1D:0F:BF:2C:B5:D6:93:06:95:75:11:3E:67:46:93
Authority key identifier: FB:67:7A:C2:90:FE:09:1F:A2:36:E9:DA:66:AB:AF:78:CD:2C:8C:61
Certificate issuer: /CN=fb677ac290fe091fa236e9da66abaf78cd2c8c61
Certificate serial: 0196A61CE25C0CC0BE41E720EB0DEF81A75F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2d6wpD-CR-iNunaZquveM0sjGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.mft
Manifest number: 0F22
Signing time: Tue 06 May 2025 15:00:32 +0000
Manifest this update: Tue 06 May 2025 15:00:32 +0000
Manifest next update: Wed 07 May 2025 15:00:32 +0000
Files and hashes: 1: 1-2d6wpD-CR-iNunaZquveM0sjGE.crl (hash: Adl1U1XlC/EexgObprT0QZvjYkg8JrD+VA29WuQsjI0=)
2: 9IBHLWVOZ0QllouyRgZXZZaYaZg.roa (hash: EjNvIqlv1V/ciVJtAGWjow9nk1g6XEmRzV7siqw9gdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-2d6wpD-CR-iNunaZquveM0sjGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:1c:e2:5c:0c:c0:be:41:e7:20:eb:0d:ef:81:a7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb677ac290fe091fa236e9da66abaf78cd2c8c61
Validity
Not Before: May 6 15:00:32 2025 GMT
Not After : May 7 15:00:32 2025 GMT
Subject: CN=8b2a0f0c8e1d0fbf2cb5d693069575113e674693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:93:4f:7b:50:b4:82:9f:d0:4b:a1:8c:6f:00:
56:6b:10:ee:bb:b7:dd:db:b0:31:9f:30:bd:49:4d:
1f:91:51:28:e8:ab:d5:4f:d0:0b:c6:be:d7:0c:a6:
84:a3:07:98:9b:e4:d6:e0:83:17:05:22:92:f0:0a:
6d:e6:35:1f:f2:99:52:a5:43:fe:5a:c8:14:f1:98:
39:0f:48:15:9c:c2:bb:49:42:c1:3f:dd:3c:ff:37:
37:93:8d:95:1a:2d:58:86:21:79:69:62:d9:0d:ec:
4a:ae:dd:e8:ae:8b:2d:2c:42:fd:04:f3:d8:55:53:
15:f5:5a:bf:92:87:35:61:0a:c7:0a:4c:eb:bf:b0:
bf:35:db:50:6a:e6:1f:6d:fc:12:5d:b7:d6:05:9a:
72:84:18:d2:83:12:18:14:b1:49:70:fc:94:5c:77:
41:03:7b:0e:a4:fd:4e:3c:3e:e1:36:de:4b:fb:26:
a0:c3:96:f8:a1:2d:ca:6a:29:6e:49:89:6c:c7:63:
f6:f1:c5:dd:93:f0:90:14:89:a2:62:9c:ac:36:c7:
c9:c9:79:c1:42:fb:9e:38:c6:16:1f:a6:fe:9e:04:
a2:83:25:65:1e:08:e0:5b:a3:1a:17:01:4c:fa:0b:
60:05:6c:63:33:5b:16:5a:ac:e8:63:26:c1:43:58:
48:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2A:0F:0C:8E:1D:0F:BF:2C:B5:D6:93:06:95:75:11:3E:67:46:93
X509v3 Authority Key Identifier:
keyid:FB:67:7A:C2:90:FE:09:1F:A2:36:E9:DA:66:AB:AF:78:CD:2C:8C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2d6wpD-CR-iNunaZquveM0sjGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:94:bd:c9:27:86:1a:f0:dc:ef:77:01:34:2f:e3:dc:56:7c:
1d:2e:52:fb:74:20:d6:77:a9:cb:91:13:f0:07:71:23:12:98:
8b:82:c3:77:2e:04:12:e7:ec:de:41:fd:02:69:6a:8d:34:0d:
8a:18:3f:74:eb:98:27:cf:24:13:98:6d:48:3d:1f:29:f6:de:
8c:f0:47:dd:79:3f:41:70:c4:a5:31:92:ee:b9:16:c8:44:67:
5b:57:7d:5c:80:cd:0e:31:f2:e3:9b:db:3f:be:98:32:27:e2:
c7:2c:70:ad:47:35:41:c8:4d:56:c0:5b:b1:22:7a:ed:ba:07:
a9:a4:e4:55:b1:0a:4f:11:3c:ef:68:65:16:dc:67:a8:15:8b:
d9:cd:3e:7b:44:a5:ea:13:84:b8:7f:97:4f:2e:e9:37:49:9f:
48:dd:ac:9a:08:1b:d8:93:e6:e6:69:45:b6:0a:67:bb:fa:ec:
be:05:ab:da:b9:ed:a7:81:75:af:4e:fc:4c:1b:52:de:2d:ba:
70:71:fd:11:cd:87:3c:3c:33:a6:72:9f:1b:aa:1b:e8:ad:bf:
21:ff:2a:ee:7a:71:09:09:51:be:e1:06:27:45:e6:71:a0:ec:
cf:04:62:4e:fb:45:9d:ce:9e:a7:ac:6f:50:a7:b0:a3:8a:30:
79:05:98:31
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZamHOJcDMC+Qecg6w3vgadfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNjc3YWMyOTBmZTA5MWZhMjM2ZTlkYTY2YWJhZjc4Y2Qy
YzhjNjEwHhcNMjUwNTA2MTUwMDMyWhcNMjUwNTA3MTUwMDMyWjAzMTEwLwYDVQQD
Eyg4YjJhMGYwYzhlMWQwZmJmMmNiNWQ2OTMwNjk1NzUxMTNlNjc0NjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZNPe1C0gp/QS6GMbwBWaxDuu7fd
27AxnzC9SU0fkVEo6KvVT9ALxr7XDKaEoweYm+TW4IMXBSKS8Apt5jUf8plSpUP+
WsgU8Zg5D0gVnMK7SULBP908/zc3k42VGi1YhiF5aWLZDexKrt3orostLEL9BPPY
VVMV9Vq/koc1YQrHCkzrv7C/NdtQauYfbfwSXbfWBZpyhBjSgxIYFLFJcPyUXHdB
A3sOpP1OPD7hNt5L+yagw5b4oS3KailuSYlsx2P28cXdk/CQFImiYpysNsfJyXnB
QvueOMYWH6b+ngSigyVlHgjgW6MaFwFM+gtgBWxjM1sWWqzoYybBQ1hINQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIsqDwyOHQ+/LLXWkwaVdRE+Z0aTMB8GA1UdIwQY
MBaAFPtnesKQ/gkfojbp2marr3jNLIxhMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0yZDZ3cEQtQ1ItaU51bmFacXV2ZU0wc2pHRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvNWEwMWUyLTgzZTItNGE3Yy1hYzJi
LTU4ZjY3MjNlOTgxZS8xLzEtMmQ2d3BELUNSLWlOdW5hWnF1dmVNMHNqR0UubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRjLzVhMDFlMi04M2UyLTRhN2MtYWMyYi01OGY2NzIzZTk4
MWUvMS8xLTJkNndwRC1DUi1pTnVuYVpxdXZlTTBzakdFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZS9
ySeGGvDc73cBNC/j3FZ8HS5S+3Qg1nepy5ET8AdxIxKYi4LDdy4EEufs3kH9Amlq
jTQNihg/dOuYJ88kE5htSD0fKfbejPBH3Xk/QXDEpTGS7rkWyERnW1d9XIDNDjHy
45vbP76YMifixyxwrUc1QchNVsBbsSJ67boHqaTkVbEKTxE872hlFtxnqBWL2c0+
e0Sl6hOEuH+XTy7pN0mfSN2smggb2JPm5mlFtgpnu/rsvgWr2rntp4F1r078TBtS
3i26cHH9Ec2HPDwzpnKfG6ob6K2/If8q7npxCQlRvuEGJ0XmcaDszwRiTvtFnc6e
p6xvUKewo4oweQWYMQ==
-----END CERTIFICATE-----
Generated at Tue May 6 17:15:38 2025 by rpki-client