Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
File: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft (raw, json)
Hash identifier: gOt04qJ58CbzHqN2uFkNgxz4qgclH6EYYTbiAVgpTCg=
Subject key identifier: DA:DA:E0:2C:74:E6:FC:AA:CE:51:50:65:DA:C5:E3:9A:3A:CC:75:8C
Authority key identifier: FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
Certificate issuer: /CN=fa3c481607619c835d09f2471d976d7cf74a0439
Certificate serial: 0196C64CBD5E9A30CB8443DA759337E742FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
Manifest number: 0868
Signing time: Mon 12 May 2025 21:00:39 +0000
Manifest this update: Mon 12 May 2025 21:00:39 +0000
Manifest next update: Tue 13 May 2025 21:00:39 +0000
Files and hashes: 1: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl (hash: kBrRzTUrPIvKTX5JvTsMl4NtaTfsUYcCokRpHUzeAFY=)
2: Sm1L2uD9xe6VKth3NCE80Tv0dS4.roa (hash: 4pEKUYq0mI20y4yprrQN9bkk++T0cMvg0WwPL7Akx3E=)
3: wE4iXQHrpihOXjgvME7qpP1G1M8.roa (hash: 5SJHRAX4MIESmj0+ywOG6OpEbcFrbWg8slbXKt2TqRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:bd:5e:9a:30:cb:84:43:da:75:93:37:e7:42:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3c481607619c835d09f2471d976d7cf74a0439
Validity
Not Before: May 12 21:00:39 2025 GMT
Not After : May 13 21:00:39 2025 GMT
Subject: CN=dadae02c74e6fcaace515065dac5e39a3acc758c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:13:f7:78:52:ab:1d:e0:ca:9a:46:56:fa:d9:
56:1e:8a:aa:ec:cc:d0:d8:4f:66:a1:67:cc:af:c6:
72:9e:aa:c8:3c:90:6a:9d:5f:77:be:78:f6:fc:4f:
77:76:9f:4f:6b:28:8e:30:b0:75:ca:22:a7:0f:de:
75:09:02:ab:4b:73:69:68:29:6e:fe:9d:1e:5f:a2:
3f:9d:58:cc:de:52:7d:e0:e2:52:d7:12:da:fc:25:
6d:44:73:dc:46:39:26:e0:7b:c2:90:c6:45:a1:b7:
1e:63:ce:b2:eb:15:e7:69:4e:2f:cd:e2:59:ea:91:
f8:c9:c5:04:fa:ab:af:58:34:ee:8b:a9:7e:a2:2c:
14:d3:3f:13:0b:6a:82:2e:b6:80:95:c0:3c:cd:51:
12:4b:ab:3c:11:62:af:39:96:97:7e:35:00:ae:64:
c2:cb:4d:a6:68:7c:e2:94:46:c4:98:da:55:30:33:
b4:c8:10:74:26:2a:de:61:76:27:fe:11:dc:91:35:
ae:37:17:55:9c:2e:a2:87:ad:6a:92:9d:95:41:0d:
c3:c7:89:12:a8:46:18:74:bd:42:53:8f:d7:cb:12:
d5:e6:b0:5a:8e:dd:60:67:92:34:a1:07:70:57:ad:
d3:d4:0c:8c:05:24:e2:36:c1:c2:89:53:2b:a4:58:
1e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DA:E0:2C:74:E6:FC:AA:CE:51:50:65:DA:C5:E3:9A:3A:CC:75:8C
X509v3 Authority Key Identifier:
keyid:FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9b:a8:19:d6:90:8b:c4:7a:20:2c:82:9b:66:6e:1f:11:15:
d0:c7:dd:79:c7:cb:07:a4:b5:fa:c1:eb:c7:01:f4:eb:c9:fd:
72:2c:e8:6f:35:b4:61:d1:eb:5e:20:9a:f0:43:56:1a:67:38:
57:4c:69:f2:db:b0:74:59:50:bb:d7:88:8a:d3:4a:32:2e:c8:
f4:77:ae:3c:d8:70:50:8c:13:71:dd:a6:3a:b7:10:6c:8d:0f:
25:82:f7:4c:16:c5:3a:44:44:e4:c7:a7:0d:52:44:b5:7f:ad:
89:0d:49:02:30:39:7c:c0:08:e3:ac:07:90:6e:45:83:e6:bd:
0d:ee:ec:88:50:3b:87:22:5c:92:86:b8:9f:30:67:80:9c:8f:
21:5d:b8:8c:45:19:9a:c6:ce:bf:8f:8d:e3:95:e8:81:bc:79:
9f:ca:8e:a2:5e:5d:32:60:b3:05:c9:d9:12:61:32:43:8f:01:
6b:e4:58:08:a8:50:70:8d:c3:45:93:6c:c6:d8:95:ff:18:be:
a6:6e:66:ba:b3:e5:ac:9d:4c:d7:d1:96:53:f7:48:5a:d7:98:
d2:79:49:0c:bc:1e:6a:b5:d3:c5:d8:f2:63:68:5b:5a:c4:2b:
6f:1d:94:06:e9:17:0e:c8:32:12:95:09:0f:2d:84:62:23:82:
e6:24:6b:05
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZbGTL1emjDLhEPadZM350L8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhM2M0ODE2MDc2MTljODM1ZDA5ZjI0NzFkOTc2ZDdjZjc0
YTA0MzkwHhcNMjUwNTEyMjEwMDM5WhcNMjUwNTEzMjEwMDM5WjAzMTEwLwYDVQQD
EyhkYWRhZTAyYzc0ZTZmY2FhY2U1MTUwNjVkYWM1ZTM5YTNhY2M3NThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhP3eFKrHeDKmkZW+tlWHoqq7MzQ
2E9moWfMr8ZynqrIPJBqnV93vnj2/E93dp9PayiOMLB1yiKnD951CQKrS3NpaClu
/p0eX6I/nVjM3lJ94OJS1xLa/CVtRHPcRjkm4HvCkMZFobceY86y6xXnaU4vzeJZ
6pH4ycUE+quvWDTui6l+oiwU0z8TC2qCLraAlcA8zVESS6s8EWKvOZaXfjUArmTC
y02maHzilEbEmNpVMDO0yBB0JireYXYn/hHckTWuNxdVnC6ih61qkp2VQQ3Dx4kS
qEYYdL1CU4/XyxLV5rBajt1gZ5I0oQdwV63T1AyMBSTiNsHCiVMrpFgewQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNra4Cx05vyqzlFQZdrF45o6zHWMMB8GA1UdIwQY
MBaAFPo8SBYHYZyDXQnyRx2XbXz3SgQ5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qeElGZ2RobklOZENmSkhIWmR0ZlBkS0JEay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTk4NDhiLWM0ZjgtNDZhYi04OTIz
LTEzMDQ0NTRiZjI5ZC8xLzEtanhJRmdkaG5JTmRDZkpISFpkdGZQZEtCRGsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRmLzk5ODQ4Yi1jNGY4LTQ2YWItODkyMy0xMzA0NDU0YmYy
OWQvMS8xLWp4SUZnZGhuSU5kQ2ZKSEhaZHRmUGRLQkRrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZuo
GdaQi8R6ICyCm2ZuHxEV0MfdecfLB6S1+sHrxwH068n9cizobzW0YdHrXiCa8ENW
Gmc4V0xp8tuwdFlQu9eIitNKMi7I9HeuPNhwUIwTcd2mOrcQbI0PJYL3TBbFOkRE
5MenDVJEtX+tiQ1JAjA5fMAI46wHkG5Fg+a9De7siFA7hyJckoa4nzBngJyPIV24
jEUZmsbOv4+N45Xogbx5n8qOol5dMmCzBcnZEmEyQ48Ba+RYCKhQcI3DRZNsxtiV
/xi+pm5murPlrJ1M19GWU/dIWteY0nlJDLwearXTxdjyY2hbWsQrbx2UBukXDsgy
EpUJDy2EYiOC5iRrBQ==
-----END CERTIFICATE-----
Generated at Tue May 13 02:27:16 2025 by rpki-client