Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
File: fZ4KWRzFKRTMcA44de11qR7JjCg.mft (raw, json)
Hash identifier: jhMPKqDSILFVp9QF8UpYXLf+9bxDmE1EMxZUpQrSvws=
Subject key identifier: BD:81:BC:F6:11:19:DC:3A:7E:BD:1B:4B:0F:F0:45:4C:FD:67:48:4B
Authority key identifier: 7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
Certificate issuer: /CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Certificate serial: 0196AFFC1C72B2F48C36A867410CA17FF43E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
Manifest number: 1531
Signing time: Thu 08 May 2025 13:00:57 +0000
Manifest this update: Thu 08 May 2025 13:00:57 +0000
Manifest next update: Fri 09 May 2025 13:00:57 +0000
Files and hashes: 1: fZ4KWRzFKRTMcA44de11qR7JjCg.crl (hash: lH8E5cHilGca9mCaRvJKoR7COz13QzVLYWROCFH+/oQ=)
2: k81sGP_nTYcnr-ydvL_qIPOJOvk.roa (hash: 5IYqtPSCzWY5rft+/OTv7pak8S3Yrmu5rpVtbzra1bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fc:1c:72:b2:f4:8c:36:a8:67:41:0c:a1:7f:f4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Validity
Not Before: May 8 13:00:57 2025 GMT
Not After : May 9 13:00:57 2025 GMT
Subject: CN=bd81bcf61119dc3a7ebd1b4b0ff0454cfd67484b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:21:db:77:d7:77:63:3c:a0:4d:b4:8b:01:
6a:cc:6b:19:02:5a:6a:f7:1e:0d:f6:96:a2:06:44:
71:09:76:b6:e8:0b:19:de:61:10:f7:5e:29:22:76:
da:6f:8a:69:1c:c7:fd:ad:4b:da:0f:2f:93:3b:97:
96:fa:81:66:28:14:18:09:14:1c:48:64:2e:69:53:
86:f0:48:5b:b7:94:19:48:b3:4d:51:d7:36:34:16:
f6:b4:65:7c:e3:4d:cf:1f:2f:ba:8c:bb:9f:fa:97:
2c:d8:56:80:c0:62:5b:28:0b:04:90:47:c0:76:76:
d7:18:55:ba:80:d0:41:b6:00:b7:cb:78:7f:8a:8b:
c0:f8:57:4b:e8:36:e1:ea:bd:8c:b1:db:4a:95:5c:
f4:7e:e8:8f:59:90:2f:af:4d:81:cd:4e:fa:3c:92:
7f:b4:d1:d2:05:48:5a:19:03:0d:95:8c:71:34:0f:
8d:a9:f8:c5:04:80:2d:a9:e6:1e:54:e1:44:2a:d2:
16:fe:5a:b6:f4:33:89:5a:6b:c6:48:05:72:c3:05:
39:3d:9e:cb:c7:12:bd:6a:ca:c4:02:36:26:69:7f:
2b:3a:1a:c2:f6:03:c4:fc:d7:2b:20:a3:5b:d8:d2:
a3:1e:ca:f7:df:f5:63:90:32:8e:c4:9f:52:ed:64:
e7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:81:BC:F6:11:19:DC:3A:7E:BD:1B:4B:0F:F0:45:4C:FD:67:48:4B
X509v3 Authority Key Identifier:
keyid:7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8e:92:0f:b6:0d:ad:49:d1:ae:3f:ec:b3:66:98:9b:69:f6:
8f:df:96:38:5c:9f:60:13:43:0e:8f:ab:67:0f:87:4f:58:53:
69:3f:c7:14:d4:65:7c:46:cc:a0:1e:bb:68:5a:58:02:68:35:
ac:fb:6c:4f:35:69:58:7a:35:1f:af:5d:65:64:cd:11:8f:2f:
d2:e7:87:06:76:3d:1b:c3:d3:6c:cd:0f:d9:6d:51:2c:5c:7f:
97:a2:2d:1d:3f:61:f6:92:eb:62:cb:8c:0f:7d:45:5e:d7:e6:
65:8e:0e:11:01:84:08:a7:c6:a4:6d:91:a2:39:ae:d8:14:84:
e7:ed:e0:70:f8:2c:16:32:fa:11:4f:cd:6a:bc:cb:d8:54:69:
05:f6:0c:90:f1:8f:3d:e0:d5:75:7e:e7:34:03:8d:8b:44:40:
ef:2c:8d:51:72:e5:e4:66:f8:2b:90:e7:f0:52:fb:07:23:fc:
7b:bd:3f:06:de:ed:72:cf:27:25:37:89:4e:5b:4c:cd:fa:c3:
7d:2d:9f:ed:cb:21:72:c9:31:e4:4a:9d:a7:d1:61:16:1a:dd:
e9:30:ae:d6:6c:ba:99:36:1f:b1:23:8d:0f:95:0e:36:4c:b9:
63:a1:3a:90:0e:27:53:29:b9:f9:c3:89:c8:e1:55:0e:54:b9:
65:af:d3:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZav/BxysvSMNqhnQQyhf/Q+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkOWUwYTU5MWNjNTI5MTRjYzcwMGUzODc1ZWQ3NWE5MWVj
OThjMjgwHhcNMjUwNTA4MTMwMDU3WhcNMjUwNTA5MTMwMDU3WjAzMTEwLwYDVQQD
EyhiZDgxYmNmNjExMTlkYzNhN2ViZDFiNGIwZmYwNDU0Y2ZkNjc0ODRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphkh23fXd2M8oE20iwFqzGsZAlpq
9x4N9paiBkRxCXa26AsZ3mEQ914pInbab4ppHMf9rUvaDy+TO5eW+oFmKBQYCRQc
SGQuaVOG8Ehbt5QZSLNNUdc2NBb2tGV8403PHy+6jLuf+pcs2FaAwGJbKAsEkEfA
dnbXGFW6gNBBtgC3y3h/iovA+FdL6Dbh6r2MsdtKlVz0fuiPWZAvr02BzU76PJJ/
tNHSBUhaGQMNlYxxNA+NqfjFBIAtqeYeVOFEKtIW/lq29DOJWmvGSAVywwU5PZ7L
xxK9asrEAjYmaX8rOhrC9gPE/NcrIKNb2NKjHsr33/VjkDKOxJ9S7WTnbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2BvPYRGdw6fr0bSw/wRUz9Z0hLMB8GA1UdIwQY
MBaAFH2eClkcxSkUzHAOOHXtdakeyYwoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlo0S1dSekZLUlRNY0E0NGRlMTFxUjdKakNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wNGI2ZjctM2Y2NC00NzRmLWFjZDIt
YzRkODhiMTNmMTNhLzEvZlo0S1dSekZLUlRNY0E0NGRlMTFxUjdKakNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wNGI2ZjctM2Y2NC00NzRmLWFjZDItYzRkODhiMTNmMTNh
LzEvZlo0S1dSekZLUlRNY0E0NGRlMTFxUjdKakNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfo6SD7YN
rUnRrj/ss2aYm2n2j9+WOFyfYBNDDo+rZw+HT1hTaT/HFNRlfEbMoB67aFpYAmg1
rPtsTzVpWHo1H69dZWTNEY8v0ueHBnY9G8PTbM0P2W1RLFx/l6ItHT9h9pLrYsuM
D31FXtfmZY4OEQGECKfGpG2Rojmu2BSE5+3gcPgsFjL6EU/NarzL2FRpBfYMkPGP
PeDVdX7nNAONi0RA7yyNUXLl5Gb4K5Dn8FL7ByP8e70/Bt7tcs8nJTeJTltMzfrD
fS2f7cshcskx5Eqdp9FhFhrd6TCu1my6mTYfsSOND5UONky5Y6E6kA4nUym5+cOJ
yOFVDlS5Za/TXg==
-----END CERTIFICATE-----
Generated at Thu May 8 15:13:52 2025 by rpki-client