Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
File: 1-geuOnkY-TLqJMwVa0tum6VYG_o.mft (raw, json)
Hash identifier: Aj6biA8xtAc561iMnpH5SnxxwgSozFTDPf4T+wK5i6Q=
Subject key identifier: A1:A7:CD:39:86:C9:F6:0C:4A:53:F8:7C:06:19:66:E5:AF:E5:38:6F
Authority key identifier: FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA
Certificate issuer: /CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa
Certificate serial: 0196C238F25772A9BB1035822AEB8217DB83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
Manifest number: 0244
Signing time: Mon 12 May 2025 02:00:33 +0000
Manifest this update: Mon 12 May 2025 02:00:33 +0000
Manifest next update: Tue 13 May 2025 02:00:33 +0000
Files and hashes: 1: 1-geuOnkY-TLqJMwVa0tum6VYG_o.crl (hash: ySXvhWqVzg2oy9lD/CvVqR+dcPysO3WMNmJ2NcPt+mg=)
2: rs3gWt450Dc5VAdX-LPh4FxzPfI.roa (hash: yHX556DQVgZDjr2xTPApsPlrmF99zYD+miBAgNn4a5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:38:f2:57:72:a9:bb:10:35:82:2a:eb:82:17:db:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa
Validity
Not Before: May 12 02:00:33 2025 GMT
Not After : May 13 02:00:33 2025 GMT
Subject: CN=a1a7cd3986c9f60c4a53f87c061966e5afe5386f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2a:c2:f0:d9:fe:5f:e0:1b:cf:c4:b5:0f:26:
7f:63:37:df:86:91:d9:6c:ee:d9:52:71:66:3f:12:
21:d1:ae:4a:d3:e0:39:fc:40:c3:1f:df:55:9e:99:
0b:9b:25:b0:f7:83:b1:20:8c:47:40:a1:d1:0c:84:
91:37:b7:6f:a9:92:88:79:9f:6a:bb:00:fe:04:de:
82:f3:bf:88:c9:3f:fe:50:20:7c:ad:54:56:5d:6b:
a5:25:3a:91:22:00:c9:2c:65:ff:78:a4:5c:d2:87:
8e:4c:62:cf:a4:8a:a5:04:20:16:ca:26:05:b7:db:
8c:8b:1f:9d:c8:cc:f0:4a:32:d2:ad:05:e9:7d:89:
da:d8:4a:db:78:14:ff:56:5b:14:94:59:11:d6:96:
12:4b:87:25:80:3e:c2:a9:4e:8d:2e:22:d8:9c:ca:
ca:1d:fb:99:1f:4f:be:6a:ac:93:d6:7d:00:f0:c3:
66:51:55:57:46:11:10:84:a4:24:5f:00:d4:97:00:
b5:a4:ac:2e:c1:c0:2d:7d:42:b7:fd:c9:33:94:f4:
af:57:b9:dc:2c:22:99:a6:d2:07:28:cd:be:22:53:
f0:54:22:1f:72:f9:b1:15:2d:91:34:72:a2:7d:20:
13:dd:23:a8:d2:3d:dd:34:b5:c0:31:14:8f:df:1d:
05:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A7:CD:39:86:C9:F6:0C:4A:53:F8:7C:06:19:66:E5:AF:E5:38:6F
X509v3 Authority Key Identifier:
keyid:FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b8:f0:53:83:09:85:a2:67:2b:33:6a:e2:b0:01:62:47:22:
83:ee:f6:8a:ee:46:24:cb:3e:b1:64:c0:c7:0e:08:90:9f:1e:
45:45:a5:66:8c:fb:b1:f8:5f:df:6b:46:2c:a9:d9:77:a3:62:
77:eb:e0:2b:2a:4f:39:96:ac:76:0a:8d:25:09:23:f9:3d:94:
e8:a4:65:2c:1c:e1:be:82:28:2f:bb:28:e9:6c:6c:d7:7e:dc:
70:63:ef:49:d4:9e:53:ff:1c:93:9d:b6:17:46:88:80:4c:a1:
04:4b:31:fb:2f:2b:5f:aa:af:81:c2:09:4e:d8:da:21:e9:88:
b3:90:5d:f6:62:c6:a2:d5:08:08:e4:db:c9:53:94:bd:7b:3a:
82:62:c1:87:dc:94:0c:0f:b1:c0:98:15:a8:05:7c:8d:96:21:
71:b3:4f:8d:e2:ea:70:c2:1f:97:2c:36:3a:3a:13:7f:72:9d:
c4:62:a2:b2:b7:87:fa:fb:b4:e5:8b:83:41:1c:54:e5:e7:49:
52:3d:5c:02:08:ad:1b:dd:ab:d9:4e:d8:0b:02:03:eb:7a:b7:
34:64:d0:64:23:2b:58:b1:fd:54:0b:76:b2:56:38:f6:92:eb:
8e:60:a4:d1:18:92:2c:ad:e2:36:f8:bd:94:db:32:4a:4d:db:
86:c9:33:f4
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZbCOPJXcqm7EDWCKuuCF9uDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMDdhZTNhNzkxOGY5MzJlYTI0Y2MxNTZiNGI2ZTliYTU1
ODFiZmEwHhcNMjUwNTEyMDIwMDMzWhcNMjUwNTEzMDIwMDMzWjAzMTEwLwYDVQQD
EyhhMWE3Y2QzOTg2YzlmNjBjNGE1M2Y4N2MwNjE5NjZlNWFmZTUzODZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCrC8Nn+X+Abz8S1DyZ/YzffhpHZ
bO7ZUnFmPxIh0a5K0+A5/EDDH99VnpkLmyWw94OxIIxHQKHRDISRN7dvqZKIeZ9q
uwD+BN6C87+IyT/+UCB8rVRWXWulJTqRIgDJLGX/eKRc0oeOTGLPpIqlBCAWyiYF
t9uMix+dyMzwSjLSrQXpfYna2ErbeBT/VlsUlFkR1pYSS4clgD7CqU6NLiLYnMrK
HfuZH0++aqyT1n0A8MNmUVVXRhEQhKQkXwDUlwC1pKwuwcAtfUK3/ckzlPSvV7nc
LCKZptIHKM2+IlPwVCIfcvmxFS2RNHKifSAT3SOo0j3dNLXAMRSP3x0F6QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKGnzTmGyfYMSlP4fAYZZuWv5ThvMB8GA1UdIwQY
MBaAFPoHrjp5GPky6iTMFWtLbpulWBv6MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1nZXVPbmtZLVRMcUpNd1ZhMHR1bTZWWUdfby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvYTk3ZGMwLTU2ODUtNGY2ZS05ODdm
LTJhNWE2ZTJkNzk0OC8xLzEtZ2V1T25rWS1UTHFKTXdWYTB0dW02VllHX28ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk1L2E5N2RjMC01Njg1LTRmNmUtOTg3Zi0yYTVhNmUyZDc5
NDgvMS8xLWdldU9ua1ktVExxSk13VmEwdHVtNlZZR19vLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLjw
U4MJhaJnKzNq4rABYkcig+72iu5GJMs+sWTAxw4IkJ8eRUWlZoz7sfhf32tGLKnZ
d6Nid+vgKypPOZasdgqNJQkj+T2U6KRlLBzhvoIoL7so6Wxs137ccGPvSdSeU/8c
k522F0aIgEyhBEsx+y8rX6qvgcIJTtjaIemIs5Bd9mLGotUICOTbyVOUvXs6gmLB
h9yUDA+xwJgVqAV8jZYhcbNPjeLqcMIflyw2OjoTf3KdxGKisreH+vu05YuDQRxU
5edJUj1cAgitG92r2U7YCwID63q3NGTQZCMrWLH9VAt2slY49pLrjmCk0RiSLK3i
Nvi9lNsySk3bhskz9A==
-----END CERTIFICATE-----
Generated at Mon May 12 11:12:24 2025 by rpki-client