Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
File: 1-zuztKtv_1iN20zyr-bVrEZVe7k.mft (raw, json)
Hash identifier: x6WzMAVzd/steN7YO7pJUvsVI2p9EyiSjRYRiPFRrLE=
Subject key identifier: 42:C2:CD:FC:24:E5:44:B0:F1:32:04:AD:14:ED:BD:7C:19:B3:92:D4
Authority key identifier: FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9
Certificate issuer: /CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9
Certificate serial: 0196DAE67BFCEC53A47259E346E1179FEF00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
Manifest number: 0F01
Signing time: Fri 16 May 2025 21:01:00 +0000
Manifest this update: Fri 16 May 2025 21:01:00 +0000
Manifest next update: Sat 17 May 2025 21:01:00 +0000
Files and hashes: 1: 1-zuztKtv_1iN20zyr-bVrEZVe7k.crl (hash: a7YuNqbyxi2cLseSKn/M7vRvqw1GWenjvvodhiHzwFQ=)
2: pQlM2OtK0QxqZYQEu_V-X_TzrUw.roa (hash: GdjsGztAnCLXoyesv/dDZLz4ADxr8P9UdhbYUeTe7Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:e6:7b:fc:ec:53:a4:72:59:e3:46:e1:17:9f:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9
Validity
Not Before: May 16 21:01:00 2025 GMT
Not After : May 17 21:01:00 2025 GMT
Subject: CN=42c2cdfc24e544b0f13204ad14edbd7c19b392d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:7f:15:4e:c0:1d:4c:80:e0:0f:16:30:35:
27:fb:03:a7:56:be:88:06:ee:e7:9e:a0:81:63:91:
ea:01:98:ba:b0:49:76:02:74:8a:1a:7b:b8:45:94:
39:59:9a:cc:46:d6:b7:ce:e0:f0:77:58:7f:fe:79:
b5:f0:68:6a:a7:12:81:1c:5c:7e:c9:97:1f:40:0d:
0f:55:60:bf:11:c7:f7:04:09:5a:1d:6f:b7:3e:39:
a4:27:7c:7d:67:c0:90:40:28:41:de:0e:3b:db:d0:
c0:ac:27:b0:41:5e:07:63:f4:0d:9e:42:6d:5a:ea:
0a:11:87:8a:51:83:26:69:3f:9e:59:3a:f8:51:74:
b5:91:f4:b9:a0:dd:70:a7:1c:bc:45:9e:18:2f:96:
a6:bc:6d:bd:29:d4:d6:84:50:76:83:fd:2a:c8:58:
c4:97:6d:dc:a0:05:55:70:d0:0d:7b:28:90:97:fb:
64:e8:84:85:77:f8:40:d9:7d:c5:c0:1d:db:17:58:
55:ea:ef:4b:6d:e4:69:4d:33:e3:86:2f:20:4b:32:
26:d9:bd:98:5a:52:24:be:31:97:9a:02:0d:b5:cc:
9a:4c:e6:92:4f:fe:fb:f2:b2:56:84:17:aa:bc:6a:
33:a0:da:de:93:4b:24:63:5e:7a:b8:be:11:e3:6f:
5f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C2:CD:FC:24:E5:44:B0:F1:32:04:AD:14:ED:BD:7C:19:B3:92:D4
X509v3 Authority Key Identifier:
keyid:FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:61:45:1c:d9:e0:b6:1a:ac:65:64:fb:4d:75:7e:34:6d:07:
f1:09:f8:bd:e1:39:8a:d5:15:7e:5d:a7:a1:9f:44:24:0d:1e:
c5:68:f0:08:f6:be:18:99:db:c2:1c:b0:c4:9f:66:95:c2:ec:
16:79:6f:11:f9:53:db:e1:cf:49:a4:9f:53:64:a4:af:b9:2a:
e3:cd:b1:75:92:a2:09:73:37:2b:c0:c4:6a:36:21:fa:06:c4:
9a:ef:98:cf:bc:8a:dc:04:d1:91:94:41:31:d7:57:ac:20:e0:
34:7c:01:76:e7:d6:b8:6d:9d:45:6c:e1:9a:35:b3:6f:d1:da:
12:d8:93:cd:7e:45:c5:36:72:81:75:d4:f3:8b:ce:67:51:45:
27:e5:d8:90:58:5e:78:36:f2:6f:56:fa:3d:90:44:98:c5:32:
ee:50:ee:9d:fa:22:bb:c1:c5:b2:9c:49:ad:dc:f8:7b:9e:c1:
a8:dc:fb:fd:8b:b5:65:25:94:33:cb:a0:49:1d:1b:45:fd:42:
15:ed:80:1f:58:e0:00:85:8e:10:26:10:a1:00:36:9e:06:71:
2e:67:ed:6b:8c:25:1a:9d:67:dd:57:d9:f1:ab:bf:25:48:86:
f3:68:b4:90:7d:40:43:ef:34:0b:91:a5:c3:33:cf:ff:33:52:
48:a6:9f:6f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZba5nv87FOkclnjRuEXn+8AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiM2JiM2I0YWI2ZmZmNTg4ZGRiNGNmMmFmZTZkNWFjNDY1
NTdiYjkwHhcNMjUwNTE2MjEwMTAwWhcNMjUwNTE3MjEwMTAwWjAzMTEwLwYDVQQD
Eyg0MmMyY2RmYzI0ZTU0NGIwZjEzMjA0YWQxNGVkYmQ3YzE5YjM5MmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcZ/FU7AHUyA4A8WMDUn+wOnVr6I
Bu7nnqCBY5HqAZi6sEl2AnSKGnu4RZQ5WZrMRta3zuDwd1h//nm18GhqpxKBHFx+
yZcfQA0PVWC/Ecf3BAlaHW+3PjmkJ3x9Z8CQQChB3g4729DArCewQV4HY/QNnkJt
WuoKEYeKUYMmaT+eWTr4UXS1kfS5oN1wpxy8RZ4YL5amvG29KdTWhFB2g/0qyFjE
l23coAVVcNANeyiQl/tk6ISFd/hA2X3FwB3bF1hV6u9LbeRpTTPjhi8gSzIm2b2Y
WlIkvjGXmgINtcyaTOaST/778rJWhBeqvGozoNrek0skY156uL4R429fGwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFELCzfwk5USw8TIErRTtvXwZs5LUMB8GA1UdIwQY
MBaAFPs7s7Srb/9YjdtM8q/m1axGVXu5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS16dXp0S3R2XzFpTjIwenlyLWJWckVaVmU3ay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvNjhmYmFmLTQ1ZjEtNDk0Ni1hMzQ2
LTY4NmEwMTg4OGQyOS8xLzEtenV6dEt0dl8xaU4yMHp5ci1iVnJFWlZlN2subWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk2LzY4ZmJhZi00NWYxLTQ5NDYtYTM0Ni02ODZhMDE4ODhk
MjkvMS8xLXp1enRLdHZfMWlOMjB6eXItYlZyRVpWZTdrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWFF
HNngthqsZWT7TXV+NG0H8Qn4veE5itUVfl2noZ9EJA0exWjwCPa+GJnbwhywxJ9m
lcLsFnlvEflT2+HPSaSfU2Skr7kq482xdZKiCXM3K8DEajYh+gbEmu+Yz7yK3ATR
kZRBMddXrCDgNHwBdufWuG2dRWzhmjWzb9HaEtiTzX5FxTZygXXU84vOZ1FFJ+XY
kFheeDbyb1b6PZBEmMUy7lDunfoiu8HFspxJrdz4e57BqNz7/Yu1ZSWUM8ugSR0b
Rf1CFe2AH1jgAIWOECYQoQA2ngZxLmfta4wlGp1n3VfZ8au/JUiG82i0kH1AQ+80
C5GlwzPP/zNSSKafbw==
-----END CERTIFICATE-----
Generated at Sat May 17 00:47:37 2025 by rpki-client