Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
File: F4I131NVJtnm1q_2-nrFIpOpLHE.mft (raw, json)
Hash identifier: o1GjErZ9lO2RxUnK2w4HyMZdKetFOk4cWs5v5arnMGA=
Subject key identifier: 27:F3:D1:03:BB:FA:94:65:47:25:D5:82:D6:40:D1:E2:EB:38:F8:19
Authority key identifier: 17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
Certificate issuer: /CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Certificate serial: 0196BCDB8EE05C3CF1FD381CAB75871B9E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 01:00:27 +0000
Manifest this update: Sun 11 May 2025 01:00:27 +0000
Manifest next update: Mon 12 May 2025 01:00:27 +0000
Files and hashes: 1: F4I131NVJtnm1q_2-nrFIpOpLHE.crl (hash: ms37a6VjI++rGVum7yU+7t/W0heXiltrBqqS3EZ/srw=)
2: NXK16WCoOxiuP5Pdh0Kqs98_6Y4.roa (hash: Y5m51ite4A5LbDxUmGbQiHLBy8E1baqu+BrJUl8RNq4=)
3: VhwEbxUgJOza67qJ4K_i1Uqq3ms.roa (hash: aCXGgi5AYKAi5vfsurTRm09inwo+Mr6Oxc+TCBbgaZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:8e:e0:5c:3c:f1:fd:38:1c:ab:75:87:1b:9e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Validity
Not Before: May 11 01:00:27 2025 GMT
Not After : May 12 01:00:27 2025 GMT
Subject: CN=27f3d103bbfa94654725d582d640d1e2eb38f819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:44:3d:d0:6e:3d:8d:3c:6d:9e:ee:5b:d4:bd:
d0:b6:75:04:f4:82:6d:4e:3c:b8:e7:a8:99:41:74:
e7:94:ef:0d:06:82:45:e2:fe:ad:3a:c2:0d:50:fd:
d3:81:78:8f:e0:47:89:fe:23:37:18:5e:1e:79:25:
9f:67:26:b7:6f:e7:e5:85:6b:61:12:74:92:d1:95:
14:6a:cb:50:16:aa:d9:d6:10:33:63:50:54:41:ee:
eb:7e:6f:16:a9:1a:88:53:b1:7a:a1:f1:28:47:9b:
59:52:50:36:cc:a5:b6:1c:b6:a1:70:ca:9f:f2:c6:
60:bf:5b:16:66:1c:07:7e:97:05:5a:ad:75:55:01:
d4:07:36:d7:4c:3e:68:15:b0:cf:08:06:39:e0:6f:
b5:4f:be:ab:d3:81:52:ad:d4:46:55:2d:cb:fd:28:
7e:96:6f:21:c2:30:33:4c:92:14:51:e7:9b:f1:5d:
1f:1e:2b:d9:62:48:21:76:8b:cf:e9:c0:e4:90:6d:
88:e1:07:38:11:c1:7f:1d:c9:d9:4c:b8:04:95:b4:
af:dc:eb:a3:8d:57:d3:ef:22:d7:78:d0:27:ba:68:
e7:69:5c:15:c2:e2:5c:fb:7a:ad:c5:73:e1:e1:66:
2a:c5:4d:59:16:88:ff:80:0d:5c:e6:5e:6b:16:2b:
64:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F3:D1:03:BB:FA:94:65:47:25:D5:82:D6:40:D1:E2:EB:38:F8:19
X509v3 Authority Key Identifier:
keyid:17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:1e:27:f4:14:a9:d6:93:dc:ae:96:d6:f5:4e:b8:76:7b:f7:
1e:2e:3b:44:fd:6c:30:f7:34:41:13:a4:b5:b4:c4:ff:73:4c:
2c:4d:f4:7f:0c:62:55:fb:04:dd:38:56:39:ff:f2:2c:73:69:
a1:d8:b4:c5:48:16:20:75:a2:47:96:7a:7e:92:f8:a6:08:d1:
70:10:bf:c9:79:54:d5:a9:a2:58:67:f7:71:80:48:b4:78:bc:
11:8a:20:e1:9a:d3:0f:13:77:a6:5f:af:c5:f8:d4:f2:5c:b4:
8f:f4:47:76:7e:1d:71:45:8e:42:39:02:da:4f:12:e9:79:00:
0b:2b:78:a0:54:e4:1e:ec:bb:91:43:64:16:d0:8b:61:2a:d2:
76:6a:69:6c:b6:fe:2a:b3:d1:fb:2a:b0:73:04:a3:6b:e0:4b:
2d:73:a7:89:60:50:03:4c:55:5c:d2:6a:e3:9a:fb:15:40:2a:
56:a6:d9:35:80:7e:ff:93:88:80:c1:e5:0b:ea:c4:2b:e4:96:
22:f6:8d:eb:a5:1f:b2:13:14:5d:e6:79:1b:e1:49:2e:50:b5:
4b:e9:c5:48:a3:ce:e8:10:70:a1:f0:63:cb:f4:f2:39:c5:d5:
40:49:97:58:44:ad:77:e1:38:e9:cc:fa:fc:cf:5d:a1:05:49:
77:49:4e:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8247gXDzx/Tgcq3WHG55DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ODIzNWRmNTM1NTI2ZDllNmQ2YWZmNmZhN2FjNTIyOTNh
OTJjNzEwHhcNMjUwNTExMDEwMDI3WhcNMjUwNTEyMDEwMDI3WjAzMTEwLwYDVQQD
EygyN2YzZDEwM2JiZmE5NDY1NDcyNWQ1ODJkNjQwZDFlMmViMzhmODE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0Q90G49jTxtnu5b1L3QtnUE9IJt
Tjy456iZQXTnlO8NBoJF4v6tOsINUP3TgXiP4EeJ/iM3GF4eeSWfZya3b+flhWth
EnSS0ZUUastQFqrZ1hAzY1BUQe7rfm8WqRqIU7F6ofEoR5tZUlA2zKW2HLahcMqf
8sZgv1sWZhwHfpcFWq11VQHUBzbXTD5oFbDPCAY54G+1T76r04FSrdRGVS3L/Sh+
lm8hwjAzTJIUUeeb8V0fHivZYkghdovP6cDkkG2I4Qc4EcF/HcnZTLgElbSv3Ouj
jVfT7yLXeNAnumjnaVwVwuJc+3qtxXPh4WYqxU1ZFoj/gA1c5l5rFitk5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfz0QO7+pRlRyXVgtZA0eLrOPgZMB8GA1UdIwQY
MBaAFBeCNd9TVSbZ5tav9vp6xSKTqSxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjRJMTMxTlZKdG5tMXFfMi1uckZJcE9wTEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9jMzgzYmItZTgwNi00YTZkLWEyZTgt
ZWU1Y2EzNmYxZDlhLzEvRjRJMTMxTlZKdG5tMXFfMi1uckZJcE9wTEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9jMzgzYmItZTgwNi00YTZkLWEyZTgtZWU1Y2EzNmYxZDlh
LzEvRjRJMTMxTlZKdG5tMXFfMi1uckZJcE9wTEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGB4n9BSp
1pPcrpbW9U64dnv3Hi47RP1sMPc0QROktbTE/3NMLE30fwxiVfsE3ThWOf/yLHNp
odi0xUgWIHWiR5Z6fpL4pgjRcBC/yXlU1amiWGf3cYBItHi8EYog4ZrTDxN3pl+v
xfjU8ly0j/RHdn4dcUWOQjkC2k8S6XkACyt4oFTkHuy7kUNkFtCLYSrSdmppbLb+
KrPR+yqwcwSja+BLLXOniWBQA0xVXNJq45r7FUAqVqbZNYB+/5OIgMHlC+rEK+SW
IvaN66UfshMUXeZ5G+FJLlC1S+nFSKPO6BBwofBjy/TyOcXVQEmXWEStd+E46cz6
/M9doQVJd0lOzw==
-----END CERTIFICATE-----
Generated at Sun May 11 04:41:27 2025 by rpki-client