Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json)
Hash identifier: lJOjjUR5X4enp2KYL4EM4S/J4ekWFZMzK3eJyRQM5JU=
Subject key identifier: 77:47:00:EE:75:2F:FA:7A:F9:0D:D6:F6:57:11:49:78:32:15:AE:01
Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Certificate serial: 0196C23974AFA1DC38D50A9A52106D522520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
Manifest number: 153D
Signing time: Mon 12 May 2025 02:01:07 +0000
Manifest this update: Mon 12 May 2025 02:01:07 +0000
Manifest next update: Tue 13 May 2025 02:01:07 +0000
Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: RfYgXwCxZ08qKqrVnr25ROP121NFroESZNPQy3W/72Y=)
2: Om_TmuMO8XG3pBM8gxAFde2dWMw.roa (hash: FbjCGDaIAC98JtiXhpiG2iZAAlR6dEBdv+iVw78RCUo=)
3: VZwnOlrac1s2Zb9Y96cCEjN1ihI.roa (hash: VbMoQoBhuySW3f8b4z7vMMYAoL+G6xfxVZmjVv4iceM=)
4: pY1evXi7L-RhS1kANnlGqZjoa4g.roa (hash: MHMoXswoxGYwux8eQ8dSbb24gK19/XF6bugh3G8kZT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:74:af:a1:dc:38:d5:0a:9a:52:10:6d:52:25:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Validity
Not Before: May 12 02:01:07 2025 GMT
Not After : May 13 02:01:07 2025 GMT
Subject: CN=774700ee752ffa7af90dd6f6571149783215ae01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:86:f7:6c:fe:81:34:dd:db:a3:70:a7:94:72:
d1:33:b0:45:3a:8d:aa:ca:f2:b8:3a:c7:43:3a:62:
c1:59:f2:58:be:cc:5d:78:5a:b8:d5:7a:75:a7:70:
f2:5f:9b:43:91:a1:14:ee:70:e2:c3:5a:9c:b8:2f:
e0:c4:ab:0a:cb:8c:24:e7:1e:e7:3a:41:e1:4a:14:
67:0d:a7:03:a2:1e:18:cb:0f:e5:cb:5d:cd:5b:49:
37:21:8e:9a:bb:de:77:0a:75:8c:b5:e2:e6:d8:53:
19:b9:c3:39:77:15:2d:75:b6:8c:11:54:95:25:68:
73:1b:55:21:b3:f6:6a:f4:05:46:0f:ad:3c:da:49:
9b:cf:ec:c2:b1:85:a2:c4:f2:6e:34:69:6b:c7:56:
8b:92:a7:b1:e5:bb:2d:f3:ea:69:f1:97:73:f9:f5:
7c:7d:2e:b5:1e:f4:75:be:7f:f7:65:b8:a3:dc:f0:
5f:c5:36:a9:3c:c3:c9:61:d5:e6:0c:c6:10:4e:28:
a0:01:f4:12:0f:86:64:a5:12:9c:f1:52:38:65:68:
68:af:d4:a2:e0:b1:37:3e:ef:82:b2:84:f6:8f:be:
22:37:60:00:c6:3d:13:67:aa:dd:de:db:96:2b:19:
f4:f6:b3:2e:fa:0b:22:86:fe:70:07:db:f7:cf:79:
7b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:47:00:EE:75:2F:FA:7A:F9:0D:D6:F6:57:11:49:78:32:15:AE:01
X509v3 Authority Key Identifier:
keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c0:3b:e6:ba:5c:3d:cf:49:1a:98:2a:36:0a:11:3b:04:7e:
c1:1b:d3:eb:9d:86:87:7e:8f:4e:be:54:d9:a8:81:31:74:43:
72:90:a4:95:bf:7c:72:bc:37:03:8e:1a:59:87:8d:b8:cc:d7:
e5:cf:b5:fc:9f:71:a6:29:46:a0:94:57:79:01:7a:68:e1:58:
71:21:15:ac:2b:0f:d2:86:88:79:ee:b6:f2:63:c1:d2:09:91:
24:10:01:ed:9c:dc:d4:fc:e5:f2:41:39:27:37:62:e5:58:6e:
d4:47:06:f0:1b:23:93:b1:53:2f:a8:ae:28:64:4f:85:13:42:
40:b5:57:f1:61:dc:d6:7e:36:2b:25:70:22:ba:e4:fc:d1:b5:
ec:82:6e:41:52:e4:5d:11:4f:70:f6:9a:2c:60:02:83:f5:d8:
ce:7c:f2:e8:cf:88:f4:4e:89:33:dd:64:d6:c9:b5:9b:ee:25:
bb:61:cc:be:79:c9:3e:e8:fa:e3:c9:8a:d1:d5:d2:06:70:34:
b7:09:fc:c7:8f:0c:89:46:fd:06:76:19:99:d3:5e:40:be:ba:
35:0e:88:c5:e8:5b:d7:2e:c3:a6:5b:e8:be:2d:50:bc:d9:94:
9d:17:4a:28:c4:f6:fd:a6:3b:27:4e:86:40:a0:6b:69:bd:2e:
a5:3f:0e:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCOXSvodw41QqaUhBtUiUgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZjdmMTZiMDVhMTEyMzE1MWE2NzdhNDdhYzJkOGQ5MDYx
ZGYzOTAwHhcNMjUwNTEyMDIwMTA3WhcNMjUwNTEzMDIwMTA3WjAzMTEwLwYDVQQD
Eyg3NzQ3MDBlZTc1MmZmYTdhZjkwZGQ2ZjY1NzExNDk3ODMyMTVhZTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4b3bP6BNN3bo3CnlHLRM7BFOo2q
yvK4OsdDOmLBWfJYvsxdeFq41Xp1p3DyX5tDkaEU7nDiw1qcuC/gxKsKy4wk5x7n
OkHhShRnDacDoh4Yyw/ly13NW0k3IY6au953CnWMteLm2FMZucM5dxUtdbaMEVSV
JWhzG1Uhs/Zq9AVGD6082kmbz+zCsYWixPJuNGlrx1aLkqex5bst8+pp8Zdz+fV8
fS61HvR1vn/3Zbij3PBfxTapPMPJYdXmDMYQTiigAfQSD4ZkpRKc8VI4ZWhor9Si
4LE3Pu+CsoT2j74iN2AAxj0TZ6rd3tuWKxn09rMu+gsihv5wB9v3z3l7wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdHAO51L/p6+Q3W9lcRSXgyFa4BMB8GA1UdIwQY
MBaAFNf38WsFoRIxUaZ3pHrC2NkGHfOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYt
NmNiZTk0OTUzMmU0LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYtNmNiZTk0OTUzMmU0
LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMA75rpc
Pc9JGpgqNgoROwR+wRvT652Gh36PTr5U2aiBMXRDcpCklb98crw3A44aWYeNuMzX
5c+1/J9xpilGoJRXeQF6aOFYcSEVrCsP0oaIee628mPB0gmRJBAB7Zzc1Pzl8kE5
Jzdi5Vhu1EcG8Bsjk7FTL6iuKGRPhRNCQLVX8WHc1n42KyVwIrrk/NG17IJuQVLk
XRFPcPaaLGACg/XYznzy6M+I9E6JM91k1sm1m+4lu2HMvnnJPuj648mK0dXSBnA0
twn8x48MiUb9BnYZmdNeQL66NQ6Ixehb1y7Dplvovi1QvNmUnRdKKMT2/aY7J06G
QKBrab0upT8OHg==
-----END CERTIFICATE-----
Generated at Mon May 12 07:33:43 2025 by rpki-client