Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
File: fQtE5JJUnht9pTLIDDSIUMWkToA.mft (raw, json)
Hash identifier: 30IxG1o5IP5fpWf6Egq5zDWAmMu14leP5ZsB6lNiifw=
Subject key identifier: 9C:25:84:38:5B:1A:56:BC:DB:70:BB:14:0D:95:41:53:FE:07:8C:01
Authority key identifier: 7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
Certificate issuer: /CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Certificate serial: 01969DF60FC94722EFA4EC710D42AF468FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 01:01:10 +0000
Manifest this update: Mon 05 May 2025 01:01:10 +0000
Manifest next update: Tue 06 May 2025 01:01:10 +0000
Files and hashes: 1: Vh9zdU6UPXBw1wsGMQVn_pjjotw.roa (hash: RHQ7Mk9Ul2niP+vY1weS4xjGH8dOqLq3Efjab5Bc1HU=)
2: fQtE5JJUnht9pTLIDDSIUMWkToA.crl (hash: ZSoCrqWnqD+osjtuFKYzPVmRDeSEl5Sp4fQQa0slHys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f6:0f:c9:47:22:ef:a4:ec:71:0d:42:af:46:8f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Validity
Not Before: May 5 01:01:10 2025 GMT
Not After : May 6 01:01:10 2025 GMT
Subject: CN=9c2584385b1a56bcdb70bb140d954153fe078c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:91:08:43:f5:ba:47:c5:9b:ba:26:3e:2b:7e:
c8:35:a3:2f:68:4c:fa:4a:f2:98:ef:0a:dc:b0:60:
2d:2f:7e:7a:66:68:91:ec:9a:a9:a3:55:1e:df:f3:
34:e0:ce:f7:ca:0d:48:8a:91:a6:c8:5d:30:d6:48:
5a:a5:9e:b9:1b:9b:d9:4f:97:f5:fc:18:a4:4a:62:
0b:f2:7e:ba:79:4f:13:10:13:8e:ca:a6:fd:d1:ae:
61:3c:b2:23:12:b5:0e:87:06:7b:b8:3d:d5:9a:7b:
3e:ec:11:ef:62:df:b1:4f:61:71:86:01:39:e0:b1:
7a:a8:3f:c4:69:6e:f3:9c:e0:96:f6:dc:9a:9b:95:
42:1f:b7:5b:47:07:2e:b8:ab:7b:e1:7a:73:31:95:
8c:02:44:bf:26:ef:93:ca:fe:95:a9:24:aa:b7:f3:
82:25:3a:5a:31:d2:68:54:a9:3f:66:d2:99:b6:e7:
a2:a9:c8:35:1a:5c:22:54:db:e3:ce:80:91:19:74:
c1:3e:e1:83:28:c7:da:c5:ce:ce:59:1f:8e:de:7c:
e5:74:85:1c:db:0c:f3:72:b0:ec:32:91:3a:94:f7:
4c:f9:fb:6e:b0:e3:ef:85:a7:67:21:56:2f:a8:ed:
6f:83:35:80:93:ab:4f:89:bc:92:b6:7d:d4:1f:59:
ce:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:25:84:38:5B:1A:56:BC:DB:70:BB:14:0D:95:41:53:FE:07:8C:01
X509v3 Authority Key Identifier:
keyid:7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:23:65:d3:10:d2:6d:62:c8:a0:54:1b:24:af:a1:c9:f6:21:
aa:d8:07:02:d3:ff:4b:5b:34:e6:6a:b0:51:80:fe:74:e0:be:
cf:d3:08:e9:bc:2f:72:d7:97:55:63:bf:21:14:b9:6b:ad:16:
73:b8:7b:09:09:1f:e1:01:b4:6e:68:67:7b:94:13:00:2e:73:
57:1b:5d:1a:7b:d1:15:99:5f:25:18:e5:d1:1d:00:bb:1c:7f:
cb:e3:13:53:7e:85:94:98:84:70:40:1b:84:c6:8c:4f:f0:65:
01:47:e3:1e:51:ac:91:08:66:d4:08:70:44:fb:e0:83:25:94:
94:b5:41:f2:17:bc:ef:b9:e7:52:eb:aa:8b:84:e4:a5:2e:b5:
df:38:c8:b0:3c:54:36:7d:a6:36:e5:26:49:d1:d6:d8:fd:25:
a5:bc:07:5d:5e:99:9f:b2:f3:ad:c6:8e:bf:d5:34:f7:0c:e2:
6d:5c:f1:cd:8f:1e:61:13:a8:7b:68:47:12:fd:ae:43:0f:b2:
87:7d:93:7f:1d:3c:87:51:69:80:52:8c:78:ed:91:fe:78:b1:
df:c5:c3:29:04:fe:c3:e6:c4:71:8a:fc:ca:df:32:13:87:b3:
b8:8f:22:58:f5:05:2f:2d:df:86:dc:f2:69:6e:c4:5b:84:15:
78:a0:85:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZad9g/JRyLvpOxxDUKvRo+yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMGI0NGU0OTI1NDllMWI3ZGE1MzJjODBjMzQ4ODUwYzVh
NDRlODAwHhcNMjUwNTA1MDEwMTEwWhcNMjUwNTA2MDEwMTEwWjAzMTEwLwYDVQQD
Eyg5YzI1ODQzODViMWE1NmJjZGI3MGJiMTQwZDk1NDE1M2ZlMDc4YzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJEIQ/W6R8WbuiY+K37INaMvaEz6
SvKY7wrcsGAtL356ZmiR7Jqpo1Ue3/M04M73yg1IipGmyF0w1khapZ65G5vZT5f1
/BikSmIL8n66eU8TEBOOyqb90a5hPLIjErUOhwZ7uD3Vmns+7BHvYt+xT2FxhgE5
4LF6qD/EaW7znOCW9tyam5VCH7dbRwcuuKt74XpzMZWMAkS/Ju+Tyv6VqSSqt/OC
JTpaMdJoVKk/ZtKZtueiqcg1GlwiVNvjzoCRGXTBPuGDKMfaxc7OWR+O3nzldIUc
2wzzcrDsMpE6lPdM+ftusOPvhadnIVYvqO1vgzWAk6tPibyStn3UH1nOcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwlhDhbGla823C7FA2VQVP+B4wBMB8GA1UdIwQY
MBaAFH0LROSSVJ4bfaUyyAw0iFDFpE6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlF0RTVKSlVuaHQ5cFRMSUREU0lVTVdrVG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iOTIzMWYtYjNkZi00MDEyLTk2ZDct
NzIwNGI4MTEyNTBmLzEvZlF0RTVKSlVuaHQ5cFRMSUREU0lVTVdrVG9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9iOTIzMWYtYjNkZi00MDEyLTk2ZDctNzIwNGI4MTEyNTBm
LzEvZlF0RTVKSlVuaHQ5cFRMSUREU0lVTVdrVG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsSNl0xDS
bWLIoFQbJK+hyfYhqtgHAtP/S1s05mqwUYD+dOC+z9MI6bwvcteXVWO/IRS5a60W
c7h7CQkf4QG0bmhne5QTAC5zVxtdGnvRFZlfJRjl0R0Auxx/y+MTU36FlJiEcEAb
hMaMT/BlAUfjHlGskQhm1AhwRPvggyWUlLVB8he877nnUuuqi4TkpS613zjIsDxU
Nn2mNuUmSdHW2P0lpbwHXV6Zn7LzrcaOv9U09wzibVzxzY8eYROoe2hHEv2uQw+y
h32Tfx08h1FpgFKMeO2R/nix38XDKQT+w+bEcYr8yt8yE4ezuI8iWPUFLy3fhtzy
aW7EW4QVeKCFHw==
-----END CERTIFICATE-----
Generated at Mon May 5 06:00:01 2025 by rpki-client