Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
File: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft (raw, json)
Hash identifier: itbzijWAgi6YeVGNBzWHD77Gcd6RvjA3Xsbsbq1Z+Fs=
Subject key identifier: 1B:B2:CB:09:A0:2E:56:52:E0:3F:68:10:6E:C2:34:37:61:20:E2:89
Authority key identifier: FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
Certificate issuer: /CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Certificate serial: 0196BD12C47224741617E15F449E7D1EA63B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
Manifest number: 0EDF
Signing time: Sun 11 May 2025 02:00:45 +0000
Manifest this update: Sun 11 May 2025 02:00:45 +0000
Manifest next update: Mon 12 May 2025 02:00:45 +0000
Files and hashes: 1: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl (hash: q6PIdpZ3NcBzn7Wy5zZjtmV3RCjehJ1b3KLJZxSbQ0A=)
2: TcLtt8MW6k1lXpNgBVH9jdy5v60.roa (hash: wy80lGUvnlcwv01nCG8qqLZ0l9j+IjMXtN6aRV+obm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:c4:72:24:74:16:17:e1:5f:44:9e:7d:1e:a6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Validity
Not Before: May 11 02:00:45 2025 GMT
Not After : May 12 02:00:45 2025 GMT
Subject: CN=1bb2cb09a02e5652e03f68106ec234376120e289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:77:cf:80:5e:1e:6d:74:f9:dc:b8:ee:5e:f4:
8e:68:4b:a3:d0:d6:d0:89:6d:62:57:04:bb:a3:37:
2c:9b:65:25:33:17:6c:54:5b:9e:7a:5c:9d:27:73:
69:04:e6:a2:d0:85:81:88:d8:f0:b4:96:55:1d:b7:
12:1b:68:f6:ce:1d:ed:54:8d:34:09:9b:95:22:92:
41:32:c9:c2:c5:35:8b:36:be:21:7b:c0:a1:4f:3d:
1f:1c:c8:97:04:6c:c7:8d:17:38:d2:97:09:71:75:
20:0b:1a:af:ec:a7:28:ee:20:03:06:6a:b3:70:49:
8e:9e:f0:c7:78:35:c4:54:89:aa:99:ff:2d:5a:f1:
13:8d:88:72:63:27:b9:df:a8:b6:fd:a0:68:e4:01:
6b:94:0a:ba:89:d5:4c:a3:0a:ad:c7:a2:0e:33:e9:
c6:c7:4e:34:ee:26:8f:1c:ee:0d:fc:a3:e8:a7:3e:
7f:3d:80:7c:87:3e:e5:fd:69:09:93:ce:c9:8d:b1:
6c:67:14:e1:59:eb:f3:5d:68:80:e1:84:d3:ad:48:
32:c1:03:3e:22:c1:13:f0:4e:3e:51:ce:f3:8b:4e:
8e:db:a3:7d:6d:33:3f:46:84:2a:7b:de:d3:ce:27:
e0:04:f3:08:b3:1f:d3:7c:eb:8b:9b:0b:3f:53:cb:
16:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B2:CB:09:A0:2E:56:52:E0:3F:68:10:6E:C2:34:37:61:20:E2:89
X509v3 Authority Key Identifier:
keyid:FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0e:7c:2b:24:8b:43:35:94:db:ec:17:5c:82:ad:aa:71:2a:
9c:65:02:86:bf:99:7c:0e:0f:09:e8:2c:f5:44:26:a1:e0:d7:
ff:af:45:30:93:51:b6:79:f3:cd:c0:f2:1e:3b:b3:a3:ec:4b:
ec:fd:4c:3a:05:00:96:2d:c3:c0:7f:4d:9d:e0:1e:92:d9:6c:
96:da:be:5b:44:92:1d:90:31:b6:ca:b4:97:ba:34:a9:fb:ef:
b9:ee:2a:24:9f:ba:51:39:e2:df:e4:19:d7:e2:b0:71:29:d1:
b1:88:f0:15:e6:e0:df:ec:5c:a5:18:80:6c:53:6d:39:9c:82:
99:f1:24:dc:78:7d:f4:53:c4:bc:96:fb:8e:70:43:19:90:19:
06:54:6f:8a:bd:ae:2b:4d:b5:90:df:a6:55:9f:01:bd:eb:62:
b7:e1:55:21:a2:09:8a:dc:ee:9f:a3:d2:15:8f:56:2b:cc:32:
17:96:6c:4a:76:b0:a2:0b:18:1b:33:4c:7e:4a:d4:c8:8b:a9:
1d:a2:94:44:83:71:15:ce:7d:31:f0:53:3a:86:1d:5f:d4:37:
6e:ed:87:c3:11:27:91:64:64:a6:7f:f3:93:89:06:50:50:36:
df:2b:66:d2:3d:bb:6b:74:4e:b3:cd:18:fb:ac:d3:93:7c:1c:
f3:9c:a9:55
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZa9EsRyJHQWF+FfRJ59HqY7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOTVlNjU5NGRjMzcwNTNjZTk4YmQ1ODg5MDYzNTkxYjM1
ZTJkODAwHhcNMjUwNTExMDIwMDQ1WhcNMjUwNTEyMDIwMDQ1WjAzMTEwLwYDVQQD
EygxYmIyY2IwOWEwMmU1NjUyZTAzZjY4MTA2ZWMyMzQzNzYxMjBlMjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonfPgF4ebXT53LjuXvSOaEuj0NbQ
iW1iVwS7ozcsm2UlMxdsVFueelydJ3NpBOai0IWBiNjwtJZVHbcSG2j2zh3tVI00
CZuVIpJBMsnCxTWLNr4he8ChTz0fHMiXBGzHjRc40pcJcXUgCxqv7Kco7iADBmqz
cEmOnvDHeDXEVImqmf8tWvETjYhyYye536i2/aBo5AFrlAq6idVMowqtx6IOM+nG
x0407iaPHO4N/KPopz5/PYB8hz7l/WkJk87JjbFsZxThWevzXWiA4YTTrUgywQM+
IsET8E4+Uc7zi06O26N9bTM/RoQqe97TzifgBPMIsx/TfOuLmws/U8sWIwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBuyywmgLlZS4D9oEG7CNDdhIOKJMB8GA1UdIwQY
MBaAFPuV5llNw3BTzpi9WIkGNZGzXi2AMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01WG1XVTNEY0ZQT21MMVlpUVkxa2JOZUxZQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvNzgxNzhmLTIxOTktNDhlMC05MDFk
LWJkYTIxNWI4MTYzNi8xLzEtNVhtV1UzRGNGUE9tTDFZaVFZMWtiTmVMWUEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JiLzc4MTc4Zi0yMTk5LTQ4ZTAtOTAxZC1iZGEyMTViODE2
MzYvMS8xLTVYbVdVM0RjRlBPbUwxWWlRWTFrYk5lTFlBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANw58
KySLQzWU2+wXXIKtqnEqnGUChr+ZfA4PCegs9UQmoeDX/69FMJNRtnnzzcDyHjuz
o+xL7P1MOgUAli3DwH9NneAektlsltq+W0SSHZAxtsq0l7o0qfvvue4qJJ+6UTni
3+QZ1+KwcSnRsYjwFebg3+xcpRiAbFNtOZyCmfEk3Hh99FPEvJb7jnBDGZAZBlRv
ir2uK021kN+mVZ8Bvetit+FVIaIJitzun6PSFY9WK8wyF5ZsSnawogsYGzNMfkrU
yIupHaKURINxFc59MfBTOoYdX9Q3bu2HwxEnkWRkpn/zk4kGUFA23ytm0j27a3RO
s80Y+6zTk3wc85ypVQ==
-----END CERTIFICATE-----
Generated at Sun May 11 11:03:10 2025 by rpki-client