Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
File: 1-kak8RQ6vjrfxLaDX6E0498srDQ.mft (raw, json)
Hash identifier: 4YMqTTkY8Hq5W2l5vybXiQGp8kqeka0Nklephg6u6Vg=
Subject key identifier: 53:F1:A5:41:E7:B9:B2:0C:56:37:D2:7A:3D:78:1B:86:2F:77:0B:11
Authority key identifier: FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
Certificate issuer: /CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Certificate serial: 0196D174EB2F0716A071D2521D6B647A05AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
Manifest number: 153F
Signing time: Thu 15 May 2025 01:00:22 +0000
Manifest this update: Thu 15 May 2025 01:00:22 +0000
Manifest next update: Fri 16 May 2025 01:00:22 +0000
Files and hashes: 1: 1-kak8RQ6vjrfxLaDX6E0498srDQ.crl (hash: ISST8mB64Ln/VGK8hGD37/4NQG8pz7M+duwVNs3DX3U=)
2: 3uEhAk6Wx4KcEg0MVVsAAyyADBw.roa (hash: FqSkeFfRf148LCqtNv59QOP75egaClJCY4HAjWTWGX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:74:eb:2f:07:16:a0:71:d2:52:1d:6b:64:7a:05:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Validity
Not Before: May 15 01:00:22 2025 GMT
Not After : May 16 01:00:22 2025 GMT
Subject: CN=53f1a541e7b9b20c5637d27a3d781b862f770b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8d:55:84:47:bd:36:2f:57:6b:5d:53:8d:aa:
37:83:16:d3:51:5b:70:20:43:52:ec:aa:fd:4f:56:
d0:0f:f0:f3:2c:72:70:6d:cb:83:c4:6c:89:3a:44:
da:86:20:1a:4e:30:19:dd:d9:a9:35:ba:0c:e1:fa:
6a:fd:a5:2e:2d:90:5a:6d:0d:fd:2c:44:fb:64:7a:
bd:3b:9b:6e:db:06:e6:f5:87:20:a3:33:3c:4a:97:
c3:2f:b7:01:4c:1b:76:05:f0:4e:02:8b:ee:ef:22:
de:c9:86:e1:c1:1f:d2:ba:fa:9f:54:10:b7:b1:68:
5e:ea:79:53:69:05:09:d2:22:20:ce:91:1f:e4:96:
36:78:de:c5:a6:96:30:2a:b7:44:74:56:78:ce:3a:
8c:96:88:b8:16:cd:1f:94:d3:e3:bb:7d:b4:56:0d:
52:a9:93:8b:dd:12:7a:e2:4c:5a:b5:7b:a7:6d:9f:
81:4d:6b:da:35:68:99:7b:ae:8e:12:b8:d4:3c:ce:
fe:b5:92:87:67:6e:87:6d:d0:c1:59:4f:54:68:28:
4f:aa:74:2d:2e:35:40:60:6f:7e:da:60:8d:e4:04:
81:b0:d8:c2:26:63:a6:83:65:f7:63:df:51:bb:07:
76:08:45:dd:ba:f8:77:e5:16:60:5e:40:0a:dc:70:
45:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F1:A5:41:E7:B9:B2:0C:56:37:D2:7A:3D:78:1B:86:2F:77:0B:11
X509v3 Authority Key Identifier:
keyid:FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:74:7b:56:71:44:aa:77:e7:32:80:3a:1e:64:8b:3e:c2:2d:
b6:b0:ea:9c:e4:72:03:fc:10:c6:7f:4b:4f:da:d4:4c:47:05:
73:71:89:d6:50:e5:b6:5b:45:7d:fb:f9:4b:d2:f4:5e:48:07:
31:ec:f4:7b:ff:1a:5f:b5:a4:dc:a7:a2:3a:55:2a:30:ff:f4:
9c:a3:29:31:09:72:b1:8e:5c:c3:43:3a:6f:58:2f:5a:38:71:
d0:99:95:f0:f0:7d:29:6b:01:d7:71:86:cb:a0:34:09:9d:dc:
99:64:66:e1:cb:c9:f9:e9:67:51:8d:19:4c:39:62:57:b8:83:
11:d5:5b:c3:3b:63:19:f9:49:66:46:2e:ca:de:55:18:ea:91:
56:ec:e3:bc:e4:96:08:48:17:c5:aa:fb:c5:ae:70:7f:2b:22:
d3:a8:00:8c:1a:f3:10:6b:c6:09:ef:bd:ce:e8:09:8c:f6:e5:
bb:ec:9a:07:ce:4d:3f:5c:3d:92:91:0a:4c:d8:08:96:16:d0:
8e:7f:16:7e:b8:88:b4:f7:a0:57:82:d3:27:00:6f:17:7b:8f:
7e:29:00:17:10:eb:58:ea:28:ab:08:4b:b1:9b:dc:d3:d3:10:
dd:64:af:3b:b7:d2:46:2e:46:ae:90:a5:42:21:b9:85:ea:fe:
2a:b6:cb:cd
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZbRdOsvBxagcdJSHWtkegWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNDZhNGYxMTQzYWJlM2FkZmM0YjY4MzVmYTEzNGUzZGYy
Y2FjMzQwHhcNMjUwNTE1MDEwMDIyWhcNMjUwNTE2MDEwMDIyWjAzMTEwLwYDVQQD
Eyg1M2YxYTU0MWU3YjliMjBjNTYzN2QyN2EzZDc4MWI4NjJmNzcwYjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw41VhEe9Ni9Xa11Tjao3gxbTUVtw
IENS7Kr9T1bQD/DzLHJwbcuDxGyJOkTahiAaTjAZ3dmpNboM4fpq/aUuLZBabQ39
LET7ZHq9O5tu2wbm9YcgozM8SpfDL7cBTBt2BfBOAovu7yLeyYbhwR/SuvqfVBC3
sWhe6nlTaQUJ0iIgzpEf5JY2eN7FppYwKrdEdFZ4zjqMloi4Fs0flNPju320Vg1S
qZOL3RJ64kxatXunbZ+BTWvaNWiZe66OErjUPM7+tZKHZ26HbdDBWU9UaChPqnQt
LjVAYG9+2mCN5ASBsNjCJmOmg2X3Y99Ruwd2CEXduvh35RZgXkAK3HBFZQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFPxpUHnubIMVjfSej14G4YvdwsRMB8GA1UdIwQY
MBaAFPpGpPEUOr4638S2g1+hNOPfLKw0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1rYWs4UlE2dmpyZnhMYURYNkUwNDk4c3JEUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvZjNhNzlkLTM4Y2YtNDkwNS1hYjVm
LTViY2E0NWVmZGU4Yy8xLzEta2FrOFJRNnZqcmZ4TGFEWDZFMDQ5OHNyRFEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RjL2YzYTc5ZC0zOGNmLTQ5MDUtYWI1Zi01YmNhNDVlZmRl
OGMvMS8xLWthazhSUTZ2anJmeExhRFg2RTA0OThzckRRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHR7
VnFEqnfnMoA6HmSLPsIttrDqnORyA/wQxn9LT9rUTEcFc3GJ1lDltltFffv5S9L0
XkgHMez0e/8aX7Wk3KeiOlUqMP/0nKMpMQlysY5cw0M6b1gvWjhx0JmV8PB9KWsB
13GGy6A0CZ3cmWRm4cvJ+elnUY0ZTDliV7iDEdVbwztjGflJZkYuyt5VGOqRVuzj
vOSWCEgXxar7xa5wfysi06gAjBrzEGvGCe+9zugJjPblu+yaB85NP1w9kpEKTNgI
lhbQjn8WfriItPegV4LTJwBvF3uPfikAFxDrWOooqwhLsZvc09MQ3WSvO7fSRi5G
rpClQiG5her+KrbLzQ==
-----END CERTIFICATE-----
Generated at Thu May 15 04:36:13 2025 by rpki-client