Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
File: F0G9doUTjcUdWmsM03gPRmtX_RM.mft (raw, json)
Hash identifier: 9ZrAE0opqrlVs5/6HDjymx0KPZl6hnoltrEVFk1tJHQ=
Subject key identifier: 1D:18:79:E2:3A:62:57:45:9F:4B:18:BB:D0:A7:87:94:32:91:94:AA
Authority key identifier: 17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
Certificate issuer: /CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Certificate serial: 0196C3B966B6B70126BD0A6D4010B2C8312A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
Manifest number: 153B
Signing time: Mon 12 May 2025 09:00:29 +0000
Manifest this update: Mon 12 May 2025 09:00:29 +0000
Manifest next update: Tue 13 May 2025 09:00:29 +0000
Files and hashes: 1: F0G9doUTjcUdWmsM03gPRmtX_RM.crl (hash: V4jWCBKHnHlBjtwC9AEoKiVhew1TUk8+0US/JAOx6BA=)
2: YkiiV0RDHFC-BUQDCVg59T2UUOg.roa (hash: JgGDNNpAIzdyLgpjO8Q07wczCvQGkR61dSx5OtpD+HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:66:b6:b7:01:26:bd:0a:6d:40:10:b2:c8:31:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Validity
Not Before: May 12 09:00:29 2025 GMT
Not After : May 13 09:00:29 2025 GMT
Subject: CN=1d1879e23a6257459f4b18bbd0a78794329194aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:a1:b1:9a:13:91:c4:38:86:2e:f3:ff:10:
06:29:92:5c:87:98:9e:ab:11:32:98:e3:3b:a7:e7:
02:6a:66:19:8a:35:75:38:07:4c:5f:e2:b6:af:78:
40:3b:ed:79:5c:6e:5d:c6:c5:78:eb:4b:88:26:8a:
12:86:8b:c7:63:3a:29:df:d3:0c:51:a8:6f:db:27:
36:a4:df:9f:28:b4:f0:9f:77:50:33:1e:8b:90:bd:
fd:6d:ff:11:ed:73:3e:45:cc:4c:ec:fb:ef:00:9c:
ff:ec:d4:5b:57:60:ae:04:0c:ee:09:f4:9e:cd:38:
fd:ac:1e:d4:49:47:f2:11:33:e3:69:35:65:1b:19:
f0:f9:71:74:bb:06:e5:14:ae:af:85:49:e7:76:c0:
e8:3a:08:d9:75:63:0d:bf:d4:a5:ab:17:71:da:78:
6a:37:07:61:25:57:36:a3:48:0b:c9:cb:6b:7b:f5:
8b:8e:b0:09:21:a2:d8:5a:d6:71:d1:b8:5d:b4:2b:
35:80:39:c0:ea:5a:a7:e0:e2:fa:6f:95:e5:2b:fd:
86:c7:87:60:c9:37:80:58:62:3a:ed:80:16:ce:9b:
b6:67:f0:f9:77:30:5d:52:d2:92:b6:9b:8c:71:91:
fc:64:d8:e6:7f:6f:d5:c9:d1:79:10:a7:84:c8:2d:
ab:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:18:79:E2:3A:62:57:45:9F:4B:18:BB:D0:A7:87:94:32:91:94:AA
X509v3 Authority Key Identifier:
keyid:17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c7:bb:18:bd:32:c3:e7:15:19:0d:46:e7:2e:dc:2c:23:74:
41:af:ed:d7:71:40:cd:24:ac:4d:78:93:28:71:1c:68:ce:d8:
35:44:e7:61:c7:e9:e5:88:6c:dc:e4:9c:e6:ed:a1:09:e9:8b:
38:45:b9:21:de:3a:53:40:31:87:3e:bb:64:05:1f:e2:bb:be:
1b:9c:84:af:3c:35:9d:4b:e5:c9:32:d3:55:cd:1f:f5:19:d5:
7a:92:4b:27:53:b5:30:40:30:90:45:79:46:da:fd:67:20:3c:
c2:61:32:6a:83:16:2a:c7:5d:e5:ef:f0:29:1f:63:6a:66:50:
e7:8b:55:b1:b4:6a:9e:98:35:04:2d:59:1d:8e:b7:85:33:c3:
1f:48:bb:17:6b:88:e4:e0:53:cd:59:b8:8e:38:ce:67:37:6f:
c5:8b:dd:35:82:76:9b:9d:9b:a8:50:7f:70:72:fd:e4:56:65:
0f:f2:51:5f:5a:67:f7:63:48:d5:5b:f9:5e:93:fc:87:33:a3:
3e:14:ba:e5:c6:df:8b:4a:f1:fd:f8:28:1f:f0:05:b5:da:1b:
61:e1:7b:5e:3c:76:ef:95:3c:ac:58:46:e5:fa:2f:e1:60:50:
ee:7c:dd:44:b8:dd:e6:06:04:6d:05:59:ea:dc:51:e8:6a:89:
f5:27:5e:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDuWa2twEmvQptQBCyyDEqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NDFiZDc2ODUxMzhkYzUxZDVhNmIwY2QzNzgwZjQ2NmI1
N2ZkMTMwHhcNMjUwNTEyMDkwMDI5WhcNMjUwNTEzMDkwMDI5WjAzMTEwLwYDVQQD
EygxZDE4NzllMjNhNjI1NzQ1OWY0YjE4YmJkMGE3ODc5NDMyOTE5NGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHihsZoTkcQ4hi7z/xAGKZJch5ie
qxEymOM7p+cCamYZijV1OAdMX+K2r3hAO+15XG5dxsV460uIJooShovHYzop39MM
Uahv2yc2pN+fKLTwn3dQMx6LkL39bf8R7XM+RcxM7PvvAJz/7NRbV2CuBAzuCfSe
zTj9rB7USUfyETPjaTVlGxnw+XF0uwblFK6vhUnndsDoOgjZdWMNv9Slqxdx2nhq
NwdhJVc2o0gLyctre/WLjrAJIaLYWtZx0bhdtCs1gDnA6lqn4OL6b5XlK/2Gx4dg
yTeAWGI67YAWzpu2Z/D5dzBdUtKStpuMcZH8ZNjmf2/VydF5EKeEyC2rQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0YeeI6YldFn0sYu9Cnh5QykZSqMB8GA1UdIwQY
MBaAFBdBvXaFE43FHVprDNN4D0ZrV/0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjBHOWRvVVRqY1VkV21zTTAzZ1BSbXRYX1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kZjI5MmQtOTU5Yi00ZWFkLTkzNDgt
MjlmMDlkODkzYWU3LzEvRjBHOWRvVVRqY1VkV21zTTAzZ1BSbXRYX1JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9kZjI5MmQtOTU5Yi00ZWFkLTkzNDgtMjlmMDlkODkzYWU3
LzEvRjBHOWRvVVRqY1VkV21zTTAzZ1BSbXRYX1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGse7GL0y
w+cVGQ1G5y7cLCN0Qa/t13FAzSSsTXiTKHEcaM7YNUTnYcfp5Yhs3OSc5u2hCemL
OEW5Id46U0Axhz67ZAUf4ru+G5yErzw1nUvlyTLTVc0f9RnVepJLJ1O1MEAwkEV5
Rtr9ZyA8wmEyaoMWKsdd5e/wKR9jamZQ54tVsbRqnpg1BC1ZHY63hTPDH0i7F2uI
5OBTzVm4jjjOZzdvxYvdNYJ2m52bqFB/cHL95FZlD/JRX1pn92NI1Vv5XpP8hzOj
PhS65cbfi0rx/fgoH/AFtdobYeF7Xjx275U8rFhG5fov4WBQ7nzdRLjd5gYEbQVZ
6txR6GqJ9Sdeiw==
-----END CERTIFICATE-----
Generated at Mon May 12 10:59:46 2025 by rpki-client