Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
File: 1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json)
Hash identifier: 7KeolqtyXA1DpS7MFdp+s0OjeetlJvuGYCS7PTHfHnA=
Subject key identifier: 75:DC:EA:79:A1:4F:2D:B6:80:CE:57:6B:58:95:29:C4:D3:D8:55:C6
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Certificate issuer: /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial: 0196B85A37EDA2507BD1F4D1ED21DC4E181B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 04:00:42 +0000
Manifest this update: Sat 10 May 2025 04:00:42 +0000
Manifest next update: Sun 11 May 2025 04:00:42 +0000
Files and hashes: 1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: iX3DndZTDUjgPvLXbsh3VDsNYtEKlWdQjUs2VcIKjxI=)
2: nE72fRq5x2AdGCpsReX1DOqVoW0.roa (hash: LAILnXnxyWYExTH4qCTlNLIx2ujkg7Q+2T14oqEfAzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:37:ed:a2:50:7b:d1:f4:d1:ed:21:dc:4e:18:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
Validity
Not Before: May 10 04:00:42 2025 GMT
Not After : May 11 04:00:42 2025 GMT
Subject: CN=75dcea79a14f2db680ce576b589529c4d3d855c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:00:82:cc:98:fa:c9:bd:88:1a:40:e3:c8:
9a:96:41:de:9a:dd:9e:0c:39:a7:0c:db:7f:45:5e:
16:e4:d2:78:d5:20:f7:79:b6:11:32:be:ed:19:d0:
ff:d5:63:8d:35:89:12:7d:52:fd:11:da:c1:83:d5:
57:18:bb:96:2c:a8:77:24:50:fb:dc:28:bd:c5:93:
46:df:c5:36:33:40:a5:c7:9a:ab:6a:80:6b:2e:f7:
05:84:9e:d4:cb:d3:87:36:92:50:05:94:83:53:5b:
b6:8e:15:11:6d:39:59:77:68:85:e1:b2:33:5b:3b:
a3:23:3c:23:fe:1f:b1:83:23:8b:d5:de:45:18:02:
67:c6:04:e2:be:d1:30:10:8c:a4:aa:29:77:74:63:
e5:ae:c8:92:a4:9c:23:80:7c:b7:4c:13:b9:67:fc:
16:dd:59:6c:ae:e1:99:6b:fb:96:b9:69:bf:fb:08:
02:c0:4b:35:a9:9d:e3:1a:6a:3a:bd:0b:c9:33:95:
ef:8e:93:b8:58:dd:9b:39:84:a5:40:4f:c2:39:40:
e4:f4:0e:06:da:73:a7:1c:fa:c2:fa:c7:d6:7d:19:
d9:57:18:ae:ed:fb:70:55:86:3c:56:18:78:3f:e7:
4a:7c:a4:96:8e:0c:5a:47:02:7c:01:df:69:a3:1f:
59:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DC:EA:79:A1:4F:2D:B6:80:CE:57:6B:58:95:29:C4:D3:D8:55:C6
X509v3 Authority Key Identifier:
keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d8:7f:22:08:68:a5:b0:f6:6e:ed:c9:be:9d:d0:29:a5:85:
5e:ad:d6:c5:92:fc:53:ef:28:db:ed:96:68:70:9c:44:4b:83:
24:af:88:8c:6d:21:02:9f:c9:ab:98:68:c5:4d:35:80:fe:5e:
60:21:cb:bc:bf:aa:bb:bd:98:64:af:91:4b:76:37:c6:dd:c7:
7d:d9:05:02:fa:3c:0e:6e:83:1d:c9:76:75:60:61:e2:97:3f:
f8:83:13:47:99:01:38:50:67:86:30:be:17:8c:37:74:92:32:
c8:5d:d0:ab:93:02:95:38:e4:3e:41:9c:42:aa:31:f2:66:03:
f4:f3:55:d1:19:2f:2a:0a:bc:ac:71:72:c1:20:72:30:0d:a0:
81:d8:79:d0:0e:f8:3b:2d:c6:e8:96:fe:49:6d:d6:ea:31:06:
21:38:4b:d8:3f:f3:c6:d3:f1:50:bc:de:c1:36:dd:c5:bf:7c:
ce:04:87:e9:23:34:c0:64:d0:08:5e:a5:a5:56:70:3a:40:11:
be:ab:40:03:08:4e:19:bd:2d:23:dc:b3:a0:d4:a5:e8:e0:a7:
9f:08:1e:3f:1e:8e:31:ef:f6:0d:f6:ed:e8:62:6c:4d:fd:53:
c8:40:b4:45:62:73:7c:08:b6:06:b9:1a:62:72:a0:cd:07:de:
1c:f5:fc:91
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZa4WjftolB70fTR7SHcThgbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OWFiZTQ1ZjIxZjEyZTRiODAyZjMwOTQ0NGMyNDc1OTAw
MGViY2YwHhcNMjUwNTEwMDQwMDQyWhcNMjUwNTExMDQwMDQyWjAzMTEwLwYDVQQD
Eyg3NWRjZWE3OWExNGYyZGI2ODBjZTU3NmI1ODk1MjljNGQzZDg1NWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8IAgsyY+sm9iBpA48ialkHemt2e
DDmnDNt/RV4W5NJ41SD3ebYRMr7tGdD/1WONNYkSfVL9EdrBg9VXGLuWLKh3JFD7
3Ci9xZNG38U2M0Clx5qraoBrLvcFhJ7Uy9OHNpJQBZSDU1u2jhURbTlZd2iF4bIz
WzujIzwj/h+xgyOL1d5FGAJnxgTivtEwEIykqil3dGPlrsiSpJwjgHy3TBO5Z/wW
3VlsruGZa/uWuWm/+wgCwEs1qZ3jGmo6vQvJM5XvjpO4WN2bOYSlQE/COUDk9A4G
2nOnHPrC+sfWfRnZVxiu7ftwVYY8Vhh4P+dKfKSWjgxaRwJ8Ad9pox9ZywIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHXc6nmhTy22gM5Xa1iVKcTT2FXGMB8GA1UdIwQY
MBaAFPmavkXyHxLkuALzCURMJHWQAOvPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1acS1SZklmRXVTNEF2TUpSRXdrZFpBQTY4OC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvZDNlM2Q3LTAzNTctNDg3ZS05ZmVk
LWE4ZThiODkzMTU1Mi8xLzEtWnEtUmZJZkV1UzRBdk1KUkV3a2RaQUE2ODgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y3L2QzZTNkNy0wMzU3LTQ4N2UtOWZlZC1hOGU4Yjg5MzE1
NTIvMS8xLVpxLVJmSWZFdVM0QXZNSlJFd2tkWkFBNjg4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV9h/
IghopbD2bu3Jvp3QKaWFXq3WxZL8U+8o2+2WaHCcREuDJK+IjG0hAp/Jq5hoxU01
gP5eYCHLvL+qu72YZK+RS3Y3xt3HfdkFAvo8Dm6DHcl2dWBh4pc/+IMTR5kBOFBn
hjC+F4w3dJIyyF3Qq5MClTjkPkGcQqox8mYD9PNV0RkvKgq8rHFywSByMA2ggdh5
0A74Oy3G6Jb+SW3W6jEGIThL2D/zxtPxULzewTbdxb98zgSH6SM0wGTQCF6lpVZw
OkARvqtAAwhOGb0tI9yzoNSl6OCnnwgePx6OMe/2Dfbt6GJsTf1TyEC0RWJzfAi2
BrkaYnKgzQfeHPX8kQ==
-----END CERTIFICATE-----
Generated at Sat May 10 13:54:57 2025 by rpki-client