Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
File: RxGaIFaDFnklufBBdDEmN7FgDAc.mft (raw, json)
Hash identifier: 87oLD2T7ndh24pwmJevWa8n+mJ5kJnCE4nUzuIMCNjY=
Subject key identifier: F5:F7:79:98:DF:39:AB:B0:05:E8:07:D3:2E:9D:95:1A:2E:44:94:D9
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Certificate issuer: /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial: 0196A842EBB870F77E30AC0AAB9F3AA43BF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
Manifest number: 1529
Signing time: Wed 07 May 2025 01:01:20 +0000
Manifest this update: Wed 07 May 2025 01:01:20 +0000
Manifest next update: Thu 08 May 2025 01:01:20 +0000
Files and hashes: 1: RxGaIFaDFnklufBBdDEmN7FgDAc.crl (hash: 7b8L3AHCCqs3FiXhde2ByrGTDOBOfuif8VuX/+dcSgE=)
2: YlLGMMGfzp4BFnoZ0HiHBmcAlqs.roa (hash: imBK0lUnHzFl1op2tHfNsjuMR3mqpTEborDSGd19hUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:42:eb:b8:70:f7:7e:30:ac:0a:ab:9f:3a:a4:3b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47119a205683167925b9f04174312637b1600c07
Validity
Not Before: May 7 01:01:20 2025 GMT
Not After : May 8 01:01:20 2025 GMT
Subject: CN=f5f77998df39abb005e807d32e9d951a2e4494d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:62:d5:1d:09:14:8d:97:e0:3f:21:d6:a0:b0:
b5:be:0a:5d:5e:cc:31:22:fc:1f:cd:16:16:34:2b:
b3:be:98:43:7b:71:df:8c:0a:ff:63:cf:22:32:2e:
1d:b1:05:43:ae:fa:44:23:d0:43:7a:57:1a:3b:05:
7d:99:89:56:57:17:c4:70:e0:57:87:84:1b:db:d5:
bc:d6:40:cb:1d:cb:f2:ea:f1:eb:03:6e:fa:fd:a9:
91:0c:0b:ff:31:e7:46:bf:ed:2f:b1:ca:38:b4:ab:
0f:09:e6:35:04:b2:da:27:f9:30:21:e3:7e:5d:2f:
67:4a:b9:80:44:f7:99:f6:a6:06:df:cf:a1:20:09:
aa:f9:64:55:02:99:d4:2c:ac:de:e5:25:89:24:58:
36:0c:1d:f7:b5:85:20:a3:f3:a2:2e:56:5d:3f:03:
13:17:65:eb:95:1c:58:37:41:6f:ea:58:dc:05:cb:
b4:c6:fe:e7:dd:18:73:96:42:68:c2:f6:04:a0:5b:
9b:6b:ae:b5:45:4c:cc:cd:fa:f7:b5:67:7f:0a:ce:
11:1e:bc:ed:1e:96:6b:3f:94:2f:54:e6:e8:36:d8:
97:57:c1:f3:fb:93:d2:9c:39:5a:37:0f:d7:66:49:
69:3b:e8:a1:99:bd:57:46:c2:11:55:73:fb:5b:3c:
ff:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F7:79:98:DF:39:AB:B0:05:E8:07:D3:2E:9D:95:1A:2E:44:94:D9
X509v3 Authority Key Identifier:
keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:31:f4:7f:fe:88:5a:e7:e5:27:6e:61:76:03:fe:8f:cb:dd:
cc:84:68:7c:42:d6:60:fe:18:9e:09:79:7a:84:2c:c8:66:b7:
ef:b5:1b:e7:e4:41:6b:a0:78:7b:d1:5a:55:37:24:2a:b6:27:
3a:bf:5a:1f:dc:8e:68:da:45:c9:5a:6d:7c:29:e3:46:63:58:
5b:70:7b:74:83:0c:d1:80:27:0c:f6:0d:bb:49:b4:03:88:d7:
39:61:8f:b2:e3:96:5a:7f:d0:a4:0f:5f:10:24:f3:a4:96:13:
4d:a4:cb:21:e2:03:5e:1c:90:22:40:29:88:f9:34:7d:67:9e:
15:de:2f:09:8b:42:16:95:13:75:3f:3b:1c:47:e0:78:c3:ae:
69:2e:1c:a8:32:94:68:2f:7d:16:7f:3f:cd:13:56:ae:77:04:
3e:bb:63:9c:fb:e7:a4:39:39:89:ea:60:d8:ae:dc:07:6c:e2:
d4:75:05:fc:3c:be:90:e8:63:92:b3:35:a1:73:4e:a6:06:55:
bc:ca:e3:c3:40:d5:96:12:14:ec:06:bd:27:1a:37:d1:f6:44:
f6:53:3d:84:26:a2:85:91:5d:33:68:e8:c3:b4:9f:5e:75:3e:
a2:d7:8f:32:d7:21:fb:f1:fe:22:19:f1:2e:3f:f3:81:b3:87:
87:6d:1f:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaoQuu4cPd+MKwKq586pDvzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MTE5YTIwNTY4MzE2NzkyNWI5ZjA0MTc0MzEyNjM3YjE2
MDBjMDcwHhcNMjUwNTA3MDEwMTIwWhcNMjUwNTA4MDEwMTIwWjAzMTEwLwYDVQQD
EyhmNWY3Nzk5OGRmMzlhYmIwMDVlODA3ZDMyZTlkOTUxYTJlNDQ5NGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGLVHQkUjZfgPyHWoLC1vgpdXswx
IvwfzRYWNCuzvphDe3HfjAr/Y88iMi4dsQVDrvpEI9BDelcaOwV9mYlWVxfEcOBX
h4Qb29W81kDLHcvy6vHrA276/amRDAv/MedGv+0vsco4tKsPCeY1BLLaJ/kwIeN+
XS9nSrmARPeZ9qYG38+hIAmq+WRVApnULKze5SWJJFg2DB33tYUgo/OiLlZdPwMT
F2XrlRxYN0Fv6ljcBcu0xv7n3RhzlkJowvYEoFuba661RUzMzfr3tWd/Cs4RHrzt
HpZrP5QvVOboNtiXV8Hz+5PSnDlaNw/XZklpO+ihmb1XRsIRVXP7Wzz/+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPX3eZjfOauwBegH0y6dlRouRJTZMB8GA1UdIwQY
MBaAFEcRmiBWgxZ5JbnwQXQxJjexYAwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnhHYUlGYURGbmtsdWZCQmRERW1ON0ZnREFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hYjM2YTAtMDRlYy00MTkwLWI1OWQt
MmEwZTQ1ODYyYzAzLzEvUnhHYUlGYURGbmtsdWZCQmRERW1ON0ZnREFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hYjM2YTAtMDRlYy00MTkwLWI1OWQtMmEwZTQ1ODYyYzAz
LzEvUnhHYUlGYURGbmtsdWZCQmRERW1ON0ZnREFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuDH0f/6I
WuflJ25hdgP+j8vdzIRofELWYP4Yngl5eoQsyGa377Ub5+RBa6B4e9FaVTckKrYn
Or9aH9yOaNpFyVptfCnjRmNYW3B7dIMM0YAnDPYNu0m0A4jXOWGPsuOWWn/QpA9f
ECTzpJYTTaTLIeIDXhyQIkApiPk0fWeeFd4vCYtCFpUTdT87HEfgeMOuaS4cqDKU
aC99Fn8/zRNWrncEPrtjnPvnpDk5iepg2K7cB2zi1HUF/Dy+kOhjkrM1oXNOpgZV
vMrjw0DVlhIU7Aa9Jxo30fZE9lM9hCaihZFdM2jow7SfXnU+otePMtch+/H+Ihnx
Lj/zgbOHh20fsA==
-----END CERTIFICATE-----
Generated at Wed May 7 07:11:21 2025 by rpki-client