Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
File: fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft (raw, json)
Hash identifier: osEmx2liZVAsh7jamHF7pXt3ibBR60Sd/sMk5OeYuEo=
Subject key identifier: 59:75:43:B2:DF:A8:C1:1C:F1:F8:13:46:FC:28:5C:90:61:6C:2E:E5
Authority key identifier: 7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
Certificate issuer: /CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Certificate serial: 01965C83279EF448AA6EB114AE36CEE936B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
Manifest number: 150A
Signing time: Tue 22 Apr 2025 08:00:21 +0000
Manifest this update: Tue 22 Apr 2025 08:00:21 +0000
Manifest next update: Wed 23 Apr 2025 08:00:21 +0000
Files and hashes: 1: ZtCnXbp_YrwgCnKLVKnV0WSmOcU.roa (hash: kH4jiDgmQVBszMKQiiqGuVOByozNrdgPlqnsPcoBxDY=)
2: fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl (hash: z3qoWzFMWbwwPXNPUpl5T8Zm+8WZ3Hyz9gC1OspjbjI=)
3: uklhr2EyG0t3uT3k6llXTSBL2L8.roa (hash: g5RYlitmLR15fm6PqKoImrqzTC0R3yuzCJ3CcwejS1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:83:27:9e:f4:48:aa:6e:b1:14:ae:36:ce:e9:36:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Validity
Not Before: Apr 22 08:00:21 2025 GMT
Not After : Apr 23 08:00:21 2025 GMT
Subject: CN=597543b2dfa8c11cf1f81346fc285c90616c2ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fc:48:3e:ed:f9:e2:21:5b:d5:39:42:50:c6:
41:e3:c5:c0:3d:83:ae:23:96:2c:3c:d6:ab:0d:7d:
72:6e:22:fa:ae:01:6a:1d:c2:10:36:6b:03:42:47:
da:99:46:5c:10:62:c1:27:b9:93:18:13:ab:eb:92:
b2:e4:fb:e1:b6:7a:71:71:47:34:10:27:7a:7d:4d:
d2:5b:bc:08:7d:b6:cd:7b:41:ce:34:5b:62:52:13:
11:e5:3c:be:43:b6:d6:52:cc:1f:86:ba:da:34:7f:
da:33:6d:09:8c:96:82:6d:f6:e7:b0:25:21:80:f8:
b4:78:cb:ab:44:eb:aa:2e:8d:a5:ee:d2:25:c2:b9:
19:94:38:68:93:28:81:fe:91:45:37:86:b3:96:e0:
26:f8:7c:cb:99:9e:f4:4f:07:34:18:ec:bd:a9:cf:
d4:cd:78:c5:d9:03:ab:96:da:3c:a9:7d:75:f9:40:
96:c1:be:a5:e9:42:e1:85:81:46:0a:44:76:cf:ca:
a2:f7:3e:60:f5:25:6b:d1:56:26:99:fa:d1:13:3f:
e0:a3:5a:ee:f3:0a:cd:e7:5b:ff:0f:8f:da:cc:00:
8d:04:9e:21:34:a3:01:7a:fe:a7:5d:90:8d:dc:a2:
e5:38:ff:b0:53:ce:28:d0:ce:20:18:b2:fd:67:94:
41:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:75:43:B2:DF:A8:C1:1C:F1:F8:13:46:FC:28:5C:90:61:6C:2E:E5
X509v3 Authority Key Identifier:
keyid:7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ea:a5:19:43:21:03:b9:c9:54:79:5d:35:4c:52:ad:c7:c6:
96:b1:ed:68:38:a7:e7:7b:e5:e0:43:49:2f:a0:39:6a:1d:61:
38:db:60:80:df:ad:e2:bb:a4:5a:3b:96:f6:86:22:ca:20:0c:
a6:e1:f0:c3:da:be:18:0c:6d:7c:93:a9:03:0b:83:d0:5b:c5:
cd:c6:c2:95:72:ed:cb:0d:21:16:db:fb:a6:76:c5:c7:44:3b:
79:77:47:5e:8f:a9:c2:00:56:38:5d:46:80:6b:2b:df:7f:59:
c7:bc:b4:96:9c:6d:f7:47:e8:0f:5d:7c:84:cf:ec:7c:2f:5e:
da:20:c5:d0:2c:62:27:ec:72:ef:93:43:2d:c4:0a:1a:a0:65:
56:e2:65:00:aa:2a:25:17:15:81:f8:c2:8c:af:e3:2f:12:77:
57:12:ba:71:30:4d:a2:a1:3c:cc:23:26:68:90:ce:0d:da:3a:
1d:df:15:07:25:cf:04:51:28:ef:15:ac:58:f7:f6:aa:72:a4:
1a:eb:55:df:f8:66:03:a6:47:26:34:91:69:4d:3c:27:ae:f4:
da:f4:f5:33:9f:85:41:6b:fc:f8:18:63:7a:e5:36:f5:42:e3:
b2:eb:12:92:01:75:52:04:3e:76:b7:15:fd:e6:fd:a8:1e:21:
1b:f3:e8:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZcgyee9EiqbrEUrjbO6Ta1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMzk4MjViMjY3NzVlMTU1MTA3MmY0NTdkMWVkZmQ5ZDBl
YmUyZGYwHhcNMjUwNDIyMDgwMDIxWhcNMjUwNDIzMDgwMDIxWjAzMTEwLwYDVQQD
Eyg1OTc1NDNiMmRmYThjMTFjZjFmODEzNDZmYzI4NWM5MDYxNmMyZWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPxIPu354iFb1TlCUMZB48XAPYOu
I5YsPNarDX1ybiL6rgFqHcIQNmsDQkfamUZcEGLBJ7mTGBOr65Ky5PvhtnpxcUc0
ECd6fU3SW7wIfbbNe0HONFtiUhMR5Ty+Q7bWUswfhrraNH/aM20JjJaCbfbnsCUh
gPi0eMurROuqLo2l7tIlwrkZlDhokyiB/pFFN4azluAm+HzLmZ70Twc0GOy9qc/U
zXjF2QOrlto8qX11+UCWwb6l6ULhhYFGCkR2z8qi9z5g9SVr0VYmmfrREz/go1ru
8wrN51v/D4/azACNBJ4hNKMBev6nXZCN3KLlOP+wU84o0M4gGLL9Z5RBrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFl1Q7LfqMEc8fgTRvwoXJBhbC7lMB8GA1UdIwQY
MBaAFH45glsmd14VUQcvRX0e39nQ6+LfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmptQ1d5WjNYaFZSQnk5RmZSN2YyZERyNHQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8yMTY2YTgtMzU3Yy00Y2Y2LWI2ZjIt
ZjhkNmQxYTc0YjFkLzEvZmptQ1d5WjNYaFZSQnk5RmZSN2YyZERyNHQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8yMTY2YTgtMzU3Yy00Y2Y2LWI2ZjItZjhkNmQxYTc0YjFk
LzEvZmptQ1d5WjNYaFZSQnk5RmZSN2YyZERyNHQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOqlGUMh
A7nJVHldNUxSrcfGlrHtaDin53vl4ENJL6A5ah1hONtggN+t4rukWjuW9oYiyiAM
puHww9q+GAxtfJOpAwuD0FvFzcbClXLtyw0hFtv7pnbFx0Q7eXdHXo+pwgBWOF1G
gGsr339Zx7y0lpxt90foD118hM/sfC9e2iDF0CxiJ+xy75NDLcQKGqBlVuJlAKoq
JRcVgfjCjK/jLxJ3VxK6cTBNoqE8zCMmaJDODdo6Hd8VByXPBFEo7xWsWPf2qnKk
GutV3/hmA6ZHJjSRaU08J6702vT1M5+FQWv8+BhjeuU29ULjsusSkgF1UgQ+drcV
/eb9qB4hG/PoRw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:47 2025 by rpki-client