Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
File: fm16FsP81nnQXSjtkgk1wIaujP0.mft (raw, json)
Hash identifier: vNR+t1bIQlgsDlakH0xxoHzcdML+/Zw74cHvf/Fzw9A=
Subject key identifier: 23:AF:A8:03:19:E0:10:83:D4:0E:05:79:1B:5F:28:75:68:0D:76:7E
Authority key identifier: 7E:6D:7A:16:C3:FC:D6:79:D0:5D:28:ED:92:09:35:C0:86:AE:8C:FD
Certificate issuer: /CN=7e6d7a16c3fcd679d05d28ed920935c086ae8cfd
Certificate serial: 01964B907FFFE951537045995E0E4AED719B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
Manifest number: 14F7
Signing time: Sat 19 Apr 2025 01:01:23 +0000
Manifest this update: Sat 19 Apr 2025 01:01:23 +0000
Manifest next update: Sun 20 Apr 2025 01:01:23 +0000
Files and hashes: 1: fm16FsP81nnQXSjtkgk1wIaujP0.crl (hash: YMG9K4mWBRonYg1dbM7/vXTkS0avJBm34y5GiwwP4Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:7f:ff:e9:51:53:70:45:99:5e:0e:4a:ed:71:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6d7a16c3fcd679d05d28ed920935c086ae8cfd
Validity
Not Before: Apr 19 01:01:23 2025 GMT
Not After : Apr 20 01:01:23 2025 GMT
Subject: CN=23afa80319e01083d40e05791b5f2875680d767e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:28:47:43:28:cf:3c:b6:d1:c6:33:3a:8a:
bf:60:6e:af:4f:8c:ab:71:10:14:65:39:5f:06:d9:
6b:da:79:42:99:8f:35:24:6e:0a:48:a4:ab:6d:e9:
5d:46:e4:09:5f:53:13:a6:2d:3f:52:08:d0:69:7e:
06:89:99:6d:e9:28:17:b5:52:ea:da:f8:7a:98:ed:
98:64:85:ad:b1:cd:33:f9:e6:4f:84:90:75:e5:b8:
8e:af:28:26:a5:09:e7:d8:a8:ac:6b:a6:c4:4a:1a:
84:2d:28:e0:e5:d3:9c:80:45:12:43:6d:e5:45:8b:
67:6a:3c:04:f1:9d:c1:0d:60:2b:72:0b:c4:22:dd:
ee:1a:13:37:66:e1:a4:6d:1a:05:95:cb:38:b0:43:
df:15:bb:7a:6b:85:5e:e8:a2:97:d2:1a:cb:06:f5:
c6:db:7e:cb:39:02:a6:7b:ef:27:20:71:97:0b:13:
c5:15:34:d1:6e:e0:84:f6:5c:0b:07:e6:17:44:44:
4e:e5:bc:2e:51:85:83:88:9f:db:a5:cf:48:55:cc:
5f:8c:fe:18:92:fb:44:3e:36:c3:79:3e:06:1a:92:
dc:fa:84:30:4b:98:6d:9a:29:e9:a0:39:a2:63:e7:
60:b5:ca:07:0d:ae:77:e9:3a:ce:b7:7f:34:29:ef:
8e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AF:A8:03:19:E0:10:83:D4:0E:05:79:1B:5F:28:75:68:0D:76:7E
X509v3 Authority Key Identifier:
keyid:7E:6D:7A:16:C3:FC:D6:79:D0:5D:28:ED:92:09:35:C0:86:AE:8C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:52:5c:81:7b:30:61:63:3f:65:e9:a4:f4:34:5c:b7:75:4e:
a7:91:a6:33:28:4e:cd:c2:6f:85:c5:c3:2e:0f:6c:ca:ee:d6:
ca:89:90:aa:10:36:ce:0e:2f:41:c5:37:f1:6e:0a:f0:ba:82:
a1:90:15:0b:c5:fe:20:62:cd:45:26:a5:ea:07:fb:1c:da:87:
3c:de:92:c4:10:61:4a:96:6b:80:cb:86:16:26:3f:c6:2a:55:
f0:48:1b:06:36:83:bb:87:28:0f:e5:0d:b1:44:ff:05:53:0b:
25:f0:47:66:5d:fa:42:76:e9:40:70:fd:07:de:6d:19:50:e9:
db:06:f7:2c:12:e7:85:ca:8e:1b:5c:bb:cd:91:0c:fe:70:69:
2a:f8:2d:30:fe:ac:37:2f:e5:67:d7:91:47:05:1f:0e:61:67:
e7:b3:f6:00:9b:35:11:ae:8f:a3:62:67:6d:0e:64:fe:d6:a7:
78:07:5b:f5:4e:21:bf:9c:3b:3a:cf:54:10:ce:7b:dd:ee:17:
21:d4:63:2c:56:d0:d2:3d:35:16:e9:b2:f4:57:3e:79:27:5e:
dd:1f:40:ce:28:ab:22:1a:b6:03:74:e5:65:91:f0:39:cb:12:
9c:1c:54:18:e7:7e:c6:4c:45:7f:8a:a3:12:d6:03:1c:d6:5d:
c6:b9:85:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZLkH//6VFTcEWZXg5K7XGbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNmQ3YTE2YzNmY2Q2NzlkMDVkMjhlZDkyMDkzNWMwODZh
ZThjZmQwHhcNMjUwNDE5MDEwMTIzWhcNMjUwNDIwMDEwMTIzWjAzMTEwLwYDVQQD
EygyM2FmYTgwMzE5ZTAxMDgzZDQwZTA1NzkxYjVmMjg3NTY4MGQ3NjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzEoR0Mozzy20cYzOoq/YG6vT4yr
cRAUZTlfBtlr2nlCmY81JG4KSKSrbeldRuQJX1MTpi0/UgjQaX4GiZlt6SgXtVLq
2vh6mO2YZIWtsc0z+eZPhJB15biOrygmpQnn2Kisa6bEShqELSjg5dOcgEUSQ23l
RYtnajwE8Z3BDWArcgvEIt3uGhM3ZuGkbRoFlcs4sEPfFbt6a4Ve6KKX0hrLBvXG
237LOQKme+8nIHGXCxPFFTTRbuCE9lwLB+YXRERO5bwuUYWDiJ/bpc9IVcxfjP4Y
kvtEPjbDeT4GGpLc+oQwS5htminpoDmiY+dgtcoHDa536TrOt380Ke+OCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOvqAMZ4BCD1A4FeRtfKHVoDXZ+MB8GA1UdIwQY
MBaAFH5tehbD/NZ50F0o7ZIJNcCGroz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm0xNkZzUDgxbm5RWFNqdGtnazF3SWF1alAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC81Yzc0NjgtMWEzMy00MjU1LTgyN2Yt
NGJmYzY2YWQwOGM5LzEvZm0xNkZzUDgxbm5RWFNqdGtnazF3SWF1alAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC81Yzc0NjgtMWEzMy00MjU1LTgyN2YtNGJmYzY2YWQwOGM5
LzEvZm0xNkZzUDgxbm5RWFNqdGtnazF3SWF1alAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1JcgXsw
YWM/Zemk9DRct3VOp5GmMyhOzcJvhcXDLg9syu7WyomQqhA2zg4vQcU38W4K8LqC
oZAVC8X+IGLNRSal6gf7HNqHPN6SxBBhSpZrgMuGFiY/xipV8EgbBjaDu4coD+UN
sUT/BVMLJfBHZl36QnbpQHD9B95tGVDp2wb3LBLnhcqOG1y7zZEM/nBpKvgtMP6s
Ny/lZ9eRRwUfDmFn57P2AJs1Ea6Po2JnbQ5k/taneAdb9U4hv5w7Os9UEM573e4X
IdRjLFbQ0j01Fumy9Fc+eSde3R9AziirIhq2A3TlZZHwOcsSnBxUGOd+xkxFf4qj
EtYDHNZdxrmFuw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:44:53 2025 by rpki-client