Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
File: FAyGl-PS6UuFRiU9zyZJymAGKmg.mft (raw, json)
Hash identifier: g+t5g2rsd5dDGQuS1DybNpjNscy5+s4gc0lvLsmCXKo=
Subject key identifier: E8:C1:72:44:5D:AA:63:C3:7F:CF:AE:A1:23:CE:12:DD:69:8E:2A:5D
Authority key identifier: 14:0C:86:97:E3:D2:E9:4B:85:46:25:3D:CF:26:49:CA:60:06:2A:68
Certificate issuer: /CN=140c8697e3d2e94b8546253dcf2649ca60062a68
Certificate serial: 0196526D48A35FEE634DB78AD9E42D12E5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
Manifest number: 14F8
Signing time: Sun 20 Apr 2025 09:00:15 +0000
Manifest this update: Sun 20 Apr 2025 09:00:15 +0000
Manifest next update: Mon 21 Apr 2025 09:00:15 +0000
Files and hashes: 1: FAyGl-PS6UuFRiU9zyZJymAGKmg.crl (hash: DSZMicPvVCiQjATSVH/wwvjMqzYA/dr7siKjhbNPiFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 09:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:48:a3:5f:ee:63:4d:b7:8a:d9:e4:2d:12:e5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=140c8697e3d2e94b8546253dcf2649ca60062a68
Validity
Not Before: Apr 20 09:00:15 2025 GMT
Not After : Apr 21 09:00:15 2025 GMT
Subject: CN=e8c172445daa63c37fcfaea123ce12dd698e2a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:10:c8:24:f4:45:b9:41:71:4e:81:e9:26:
64:36:36:ed:cf:00:9e:a0:bf:fa:b7:0d:36:57:ed:
9d:c9:30:b6:9b:de:18:7c:04:f0:e7:00:66:9a:30:
6f:0d:4f:8a:ec:b2:93:0f:11:36:bf:62:b1:d8:e1:
cb:c8:de:c7:a6:e6:1b:e6:77:c4:be:4a:19:df:36:
67:37:32:51:99:01:c7:c3:62:8a:3a:be:00:d6:53:
13:4a:80:c0:b7:9d:fa:a9:3b:28:41:4c:b3:b5:d1:
ae:a2:6f:fb:0a:a2:13:5f:6b:3c:64:53:7d:a5:53:
ef:cb:27:e0:9f:f6:19:09:21:3b:fe:f7:95:6f:55:
02:57:99:27:48:84:fb:27:fc:0c:38:19:e3:70:48:
b6:17:17:9b:56:41:44:3a:8f:70:16:b7:17:f0:b4:
c7:66:3b:de:70:9b:4c:0c:f0:98:73:2f:70:7d:34:
f7:7a:97:24:13:44:ff:79:5f:4e:40:e9:11:e5:8d:
0d:dd:6d:1f:29:53:d9:e9:f6:fd:3f:5f:82:84:4e:
b2:d5:49:be:35:f2:1e:14:19:3c:97:f2:52:75:a2:
1c:a2:54:c6:a1:b6:aa:c7:49:fa:2d:94:49:5e:52:
33:fb:9b:c2:41:14:f4:1c:ac:15:c1:f1:54:79:86:
9b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C1:72:44:5D:AA:63:C3:7F:CF:AE:A1:23:CE:12:DD:69:8E:2A:5D
X509v3 Authority Key Identifier:
keyid:14:0C:86:97:E3:D2:E9:4B:85:46:25:3D:CF:26:49:CA:60:06:2A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4a:6c:fd:37:59:44:65:d4:3d:5f:62:37:7b:9c:65:9a:79:
a2:32:9f:45:57:cf:83:ff:36:84:3a:0a:89:e2:93:84:6a:16:
1f:3d:e9:56:af:4d:1a:63:b6:3d:1a:bb:83:7c:ab:84:cf:9f:
a7:bd:7c:b5:d2:b0:ed:f2:3e:4c:7f:3d:19:c9:b5:dd:0b:fb:
f2:17:e6:8a:40:21:3f:df:4c:20:f4:84:0c:4e:c5:8f:d8:07:
61:b3:9d:68:51:fd:55:be:ac:57:04:e2:24:51:48:ae:aa:55:
a0:71:bb:49:33:37:1b:04:f8:30:ab:de:e8:fd:32:2b:cd:01:
88:d5:75:6c:8f:a5:73:68:d2:28:fb:bb:fe:ca:84:5d:66:86:
cb:d8:68:d2:64:30:a1:38:3a:e6:61:7c:70:93:96:1d:0c:27:
f1:dd:45:45:09:3b:c3:72:2a:30:2b:13:0c:da:8a:1f:66:18:
cb:8d:68:f1:6d:45:69:02:41:c4:89:12:bf:f7:e4:c6:8a:1c:
8e:59:ab:2b:a7:c8:a6:a4:f5:da:3e:c2:d0:bd:1a:1b:2d:17:
e9:8e:95:bf:69:98:66:3d:a1:1a:b0:ad:9f:ef:23:0c:a5:e5:
6b:38:f7:d6:49:91:76:62:a1:b4:08:51:21:5b:1f:8e:61:63:
2b:5e:bb:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSbUijX+5jTbeK2eQtEuW3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0MGM4Njk3ZTNkMmU5NGI4NTQ2MjUzZGNmMjY0OWNhNjAw
NjJhNjgwHhcNMjUwNDIwMDkwMDE1WhcNMjUwNDIxMDkwMDE1WjAzMTEwLwYDVQQD
EyhlOGMxNzI0NDVkYWE2M2MzN2ZjZmFlYTEyM2NlMTJkZDY5OGUyYTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygAQyCT0RblBcU6B6SZkNjbtzwCe
oL/6tw02V+2dyTC2m94YfATw5wBmmjBvDU+K7LKTDxE2v2Kx2OHLyN7HpuYb5nfE
vkoZ3zZnNzJRmQHHw2KKOr4A1lMTSoDAt536qTsoQUyztdGuom/7CqITX2s8ZFN9
pVPvyyfgn/YZCSE7/veVb1UCV5knSIT7J/wMOBnjcEi2FxebVkFEOo9wFrcX8LTH
ZjvecJtMDPCYcy9wfTT3epckE0T/eV9OQOkR5Y0N3W0fKVPZ6fb9P1+ChE6y1Um+
NfIeFBk8l/JSdaIcolTGobaqx0n6LZRJXlIz+5vCQRT0HKwVwfFUeYabJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjBckRdqmPDf8+uoSPOEt1pjipdMB8GA1UdIwQY
MBaAFBQMhpfj0ulLhUYlPc8mScpgBipoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkF5R2wtUFM2VXVGUmlVOXp5Wkp5bUFHS21nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8zMDRmZTktODlhMi00ZjgzLTk5N2Yt
YmZmNjRkNGNjZjk1LzEvRkF5R2wtUFM2VXVGUmlVOXp5Wkp5bUFHS21nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8zMDRmZTktODlhMi00ZjgzLTk5N2YtYmZmNjRkNGNjZjk1
LzEvRkF5R2wtUFM2VXVGUmlVOXp5Wkp5bUFHS21nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0ps/TdZ
RGXUPV9iN3ucZZp5ojKfRVfPg/82hDoKieKThGoWHz3pVq9NGmO2PRq7g3yrhM+f
p718tdKw7fI+TH89Gcm13Qv78hfmikAhP99MIPSEDE7Fj9gHYbOdaFH9Vb6sVwTi
JFFIrqpVoHG7STM3GwT4MKve6P0yK80BiNV1bI+lc2jSKPu7/sqEXWaGy9ho0mQw
oTg65mF8cJOWHQwn8d1FRQk7w3IqMCsTDNqKH2YYy41o8W1FaQJBxIkSv/fkxooc
jlmrK6fIpqT12j7C0L0aGy0X6Y6Vv2mYZj2hGrCtn+8jDKXlazj31kmRdmKhtAhR
IVsfjmFjK1674g==
-----END CERTIFICATE-----
Generated at Sun Apr 20 19:37:33 2025 by rpki-client