Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
File: FxMSnvT6RU4PCsQH4AjpV6G3laA.mft (raw, json)
Hash identifier: NF2MTN3kgN2LlwcShhymPnT5vHpI7Xvn6TfcQktGt70=
Subject key identifier: D0:6F:61:92:07:6F:0E:ED:4E:1A:86:B4:09:CA:7C:0A:D3:D5:C0:DA
Authority key identifier: 17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
Certificate issuer: /CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Certificate serial: 01965493116103A31E45C60BF16D79540809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 19:00:46 +0000
Manifest this update: Sun 20 Apr 2025 19:00:46 +0000
Manifest next update: Mon 21 Apr 2025 19:00:46 +0000
Files and hashes: 1: Awd1yGOmw0G9ufYkJyOwIDHo3Qk.roa (hash: NpDJRKt/f4syIfXokbOL4x73rCHTvURrkdu0Yrl2tN4=)
2: BIIEZlMRbg4gFcs3vd0E2vnjAC0.roa (hash: dLd9sOD+PRZDAt8utITG0xeDO7qLojT8kdoKvMI+HQ0=)
3: FxMSnvT6RU4PCsQH4AjpV6G3laA.crl (hash: fkakpTxyStu2ZiBpisxH6wzSXRcKsLMhv4Ck/Mcmhes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:11:61:03:a3:1e:45:c6:0b:f1:6d:79:54:08:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Validity
Not Before: Apr 20 19:00:46 2025 GMT
Not After : Apr 21 19:00:46 2025 GMT
Subject: CN=d06f6192076f0eed4e1a86b409ca7c0ad3d5c0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:83:52:67:2d:62:dd:34:d6:a8:66:21:ac:
33:92:f3:63:39:47:76:6f:0b:04:34:2d:d5:35:9b:
cb:d4:63:99:b2:df:16:e5:55:3f:5d:d8:b6:da:d5:
86:71:de:2f:f6:c6:dc:e1:37:de:38:83:bf:83:e8:
61:38:f9:37:e9:0c:90:44:35:76:32:11:ef:b2:0d:
51:de:16:43:3b:5c:be:31:15:20:eb:fb:fd:24:3a:
96:d3:9b:24:5f:0f:de:6d:69:3b:7d:50:15:ab:3d:
1a:e6:95:62:be:d4:15:b1:64:96:72:11:78:2e:43:
fd:19:4a:22:4c:88:64:07:e6:1f:85:8e:45:e8:38:
ea:28:f2:b5:fe:8c:28:08:22:57:c3:4c:6b:b2:11:
26:5e:63:bb:5e:d5:71:11:8a:40:32:fc:37:dc:94:
4e:8c:3a:a0:0f:59:68:f0:ef:18:c2:26:a1:bc:08:
ff:3d:fe:0f:4f:36:64:d5:12:01:89:8b:06:2a:15:
57:7f:85:96:d8:66:88:49:44:be:ed:83:56:20:6f:
6d:94:44:f4:2b:64:aa:03:95:42:83:c6:99:b7:8f:
0f:d7:d8:c2:1b:5a:c8:e4:f5:e0:47:59:82:81:71:
12:51:0c:8e:08:5a:b8:b1:76:0c:9a:d5:0d:e4:43:
af:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6F:61:92:07:6F:0E:ED:4E:1A:86:B4:09:CA:7C:0A:D3:D5:C0:DA
X509v3 Authority Key Identifier:
keyid:17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:10:a9:96:26:85:29:8c:f7:59:78:a2:af:57:22:5e:f1:7a:
cb:9e:0a:19:13:68:fd:84:cc:48:14:9e:24:50:7d:a8:86:3c:
b3:6f:e0:fe:ba:98:0e:76:30:39:09:67:df:d2:33:6a:2b:20:
e6:d8:cb:75:db:85:1d:df:7d:da:03:b6:00:f8:d6:44:fc:dc:
a7:70:f9:a9:86:19:ba:c2:be:ed:44:0b:95:03:7e:e8:fb:4b:
8b:b1:fc:13:a0:7a:98:4d:43:98:fc:24:a7:9d:35:12:e2:cf:
04:56:0d:da:a7:8d:7b:fa:e8:35:48:3b:79:00:23:e9:c6:a4:
93:b5:d6:ac:fe:2b:e2:67:47:ee:ff:1f:24:1e:b6:31:4c:9d:
98:74:6c:d0:34:51:29:56:fb:5d:48:51:2c:71:94:41:c7:52:
a8:16:e8:ec:13:bf:c2:0b:50:9f:36:c7:fd:bf:1b:8d:f9:8f:
b3:71:8e:02:9e:3f:1f:75:15:c8:8a:90:73:e2:f1:74:5f:94:
5b:09:95:e6:af:86:93:87:99:4c:c5:92:4c:87:9b:b9:30:fe:
33:ac:d3:a6:4e:b9:ad:c6:dd:ed:90:6e:92:d9:62:d1:06:59:
1a:3b:78:3f:8b:6b:da:c8:84:4b:96:ff:85:eb:4f:1d:69:b8:
32:e8:75:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUkxFhA6MeRcYL8W15VAgJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MTMxMjllZjRmYTQ1NGUwZjBhYzQwN2UwMDhlOTU3YTFi
Nzk1YTAwHhcNMjUwNDIwMTkwMDQ2WhcNMjUwNDIxMTkwMDQ2WjAzMTEwLwYDVQQD
EyhkMDZmNjE5MjA3NmYwZWVkNGUxYTg2YjQwOWNhN2MwYWQzZDVjMGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9ODUmctYt001qhmIawzkvNjOUd2
bwsENC3VNZvL1GOZst8W5VU/Xdi22tWGcd4v9sbc4TfeOIO/g+hhOPk36QyQRDV2
MhHvsg1R3hZDO1y+MRUg6/v9JDqW05skXw/ebWk7fVAVqz0a5pVivtQVsWSWchF4
LkP9GUoiTIhkB+YfhY5F6DjqKPK1/owoCCJXw0xrshEmXmO7XtVxEYpAMvw33JRO
jDqgD1lo8O8YwiahvAj/Pf4PTzZk1RIBiYsGKhVXf4WW2GaISUS+7YNWIG9tlET0
K2SqA5VCg8aZt48P19jCG1rI5PXgR1mCgXESUQyOCFq4sXYMmtUN5EOvYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBvYZIHbw7tThqGtAnKfArT1cDaMB8GA1UdIwQY
MBaAFBcTEp70+kVODwrEB+AI6Veht5WgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnhNU252VDZSVTRQQ3NRSDRBanBWNkczbGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xNTcyOTktOWQxYy00YzViLTlhNDEt
YzI1ZmRjNGNhMmY2LzEvRnhNU252VDZSVTRQQ3NRSDRBanBWNkczbGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8xNTcyOTktOWQxYy00YzViLTlhNDEtYzI1ZmRjNGNhMmY2
LzEvRnhNU252VDZSVTRQQ3NRSDRBanBWNkczbGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhCpliaF
KYz3WXiir1ciXvF6y54KGRNo/YTMSBSeJFB9qIY8s2/g/rqYDnYwOQln39Izaisg
5tjLdduFHd992gO2APjWRPzcp3D5qYYZusK+7UQLlQN+6PtLi7H8E6B6mE1DmPwk
p501EuLPBFYN2qeNe/roNUg7eQAj6cakk7XWrP4r4mdH7v8fJB62MUydmHRs0DRR
KVb7XUhRLHGUQcdSqBbo7BO/wgtQnzbH/b8bjfmPs3GOAp4/H3UVyIqQc+LxdF+U
WwmV5q+Gk4eZTMWSTIebuTD+M6zTpk65rcbd7ZBuktli0QZZGjt4P4tr2siES5b/
hetPHWm4Muh1/A==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:23 2025 by rpki-client