Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
File: FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft (raw, json)
Hash identifier: gQTl/JLVDr4eio4S41gk2R8gldXT4nMFM1QlPxGqeJg=
Subject key identifier: 4F:C7:94:EB:7D:C7:05:3F:2A:78:DA:F5:13:3A:EE:1D:7D:50:22:C7
Authority key identifier: 16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
Certificate issuer: /CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Certificate serial: 0196594B41653BFC0820FBE15006E403651B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
Manifest number: 0820
Signing time: Mon 21 Apr 2025 17:00:26 +0000
Manifest this update: Mon 21 Apr 2025 17:00:26 +0000
Manifest next update: Tue 22 Apr 2025 17:00:26 +0000
Files and hashes: 1: FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl (hash: e9nUibIotAbx7tccO5UjqAQ6LjJBcmcs+RcqQ0Cn/6I=)
2: g3b-X86nv3p6U9DOq4hCU_Dnmdo.roa (hash: 2YoEPjb/mUp/HqQp7Qak5HkOS9XgXc9API514lfVQEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:41:65:3b:fc:08:20:fb:e1:50:06:e4:03:65:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Validity
Not Before: Apr 21 17:00:26 2025 GMT
Not After : Apr 22 17:00:26 2025 GMT
Subject: CN=4fc794eb7dc7053f2a78daf5133aee1d7d5022c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:19:81:e0:63:e9:55:df:d2:26:37:41:1e:
92:c9:8f:d8:ea:9c:45:ce:88:36:74:78:77:72:3b:
bd:0c:bc:74:6f:7c:f5:8c:59:6b:69:47:87:9c:84:
f6:3c:7c:a4:57:2b:e9:3b:fc:59:11:98:a3:a2:b6:
89:cd:9b:b0:30:57:09:a2:ed:8d:59:68:b4:d5:e9:
9e:22:51:7a:79:49:4e:03:ab:00:ec:af:8e:12:5f:
7c:25:53:80:67:2b:1a:7d:63:34:ca:52:da:5e:c9:
7b:1e:01:b0:44:39:3e:da:1f:14:0e:2d:2d:0a:70:
8b:b6:6b:05:23:46:eb:fe:cc:6f:99:4e:03:03:ee:
b0:8d:e6:0f:ee:bc:d9:7c:61:a2:bd:b6:f7:63:1e:
fd:f1:4e:17:dd:8e:b2:3e:c6:81:0a:fd:bd:d9:40:
f2:50:0d:45:26:34:35:4e:e8:be:2d:3a:eb:25:72:
19:f3:70:fb:ed:e1:c7:c3:ef:ef:06:7f:02:4f:db:
7e:d0:29:10:cd:0a:9f:b3:49:f9:96:68:31:c5:55:
8c:a3:82:1b:49:1a:45:79:83:03:f0:00:34:9e:e9:
33:88:e9:57:2e:89:50:2b:6b:1f:9f:e3:16:36:71:
f1:14:c9:14:f4:6b:42:03:87:3a:14:d4:df:61:ad:
4b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C7:94:EB:7D:C7:05:3F:2A:78:DA:F5:13:3A:EE:1D:7D:50:22:C7
X509v3 Authority Key Identifier:
keyid:16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:81:83:a2:f3:29:32:fa:e3:6b:ad:b9:fd:77:a8:6c:c1:7a:
08:42:f3:b2:bc:c3:70:12:5f:8e:59:0c:99:04:58:ea:74:22:
bf:27:f9:8d:7d:03:ab:8f:cd:1f:d0:f8:ad:74:a5:6e:eb:32:
1e:8c:b8:e8:e0:ed:a2:25:2c:af:cc:2b:1b:13:c9:44:8a:1c:
f8:4e:f4:89:bd:6b:72:fe:fd:e5:61:fd:3b:1e:8e:5b:83:3b:
e3:fd:21:11:c8:2d:77:a8:de:21:a1:6c:9a:53:4e:1e:aa:f3:
79:c7:14:0b:75:cc:ee:a9:3e:8e:18:ec:c0:88:3f:9d:25:e5:
96:2b:81:78:a3:43:36:99:c8:b6:87:7d:bc:b1:b9:db:0c:12:
fb:e0:e0:cc:eb:98:b0:cc:8b:94:a7:ca:71:1e:d2:19:6c:25:
c9:db:9f:32:7a:0f:7b:cd:92:00:cd:37:b6:19:c9:24:0d:61:
c0:b6:25:26:bc:3a:f3:02:c2:b1:c4:6b:72:bf:57:ad:ed:e7:
04:00:c8:71:1e:67:88:1b:23:7f:9b:6f:e8:1a:70:fe:c9:17:
51:5e:9b:9a:81:6f:ce:36:57:b7:cb:dd:ff:12:39:ad:81:25:
bf:ca:fb:68:7b:2e:e6:82:a5:c3:e4:df:23:e1:76:ca:f9:f8:
00:20:37:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZS0FlO/wIIPvhUAbkA2UbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZDMxYjJkODk5ZDZlYjJiY2I3YTRkNzhjYzMxMDBkY2Uz
MGM5MGMwHhcNMjUwNDIxMTcwMDI2WhcNMjUwNDIyMTcwMDI2WjAzMTEwLwYDVQQD
Eyg0ZmM3OTRlYjdkYzcwNTNmMmE3OGRhZjUxMzNhZWUxZDdkNTAyMmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupYZgeBj6VXf0iY3QR6SyY/Y6pxF
zog2dHh3cju9DLx0b3z1jFlraUeHnIT2PHykVyvpO/xZEZijoraJzZuwMFcJou2N
WWi01emeIlF6eUlOA6sA7K+OEl98JVOAZysafWM0ylLaXsl7HgGwRDk+2h8UDi0t
CnCLtmsFI0br/sxvmU4DA+6wjeYP7rzZfGGivbb3Yx798U4X3Y6yPsaBCv292UDy
UA1FJjQ1Tui+LTrrJXIZ83D77eHHw+/vBn8CT9t+0CkQzQqfs0n5lmgxxVWMo4Ib
SRpFeYMD8AA0nukziOlXLolQK2sfn+MWNnHxFMkU9GtCA4c6FNTfYa1LiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/HlOt9xwU/Knja9RM67h19UCLHMB8GA1UdIwQY
MBaAFBbTGy2JnW6yvLek14zDEA3OMMkMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnRNYkxZbWRicks4dDZUWGpNTVFEYzR3eVF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83YzNhMTgtMGVjOS00MTU3LWJmNWEt
NTIwN2Y2NjRkZjIxLzEvRnRNYkxZbWRicks4dDZUWGpNTVFEYzR3eVF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS83YzNhMTgtMGVjOS00MTU3LWJmNWEtNTIwN2Y2NjRkZjIx
LzEvRnRNYkxZbWRicks4dDZUWGpNTVFEYzR3eVF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAloGDovMp
Mvrja625/XeobMF6CELzsrzDcBJfjlkMmQRY6nQivyf5jX0Dq4/NH9D4rXSlbusy
Hoy46ODtoiUsr8wrGxPJRIoc+E70ib1rcv795WH9Ox6OW4M74/0hEcgtd6jeIaFs
mlNOHqrzeccUC3XM7qk+jhjswIg/nSXlliuBeKNDNpnItod9vLG52wwS++DgzOuY
sMyLlKfKcR7SGWwlydufMnoPe82SAM03thnJJA1hwLYlJrw68wLCscRrcr9Xre3n
BADIcR5niBsjf5tv6Bpw/skXUV6bmoFvzjZXt8vd/xI5rYElv8r7aHsu5oKlw+Tf
I+F2yvn4ACA3cQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:19:52 2025 by rpki-client