Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
File: fggLq1W_NHMYjCDHNmpssETHGVw.mft (raw, json)
Hash identifier: 9Eyh1RsGjznnP1yR9DQPBXn9OAvJuX51U7A6y0xXStM=
Subject key identifier: FE:28:37:85:7F:DB:39:C3:AB:39:34:AA:ED:92:E1:A3:01:35:81:63
Authority key identifier: 7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
Certificate issuer: /CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Certificate serial: 01965A94E6390069687EBFD9A415C2A266FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
Manifest number: 0FA5
Signing time: Mon 21 Apr 2025 23:00:29 +0000
Manifest this update: Mon 21 Apr 2025 23:00:29 +0000
Manifest next update: Tue 22 Apr 2025 23:00:29 +0000
Files and hashes: 1: 8m52WXmC6DqVDLH9lI-6WR69u6s.roa (hash: 0BZo5xqp89NE8ExAG9qblE2VcBVND0AxeF/zdrSRKa8=)
2: fggLq1W_NHMYjCDHNmpssETHGVw.crl (hash: Lb4rrD6d62HzeWz41rZY5PLWXKWoCpuBregHMYB+19w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:94:e6:39:00:69:68:7e:bf:d9:a4:15:c2:a2:66:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Validity
Not Before: Apr 21 23:00:29 2025 GMT
Not After : Apr 22 23:00:29 2025 GMT
Subject: CN=fe2837857fdb39c3ab3934aaed92e1a301358163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e7:12:97:ee:3c:33:d3:51:ae:e4:29:f2:56:
f4:e1:f0:cc:ae:58:6a:bf:01:53:dc:f5:d9:47:ee:
3e:97:58:6b:17:17:a7:8c:e1:29:b3:3e:a4:44:e1:
69:b5:e4:5d:8c:cf:3c:22:1d:f5:27:85:3d:ca:0d:
c0:9e:9b:06:0c:a4:fe:35:27:28:30:9b:60:72:65:
7d:8f:62:f0:cc:0b:67:59:55:f7:bb:e5:02:e3:d1:
3d:a2:e0:f3:eb:ec:1f:63:c3:96:08:5a:90:f1:f7:
09:23:27:9c:33:61:d8:ea:0f:af:03:ef:9f:b2:09:
a0:ad:7c:ff:51:67:cf:0b:a9:2e:3d:5f:0b:8d:a3:
40:6e:a6:c1:13:c7:9e:b2:da:2a:1e:2b:f3:26:cc:
ff:54:d8:0c:7f:78:37:05:14:e9:17:d8:79:18:da:
29:0d:60:fb:de:0d:56:1e:04:6d:62:8d:0c:11:09:
9d:2d:31:87:41:bb:63:d2:78:31:ff:81:7b:6d:ea:
56:57:cc:86:80:94:08:fa:b2:a9:15:b6:d9:2a:7f:
e3:41:7f:db:da:77:3d:e5:4a:cb:42:db:a2:5b:f0:
43:09:50:b3:b3:58:a1:84:cf:ef:c9:bd:d2:5c:0a:
68:d9:c9:2e:bd:e7:05:ea:2f:6c:ae:71:95:65:c9:
81:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:28:37:85:7F:DB:39:C3:AB:39:34:AA:ED:92:E1:A3:01:35:81:63
X509v3 Authority Key Identifier:
keyid:7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2f:40:99:b3:68:96:54:15:e1:05:7f:4f:b5:92:e1:c6:f0:
10:bf:e2:de:69:c1:54:a3:0d:ef:25:fd:09:c4:1d:66:de:75:
19:cd:06:8b:3f:b8:b5:b5:90:02:04:55:32:d9:28:d2:cf:00:
37:26:b3:3a:e3:dd:ae:a2:99:dd:58:41:b2:b7:4c:47:59:8f:
e3:29:d8:cc:03:a1:1f:c8:0d:b3:5d:4c:79:85:a2:20:ba:09:
d6:f4:7f:67:e9:b4:16:f2:56:d9:de:6b:58:d3:c8:dc:4e:b0:
3f:91:8e:c7:39:de:86:67:b8:c5:1d:10:76:b3:47:bd:c2:42:
b7:30:b8:46:55:4d:de:44:d2:96:da:e7:9a:58:3f:77:86:32:
c8:f2:ee:7e:d4:11:25:6e:ed:c4:65:d5:90:91:f5:11:33:7f:
e3:c0:08:9d:56:9b:e8:67:17:24:ad:7b:71:d1:04:6e:ad:26:
1c:cb:a9:f7:11:68:e4:2d:a6:4f:e7:65:1f:00:15:41:13:f7:
a3:ae:d6:1d:4f:7d:ad:88:99:0c:bb:13:3a:31:a4:91:74:e7:
15:9e:bc:33:93:7f:20:36:cc:95:58:50:27:c5:ad:a4:1a:16:
ff:d4:7d:55:99:14:d1:f8:12:48:6c:c3:e2:a0:5f:ca:fd:d3:
44:a5:b6:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZalOY5AGlofr/ZpBXComb6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMDgwYmFiNTViZjM0NzMxODhjMjBjNzM2NmE2Y2IwNDRj
NzE5NWMwHhcNMjUwNDIxMjMwMDI5WhcNMjUwNDIyMjMwMDI5WjAzMTEwLwYDVQQD
EyhmZTI4Mzc4NTdmZGIzOWMzYWIzOTM0YWFlZDkyZTFhMzAxMzU4MTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOcSl+48M9NRruQp8lb04fDMrlhq
vwFT3PXZR+4+l1hrFxenjOEpsz6kROFpteRdjM88Ih31J4U9yg3AnpsGDKT+NSco
MJtgcmV9j2LwzAtnWVX3u+UC49E9ouDz6+wfY8OWCFqQ8fcJIyecM2HY6g+vA++f
sgmgrXz/UWfPC6kuPV8LjaNAbqbBE8eestoqHivzJsz/VNgMf3g3BRTpF9h5GNop
DWD73g1WHgRtYo0MEQmdLTGHQbtj0ngx/4F7bepWV8yGgJQI+rKpFbbZKn/jQX/b
2nc95UrLQtuiW/BDCVCzs1ihhM/vyb3SXApo2ckuvecF6i9srnGVZcmBlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4oN4V/2znDqzk0qu2S4aMBNYFjMB8GA1UdIwQY
MBaAFH4IC6tVvzRzGIwgxzZqbLBExxlcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmdnTHExV19OSE1ZakNESE5tcHNzRVRIR1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mZGE4YzktNmVmYS00OTU0LWE1YzMt
NjMwYmQ3M2NlMjY3LzEvZmdnTHExV19OSE1ZakNESE5tcHNzRVRIR1Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9mZGE4YzktNmVmYS00OTU0LWE1YzMtNjMwYmQ3M2NlMjY3
LzEvZmdnTHExV19OSE1ZakNESE5tcHNzRVRIR1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANy9AmbNo
llQV4QV/T7WS4cbwEL/i3mnBVKMN7yX9CcQdZt51Gc0Giz+4tbWQAgRVMtko0s8A
NyazOuPdrqKZ3VhBsrdMR1mP4ynYzAOhH8gNs11MeYWiILoJ1vR/Z+m0FvJW2d5r
WNPI3E6wP5GOxznehme4xR0QdrNHvcJCtzC4RlVN3kTSltrnmlg/d4YyyPLuftQR
JW7txGXVkJH1ETN/48AInVab6GcXJK17cdEEbq0mHMup9xFo5C2mT+dlHwAVQRP3
o67WHU99rYiZDLsTOjGkkXTnFZ68M5N/IDbMlVhQJ8WtpBoW/9R9VZkU0fgSSGzD
4qBfyv3TRKW2sA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:19:54 2025 by rpki-client