Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
File: fINUmPNRmaFXGWTYVcOHd1FoGrk.mft (raw, json)
Hash identifier: XmiFiPR1Nn4dqt4R599VLFElZPBXRie0ro4Xav25EAM=
Subject key identifier: 12:00:85:42:46:E0:A7:A7:19:75:00:83:62:21:21:65:39:6B:2F:75
Authority key identifier: 7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
Certificate issuer: /CN=7c835498f35199a1571964d855c3877751681ab9
Certificate serial: 01964CD99A8F186074E1CB93133FD02D4B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 07:00:51 +0000
Manifest this update: Sat 19 Apr 2025 07:00:51 +0000
Manifest next update: Sun 20 Apr 2025 07:00:51 +0000
Files and hashes: 1: fINUmPNRmaFXGWTYVcOHd1FoGrk.crl (hash: BTDd+Pc9jcgkypbSVf39amAWYCsqQ0iNvKzHBsGW3oU=)
2: lEn451-XXHlherUNQr8Rc0JmU5c.roa (hash: kIpdRfZGgcVE/RkoYxVB/7zTwiZiv41Cisi6L8BZjv8=)
3: z-VHazRi4J3dfaKu9uPEdEUaUxE.roa (hash: d/YBGA/H3W0HjGNcA5bYsjIVUAEfDekBGnTdNyMczFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:9a:8f:18:60:74:e1:cb:93:13:3f:d0:2d:4b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c835498f35199a1571964d855c3877751681ab9
Validity
Not Before: Apr 19 07:00:51 2025 GMT
Not After : Apr 20 07:00:51 2025 GMT
Subject: CN=1200854246e0a7a71975008362212165396b2f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:89:5e:f6:ab:97:0f:d2:32:74:0e:20:25:f4:
9c:d6:6e:30:4f:33:0a:36:21:c9:27:c2:14:3c:1e:
57:dd:0a:0c:65:7d:79:ff:a9:f0:de:6e:52:33:c8:
fb:ad:c0:dc:04:1e:0c:b9:87:bf:0b:ed:84:11:df:
77:82:a0:c5:a7:80:07:0d:30:ac:97:22:41:60:5a:
bc:c6:2f:13:c5:8d:5c:72:6c:bc:07:92:7c:b8:2a:
e2:59:55:20:60:11:66:e2:4b:59:98:dd:4f:dd:70:
35:2a:d1:e3:0e:73:8f:f5:89:38:29:81:4e:18:38:
53:a1:8b:f3:6b:6b:81:d6:47:18:83:f4:7b:e4:75:
06:d7:0e:04:84:c2:1d:fb:8c:98:cf:50:78:b3:f4:
70:2d:73:0f:20:a5:83:51:2f:a2:1c:0d:5b:a1:53:
b5:09:f4:91:56:ac:83:5f:08:3b:69:a1:42:02:3f:
e8:23:b2:16:0c:3f:0b:6d:eb:40:18:87:2b:33:49:
59:bc:78:4f:98:9e:4c:cb:e9:3d:e4:90:5d:fa:e2:
d5:0c:11:df:58:3d:63:75:2b:71:e3:e6:ce:37:8c:
9a:8a:9b:0c:7d:95:43:98:b5:e3:5b:eb:17:65:16:
50:e9:3d:ce:7b:7a:3a:6c:80:20:e8:90:cc:20:34:
fc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:00:85:42:46:E0:A7:A7:19:75:00:83:62:21:21:65:39:6B:2F:75
X509v3 Authority Key Identifier:
keyid:7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:38:84:b1:fb:27:62:64:0b:55:3f:d4:b0:aa:52:98:de:24:
cb:0c:6a:2a:77:5a:bf:98:39:ae:be:f5:55:14:59:5f:58:dc:
e2:fe:c9:7d:80:33:38:c9:0f:45:70:f1:f2:bc:69:9c:ee:0e:
9c:4c:f2:26:e2:c3:9f:22:f3:61:a4:ea:25:6f:9c:7d:8a:e2:
4c:c4:85:88:c7:37:e7:83:4e:8b:6b:ef:24:dc:6a:6b:e5:50:
ab:e3:31:53:51:68:e2:fd:d8:4a:3c:44:d2:0d:aa:2b:e2:a1:
ef:11:2b:d4:d8:c4:2c:55:ba:c7:d4:f0:54:69:c1:54:7b:3a:
68:42:cb:a4:95:98:60:00:98:4d:18:18:d7:35:ff:1a:85:b1:
d5:e2:7c:dd:bf:0a:a3:a4:47:1f:7b:de:85:4a:a0:b1:a5:14:
67:75:40:a2:47:4f:db:69:45:99:42:2c:0d:ca:00:76:4a:3f:
40:15:65:fa:f2:22:e9:9e:de:cf:e5:a1:56:9f:20:11:c3:46:
bd:13:0e:54:69:a5:86:ae:a4:fd:32:04:cc:cf:39:dc:48:20:
dc:48:19:bd:73:7e:f6:1e:44:e0:f3:e8:a1:37:cd:50:a8:ca:
6d:1f:35:cd:e9:2b:a2:b3:69:db:a3:48:5b:de:e7:88:53:e1:
1b:fa:bc:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZM2ZqPGGB04cuTEz/QLUtbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjODM1NDk4ZjM1MTk5YTE1NzE5NjRkODU1YzM4Nzc3NTE2
ODFhYjkwHhcNMjUwNDE5MDcwMDUxWhcNMjUwNDIwMDcwMDUxWjAzMTEwLwYDVQQD
EygxMjAwODU0MjQ2ZTBhN2E3MTk3NTAwODM2MjIxMjE2NTM5NmIyZjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIle9quXD9IydA4gJfSc1m4wTzMK
NiHJJ8IUPB5X3QoMZX15/6nw3m5SM8j7rcDcBB4MuYe/C+2EEd93gqDFp4AHDTCs
lyJBYFq8xi8TxY1ccmy8B5J8uCriWVUgYBFm4ktZmN1P3XA1KtHjDnOP9Yk4KYFO
GDhToYvza2uB1kcYg/R75HUG1w4EhMId+4yYz1B4s/RwLXMPIKWDUS+iHA1boVO1
CfSRVqyDXwg7aaFCAj/oI7IWDD8LbetAGIcrM0lZvHhPmJ5My+k95JBd+uLVDBHf
WD1jdStx4+bON4yaipsMfZVDmLXjW+sXZRZQ6T3Oe3o6bIAg6JDMIDT8UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIAhUJG4KenGXUAg2IhIWU5ay91MB8GA1UdIwQY
MBaAFHyDVJjzUZmhVxlk2FXDh3dRaBq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85ZjhhZTItMGZiNS00YzA0LWFkOTMt
NGNlNDc3ZGJiNDA3LzEvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85ZjhhZTItMGZiNS00YzA0LWFkOTMtNGNlNDc3ZGJiNDA3
LzEvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqDiEsfsn
YmQLVT/UsKpSmN4kywxqKndav5g5rr71VRRZX1jc4v7JfYAzOMkPRXDx8rxpnO4O
nEzyJuLDnyLzYaTqJW+cfYriTMSFiMc354NOi2vvJNxqa+VQq+MxU1Fo4v3YSjxE
0g2qK+Kh7xEr1NjELFW6x9TwVGnBVHs6aELLpJWYYACYTRgY1zX/GoWx1eJ83b8K
o6RHH3vehUqgsaUUZ3VAokdP22lFmUIsDcoAdko/QBVl+vIi6Z7ez+WhVp8gEcNG
vRMOVGmlhq6k/TIEzM853Egg3EgZvXN+9h5E4PPooTfNUKjKbR81zekrorNp26NI
W97niFPhG/q8lQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:10:26 2025 by rpki-client