Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.mft
File: F43VHX5As0tDn4_fTQUUEcU0cuo.mft (raw, json)
Hash identifier: kkUAmoa3A97ySNkms8c62TftpZ32m7qBT2V/WiFmO+s=
Subject key identifier: 4B:04:81:11:B0:4F:9D:EA:82:26:C7:07:F0:C6:FA:48:A7:D4:42:94
Authority key identifier: 17:8D:D5:1D:7E:40:B3:4B:43:9F:8F:DF:4D:05:14:11:C5:34:72:EA
Certificate issuer: /CN=178dd51d7e40b34b439f8fdf4d051411c53472ea
Certificate serial: 01974AB1CE66597AB2A72DA427A624CA41A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F43VHX5As0tDn4_fTQUUEcU0cuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.mft
Manifest number: 0343
Signing time: Sat 07 Jun 2025 14:00:56 +0000
Manifest this update: Sat 07 Jun 2025 14:00:56 +0000
Manifest next update: Sun 08 Jun 2025 14:00:56 +0000
Files and hashes: 1: F43VHX5As0tDn4_fTQUUEcU0cuo.crl (hash: rQYVdI2nnxI4ZkRu7y7vPgETVFvOPJkUKO9xqggQ++M=)
2: sY0r0y4AruQYBO-qa1jtodSMRJI.roa (hash: fgiZ0pPukyfp5f/cG9pJMs5XjY+lIWQ3prMocyZ72Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/F43VHX5As0tDn4_fTQUUEcU0cuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:ce:66:59:7a:b2:a7:2d:a4:27:a6:24:ca:41:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178dd51d7e40b34b439f8fdf4d051411c53472ea
Validity
Not Before: Jun 7 14:00:56 2025 GMT
Not After : Jun 8 14:00:56 2025 GMT
Subject: CN=4b048111b04f9dea8226c707f0c6fa48a7d44294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:83:b9:13:33:6f:27:61:18:bc:95:3a:50:
f2:20:b8:3c:5c:d6:57:2c:12:78:30:e4:ff:0e:fa:
32:86:94:e6:7d:23:11:cb:ad:2d:2d:46:d1:91:5b:
d5:0e:f4:06:c2:6c:de:10:aa:27:80:3f:bc:0c:6c:
71:96:0c:1c:ed:af:e5:5b:dd:0a:60:cc:e0:82:06:
4a:38:b1:53:f9:e8:2b:ac:44:d0:20:68:da:62:e1:
8b:0b:10:6a:22:8e:ac:19:65:7d:f8:c5:75:61:93:
14:37:ea:81:65:cc:39:db:af:32:ed:74:1f:1c:a8:
74:74:32:f2:c5:8c:a4:95:5a:3a:3f:92:f5:c4:85:
7c:31:43:ea:d6:ac:ed:39:84:3d:99:eb:9f:af:e1:
b3:c5:e6:fc:5b:fd:ba:71:47:34:61:ef:3c:9a:b0:
4b:f0:fe:0a:43:95:0c:79:02:10:39:30:77:1d:3c:
ec:30:fd:4a:8f:d6:02:c9:78:25:14:9d:3e:1f:83:
a0:3f:a7:96:d1:99:d6:e4:b2:a4:b0:67:c2:c3:58:
17:53:d7:bc:9b:ef:bd:33:53:e3:17:48:07:7c:91:
13:92:3b:08:d3:77:38:7b:ca:39:ad:55:42:8d:51:
4b:61:53:43:c9:a0:22:83:97:85:39:19:77:77:75:
95:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:04:81:11:B0:4F:9D:EA:82:26:C7:07:F0:C6:FA:48:A7:D4:42:94
X509v3 Authority Key Identifier:
keyid:17:8D:D5:1D:7E:40:B3:4B:43:9F:8F:DF:4D:05:14:11:C5:34:72:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F43VHX5As0tDn4_fTQUUEcU0cuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f0:9b:fb:c9:14:8b:a8:67:5d:c4:ec:c3:54:0c:fc:96:ba:
4b:b0:8f:cd:47:73:80:11:64:69:37:25:8e:34:0e:6a:f8:eb:
f1:b9:4b:77:ae:39:0a:d7:3c:7b:95:61:6a:03:3d:d4:50:73:
6a:7b:15:ae:54:44:24:bd:8d:21:fb:2f:15:fe:b0:35:1d:55:
c7:7b:a9:6a:6b:2c:7e:94:87:95:31:ef:5c:da:de:ff:68:4b:
96:81:2b:c2:15:45:00:b7:20:4f:c4:43:c4:ab:61:4b:33:ad:
d4:e6:6a:3e:fe:d1:45:5f:d5:76:f8:45:0e:7c:a9:4e:63:09:
7d:90:c9:50:86:8f:31:2c:d9:3d:7f:29:f2:b9:0f:27:5c:d4:
e0:62:88:e9:b2:5f:d3:da:98:e2:36:dd:9e:1c:92:2b:10:60:
94:14:de:04:bc:01:f0:c3:5d:62:05:40:5c:45:56:a3:75:0b:
5b:f3:d4:c8:bc:fe:3f:b4:24:11:91:fd:86:9b:34:21:1d:72:
19:63:2e:74:5b:1f:1d:59:58:50:1d:38:d0:6b:89:2e:c2:a7:
f8:29:0c:53:71:8e:96:73:d6:a4:3d:87:a4:c4:bf:62:dd:1c:
30:44:e2:7a:b5:84:a0:e3:b5:84:91:93:54:b4:db:54:52:37:
a3:4b:22:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKsc5mWXqypy2kJ6YkykGjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OGRkNTFkN2U0MGIzNGI0MzlmOGZkZjRkMDUxNDExYzUz
NDcyZWEwHhcNMjUwNjA3MTQwMDU2WhcNMjUwNjA4MTQwMDU2WjAzMTEwLwYDVQQD
Eyg0YjA0ODExMWIwNGY5ZGVhODIyNmM3MDdmMGM2ZmE0OGE3ZDQ0Mjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOCDuRMzbydhGLyVOlDyILg8XNZX
LBJ4MOT/DvoyhpTmfSMRy60tLUbRkVvVDvQGwmzeEKongD+8DGxxlgwc7a/lW90K
YMzgggZKOLFT+egrrETQIGjaYuGLCxBqIo6sGWV9+MV1YZMUN+qBZcw5268y7XQf
HKh0dDLyxYyklVo6P5L1xIV8MUPq1qztOYQ9meufr+Gzxeb8W/26cUc0Ye88mrBL
8P4KQ5UMeQIQOTB3HTzsMP1Kj9YCyXglFJ0+H4OgP6eW0ZnW5LKksGfCw1gXU9e8
m++9M1PjF0gHfJETkjsI03c4e8o5rVVCjVFLYVNDyaAig5eFORl3d3WVzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsEgRGwT53qgibHB/DG+kin1EKUMB8GA1UdIwQY
MBaAFBeN1R1+QLNLQ5+P300FFBHFNHLqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjQzVkhYNUFzMHREbjRfZlRRVVVFY1UwY3VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84NzZmYzctNjU1Mi00ZDQxLTg5YWUt
ODdhYTlkODc3MmYzLzEvRjQzVkhYNUFzMHREbjRfZlRRVVVFY1UwY3VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi84NzZmYzctNjU1Mi00ZDQxLTg5YWUtODdhYTlkODc3MmYz
LzEvRjQzVkhYNUFzMHREbjRfZlRRVVVFY1UwY3VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvCb+8kU
i6hnXcTsw1QM/Ja6S7CPzUdzgBFkaTcljjQOavjr8blLd645Ctc8e5VhagM91FBz
ansVrlREJL2NIfsvFf6wNR1Vx3upamssfpSHlTHvXNre/2hLloErwhVFALcgT8RD
xKthSzOt1OZqPv7RRV/VdvhFDnypTmMJfZDJUIaPMSzZPX8p8rkPJ1zU4GKI6bJf
09qY4jbdnhySKxBglBTeBLwB8MNdYgVAXEVWo3ULW/PUyLz+P7QkEZH9hps0IR1y
GWMudFsfHVlYUB040GuJLsKn+CkMU3GOlnPWpD2HpMS/Yt0cMETierWEoOO1hJGT
VLTbVFI3o0sirw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:32:31 2025 by rpki-client