Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
File: FcyIDwoSx7lPcdmy5bAopw0fo0o.mft (raw, json)
Hash identifier: w5NCyinLH45iccIh3Byr8+h3BQId3YYBEA/XFUlzCs0=
Subject key identifier: E8:81:EC:5C:EE:F1:3A:31:58:62:BD:4D:21:B1:35:69:DD:B4:77:02
Authority key identifier: 15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
Certificate issuer: /CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Certificate serial: 0196526D963E2ABC05B1C0B4F0990F0A295D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
Manifest number: 1503
Signing time: Sun 20 Apr 2025 09:00:35 +0000
Manifest this update: Sun 20 Apr 2025 09:00:35 +0000
Manifest next update: Mon 21 Apr 2025 09:00:35 +0000
Files and hashes: 1: FcyIDwoSx7lPcdmy5bAopw0fo0o.crl (hash: 9QM21nxgdwJKG1woC/cIsV3KD6ZfpwTVqbhWEYZU4ew=)
2: kc-ZCrpFtG9x51LpF4W3iw7kDzs.roa (hash: aN11v2IUXg+LXUfyuCNuVklkgeIw5ckCn/DmdMCJWXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:96:3e:2a:bc:05:b1:c0:b4:f0:99:0f:0a:29:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Validity
Not Before: Apr 20 09:00:35 2025 GMT
Not After : Apr 21 09:00:35 2025 GMT
Subject: CN=e881ec5ceef13a315862bd4d21b13569ddb47702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b0:52:04:25:f8:75:9a:df:d6:e2:b0:5a:cf:
22:50:0d:98:df:19:40:1f:78:57:e2:37:69:b8:6a:
ed:cb:0b:00:50:ba:34:1a:e1:fe:8f:5b:30:9d:d3:
c6:6a:bc:86:d1:f5:20:bf:71:f2:88:6b:21:54:09:
77:6a:93:90:fc:e8:ec:19:36:9c:34:39:25:5a:84:
64:6a:83:21:e5:35:2f:84:23:3b:10:88:49:a6:7e:
95:d1:71:22:cb:df:79:83:7e:f4:5f:5b:ed:8d:66:
89:96:fc:f7:fd:7d:05:b0:c1:8a:f7:85:e3:47:d4:
38:dc:70:c2:38:45:47:14:fe:17:a7:19:0c:5e:b9:
42:16:7e:ff:5c:e3:57:e2:34:42:76:d8:d5:86:dd:
3b:c8:d6:40:ee:3a:ea:15:b4:55:3e:49:25:d9:2e:
2c:34:9c:68:6e:d5:79:32:c1:9c:24:55:fd:58:19:
70:39:fa:7d:33:f2:68:45:53:15:be:d4:83:82:be:
20:38:0b:ac:a9:85:cd:91:6f:7c:a5:c0:84:ab:b3:
2b:57:3c:9d:b2:17:1b:96:ff:a1:80:f6:9e:8c:cc:
b4:fb:ab:d1:ff:6a:1c:d6:be:f8:0f:dc:34:10:66:
3d:7f:3d:5d:80:91:03:66:3b:a5:95:a8:2a:7c:ef:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:81:EC:5C:EE:F1:3A:31:58:62:BD:4D:21:B1:35:69:DD:B4:77:02
X509v3 Authority Key Identifier:
keyid:15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:39:cf:ca:4c:73:42:92:34:ee:08:95:25:70:8c:b6:5f:f9:
60:86:71:1b:d4:86:be:80:8a:0f:ac:c8:97:45:6c:10:e5:41:
4f:8e:07:a4:fc:a1:9e:63:a8:b7:bf:ec:b9:4a:ed:76:54:1f:
ac:d9:0c:87:20:bc:85:f9:bf:d4:d6:9c:5e:5b:34:33:b4:52:
5c:d5:89:88:37:e7:7f:f8:07:0b:cf:af:62:63:fa:26:39:5a:
13:3b:0f:dd:b9:02:5f:a9:41:e2:b6:e4:bb:ff:05:95:a4:6f:
99:54:04:2b:c5:97:62:f1:b8:cf:42:a0:db:33:bf:e7:9a:5a:
2f:dd:43:92:ab:2a:db:3b:2b:c2:13:ef:d6:28:5d:56:89:a9:
d0:5a:73:05:ee:05:ba:a3:a1:f2:ca:89:97:6e:99:b4:f0:d4:
e1:85:4a:a0:b2:35:65:64:8f:b4:ef:6e:a2:3b:c5:32:f6:4b:
1d:f3:5d:a7:20:43:62:ba:04:ac:eb:ff:3f:d0:49:38:5c:bc:
26:91:cc:c6:bb:9a:57:55:f5:f3:08:f9:9e:e4:43:f5:0f:7d:
7b:fc:03:ca:ed:97:17:27:b2:87:b1:7f:0b:2e:6a:86:cb:e7:
c1:cd:ed:b8:d5:b9:f8:d5:f1:11:25:aa:a0:66:88:cf:95:94:
71:b7:df:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSbZY+KrwFscC08JkPCildMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Y2M4ODBmMGExMmM3Yjk0ZjcxZDliMmU1YjAyOGE3MGQx
ZmEzNGEwHhcNMjUwNDIwMDkwMDM1WhcNMjUwNDIxMDkwMDM1WjAzMTEwLwYDVQQD
EyhlODgxZWM1Y2VlZjEzYTMxNTg2MmJkNGQyMWIxMzU2OWRkYjQ3NzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLBSBCX4dZrf1uKwWs8iUA2Y3xlA
H3hX4jdpuGrtywsAULo0GuH+j1swndPGaryG0fUgv3HyiGshVAl3apOQ/OjsGTac
NDklWoRkaoMh5TUvhCM7EIhJpn6V0XEiy995g370X1vtjWaJlvz3/X0FsMGK94Xj
R9Q43HDCOEVHFP4XpxkMXrlCFn7/XONX4jRCdtjVht07yNZA7jrqFbRVPkkl2S4s
NJxobtV5MsGcJFX9WBlwOfp9M/JoRVMVvtSDgr4gOAusqYXNkW98pcCEq7MrVzyd
shcblv+hgPaejMy0+6vR/2oc1r74D9w0EGY9fz1dgJEDZjullagqfO/BYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiB7Fzu8ToxWGK9TSGxNWndtHcCMB8GA1UdIwQY
MBaAFBXMiA8KEse5T3HZsuWwKKcNH6NKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmN5SUR3b1N4N2xQY2RteTViQW9wdzBmbzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81OTg2ZjEtODYzZi00ZWVjLTg1NTEt
MGE4ZmU2NDM0YmY4LzEvRmN5SUR3b1N4N2xQY2RteTViQW9wdzBmbzBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81OTg2ZjEtODYzZi00ZWVjLTg1NTEtMGE4ZmU2NDM0YmY4
LzEvRmN5SUR3b1N4N2xQY2RteTViQW9wdzBmbzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJTnPykxz
QpI07giVJXCMtl/5YIZxG9SGvoCKD6zIl0VsEOVBT44HpPyhnmOot7/suUrtdlQf
rNkMhyC8hfm/1NacXls0M7RSXNWJiDfnf/gHC8+vYmP6JjlaEzsP3bkCX6lB4rbk
u/8FlaRvmVQEK8WXYvG4z0Kg2zO/55paL91Dkqsq2zsrwhPv1ihdVomp0FpzBe4F
uqOh8sqJl26ZtPDU4YVKoLI1ZWSPtO9uojvFMvZLHfNdpyBDYroErOv/P9BJOFy8
JpHMxruaV1X18wj5nuRD9Q99e/wDyu2XFyeyh7F/Cy5qhsvnwc3tuNW5+NXxESWq
oGaIz5WUcbffDg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:59:05 2025 by rpki-client