Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
File: FPt8Mzas1BidP6xjmigNmwAg8pg.mft (raw, json)
Hash identifier: 6CUi5TChze/KtHDb42ftAue+YkSM3dfJmXAke2hi7kE=
Subject key identifier: 63:6B:C5:8C:F1:94:20:7B:FF:80:25:97:6A:8E:3C:A3:7D:37:36:33
Authority key identifier: 14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98
Certificate issuer: /CN=14fb7c3336acd4189d3fac639a280d9b0020f298
Certificate serial: 01974DE9A67AAA46A6849662E56EC9303314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
Manifest number: 14C3
Signing time: Sun 08 Jun 2025 05:00:47 +0000
Manifest this update: Sun 08 Jun 2025 05:00:47 +0000
Manifest next update: Mon 09 Jun 2025 05:00:47 +0000
Files and hashes: 1: FPt8Mzas1BidP6xjmigNmwAg8pg.crl (hash: IyEQ1t8vs4DURzuw9K3hSIDbc9WeCbRANm6Zu5M+M9w=)
2: Jan-36Lo7cls_qlYXAYwCHL-IM0.roa (hash: 9QKHqIJMi/8WyyfdqnXT2xQCCgDbraKMeYqVzfnxL6A=)
3: rrdEpfsB8Gg5zdzJ-FXk4BiB3TE.roa (hash: 4ZmwtT19+5Iz0mku0LqIMr+TT72kqcPqLFHR2qlNxGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:a6:7a:aa:46:a6:84:96:62:e5:6e:c9:30:33:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14fb7c3336acd4189d3fac639a280d9b0020f298
Validity
Not Before: Jun 8 05:00:47 2025 GMT
Not After : Jun 9 05:00:47 2025 GMT
Subject: CN=636bc58cf194207bff8025976a8e3ca37d373633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:14:61:e0:95:d4:0f:17:65:5b:b9:70:2c:f2:
d2:8e:b9:6f:5f:92:f8:93:35:81:2d:d4:d8:b1:13:
78:dc:f4:99:9c:bd:d6:16:b2:38:90:48:49:9b:1a:
65:c6:22:6b:a4:de:84:7b:49:ca:f1:85:55:58:c8:
98:2f:37:9e:8f:ad:ca:fd:d1:5d:a3:c1:d2:6e:b8:
71:16:f9:83:13:02:f5:64:c7:7f:1c:1c:32:0d:77:
c0:5c:db:b0:fa:d0:2e:f9:d4:d8:ba:9d:84:42:ee:
f0:05:22:3a:3c:8a:58:47:8b:67:9e:c9:18:85:d1:
ad:dd:48:27:89:fd:ef:9f:7e:99:ee:76:91:58:46:
a9:af:7b:b6:71:f1:3c:57:c5:de:82:a3:eb:7c:80:
1e:cb:d3:20:72:8c:d7:c1:c6:53:1e:7b:b0:a0:a7:
df:66:34:95:fd:ac:84:ba:d6:da:50:f1:17:9c:bf:
72:ea:6d:5f:bf:8a:81:35:0c:bf:de:b7:1c:3f:eb:
96:04:6f:04:c2:53:ec:0b:25:cb:f8:ad:78:01:ea:
b7:c6:52:3e:01:c7:0b:e7:55:ba:f1:fb:58:5f:9b:
e9:25:54:4a:e1:5c:6e:09:a4:a8:ac:7c:db:1b:84:
1b:eb:fb:94:7b:25:68:e6:5c:dc:e2:27:2c:89:e5:
ab:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6B:C5:8C:F1:94:20:7B:FF:80:25:97:6A:8E:3C:A3:7D:37:36:33
X509v3 Authority Key Identifier:
keyid:14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:32:e8:ed:e1:0e:3a:51:df:e8:b3:24:76:dc:3c:34:1c:0e:
fe:80:f4:17:8f:d8:d2:cd:ef:c5:3a:a9:ad:fd:67:b0:74:ab:
93:ff:d4:bc:58:e8:e5:6b:27:70:40:d5:c4:5c:bb:7c:87:bd:
50:14:e2:5e:38:bb:77:79:a5:39:80:18:5d:33:c6:ca:3a:a2:
81:13:8d:7a:0e:d6:a3:f5:a2:7c:1e:66:ba:bc:57:bd:00:6e:
74:68:fb:1e:b9:e1:5e:89:13:8e:f0:32:2e:1d:3a:7f:f7:93:
7f:6f:13:4d:57:7c:5b:71:84:aa:9d:f8:c1:b4:92:2a:6f:bb:
38:1a:c2:3c:71:99:5a:93:6e:c2:e5:61:32:d7:bb:13:f3:f1:
f3:4b:2f:2c:57:17:0c:7d:db:af:22:f5:94:a4:20:31:a5:4f:
cd:13:8b:fd:45:bd:05:4a:bc:24:b3:6c:a7:c7:77:ff:35:94:
1c:be:da:87:20:c6:14:cc:cd:a0:c4:43:5a:d4:3d:e3:be:44:
22:5c:d2:37:f3:ec:f4:81:44:4e:f8:ab:74:37:fb:dd:41:ff:
72:74:d0:21:26:b1:a7:92:d4:92:5c:ed:5e:e8:40:ee:8f:05:
e6:dc:fa:5e:33:b7:6e:5a:a5:ae:94:a2:3f:86:57:0b:63:97:
aa:14:22:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdN6aZ6qkamhJZi5W7JMDMUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZmI3YzMzMzZhY2Q0MTg5ZDNmYWM2MzlhMjgwZDliMDAy
MGYyOTgwHhcNMjUwNjA4MDUwMDQ3WhcNMjUwNjA5MDUwMDQ3WjAzMTEwLwYDVQQD
Eyg2MzZiYzU4Y2YxOTQyMDdiZmY4MDI1OTc2YThlM2NhMzdkMzczNjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hRh4JXUDxdlW7lwLPLSjrlvX5L4
kzWBLdTYsRN43PSZnL3WFrI4kEhJmxplxiJrpN6Ee0nK8YVVWMiYLzeej63K/dFd
o8HSbrhxFvmDEwL1ZMd/HBwyDXfAXNuw+tAu+dTYup2EQu7wBSI6PIpYR4tnnskY
hdGt3Ugnif3vn36Z7naRWEapr3u2cfE8V8XegqPrfIAey9MgcozXwcZTHnuwoKff
ZjSV/ayEutbaUPEXnL9y6m1fv4qBNQy/3rccP+uWBG8EwlPsCyXL+K14Aeq3xlI+
AccL51W68ftYX5vpJVRK4VxuCaSorHzbG4Qb6/uUeyVo5lzc4icsieWrnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNrxYzxlCB7/4All2qOPKN9NzYzMB8GA1UdIwQY
MBaAFBT7fDM2rNQYnT+sY5ooDZsAIPKYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlB0OE16YXMxQmlkUDZ4am1pZ05td0FnOHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi82NGRmOGUtNGIwNC00MjIzLTg0Njct
OTkzOWRmMWQwZDA5LzEvRlB0OE16YXMxQmlkUDZ4am1pZ05td0FnOHBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi82NGRmOGUtNGIwNC00MjIzLTg0NjctOTkzOWRmMWQwZDA5
LzEvRlB0OE16YXMxQmlkUDZ4am1pZ05td0FnOHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDLo7eEO
OlHf6LMkdtw8NBwO/oD0F4/Y0s3vxTqprf1nsHSrk//UvFjo5WsncEDVxFy7fIe9
UBTiXji7d3mlOYAYXTPGyjqigRONeg7Wo/WifB5murxXvQBudGj7HrnhXokTjvAy
Lh06f/eTf28TTVd8W3GEqp34wbSSKm+7OBrCPHGZWpNuwuVhMte7E/Px80svLFcX
DH3bryL1lKQgMaVPzROL/UW9BUq8JLNsp8d3/zWUHL7ahyDGFMzNoMRDWtQ9475E
IlzSN/Ps9IFETvirdDf73UH/cnTQISaxp5LUklztXuhA7o8F5tz6XjO3blqlrpSi
P4ZXC2OXqhQiiA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:14:34 2025 by rpki-client