Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
File: FrGYtu469o3rwjR6Xpj3Efsw8os.mft (raw, json)
Hash identifier: XSJ118Uy/hYmLU1xPK+h1Wv2iN4Nc7Yt9LccQdVtTA0=
Subject key identifier: C9:C7:EA:7A:27:CF:BE:44:DA:B4:51:75:03:69:01:3A:4C:9A:68:E1
Authority key identifier: 16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
Certificate issuer: /CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Certificate serial: 01964F6D2D407B35B2A68880657766902241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
Manifest number: 01FF
Signing time: Sat 19 Apr 2025 19:01:17 +0000
Manifest this update: Sat 19 Apr 2025 19:01:17 +0000
Manifest next update: Sun 20 Apr 2025 19:01:17 +0000
Files and hashes: 1: FrGYtu469o3rwjR6Xpj3Efsw8os.crl (hash: pjfxN6QZfkrlQYXWCVXB9ddXgaA2O4aTS833Sl11gh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:2d:40:7b:35:b2:a6:88:80:65:77:66:90:22:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Validity
Not Before: Apr 19 19:01:17 2025 GMT
Not After : Apr 20 19:01:17 2025 GMT
Subject: CN=c9c7ea7a27cfbe44dab451750369013a4c9a68e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5e:28:5b:f9:6e:09:fd:d3:0c:f5:f5:30:9b:
01:9d:8e:e1:7f:ea:cd:95:49:e2:6a:85:0d:d2:ce:
a4:e9:df:b8:e7:c8:5d:64:e7:b9:2a:55:0b:ce:db:
da:68:e3:8d:52:5d:b7:d0:74:7e:f6:fb:cb:c7:c3:
13:46:fd:4b:d6:b9:0e:6f:a8:ee:37:50:b5:8d:d1:
50:f2:b1:a2:97:dc:89:08:7c:52:f5:43:bf:e5:73:
9f:bc:0c:7c:25:16:bb:8a:d4:9c:98:1b:94:b9:89:
4d:94:83:07:94:a6:4f:ff:0f:14:5e:21:25:bf:96:
f8:79:5b:c4:14:52:3d:5e:ea:3c:6a:37:b5:be:13:
4c:85:42:99:df:cc:81:f2:8c:72:8c:d6:12:e4:d6:
59:8d:ee:b9:ef:49:b4:0a:cc:44:49:da:df:18:42:
32:03:66:06:a6:c9:12:e0:ce:c9:42:3f:8c:7a:20:
b0:9e:eb:d7:18:16:df:a0:3b:7d:26:ee:34:ca:34:
4c:f1:54:f5:b1:8c:27:73:41:75:2a:4e:1b:89:15:
d3:9b:99:63:85:71:80:a1:8f:cd:9e:ba:b6:4d:0b:
57:83:20:0b:b3:53:86:a9:fd:ae:7f:2c:e7:ac:7d:
4f:3d:1a:76:05:aa:63:7b:24:19:95:b9:c1:09:94:
3f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C7:EA:7A:27:CF:BE:44:DA:B4:51:75:03:69:01:3A:4C:9A:68:E1
X509v3 Authority Key Identifier:
keyid:16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:16:73:d4:f6:0b:cc:34:32:76:88:80:a9:6e:58:26:f0:6d:
14:16:c0:a9:a8:d3:6d:73:71:ff:11:01:02:ec:40:3f:b0:fc:
c7:cd:db:c6:81:74:d6:95:5e:bd:4f:e2:a0:35:b0:cf:ed:a0:
57:ec:38:b5:31:26:e5:8a:70:77:fc:6b:5e:5e:37:28:56:9f:
23:cb:88:35:4c:00:56:76:e9:9d:45:e9:7d:84:4e:66:ae:85:
90:fb:d9:83:63:c4:5f:4a:be:95:ee:3d:ea:01:5c:09:16:b7:
65:2a:32:17:1b:33:df:84:2c:8c:2a:b7:de:33:79:58:bd:aa:
ae:da:02:03:62:ec:40:91:4f:4c:3a:54:d0:ed:17:0b:f5:5f:
b3:68:c9:f8:51:e6:ac:98:c2:ae:aa:c6:82:64:a1:d6:63:94:
f9:5b:42:ee:0b:46:94:6b:e4:cd:4a:9f:50:42:5d:8b:80:fb:
c9:08:cb:78:1b:c3:f3:31:77:5f:31:28:45:17:e2:22:7d:65:
de:1a:c1:5c:89:5a:14:2f:5c:ac:70:4a:b8:a4:27:ff:fd:68:
db:ca:f7:2f:cb:2d:c5:fd:c0:1a:66:0a:1a:a5:13:8f:14:67:
f5:2b:a3:9a:67:76:ca:3f:33:cb:52:c9:ab:5a:e3:c8:e2:da:
f2:12:6f:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbS1AezWypoiAZXdmkCJBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YjE5OGI2ZWUzYWY2OGRlYmMyMzQ3YTVlOThmNzExZmIz
MGYyOGIwHhcNMjUwNDE5MTkwMTE3WhcNMjUwNDIwMTkwMTE3WjAzMTEwLwYDVQQD
EyhjOWM3ZWE3YTI3Y2ZiZTQ0ZGFiNDUxNzUwMzY5MDEzYTRjOWE2OGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl4oW/luCf3TDPX1MJsBnY7hf+rN
lUniaoUN0s6k6d+458hdZOe5KlULztvaaOONUl230HR+9vvLx8MTRv1L1rkOb6ju
N1C1jdFQ8rGil9yJCHxS9UO/5XOfvAx8JRa7itScmBuUuYlNlIMHlKZP/w8UXiEl
v5b4eVvEFFI9Xuo8aje1vhNMhUKZ38yB8oxyjNYS5NZZje6570m0CsxESdrfGEIy
A2YGpskS4M7JQj+MeiCwnuvXGBbfoDt9Ju40yjRM8VT1sYwnc0F1Kk4biRXTm5lj
hXGAoY/Nnrq2TQtXgyALs1OGqf2ufyznrH1PPRp2BapjeyQZlbnBCZQ/uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnH6nonz75E2rRRdQNpATpMmmjhMB8GA1UdIwQY
MBaAFBaxmLbuOvaN68I0el6Y9xH7MPKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnJHWXR1NDY5bzNyd2pSNlhwajNFZnN3OG9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMmFlMTQtZTQ1ZS00ZWVlLWJkMDct
NDQ4MmFkYTIzMmUzLzEvRnJHWXR1NDY5bzNyd2pSNlhwajNFZnN3OG9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yMmFlMTQtZTQ1ZS00ZWVlLWJkMDctNDQ4MmFkYTIzMmUz
LzEvRnJHWXR1NDY5bzNyd2pSNlhwajNFZnN3OG9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABZz1PYL
zDQydoiAqW5YJvBtFBbAqajTbXNx/xEBAuxAP7D8x83bxoF01pVevU/ioDWwz+2g
V+w4tTEm5Ypwd/xrXl43KFafI8uINUwAVnbpnUXpfYROZq6FkPvZg2PEX0q+le49
6gFcCRa3ZSoyFxsz34QsjCq33jN5WL2qrtoCA2LsQJFPTDpU0O0XC/Vfs2jJ+FHm
rJjCrqrGgmSh1mOU+VtC7gtGlGvkzUqfUEJdi4D7yQjLeBvD8zF3XzEoRRfiIn1l
3hrBXIlaFC9crHBKuKQn//1o28r3L8stxf3AGmYKGqUTjxRn9Sujmmd2yj8zy1LJ
q1rjyOLa8hJvVg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:09:37 2025 by rpki-client