Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
File: FpfEbq-hDsXZB7sF43EjtpKrSUw.mft (raw, json)
Hash identifier: oD2vLCprwajs5L0/IOYSEdm45EE95/5j9pOi3Dglf80=
Subject key identifier: F2:04:56:65:8A:6E:7C:E1:69:C8:E7:96:89:5F:BA:29:49:FA:D6:D9
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial: 01960E9F792D4DB6665B5FC3914A89CEF5C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
Manifest number: 1487
Signing time: Mon 07 Apr 2025 05:00:54 +0000
Manifest this update: Mon 07 Apr 2025 05:00:54 +0000
Manifest next update: Tue 08 Apr 2025 05:00:54 +0000
Files and hashes: 1: FpfEbq-hDsXZB7sF43EjtpKrSUw.crl (hash: zKNeTZJgHmstg2FrQbZgP2pqOirPMQ3mFvLk3jEh/9Y=)
2: XWiker2v7GIlhkuZZtR48lVm108.roa (hash: NhUbFkPuOTxAHiVlHIvGiCnLEnSRvJwEzL+UojBb8qg=)
3: zJ5MYEMzWfucEDGxLfmRzsaSeEg.roa (hash: 13et8HkfUmrO0+ptVe41OzMBwG62Ru5G13R9afNJkP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0e:9f:79:2d:4d:b6:66:5b:5f:c3:91:4a:89:ce:f5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Validity
Not Before: Apr 7 05:00:54 2025 GMT
Not After : Apr 8 05:00:54 2025 GMT
Subject: CN=f20456658a6e7ce169c8e796895fba2949fad6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:dc:f8:7a:01:cb:ef:b8:18:94:e8:90:4b:
4f:fa:6f:24:d3:c9:b8:07:c9:ac:ad:cc:40:43:c1:
c1:e8:80:c7:ce:0a:3d:e5:6b:5a:85:9b:83:e4:29:
85:03:9c:9e:95:09:a8:5e:15:e7:7f:48:c1:29:c1:
32:03:8f:a5:f4:eb:e6:5c:12:7a:b1:f6:ee:84:a5:
7e:3a:f0:33:2e:b9:3c:94:03:67:5e:9c:e6:89:ac:
cb:d0:89:7b:9c:fa:5d:0c:88:8b:75:9e:b6:dc:e7:
f5:e7:8c:f7:32:ca:c0:34:a0:67:a1:49:5b:7a:2b:
a2:aa:63:a1:d9:04:75:c5:15:b0:43:40:78:3d:fd:
75:58:3f:a7:5c:b2:62:d4:ac:68:b9:77:f9:34:31:
c0:51:2c:9f:01:0e:6a:6e:9e:30:60:9e:0c:91:7c:
88:07:06:eb:00:60:0c:e9:60:1b:d1:51:a4:52:c3:
b7:00:84:a3:f6:3d:69:87:fd:40:51:d8:dd:25:04:
04:d3:60:0e:bf:ee:23:f5:1b:25:68:09:3b:ea:d7:
43:71:f4:c6:db:bf:bd:12:f3:f9:0d:69:24:35:bf:
d7:bb:d8:86:a9:f8:47:da:45:37:d3:f1:d2:b7:46:
40:65:28:76:21:90:09:f8:2b:fe:5e:00:60:ff:5c:
d3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:04:56:65:8A:6E:7C:E1:69:C8:E7:96:89:5F:BA:29:49:FA:D6:D9
X509v3 Authority Key Identifier:
keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1e:f3:78:cc:28:89:9a:db:a8:18:48:a3:cf:8b:9d:d8:eb:
52:20:df:d6:9d:25:f1:1f:ef:85:b0:28:fa:56:85:9a:e0:e8:
68:1d:71:6c:bf:7b:98:8f:59:5f:5b:bd:4a:ed:f8:30:ff:3a:
1a:29:7a:dd:86:54:4c:11:ac:3e:96:e4:c4:c8:24:c8:b1:d5:
c3:cb:fe:a3:f9:1b:4c:c2:4b:21:c0:43:f9:68:74:1b:32:5a:
b6:8e:ee:0e:2c:fa:a7:57:92:3c:8d:0f:e9:50:df:d4:21:e2:
d1:ea:0b:f9:fb:5a:d0:72:c5:26:fd:75:67:97:04:bd:84:89:
d2:7a:c0:45:cb:90:d3:67:65:c4:97:35:39:0c:7c:f3:ad:52:
75:6f:e1:7c:1c:8a:27:cc:25:01:a9:66:be:54:c8:3a:11:e5:
d8:b5:c8:b8:98:6e:87:ca:3b:bf:75:ed:97:e2:9e:83:bf:4b:
94:68:aa:5c:2c:1e:b3:41:45:dd:76:11:3a:12:e1:80:f3:9f:
4e:ce:43:6c:98:fb:c3:c4:c0:cb:d8:22:ff:8a:81:50:bf:e2:
6e:7f:8e:0c:8d:93:82:07:a7:94:54:4b:b4:1e:7f:90:38:5b:
a3:c1:0a:af:a6:c8:f2:19:c0:c7:09:19:59:27:56:84:8e:7c:
ba:08:29:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYOn3ktTbZmW1/DkUqJzvXBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OTdjNDZlYWZhMTBlYzVkOTA3YmIwNWUzNzEyM2I2OTJh
YjQ5NGMwHhcNMjUwNDA3MDUwMDU0WhcNMjUwNDA4MDUwMDU0WjAzMTEwLwYDVQQD
EyhmMjA0NTY2NThhNmU3Y2UxNjljOGU3OTY4OTVmYmEyOTQ5ZmFkNmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdzc+HoBy++4GJTokEtP+m8k08m4
B8msrcxAQ8HB6IDHzgo95WtahZuD5CmFA5yelQmoXhXnf0jBKcEyA4+l9OvmXBJ6
sfbuhKV+OvAzLrk8lANnXpzmiazL0Il7nPpdDIiLdZ623Of154z3MsrANKBnoUlb
eiuiqmOh2QR1xRWwQ0B4Pf11WD+nXLJi1KxouXf5NDHAUSyfAQ5qbp4wYJ4MkXyI
BwbrAGAM6WAb0VGkUsO3AISj9j1ph/1AUdjdJQQE02AOv+4j9RslaAk76tdDcfTG
27+9EvP5DWkkNb/Xu9iGqfhH2kU30/HSt0ZAZSh2IZAJ+Cv+XgBg/1zTtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIEVmWKbnzhacjnlolfuilJ+tbZMB8GA1UdIwQY
MBaAFBaXxG6voQ7F2Qe7BeNxI7aSq0lMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBmRWJxLWhEc1haQjdzRjQzRWp0cEtyU1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kMDk5MmQtOTNmYS00ODQ2LWE0OTUt
NzY1MjJjMjA3YzU1LzEvRnBmRWJxLWhEc1haQjdzRjQzRWp0cEtyU1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kMDk5MmQtOTNmYS00ODQ2LWE0OTUtNzY1MjJjMjA3YzU1
LzEvRnBmRWJxLWhEc1haQjdzRjQzRWp0cEtyU1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACB7zeMwo
iZrbqBhIo8+LndjrUiDf1p0l8R/vhbAo+laFmuDoaB1xbL97mI9ZX1u9Su34MP86
Gil63YZUTBGsPpbkxMgkyLHVw8v+o/kbTMJLIcBD+Wh0GzJato7uDiz6p1eSPI0P
6VDf1CHi0eoL+fta0HLFJv11Z5cEvYSJ0nrARcuQ02dlxJc1OQx8861SdW/hfByK
J8wlAalmvlTIOhHl2LXIuJhuh8o7v3Xtl+Keg79LlGiqXCwes0FF3XYROhLhgPOf
Ts5DbJj7w8TAy9gi/4qBUL/ibn+ODI2TggenlFRLtB5/kDhbo8EKr6bI8hnAxwkZ
WSdWhI58uggpRQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:25:13 2025 by rpki-client