Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
File: FMFDiPKGLX4nqH_m9gHjTzRXI04.mft (raw, json)
Hash identifier: kzvzBOg8gTTL4CAxDKadTLlgCfbHtGi0BySvh6ro8YU=
Subject key identifier: F6:E9:E7:A5:B2:FA:9A:B5:C4:85:5F:05:89:9D:09:9E:82:F1:67:2D
Authority key identifier: 14:C1:43:88:F2:86:2D:7E:27:A8:7F:E6:F6:01:E3:4F:34:57:23:4E
Certificate issuer: /CN=14c14388f2862d7e27a87fe6f601e34f3457234e
Certificate serial: 01964FDA8A9B91E1C765A47BFF9907BF3A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
Manifest number: 0974
Signing time: Sat 19 Apr 2025 21:00:44 +0000
Manifest this update: Sat 19 Apr 2025 21:00:44 +0000
Manifest next update: Sun 20 Apr 2025 21:00:44 +0000
Files and hashes: 1: FMFDiPKGLX4nqH_m9gHjTzRXI04.crl (hash: 0xyGyt1CyKobZbC29JunoBiK1xfFSIEygzlJcomQpgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:8a:9b:91:e1:c7:65:a4:7b:ff:99:07:bf:3a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c14388f2862d7e27a87fe6f601e34f3457234e
Validity
Not Before: Apr 19 21:00:44 2025 GMT
Not After : Apr 20 21:00:44 2025 GMT
Subject: CN=f6e9e7a5b2fa9ab5c4855f05899d099e82f1672d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:44:12:0f:91:0b:aa:70:95:73:97:b2:53:23:
f0:a0:b1:51:27:89:e6:cc:c3:ba:fb:f4:39:c9:84:
42:d8:cc:63:3f:bf:d8:cb:06:9e:89:2a:40:7e:57:
b6:e5:39:81:ed:f9:90:2b:77:39:09:dd:4b:71:8f:
88:70:2c:74:bb:cb:ed:a5:33:35:0e:35:69:e9:4d:
1f:0d:d2:de:dc:b7:e3:56:e6:bc:77:54:30:10:ab:
3a:80:29:9f:67:14:70:04:d9:18:b1:cb:a0:2e:90:
99:16:53:2f:35:af:fe:6c:05:00:e0:52:ae:5e:ff:
c1:1e:fc:e3:b5:69:59:d5:ea:aa:30:b9:85:2b:df:
03:74:b7:0a:30:f8:4d:ec:2a:22:28:71:ea:c7:15:
a0:ca:99:53:f0:64:89:c7:2f:e1:5d:c1:b6:49:44:
a5:98:c1:7a:4c:2b:72:6b:f3:9e:8e:57:54:95:8d:
9d:0f:69:0d:98:f5:7c:8c:b7:65:db:29:d1:74:60:
8e:b7:11:40:32:1d:c0:7d:25:bb:c1:54:52:e9:3e:
2a:f8:61:5e:ea:5c:e3:c9:fe:45:89:ac:0c:0d:0d:
84:38:b5:eb:cc:13:15:64:30:d4:6e:ec:49:41:06:
36:bf:2d:b6:dc:db:97:86:1f:f5:68:14:8c:2c:ab:
a8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E9:E7:A5:B2:FA:9A:B5:C4:85:5F:05:89:9D:09:9E:82:F1:67:2D
X509v3 Authority Key Identifier:
keyid:14:C1:43:88:F2:86:2D:7E:27:A8:7F:E6:F6:01:E3:4F:34:57:23:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ca:9e:91:ae:d2:b4:c8:eb:f3:2f:78:d2:4b:15:01:07:bd:
a2:f0:e9:83:98:00:d1:33:f9:07:b7:02:8a:03:d3:c4:40:51:
65:e6:40:f4:98:7d:9c:51:22:a3:e4:33:16:42:fe:9b:3c:c9:
b4:6a:14:cd:77:b5:6c:2d:df:b7:75:c9:49:cb:a8:ae:b3:28:
70:a1:b1:51:e4:5d:81:4d:ca:69:a2:06:36:cc:70:1e:04:8f:
fd:86:8a:c7:85:98:2f:af:07:a1:2b:44:59:38:1b:79:74:0c:
72:fa:1f:24:4f:a4:ff:ce:77:cd:ca:41:15:67:85:be:b4:b0:
cd:40:2b:8e:73:ce:82:94:ef:c0:58:cd:8c:93:97:2b:a5:71:
2f:01:8a:1a:14:e4:98:cc:4c:e9:e0:fe:b0:0c:75:f0:23:bc:
1c:bd:68:52:91:36:0b:9f:41:c8:30:b6:68:f3:20:19:80:53:
43:ad:9a:5e:20:9b:0b:01:96:50:df:09:a4:69:a7:7f:29:98:
62:62:aa:f7:21:1c:54:12:1c:7a:f4:4f:17:f8:20:8f:5c:66:
00:25:a4:9b:fb:9c:54:66:61:69:26:f9:ad:19:4a:52:99:99:
26:b5:fd:bc:1e:67:ca:7c:96:03:33:c2:b9:f8:19:44:8a:6f:
7d:ac:ca:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZP2oqbkeHHZaR7/5kHvzpZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YzE0Mzg4ZjI4NjJkN2UyN2E4N2ZlNmY2MDFlMzRmMzQ1
NzIzNGUwHhcNMjUwNDE5MjEwMDQ0WhcNMjUwNDIwMjEwMDQ0WjAzMTEwLwYDVQQD
EyhmNmU5ZTdhNWIyZmE5YWI1YzQ4NTVmMDU4OTlkMDk5ZTgyZjE2NzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEQSD5ELqnCVc5eyUyPwoLFRJ4nm
zMO6+/Q5yYRC2MxjP7/YywaeiSpAfle25TmB7fmQK3c5Cd1LcY+IcCx0u8vtpTM1
DjVp6U0fDdLe3LfjVua8d1QwEKs6gCmfZxRwBNkYscugLpCZFlMvNa/+bAUA4FKu
Xv/BHvzjtWlZ1eqqMLmFK98DdLcKMPhN7CoiKHHqxxWgyplT8GSJxy/hXcG2SUSl
mMF6TCtya/OejldUlY2dD2kNmPV8jLdl2ynRdGCOtxFAMh3AfSW7wVRS6T4q+GFe
6lzjyf5FiawMDQ2EOLXrzBMVZDDUbuxJQQY2vy223NuXhh/1aBSMLKuoywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbp56Wy+pq1xIVfBYmdCZ6C8WctMB8GA1UdIwQY
MBaAFBTBQ4jyhi1+J6h/5vYB4080VyNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk1GRGlQS0dMWDRucUhfbTlnSGpUelJYSTA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYTZhMGYtYjljNy00ZjQwLTllM2Mt
ODhhNGJlN2E0Y2IzLzEvRk1GRGlQS0dMWDRucUhfbTlnSGpUelJYSTA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9iYTZhMGYtYjljNy00ZjQwLTllM2MtODhhNGJlN2E0Y2Iz
LzEvRk1GRGlQS0dMWDRucUhfbTlnSGpUelJYSTA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP8qeka7S
tMjr8y940ksVAQe9ovDpg5gA0TP5B7cCigPTxEBRZeZA9Jh9nFEio+QzFkL+mzzJ
tGoUzXe1bC3ft3XJScuorrMocKGxUeRdgU3KaaIGNsxwHgSP/YaKx4WYL68HoStE
WTgbeXQMcvofJE+k/853zcpBFWeFvrSwzUArjnPOgpTvwFjNjJOXK6VxLwGKGhTk
mMxM6eD+sAx18CO8HL1oUpE2C59ByDC2aPMgGYBTQ62aXiCbCwGWUN8JpGmnfymY
YmKq9yEcVBIcevRPF/ggj1xmACWkm/ucVGZhaSb5rRlKUpmZJrX9vB5nynyWAzPC
ufgZRIpvfazKZQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:17:11 2025 by rpki-client