Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
File: _FlUn23SuDFEuIDCPwb7o7JdOYY.mft (raw, json)
Hash identifier: pwJAE0kenLNUJEFnJd3iUq1Uud8qZMSGSn9MmhBaa1M=
Subject key identifier: EC:30:56:F2:9C:19:51:4A:35:94:52:1D:D4:8F:1C:0F:7F:C6:AF:C4
Authority key identifier: FC:59:54:9F:6D:D2:B8:31:44:B8:80:C2:3F:06:FB:A3:B2:5D:39:86
Certificate issuer: /CN=fc59549f6dd2b83144b880c23f06fba3b25d3986
Certificate serial: 01964D7E7A264E33E43F1FF11C908F2B1D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
Manifest number: 0EF4
Signing time: Sat 19 Apr 2025 10:00:56 +0000
Manifest this update: Sat 19 Apr 2025 10:00:56 +0000
Manifest next update: Sun 20 Apr 2025 10:00:56 +0000
Files and hashes: 1: Z6qviYCXQTeLJoJfMAOJcgB-9Qg.roa (hash: oDapm5Z+x3QJafhm3qUyzSGeINGec4KUVgNU/i7jaZI=)
2: _FlUn23SuDFEuIDCPwb7o7JdOYY.crl (hash: jsT8Q5ZeTDwdMRyaxHZ55SX55nefcHcb7qZcdHkY2aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:7a:26:4e:33:e4:3f:1f:f1:1c:90:8f:2b:1d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc59549f6dd2b83144b880c23f06fba3b25d3986
Validity
Not Before: Apr 19 10:00:56 2025 GMT
Not After : Apr 20 10:00:56 2025 GMT
Subject: CN=ec3056f29c19514a3594521dd48f1c0f7fc6afc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d7:a1:93:cf:d0:d8:95:3f:e8:3a:f5:5f:46:
6e:b4:cc:99:4a:7d:77:f7:33:2c:f0:95:a0:00:41:
f5:ab:4a:3e:49:62:f0:69:e5:35:51:ec:7a:13:37:
39:eb:a3:fd:3e:f9:8e:0e:0c:23:ad:b6:45:1c:82:
53:a3:9f:09:ad:c1:fc:08:6c:14:da:2d:ef:a1:02:
62:d8:a3:06:ba:76:6c:9e:6b:83:bf:4b:a1:53:bc:
89:f5:e5:54:11:b2:9c:fd:a3:c0:7f:3c:81:38:82:
01:23:8f:bb:ec:65:ef:37:dc:4a:7a:8e:47:91:5e:
91:64:c8:32:6c:69:e9:99:ef:07:60:f4:f8:a5:87:
10:af:ad:92:2c:46:33:25:4e:54:85:1e:85:f0:38:
00:c9:2f:fb:fd:8a:db:d0:93:2a:45:32:ac:52:7c:
69:bf:46:68:09:8e:54:da:23:15:e9:30:4d:e1:e6:
ba:6f:68:ac:8a:20:5e:21:45:a1:4d:a6:0d:3b:81:
29:86:7b:e7:3f:54:f2:55:e1:b8:f8:9b:50:a9:c7:
8a:4b:67:c6:61:d1:2a:f4:6f:31:29:a3:bb:f1:e5:
7e:3d:67:56:bc:63:9f:47:2d:d9:f3:6f:c7:5b:43:
60:27:a6:35:f2:f6:97:f1:0c:32:f0:ae:f5:e1:92:
cb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:30:56:F2:9C:19:51:4A:35:94:52:1D:D4:8F:1C:0F:7F:C6:AF:C4
X509v3 Authority Key Identifier:
keyid:FC:59:54:9F:6D:D2:B8:31:44:B8:80:C2:3F:06:FB:A3:B2:5D:39:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:6f:98:af:94:d5:76:8e:43:e3:b9:8c:1c:fd:07:29:52:65:
0d:be:5e:63:9e:09:ab:79:5d:c5:16:01:f6:5c:59:26:a7:21:
d6:ce:b4:7c:63:63:e5:7f:91:fb:10:74:fc:f8:88:1f:4a:ab:
2f:5a:e9:2d:e3:24:02:94:74:f6:0b:c0:d3:0a:8c:d3:50:05:
21:95:0d:7b:83:0c:e6:b9:34:4e:c2:95:ab:18:40:58:18:b3:
8a:3b:46:b3:46:bd:7e:81:2e:c2:1b:38:30:29:9a:26:b6:39:
1c:87:1b:f2:14:a7:26:4a:55:b1:9b:d3:5c:29:18:62:5f:2b:
5f:2b:01:92:32:ab:04:3a:37:0f:2f:43:be:01:18:bc:e6:03:
bf:c8:75:d5:bd:7f:8f:c5:1a:8f:dd:ef:69:34:97:b6:f7:88:
03:a8:a9:63:db:28:5a:40:e0:78:08:52:a2:6a:22:18:cf:08:
20:0b:67:c5:63:ac:0d:d0:c3:c7:c7:2b:1a:24:26:e9:b6:da:
b5:9e:23:fa:fa:43:66:61:5b:c3:e5:db:31:f4:07:16:c4:63:
05:1a:b1:2b:78:1e:ba:1c:ff:b8:2d:28:cc:de:92:2a:b4:82:
0a:8c:0b:9b:8f:a0:6e:00:eb:bc:ea:06:b1:8b:e4:92:45:46:
ad:30:f2:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfnomTjPkPx/xHJCPKx1aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNTk1NDlmNmRkMmI4MzE0NGI4ODBjMjNmMDZmYmEzYjI1
ZDM5ODYwHhcNMjUwNDE5MTAwMDU2WhcNMjUwNDIwMTAwMDU2WjAzMTEwLwYDVQQD
EyhlYzMwNTZmMjljMTk1MTRhMzU5NDUyMWRkNDhmMWMwZjdmYzZhZmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdehk8/Q2JU/6Dr1X0ZutMyZSn13
9zMs8JWgAEH1q0o+SWLwaeU1Uex6Ezc566P9PvmODgwjrbZFHIJTo58JrcH8CGwU
2i3voQJi2KMGunZsnmuDv0uhU7yJ9eVUEbKc/aPAfzyBOIIBI4+77GXvN9xKeo5H
kV6RZMgybGnpme8HYPT4pYcQr62SLEYzJU5UhR6F8DgAyS/7/Yrb0JMqRTKsUnxp
v0ZoCY5U2iMV6TBN4ea6b2isiiBeIUWhTaYNO4EphnvnP1TyVeG4+JtQqceKS2fG
YdEq9G8xKaO78eV+PWdWvGOfRy3Z82/HW0NgJ6Y18vaX8Qwy8K714ZLLhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwwVvKcGVFKNZRSHdSPHA9/xq/EMB8GA1UdIwQY
MBaAFPxZVJ9t0rgxRLiAwj8G+6OyXTmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0ZsVW4yM1N1REZFdUlEQ1B3YjdvN0pkT1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy85NjQwMzUtMzgxYS00MWIwLTlmZGQt
ZjY1ZDMzYTk5MjZiLzEvX0ZsVW4yM1N1REZFdUlEQ1B3YjdvN0pkT1lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy85NjQwMzUtMzgxYS00MWIwLTlmZGQtZjY1ZDMzYTk5MjZi
LzEvX0ZsVW4yM1N1REZFdUlEQ1B3YjdvN0pkT1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUG+Yr5TV
do5D47mMHP0HKVJlDb5eY54Jq3ldxRYB9lxZJqch1s60fGNj5X+R+xB0/PiIH0qr
L1rpLeMkApR09gvA0wqM01AFIZUNe4MM5rk0TsKVqxhAWBizijtGs0a9foEuwhs4
MCmaJrY5HIcb8hSnJkpVsZvTXCkYYl8rXysBkjKrBDo3Dy9DvgEYvOYDv8h11b1/
j8Uaj93vaTSXtveIA6ipY9soWkDgeAhSomoiGM8IIAtnxWOsDdDDx8crGiQm6bba
tZ4j+vpDZmFbw+XbMfQHFsRjBRqxK3geuhz/uC0ozN6SKrSCCowLm4+gbgDrvOoG
sYvkkkVGrTDyGw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:33:19 2025 by rpki-client