Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft
File: _N6Mo-LOUrvM5TxKKSbTycQQwEs.mft (raw, json)
Hash identifier: MR40zLWEbO0rOdWyj6qTwIm9oNcVnnRxYdPAwIjj388=
Subject key identifier: C1:77:BB:01:E3:70:D2:E2:31:3B:CE:26:2B:D1:99:D5:2B:1E:F4:EC
Authority key identifier: FC:DE:8C:A3:E2:CE:52:BB:CC:E5:3C:4A:29:26:D3:C9:C4:10:C0:4B
Certificate issuer: /CN=fcde8ca3e2ce52bbcce53c4a2926d3c9c410c04b
Certificate serial: 01964E59EF80849F5F1033F69EF743CD99A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_N6Mo-LOUrvM5TxKKSbTycQQwEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 14:00:38 +0000
Manifest this update: Sat 19 Apr 2025 14:00:38 +0000
Manifest next update: Sun 20 Apr 2025 14:00:38 +0000
Files and hashes: 1: MiVzKZibX-3It-xgfseflvN2L_A.roa (hash: aH26xuV9XAHKD/zeZjQBB+/hzYVLDuUtsC+DOjTxZxI=)
2: _N6Mo-LOUrvM5TxKKSbTycQQwEs.crl (hash: lAgYnbhAOgw6BhIrqnEfTO9GHT+Ef+mwrscBibi7X2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_N6Mo-LOUrvM5TxKKSbTycQQwEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:59:ef:80:84:9f:5f:10:33:f6:9e:f7:43:cd:99:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcde8ca3e2ce52bbcce53c4a2926d3c9c410c04b
Validity
Not Before: Apr 19 14:00:38 2025 GMT
Not After : Apr 20 14:00:38 2025 GMT
Subject: CN=c177bb01e370d2e2313bce262bd199d52b1ef4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a0:30:69:51:2f:35:1f:43:26:a5:21:41:16:
dc:fe:93:90:ec:67:da:1d:e2:07:8d:b3:67:bc:d9:
43:ca:be:ce:3d:00:84:b1:c2:d7:b1:1e:b2:69:db:
d4:96:8d:58:bb:7e:27:31:c2:45:56:24:bd:a2:a2:
c9:68:e0:cd:3a:bc:ea:fd:8b:02:fd:2c:14:5f:85:
e9:58:03:f2:66:51:0b:83:87:c0:52:3e:7e:04:3c:
61:bb:e4:c5:44:b5:96:8f:68:43:40:94:0f:38:71:
63:cb:2a:a4:b5:2a:71:af:d3:f7:0e:43:56:cc:3b:
85:81:d1:b2:71:33:a9:1f:79:cd:d8:17:5a:74:97:
9a:90:ec:43:6a:a2:dd:97:8d:50:1f:07:4e:6f:db:
ab:86:3d:8c:2d:4b:f8:15:7b:a0:47:2f:ca:29:fb:
06:d1:50:ac:db:24:b7:a8:3b:00:df:4e:17:11:0d:
f6:36:83:bd:cf:12:5b:99:ea:8b:89:e0:66:c0:24:
c8:da:95:4f:e7:a8:08:f9:72:e9:ff:4b:87:08:9b:
7e:3e:bd:a7:60:06:8e:8e:d8:b5:85:58:e2:d1:da:
1a:f6:83:ce:70:73:78:2d:10:ad:6e:cd:d3:b7:35:
ed:80:79:c4:05:28:1d:94:85:db:4d:f3:6d:39:90:
c4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:77:BB:01:E3:70:D2:E2:31:3B:CE:26:2B:D1:99:D5:2B:1E:F4:EC
X509v3 Authority Key Identifier:
keyid:FC:DE:8C:A3:E2:CE:52:BB:CC:E5:3C:4A:29:26:D3:C9:C4:10:C0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_N6Mo-LOUrvM5TxKKSbTycQQwEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c4:0a:38:7c:61:25:2b:7e:11:cd:0f:3d:dd:a6:a7:c2:0c:
c0:95:82:d5:65:4f:f8:42:5e:be:0f:72:a8:8f:5e:9d:c7:8e:
17:6b:8f:d7:67:c4:6a:ef:4f:5f:88:8e:18:4b:75:65:94:3e:
90:a4:99:06:f4:8f:99:6e:96:17:57:11:8a:fd:93:74:5c:49:
98:b8:03:f9:82:ad:08:0e:9b:2f:10:03:20:0d:d8:a1:a3:91:
c2:8a:09:e8:4a:af:55:c4:50:6b:cf:5b:e1:d5:05:6c:ae:0c:
c8:91:09:9e:33:bd:96:74:5f:2e:61:4f:b6:f1:8c:e9:94:ce:
4b:4d:d3:4b:1a:2c:0e:e2:24:3c:66:cb:f2:77:5a:11:ac:05:
e0:93:f9:e8:00:49:d1:90:db:29:fe:c8:d8:64:c0:31:f0:e3:
80:ad:eb:95:f9:cb:5f:1c:20:34:ed:0b:44:66:00:cd:da:a9:
d5:06:72:50:b7:87:4b:a6:11:6a:4c:6f:cc:13:21:25:1a:ac:
2a:9c:a2:48:3c:a7:e1:92:61:86:d0:97:df:98:be:f8:c9:b7:
f3:8e:b9:23:da:89:f1:59:84:bb:bc:11:43:fa:84:a8:e3:75:
74:72:13:f3:6a:e9:23:23:89:c9:03:97:7d:af:87:72:1e:0c:
60:87:38:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOWe+AhJ9fEDP2nvdDzZmoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZGU4Y2EzZTJjZTUyYmJjY2U1M2M0YTI5MjZkM2M5YzQx
MGMwNGIwHhcNMjUwNDE5MTQwMDM4WhcNMjUwNDIwMTQwMDM4WjAzMTEwLwYDVQQD
EyhjMTc3YmIwMWUzNzBkMmUyMzEzYmNlMjYyYmQxOTlkNTJiMWVmNGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aAwaVEvNR9DJqUhQRbc/pOQ7Gfa
HeIHjbNnvNlDyr7OPQCEscLXsR6yadvUlo1Yu34nMcJFViS9oqLJaODNOrzq/YsC
/SwUX4XpWAPyZlELg4fAUj5+BDxhu+TFRLWWj2hDQJQPOHFjyyqktSpxr9P3DkNW
zDuFgdGycTOpH3nN2BdadJeakOxDaqLdl41QHwdOb9urhj2MLUv4FXugRy/KKfsG
0VCs2yS3qDsA304XEQ32NoO9zxJbmeqLieBmwCTI2pVP56gI+XLp/0uHCJt+Pr2n
YAaOjti1hVji0doa9oPOcHN4LRCtbs3TtzXtgHnEBSgdlIXbTfNtOZDEaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMF3uwHjcNLiMTvOJivRmdUrHvTsMB8GA1UdIwQY
MBaAFPzejKPizlK7zOU8Sikm08nEEMBLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX042TW8tTE9VcnZNNVR4S0tTYlR5Y1FRd0VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84NGM3NmUtYTE1Yy00NTRmLWE2ODYt
MDAwOTIyYTVjZjE5LzEvX042TW8tTE9VcnZNNVR4S0tTYlR5Y1FRd0VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84NGM3NmUtYTE1Yy00NTRmLWE2ODYtMDAwOTIyYTVjZjE5
LzEvX042TW8tTE9VcnZNNVR4S0tTYlR5Y1FRd0VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEcQKOHxh
JSt+Ec0PPd2mp8IMwJWC1WVP+EJevg9yqI9enceOF2uP12fEau9PX4iOGEt1ZZQ+
kKSZBvSPmW6WF1cRiv2TdFxJmLgD+YKtCA6bLxADIA3YoaORwooJ6EqvVcRQa89b
4dUFbK4MyJEJnjO9lnRfLmFPtvGM6ZTOS03TSxosDuIkPGbL8ndaEawF4JP56ABJ
0ZDbKf7I2GTAMfDjgK3rlfnLXxwgNO0LRGYAzdqp1QZyULeHS6YRakxvzBMhJRqs
KpyiSDyn4ZJhhtCX35i++Mm38465I9qJ8VmEu7wRQ/qEqON1dHIT82rpIyOJyQOX
fa+Hch4MYIc4cA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:11:31 2025 by rpki-client