Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
File: fpBL1x1v50pnFo_ZE-gocidVtJQ.mft (raw, json)
Hash identifier: rlo0ZTetxZLrIr1n11PBovtCKmOfm1xnQU+GGlqGVZE=
Subject key identifier: D2:6F:D7:44:85:47:0B:88:54:1D:A8:35:38:63:77:BC:86:F9:78:AE
Authority key identifier: 7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94
Certificate issuer: /CN=7e904bd71d6fe74a67168fd913e828722755b494
Certificate serial: 019749D594DBC7DA4C9764EA581A3445ADB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
Manifest number: 0644
Signing time: Sat 07 Jun 2025 10:00:23 +0000
Manifest this update: Sat 07 Jun 2025 10:00:23 +0000
Manifest next update: Sun 08 Jun 2025 10:00:23 +0000
Files and hashes: 1: _hcAKZ9Rlwo19weMs6Swq188ePE.roa (hash: Y66JbaTRqDcxPjnoFMPZ0bWBf5qCwdTDkeUZq42NBUE=)
2: fpBL1x1v50pnFo_ZE-gocidVtJQ.crl (hash: 57sB0KJJ7MJVM6dekyr6jss4PPZpz3bFfWFLL2NHGhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:94:db:c7:da:4c:97:64:ea:58:1a:34:45:ad:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e904bd71d6fe74a67168fd913e828722755b494
Validity
Not Before: Jun 7 10:00:23 2025 GMT
Not After : Jun 8 10:00:23 2025 GMT
Subject: CN=d26fd74485470b88541da835386377bc86f978ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:06:aa:53:4a:cd:66:cb:96:4a:a0:eb:08:62:
1a:c2:4d:ad:36:bd:1c:1a:28:7e:c0:23:a3:bd:6d:
6b:ae:d0:4b:00:ab:2d:6e:90:a3:ad:9b:23:1e:92:
75:99:5f:d5:60:1a:75:77:68:49:72:24:c6:26:b1:
72:77:f0:0c:1d:82:d1:4c:cb:c7:15:80:31:87:df:
c5:56:42:0e:ac:10:7e:a2:34:3c:9a:95:3e:5b:c6:
14:1a:79:db:f3:e1:68:68:90:f9:62:07:14:8e:a4:
13:e4:32:60:a6:5b:8a:62:78:ab:b1:bb:9f:7f:ee:
3c:6d:df:59:bf:5b:d2:45:f3:b4:c8:2b:6e:f7:18:
60:b2:5d:d9:85:39:a2:f6:d2:89:7a:3c:fe:42:63:
76:c4:39:bd:25:0f:49:2e:e7:f0:f8:54:54:cb:22:
3c:91:98:8a:82:98:9d:51:56:ef:d5:a4:6d:21:6f:
d1:36:14:a7:f9:11:d5:61:7f:8e:8b:5d:6e:74:6b:
22:da:d9:49:d2:9c:b8:40:13:24:c4:69:69:66:81:
98:b7:c5:67:4f:bc:66:53:0e:d0:c6:3d:a5:ff:08:
ad:6c:87:83:de:57:37:43:20:61:0a:67:a3:5b:fd:
49:05:d2:89:83:77:85:dd:ad:bb:fa:be:84:28:d1:
53:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6F:D7:44:85:47:0B:88:54:1D:A8:35:38:63:77:BC:86:F9:78:AE
X509v3 Authority Key Identifier:
keyid:7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ce:ba:9f:a0:94:e3:59:2d:21:0f:67:5f:8e:60:ec:d8:a4:
ee:0d:8a:7e:7e:81:df:0f:61:32:82:f4:0b:32:89:ef:14:17:
f6:73:29:c4:8c:88:1f:88:2a:1c:d5:5b:15:f0:f5:26:e9:df:
d5:dc:b8:78:32:48:e8:ad:46:0a:7f:44:15:49:d6:a1:d1:82:
1b:69:27:e6:4a:01:3f:50:5a:ef:81:19:12:78:76:5a:9a:39:
a7:e7:21:ed:cc:c2:bd:80:db:c9:63:af:a5:32:8c:82:07:aa:
fb:26:3f:75:1c:d7:96:b3:36:5b:30:71:e1:e7:40:a1:41:56:
9f:6f:9c:92:7c:5b:5b:73:e2:7c:9a:e7:ec:b9:db:17:4a:e3:
c2:33:c8:6a:b2:10:a0:39:fd:d7:68:73:15:09:8f:36:a7:28:
d4:8c:e6:d3:9a:d2:8d:6e:9b:52:12:f1:bd:35:28:b4:30:37:
cb:de:2b:54:a1:7b:0f:ba:14:65:ed:bf:68:87:ef:7b:b8:cb:
cf:e6:6e:64:8c:58:be:e6:63:58:53:ee:d6:61:60:96:d8:4e:
0d:9e:3e:d6:80:91:3a:17:62:44:6d:3e:63:01:1b:8a:2b:5d:
c4:c8:a6:59:05:38:c2:95:21:72:d3:6f:1b:23:c0:50:4f:76:
41:96:0d:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1ZTbx9pMl2TqWBo0Ra22MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlOTA0YmQ3MWQ2ZmU3NGE2NzE2OGZkOTEzZTgyODcyMjc1
NWI0OTQwHhcNMjUwNjA3MTAwMDIzWhcNMjUwNjA4MTAwMDIzWjAzMTEwLwYDVQQD
EyhkMjZmZDc0NDg1NDcwYjg4NTQxZGE4MzUzODYzNzdiYzg2Zjk3OGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQaqU0rNZsuWSqDrCGIawk2tNr0c
Gih+wCOjvW1rrtBLAKstbpCjrZsjHpJ1mV/VYBp1d2hJciTGJrFyd/AMHYLRTMvH
FYAxh9/FVkIOrBB+ojQ8mpU+W8YUGnnb8+FoaJD5YgcUjqQT5DJgpluKYnirsbuf
f+48bd9Zv1vSRfO0yCtu9xhgsl3ZhTmi9tKJejz+QmN2xDm9JQ9JLufw+FRUyyI8
kZiKgpidUVbv1aRtIW/RNhSn+RHVYX+Oi11udGsi2tlJ0py4QBMkxGlpZoGYt8Vn
T7xmUw7Qxj2l/witbIeD3lc3QyBhCmejW/1JBdKJg3eF3a27+r6EKNFTYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJv10SFRwuIVB2oNThjd7yG+XiuMB8GA1UdIwQY
MBaAFH6QS9cdb+dKZxaP2RPoKHInVbSUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnBCTDF4MXY1MHBuRm9fWkUtZ29jaWRWdEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yZjEyNjQtMjNlOC00MmUwLTgzNjQt
NGYzODJjYmI1OWYyLzEvZnBCTDF4MXY1MHBuRm9fWkUtZ29jaWRWdEpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yZjEyNjQtMjNlOC00MmUwLTgzNjQtNGYzODJjYmI1OWYy
LzEvZnBCTDF4MXY1MHBuRm9fWkUtZ29jaWRWdEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQc66n6CU
41ktIQ9nX45g7Nik7g2Kfn6B3w9hMoL0CzKJ7xQX9nMpxIyIH4gqHNVbFfD1Junf
1dy4eDJI6K1GCn9EFUnWodGCG2kn5koBP1Ba74EZEnh2Wpo5p+ch7czCvYDbyWOv
pTKMggeq+yY/dRzXlrM2WzBx4edAoUFWn2+cknxbW3PifJrn7LnbF0rjwjPIarIQ
oDn912hzFQmPNqco1Izm05rSjW6bUhLxvTUotDA3y94rVKF7D7oUZe2/aIfve7jL
z+ZuZIxYvuZjWFPu1mFglthODZ4+1oCROhdiRG0+YwEbiitdxMimWQU4wpUhctNv
GyPAUE92QZYNug==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:16:43 2025 by rpki-client