Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
File: FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft (raw, json)
Hash identifier: veT/uFvEjzMhlRTbIZhxQMwIsAnKSDNOQT2qVNJ1utk=
Subject key identifier: 25:74:48:2F:C3:A1:92:55:F5:2C:48:AF:01:82:C4:7A:41:D6:C6:CC
Authority key identifier: 16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
Certificate issuer: /CN=16914c51d031411c1340171593603163c3d4a08e
Certificate serial: 0197481E8D25C01744472C6C865B3365958D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
Manifest number: 022E
Signing time: Sat 07 Jun 2025 02:00:51 +0000
Manifest this update: Sat 07 Jun 2025 02:00:51 +0000
Manifest next update: Sun 08 Jun 2025 02:00:51 +0000
Files and hashes: 1: 8ERPvpxKfVBfAUigys2-PiTFfqA.roa (hash: KAiZ9xkRQ32j6xO0jLEnhDznPnUl1zJBNWjMk46qfE0=)
2: FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl (hash: j0GSjupW4r0yFM65ZSNeGGo9LtBBNj68asXD8gFq/Ss=)
3: gJVc1ED6fXAztZrZVaBt7sRVw7s.roa (hash: NuxZCt7HFtHNaqj3vrIg4m4RXf+ibNz9HPakUOz5CxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:8d:25:c0:17:44:47:2c:6c:86:5b:33:65:95:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16914c51d031411c1340171593603163c3d4a08e
Validity
Not Before: Jun 7 02:00:51 2025 GMT
Not After : Jun 8 02:00:51 2025 GMT
Subject: CN=2574482fc3a19255f52c48af0182c47a41d6c6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:01:24:ce:25:ac:60:67:f8:b9:f6:d1:6c:
0d:8c:cc:44:46:49:fa:90:3f:e9:27:f1:72:7a:6a:
38:7e:39:c2:7d:22:41:56:40:6d:ba:53:92:e5:f9:
ce:10:ea:9b:7f:43:74:a5:cb:b5:1b:4b:14:22:d6:
65:99:68:20:c5:b1:d0:bc:85:6a:69:44:15:84:aa:
1a:a8:8a:58:8a:f8:85:02:3e:7c:62:2b:3c:af:e5:
b0:f5:c3:a0:15:ce:20:78:e2:63:e3:b4:35:8a:68:
e3:0e:ce:a7:03:23:e5:b5:98:57:4a:c9:cb:85:92:
a4:ed:39:57:d0:e5:b4:74:a6:be:46:3f:8f:15:29:
b4:36:b8:32:fe:94:2b:7b:03:47:10:0b:49:04:37:
38:30:63:1c:26:48:58:4e:41:a6:2f:fc:30:c7:97:
86:da:b3:62:5d:11:d7:52:f6:3d:a3:e3:9c:11:9a:
e7:e8:0f:31:5d:47:52:6e:6b:65:21:a5:01:db:e9:
3a:79:91:30:f2:5e:5a:c9:11:fd:a8:ec:01:4e:78:
da:f0:6a:a5:4f:cb:a7:ac:ec:57:1a:3e:9a:44:6d:
3e:23:bc:98:41:f1:67:70:31:95:93:ec:ed:64:b3:
ce:37:68:e9:ad:64:18:ea:f5:11:e4:3b:4a:7e:18:
10:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:74:48:2F:C3:A1:92:55:F5:2C:48:AF:01:82:C4:7A:41:D6:C6:CC
X509v3 Authority Key Identifier:
keyid:16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:55:f7:64:28:5f:0b:31:e8:ae:16:23:a8:55:9f:36:3e:8c:
71:0f:65:30:81:1c:f5:e3:cf:01:be:ee:0b:c4:4f:57:09:b0:
70:a4:6e:bc:9b:f4:54:51:27:45:36:15:43:97:25:c4:28:37:
c6:bb:58:d3:11:8b:54:ad:f0:bc:7c:bb:ee:83:e6:05:85:a0:
1a:19:c0:c2:9c:48:03:02:b3:5c:9a:65:44:d7:6e:5f:08:ee:
4f:67:bd:07:6a:ee:1d:fa:b8:3a:c2:3e:ae:39:d8:74:bf:be:
22:67:07:00:d4:6c:41:31:4d:77:63:b8:3f:f8:6a:c8:d0:d2:
48:db:25:e1:bb:34:16:46:79:7a:f3:cc:cf:84:17:8d:97:ab:
99:45:cc:33:4d:16:95:ee:20:4b:e1:7e:10:03:29:1d:1c:3f:
c6:2f:5d:51:4b:1c:55:bd:f9:21:a8:46:89:9d:3a:38:14:2e:
b9:99:3a:6f:70:01:42:74:81:df:05:78:e7:1d:c8:6f:ed:73:
ad:aa:10:6e:50:50:77:5e:3d:42:b8:34:65:52:50:ab:f5:2d:
51:f2:9e:b0:e2:af:ac:8f:f0:6a:0f:4c:2d:9a:d0:eb:56:19:
06:ef:5b:78:f8:c1:aa:d3:43:fb:d6:54:68:41:6f:0f:59:ef:
d1:10:74:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIHo0lwBdERyxshlszZZWNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OTE0YzUxZDAzMTQxMWMxMzQwMTcxNTkzNjAzMTYzYzNk
NGEwOGUwHhcNMjUwNjA3MDIwMDUxWhcNMjUwNjA4MDIwMDUxWjAzMTEwLwYDVQQD
EygyNTc0NDgyZmMzYTE5MjU1ZjUyYzQ4YWYwMTgyYzQ3YTQxZDZjNmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDQBJM4lrGBn+Ln20WwNjMxERkn6
kD/pJ/Fyemo4fjnCfSJBVkBtulOS5fnOEOqbf0N0pcu1G0sUItZlmWggxbHQvIVq
aUQVhKoaqIpYiviFAj58Yis8r+Ww9cOgFc4geOJj47Q1imjjDs6nAyPltZhXSsnL
hZKk7TlX0OW0dKa+Rj+PFSm0Nrgy/pQrewNHEAtJBDc4MGMcJkhYTkGmL/wwx5eG
2rNiXRHXUvY9o+OcEZrn6A8xXUdSbmtlIaUB2+k6eZEw8l5ayRH9qOwBTnja8Gql
T8unrOxXGj6aRG0+I7yYQfFncDGVk+ztZLPON2jprWQY6vUR5DtKfhgQSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCV0SC/DoZJV9SxIrwGCxHpB1sbMMB8GA1UdIwQY
MBaAFBaRTFHQMUEcE0AXFZNgMWPD1KCOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBGTVVkQXhRUndUUUJjVmsyQXhZOFBVb0k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mOTBhN2QtOGEwNS00NzU1LWI2NmIt
MDlmMTljNmU1MWIyLzEvRnBGTVVkQXhRUndUUUJjVmsyQXhZOFBVb0k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9mOTBhN2QtOGEwNS00NzU1LWI2NmItMDlmMTljNmU1MWIy
LzEvRnBGTVVkQXhRUndUUUJjVmsyQXhZOFBVb0k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlX3ZChf
CzHorhYjqFWfNj6McQ9lMIEc9ePPAb7uC8RPVwmwcKRuvJv0VFEnRTYVQ5clxCg3
xrtY0xGLVK3wvHy77oPmBYWgGhnAwpxIAwKzXJplRNduXwjuT2e9B2ruHfq4OsI+
rjnYdL++ImcHANRsQTFNd2O4P/hqyNDSSNsl4bs0FkZ5evPMz4QXjZermUXMM00W
le4gS+F+EAMpHRw/xi9dUUscVb35IahGiZ06OBQuuZk6b3ABQnSB3wV45x3Ib+1z
raoQblBQd149Qrg0ZVJQq/UtUfKesOKvrI/wag9MLZrQ61YZBu9bePjBqtND+9ZU
aEFvD1nv0RB0gQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 08:58:09 2025 by rpki-client