Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
File: FCaOTC4CUzDfJv1ATK4PavJszCM.mft (raw, json)
Hash identifier: SR27VndrSWQUxK6AvclYVdpe1ZPgCfLqS1j9rKgZ+E8=
Subject key identifier: 7C:13:0D:E8:00:F3:71:A0:52:80:6C:03:1D:3C:7A:11:58:5A:A4:7E
Authority key identifier: 14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
Certificate issuer: /CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Certificate serial: 0197488CE92C644D6C748D56EB2DAFC20917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
Manifest number: 0DBB
Signing time: Sat 07 Jun 2025 04:01:23 +0000
Manifest this update: Sat 07 Jun 2025 04:01:23 +0000
Manifest next update: Sun 08 Jun 2025 04:01:23 +0000
Files and hashes: 1: FCaOTC4CUzDfJv1ATK4PavJszCM.crl (hash: HibB6qqMK1B4H3mEhrW9YxneOAU5UV+0EfainlghXrE=)
2: u0DOKBtKEXfOYPXrhlfb2Ryk4Zc.roa (hash: VOn09+bdFNjvpl/Gu+Ha0G2LvOgVJGvmVcF7NTjr9S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:e9:2c:64:4d:6c:74:8d:56:eb:2d:af:c2:09:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Validity
Not Before: Jun 7 04:01:23 2025 GMT
Not After : Jun 8 04:01:23 2025 GMT
Subject: CN=7c130de800f371a052806c031d3c7a11585aa47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:78:5e:91:dc:6a:d9:40:c0:8c:b7:36:52:8d:
0b:d7:df:c6:93:d4:ca:6d:26:4a:65:f6:3a:02:db:
48:78:4b:90:7c:fc:c0:c3:93:b4:e9:e5:9f:f8:ee:
f9:38:c3:38:99:9b:8c:3b:19:d9:8d:b0:25:11:b6:
9a:66:02:df:ef:20:b7:3f:5c:f6:e8:7b:39:36:fc:
54:97:bd:5d:82:c4:35:b5:87:8c:93:70:30:20:2e:
1c:e1:01:cd:f8:a8:dc:ad:99:b7:b4:3e:ab:f4:2a:
df:b4:4f:b5:c7:e5:c5:b8:3f:06:6c:d2:23:7f:4a:
2a:ee:4b:9e:9a:11:31:b9:0c:5c:0e:ad:b3:59:f4:
6b:89:ee:28:65:ee:ee:a8:c5:ac:70:d4:98:30:ba:
b7:63:a6:25:23:ff:eb:f7:7b:60:67:d5:06:d0:1a:
e3:d7:43:31:e6:f5:d9:05:70:71:2b:df:30:6f:08:
ff:89:a1:32:de:a4:15:43:90:6a:28:dd:00:e2:0b:
d8:2a:3c:68:7a:b5:f6:b3:c9:5a:e4:3a:85:8f:7d:
f5:bb:d7:3b:b6:94:3b:da:bf:11:f5:f4:d8:40:cc:
7d:cd:d3:41:53:4c:2d:be:2b:21:3a:61:ad:20:ce:
24:df:68:55:d7:39:e8:d9:f3:d6:be:67:a4:9d:45:
f0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:13:0D:E8:00:F3:71:A0:52:80:6C:03:1D:3C:7A:11:58:5A:A4:7E
X509v3 Authority Key Identifier:
keyid:14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:98:6a:fc:fb:4f:63:74:fc:5b:5b:cb:04:27:e0:6e:5c:0d:
ac:1e:ed:54:93:bf:b0:5d:5c:09:e9:63:e1:49:93:0b:29:d7:
78:e5:42:36:22:94:01:f5:06:92:9f:2c:33:b2:ae:e1:48:a0:
aa:df:40:9e:8b:d9:d6:0d:b3:11:f5:63:37:c9:f1:6f:ea:42:
33:c6:29:0c:c7:06:de:68:9b:5c:11:2e:2b:b3:c6:5a:74:ef:
f8:8a:20:c0:f2:43:e3:09:df:d4:4e:74:ba:53:16:1e:28:0d:
de:02:6a:54:38:6c:c2:21:6f:d2:1e:0f:86:d1:34:53:d9:e7:
7d:a3:c1:b8:f4:97:6f:c7:e0:c1:94:c4:85:3f:ee:5b:f8:27:
68:36:2a:00:e0:25:32:64:7f:b1:47:a2:2f:fe:cf:40:83:fb:
e5:33:8c:9f:4d:6a:f2:14:93:64:f4:29:b2:dc:69:ec:d3:81:
10:77:1b:8b:e1:b0:82:b1:fe:77:b3:05:ad:bb:8d:da:67:b9:
85:e0:3d:96:ae:c4:20:6f:82:de:34:72:98:82:7a:20:a4:84:
06:58:94:44:ea:69:be:c5:12:38:20:7e:89:f7:de:22:ce:1f:
c7:b9:e2:4a:e2:38:bb:38:8a:1d:28:f8:73:43:16:26:30:1d:
ad:51:20:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjOksZE1sdI1W6y2vwgkXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0MjY4ZTRjMmUwMjUzMzBkZjI2ZmQ0MDRjYWUwZjZhZjI2
Y2NjMjMwHhcNMjUwNjA3MDQwMTIzWhcNMjUwNjA4MDQwMTIzWjAzMTEwLwYDVQQD
Eyg3YzEzMGRlODAwZjM3MWEwNTI4MDZjMDMxZDNjN2ExMTU4NWFhNDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3hekdxq2UDAjLc2Uo0L19/Gk9TK
bSZKZfY6AttIeEuQfPzAw5O06eWf+O75OMM4mZuMOxnZjbAlEbaaZgLf7yC3P1z2
6Hs5NvxUl71dgsQ1tYeMk3AwIC4c4QHN+KjcrZm3tD6r9CrftE+1x+XFuD8GbNIj
f0oq7kuemhExuQxcDq2zWfRrie4oZe7uqMWscNSYMLq3Y6YlI//r93tgZ9UG0Brj
10Mx5vXZBXBxK98wbwj/iaEy3qQVQ5BqKN0A4gvYKjxoerX2s8la5DqFj331u9c7
tpQ72r8R9fTYQMx9zdNBU0wtvishOmGtIM4k32hV1zno2fPWvmeknUXwjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwTDegA83GgUoBsAx08ehFYWqR+MB8GA1UdIwQY
MBaAFBQmjkwuAlMw3yb9QEyuD2rybMwjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkNhT1RDNENVekRmSnYxQVRLNFBhdkpzekNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xZjhhMDktNDM2NS00YmJhLThlMzUt
NWVlMjc0ZWI3ZWFiLzEvRkNhT1RDNENVekRmSnYxQVRLNFBhdkpzekNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8xZjhhMDktNDM2NS00YmJhLThlMzUtNWVlMjc0ZWI3ZWFi
LzEvRkNhT1RDNENVekRmSnYxQVRLNFBhdkpzekNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZhq/PtP
Y3T8W1vLBCfgblwNrB7tVJO/sF1cCelj4UmTCynXeOVCNiKUAfUGkp8sM7Ku4Uig
qt9AnovZ1g2zEfVjN8nxb+pCM8YpDMcG3mibXBEuK7PGWnTv+IogwPJD4wnf1E50
ulMWHigN3gJqVDhswiFv0h4PhtE0U9nnfaPBuPSXb8fgwZTEhT/uW/gnaDYqAOAl
MmR/sUeiL/7PQIP75TOMn01q8hSTZPQpstxp7NOBEHcbi+GwgrH+d7MFrbuN2me5
heA9lq7EIG+C3jRymIJ6IKSEBliUROppvsUSOCB+iffeIs4fx7niSuI4uziKHSj4
c0MWJjAdrVEg7g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:33:36 2025 by rpki-client