Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
File: _fnlz5EF-11F34wfudTxx6WQVMY.mft (raw, json)
Hash identifier: 69ZuvuuDc0DS93VboGhBvuHZiqZ4iW8cxM3Yrh4Ve60=
Subject key identifier: 8D:2D:19:41:FC:5E:51:AB:F7:B4:74:8E:91:AF:6C:C4:D6:57:EB:E6
Authority key identifier: FD:F9:E5:CF:91:05:FB:5D:45:DF:8C:1F:B9:D4:F1:C7:A5:90:54:C6
Certificate issuer: /CN=fdf9e5cf9105fb5d45df8c1fb9d4f1c7a59054c6
Certificate serial: 019647B34024DF8B193C8908742B4454E9E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fnlz5EF-11F34wfudTxx6WQVMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
Manifest number: 07C9
Signing time: Fri 18 Apr 2025 07:00:51 +0000
Manifest this update: Fri 18 Apr 2025 07:00:51 +0000
Manifest next update: Sat 19 Apr 2025 07:00:51 +0000
Files and hashes: 1: _fnlz5EF-11F34wfudTxx6WQVMY.crl (hash: 2l7KmaIVyhl0mpkWA3tOCi4vWG17oHNeF9ZNZGUVnJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fnlz5EF-11F34wfudTxx6WQVMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:b3:40:24:df:8b:19:3c:89:08:74:2b:44:54:e9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf9e5cf9105fb5d45df8c1fb9d4f1c7a59054c6
Validity
Not Before: Apr 18 07:00:51 2025 GMT
Not After : Apr 19 07:00:51 2025 GMT
Subject: CN=8d2d1941fc5e51abf7b4748e91af6cc4d657ebe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a5:0c:59:7e:f8:2b:ff:c4:f2:64:82:c3:08:
68:1b:6c:86:b7:b6:dc:a7:67:d5:b8:a2:ed:23:bf:
4f:64:00:2a:ee:8f:8d:cf:05:9a:79:e9:78:54:1c:
c9:26:78:d8:2c:c9:f7:fd:08:96:e5:83:f9:76:c2:
2f:2f:d9:0b:3a:ad:81:0a:42:40:73:9a:ad:12:70:
f9:7c:38:5f:71:b2:09:45:8a:1f:6c:af:87:b9:53:
18:81:88:bb:95:df:ec:8a:f6:9e:bf:18:a8:64:70:
0b:fa:bb:89:26:cd:c8:bc:ca:b0:e3:9e:5c:6f:73:
71:a9:87:7c:70:9f:f0:90:5b:15:b1:23:04:97:ca:
9e:fa:e4:9f:d8:88:79:6a:20:85:32:d4:0a:a5:ab:
a8:b1:7b:44:02:89:49:77:51:1d:51:14:7a:ca:51:
4e:2a:af:ed:d9:3e:68:6a:f6:e6:35:ad:dc:f0:4a:
ae:1d:d0:d4:53:ce:9b:83:47:11:90:71:2d:c2:2a:
a3:8d:cb:ce:f9:97:5e:5d:b5:be:62:40:3b:dd:d3:
e1:43:23:d5:33:86:bc:86:16:8e:eb:f4:55:f8:ad:
61:c1:d9:d3:4e:b7:70:b4:7e:b0:d9:47:70:5f:c9:
26:fc:4b:a2:88:3d:10:ee:72:dc:38:a4:da:29:75:
03:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2D:19:41:FC:5E:51:AB:F7:B4:74:8E:91:AF:6C:C4:D6:57:EB:E6
X509v3 Authority Key Identifier:
keyid:FD:F9:E5:CF:91:05:FB:5D:45:DF:8C:1F:B9:D4:F1:C7:A5:90:54:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fnlz5EF-11F34wfudTxx6WQVMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1d:89:08:fe:cd:63:ba:f3:7b:9c:38:ac:bc:70:c3:18:69:
b1:c3:ed:a3:fd:59:4f:29:4d:c9:fc:c1:55:15:8e:7f:d9:29:
e1:ab:2b:41:ad:43:b2:a4:8f:0e:90:a8:83:c6:34:91:e0:a9:
79:db:a8:10:ae:1a:f4:46:2e:d3:14:47:b5:76:73:e9:4e:0d:
a9:5f:f9:f8:62:e6:26:1e:6e:6f:f3:f7:05:7e:75:31:9b:d1:
3b:3d:bc:31:fa:37:ba:9f:5e:fe:b2:39:f0:74:26:f1:7e:73:
68:31:62:56:cc:db:d1:7e:b7:1b:27:f9:01:7f:07:d8:d7:b3:
fa:47:d5:47:19:cb:03:22:d8:d9:af:b0:8c:20:98:ee:14:ea:
d0:ee:43:f3:72:ab:1d:1c:dd:84:28:c5:19:4b:23:c6:75:83:
52:27:57:ce:84:90:68:be:41:34:9f:23:e2:20:fe:03:79:c9:
c8:8f:c2:35:f3:d9:71:c5:d6:d5:af:93:0f:2a:ec:e9:6d:0a:
3f:4e:80:6b:8c:77:e0:41:7c:59:40:d5:5b:38:62:b5:f8:3d:
93:ac:46:1a:99:e1:9a:2b:f0:e1:70:16:97:d6:99:38:fb:a3:
ac:7d:24:09:9e:57:92:58:ce:89:88:45:3a:39:9d:02:bb:9c:
8b:39:cb:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZHs0Ak34sZPIkIdCtEVOngMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZjllNWNmOTEwNWZiNWQ0NWRmOGMxZmI5ZDRmMWM3YTU5
MDU0YzYwHhcNMjUwNDE4MDcwMDUxWhcNMjUwNDE5MDcwMDUxWjAzMTEwLwYDVQQD
Eyg4ZDJkMTk0MWZjNWU1MWFiZjdiNDc0OGU5MWFmNmNjNGQ2NTdlYmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaUMWX74K//E8mSCwwhoG2yGt7bc
p2fVuKLtI79PZAAq7o+NzwWaeel4VBzJJnjYLMn3/QiW5YP5dsIvL9kLOq2BCkJA
c5qtEnD5fDhfcbIJRYofbK+HuVMYgYi7ld/sivaevxioZHAL+ruJJs3IvMqw455c
b3NxqYd8cJ/wkFsVsSMEl8qe+uSf2Ih5aiCFMtQKpauosXtEAolJd1EdURR6ylFO
Kq/t2T5oavbmNa3c8EquHdDUU86bg0cRkHEtwiqjjcvO+ZdeXbW+YkA73dPhQyPV
M4a8hhaO6/RV+K1hwdnTTrdwtH6w2UdwX8km/EuiiD0Q7nLcOKTaKXUDCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0tGUH8XlGr97R0jpGvbMTWV+vmMB8GA1UdIwQY
MBaAFP355c+RBftdRd+MH7nU8celkFTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2ZubHo1RUYtMTFGMzR3ZnVkVHh4NldRVk1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8wN2QyMjktNzA3Ny00YjgwLTkyOTUt
ZWMwYjZmNGQ0YTZjLzEvX2ZubHo1RUYtMTFGMzR3ZnVkVHh4NldRVk1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8wN2QyMjktNzA3Ny00YjgwLTkyOTUtZWMwYjZmNGQ0YTZj
LzEvX2ZubHo1RUYtMTFGMzR3ZnVkVHh4NldRVk1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdR2JCP7N
Y7rze5w4rLxwwxhpscPto/1ZTylNyfzBVRWOf9kp4asrQa1DsqSPDpCog8Y0keCp
eduoEK4a9EYu0xRHtXZz6U4NqV/5+GLmJh5ub/P3BX51MZvROz28Mfo3up9e/rI5
8HQm8X5zaDFiVszb0X63Gyf5AX8H2Nez+kfVRxnLAyLY2a+wjCCY7hTq0O5D83Kr
HRzdhCjFGUsjxnWDUidXzoSQaL5BNJ8j4iD+A3nJyI/CNfPZccXW1a+TDyrs6W0K
P06Aa4x34EF8WUDVWzhitfg9k6xGGpnhmivw4XAWl9aZOPujrH0kCZ5XkljOiYhF
OjmdAruciznLWg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 12:45:27 2025 by rpki-client