Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft
File: F9vVrPH5x10YofdQMRFMSPCyM2M.mft (raw, json)
Hash identifier: zyIxcmgBrwiPONn3gP3Ka4YmUdih8+rHVsP6Y+fM2L0=
Subject key identifier: F1:85:74:BA:B8:65:26:9A:CC:28:45:8D:9B:7C:C0:B5:B5:0B:55:E0
Authority key identifier: 17:DB:D5:AC:F1:F9:C7:5D:18:A1:F7:50:31:11:4C:48:F0:B2:33:63
Certificate issuer: /CN=17dbd5acf1f9c75d18a1f75031114c48f0b23363
Certificate serial: 0196538023585451B61D9B8285E807B09EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 14:00:28 +0000
Manifest this update: Sun 20 Apr 2025 14:00:28 +0000
Manifest next update: Mon 21 Apr 2025 14:00:28 +0000
Files and hashes: 1: F9vVrPH5x10YofdQMRFMSPCyM2M.crl (hash: JnYgDrDf9wpy2ib28TKWHzvQ9RZS85RGK8sE31yT7aY=)
2: dWFT9hgaVCYJtdxaSn0ewqM1KWo.roa (hash: tHOIQAagcAGzXqkgG6BKkUp0/ND0gT/kYOrqKoarV1g=)
3: dp3d8NyouQg-8K-HGzN9kV_bfNA.roa (hash: GLpCUVZVMuFtRdyRKpet07ejBXymc1KwigcRGf3bciE=)
4: vdLZKDeZrm1csyvUGvTK17cDwbA.roa (hash: 4FGoBySJOQZoRoh12OiMAMVHk1hvxrm9AdNoXGLJWFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:80:23:58:54:51:b6:1d:9b:82:85:e8:07:b0:9e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17dbd5acf1f9c75d18a1f75031114c48f0b23363
Validity
Not Before: Apr 20 14:00:28 2025 GMT
Not After : Apr 21 14:00:28 2025 GMT
Subject: CN=f18574bab865269acc28458d9b7cc0b5b50b55e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:75:03:3e:68:87:dc:37:71:92:a9:23:13:18:
9d:6b:e5:e1:95:1f:e1:74:13:10:2c:1b:5c:dc:5f:
76:cc:e3:36:c8:3e:2c:85:97:95:b8:22:fe:c9:07:
f4:a0:50:8c:77:61:da:ad:cb:c6:12:05:19:80:54:
d3:e6:78:03:f8:4b:d2:1d:80:54:1b:ad:99:95:6c:
70:03:8c:5c:ef:62:84:71:87:dc:17:69:1e:1c:b0:
c7:c2:eb:53:a5:4c:2b:eb:69:49:19:5d:1b:17:59:
ff:f8:28:a7:af:c0:c5:7d:61:cc:26:fc:d5:57:17:
de:29:15:52:13:ef:a0:1d:91:c2:89:b8:d1:c4:3d:
80:5e:42:4c:fc:bd:21:94:be:b6:40:d5:f0:d9:5a:
c3:e9:ec:7a:78:6a:75:7f:8d:79:65:52:a6:27:68:
ee:b9:e3:b1:d7:ab:31:e5:a3:e3:86:cb:10:b9:ee:
92:f9:38:a5:8c:37:25:15:ad:13:31:74:2f:43:b1:
6f:10:9d:ec:3d:9e:17:74:db:4b:ce:63:9b:2a:8d:
6b:9c:42:52:af:92:0e:e4:98:00:ee:c0:43:e8:90:
67:fc:3e:0d:46:bb:4f:35:42:c1:4d:fe:f5:f0:34:
87:ab:a4:39:44:c2:60:92:9b:d4:21:1a:89:19:ef:
c2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:85:74:BA:B8:65:26:9A:CC:28:45:8D:9B:7C:C0:B5:B5:0B:55:E0
X509v3 Authority Key Identifier:
keyid:17:DB:D5:AC:F1:F9:C7:5D:18:A1:F7:50:31:11:4C:48:F0:B2:33:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:31:81:62:ac:de:17:dc:20:bd:a3:ab:b1:85:68:5e:6b:94:
c9:cd:0f:9f:37:54:d4:b5:1d:a5:4e:08:0c:0e:5c:ec:96:e3:
f3:86:33:a8:1d:ed:9c:fa:97:a6:f1:ec:b2:52:92:ac:5b:96:
7f:cd:9d:65:0b:1a:9c:ef:56:eb:f8:07:73:ea:56:17:9c:b7:
c4:38:94:e4:0b:b4:17:ce:91:e2:cc:10:21:ef:9a:d4:87:48:
51:78:53:41:97:c0:54:8b:2c:6c:96:5f:10:ac:26:89:5d:5a:
21:98:5a:20:75:cd:77:eb:1b:83:b8:d0:26:da:cc:f5:29:62:
70:f3:ea:c7:2f:96:f9:b1:27:50:b1:9a:4f:c7:59:23:57:d6:
23:8d:0f:51:a0:67:0c:07:7d:41:7e:4f:57:49:cf:f9:f5:00:
53:ef:8a:36:d0:03:be:35:e7:d3:ae:d7:ca:ca:03:98:d7:88:
27:87:10:3c:1a:24:81:14:ef:85:b2:7b:e1:9b:d0:d9:3f:0c:
cf:3a:8b:e7:5e:0b:39:88:9b:89:a0:e1:e8:13:42:62:a3:ec:
c0:84:31:f8:7c:ad:ff:ae:5a:de:18:76:2d:de:62:f0:9c:d7:
b8:c8:19:bb:e1:a9:1f:87:1e:d8:80:ac:1d:7f:b0:54:86:69:
66:e1:88:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTgCNYVFG2HZuChegHsJ68MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZGJkNWFjZjFmOWM3NWQxOGExZjc1MDMxMTE0YzQ4ZjBi
MjMzNjMwHhcNMjUwNDIwMTQwMDI4WhcNMjUwNDIxMTQwMDI4WjAzMTEwLwYDVQQD
EyhmMTg1NzRiYWI4NjUyNjlhY2MyODQ1OGQ5YjdjYzBiNWI1MGI1NWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nUDPmiH3DdxkqkjExida+XhlR/h
dBMQLBtc3F92zOM2yD4shZeVuCL+yQf0oFCMd2HarcvGEgUZgFTT5ngD+EvSHYBU
G62ZlWxwA4xc72KEcYfcF2keHLDHwutTpUwr62lJGV0bF1n/+Cinr8DFfWHMJvzV
VxfeKRVSE++gHZHCibjRxD2AXkJM/L0hlL62QNXw2VrD6ex6eGp1f415ZVKmJ2ju
ueOx16sx5aPjhssQue6S+TiljDclFa0TMXQvQ7FvEJ3sPZ4XdNtLzmObKo1rnEJS
r5IO5JgA7sBD6JBn/D4NRrtPNULBTf718DSHq6Q5RMJgkpvUIRqJGe/C/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGFdLq4ZSaazChFjZt8wLW1C1XgMB8GA1UdIwQY
MBaAFBfb1azx+cddGKH3UDERTEjwsjNjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjl2VnJQSDV4MTBZb2ZkUU1SRk1TUEN5TTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8yOTE5OWYtZjZjYy00NDhhLWJmZDQt
NTgxZGI4N2M4MjFlLzEvRjl2VnJQSDV4MTBZb2ZkUU1SRk1TUEN5TTJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8yOTE5OWYtZjZjYy00NDhhLWJmZDQtNTgxZGI4N2M4MjFl
LzEvRjl2VnJQSDV4MTBZb2ZkUU1SRk1TUEN5TTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjGBYqze
F9wgvaOrsYVoXmuUyc0PnzdU1LUdpU4IDA5c7Jbj84YzqB3tnPqXpvHsslKSrFuW
f82dZQsanO9W6/gHc+pWF5y3xDiU5Au0F86R4swQIe+a1IdIUXhTQZfAVIssbJZf
EKwmiV1aIZhaIHXNd+sbg7jQJtrM9SlicPPqxy+W+bEnULGaT8dZI1fWI40PUaBn
DAd9QX5PV0nP+fUAU++KNtADvjXn067XysoDmNeIJ4cQPBokgRTvhbJ74ZvQ2T8M
zzqL514LOYibiaDh6BNCYqPswIQx+Hyt/65a3hh2Ld5i8JzXuMgZu+GpH4ce2ICs
HX+wVIZpZuGINg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:35 2025 by rpki-client