Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
File: FpCXDdu3YZzIIYbdtTbrTomF0t4.mft (raw, json)
Hash identifier: GftqyHuWVlP5T5rATSw5twEltm5cMMALvnH+HTqRobc=
Subject key identifier: 4E:D4:13:F2:60:0F:7C:00:22:82:C1:65:03:86:57:BE:8E:B9:C2:15
Authority key identifier: 16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
Certificate issuer: /CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Certificate serial: 0196564A0449F574AF9A24554295E6FE44B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
Manifest number: 1504
Signing time: Mon 21 Apr 2025 03:00:13 +0000
Manifest this update: Mon 21 Apr 2025 03:00:13 +0000
Manifest next update: Tue 22 Apr 2025 03:00:13 +0000
Files and hashes: 1: FLzhahX1RfEQksVef8HwMw5EmEI.roa (hash: 3r/+kxvTsJcUwXkCOUAwIQMliVjMUukx9o6NgfAcfNk=)
2: FpCXDdu3YZzIIYbdtTbrTomF0t4.crl (hash: BdZAn2JqaYjSc1WYv6NmzmMFWnk4/cPFJlG/Q68le2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:04:49:f5:74:af:9a:24:55:42:95:e6:fe:44:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Validity
Not Before: Apr 21 03:00:13 2025 GMT
Not After : Apr 22 03:00:13 2025 GMT
Subject: CN=4ed413f2600f7c002282c165038657be8eb9c215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f8:17:be:d3:cf:fd:b9:76:f7:eb:f7:94:c0:
b8:c7:92:ad:e7:22:70:25:a1:d1:90:c6:d6:5c:6d:
8c:c7:ea:8f:9d:cf:49:35:a0:3b:1d:f2:c9:0c:63:
53:47:b6:7e:c5:14:e8:2e:15:00:a7:cb:85:7c:65:
60:ef:cb:ca:dc:99:d6:f1:6c:a1:74:32:ef:77:b6:
6e:61:6f:15:cf:0b:2a:be:ba:0f:e7:a9:86:5e:fc:
81:f2:98:8d:51:91:4b:25:8d:30:d2:ef:13:81:32:
02:d7:40:26:40:6a:9c:9e:d8:3e:e3:b5:0e:d2:c0:
b6:f5:e7:98:14:44:dd:fe:09:d1:31:ae:bb:11:64:
d3:64:f3:3c:4b:35:3a:1e:62:8b:df:c1:fc:f1:77:
72:f1:c0:52:3e:4a:2d:7e:d5:f1:c3:cb:80:f6:f4:
bb:78:c8:16:41:dd:50:1a:bc:78:46:e2:38:7d:a6:
85:2f:46:8f:70:77:6f:ca:c1:bf:e3:04:82:9d:2e:
a5:ca:54:27:db:a2:5c:9f:07:99:3e:61:1b:da:48:
8f:2e:83:56:32:f9:ee:6f:d6:4b:12:b7:93:45:56:
c7:0e:6e:b5:58:34:dd:68:f3:26:ff:89:ba:da:4b:
fe:25:ff:39:e3:5b:2f:c9:72:14:a0:91:6b:b8:51:
c4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D4:13:F2:60:0F:7C:00:22:82:C1:65:03:86:57:BE:8E:B9:C2:15
X509v3 Authority Key Identifier:
keyid:16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0b:93:33:b3:ef:7e:d0:d7:af:60:4d:ff:89:88:09:ba:f8:
d6:22:91:fa:61:5b:dd:96:b7:51:2d:cc:49:89:e9:d3:34:5d:
f3:81:7f:17:2b:dd:7d:a9:ab:2b:6c:0f:df:49:85:3e:b6:e4:
07:b9:47:2f:e1:74:55:d7:a8:ba:f2:8c:fd:0d:ea:9a:ae:9c:
63:92:f7:b9:c0:24:a6:d5:79:c3:f4:ff:ac:44:8e:c0:91:74:
f6:3f:0e:fd:1e:79:a8:f1:c6:26:79:38:de:cd:30:c4:69:41:
4a:72:d2:9b:eb:e2:79:9b:af:c2:e3:92:69:f7:a3:f3:48:57:
63:9c:30:72:7a:69:eb:aa:80:dd:9e:9b:7e:94:d0:52:69:4f:
0b:cf:61:e8:41:3d:9f:cd:73:af:ec:94:76:35:f2:b7:a3:ff:
4e:b3:23:1e:36:8b:78:34:8c:4c:69:b8:ea:8b:f3:c4:13:95:
52:7a:9b:7c:88:28:71:98:f8:56:48:eb:60:bc:04:62:ad:02:
50:40:e1:60:e9:c8:a6:10:ba:f0:9a:11:0d:4c:03:02:38:98:
cb:4a:3c:43:56:f4:c2:ac:57:fa:e9:85:1d:73:1e:62:a3:e5:
d9:df:8e:2e:ce:ad:8e:75:bc:66:9d:38:eb:94:2d:9f:03:5a:
cc:b8:13:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWSgRJ9XSvmiRVQpXm/kSyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OTA5NzBkZGJiNzYxOWNjODIxODZkZGI1MzZlYjRlODk4
NWQyZGUwHhcNMjUwNDIxMDMwMDEzWhcNMjUwNDIyMDMwMDEzWjAzMTEwLwYDVQQD
Eyg0ZWQ0MTNmMjYwMGY3YzAwMjI4MmMxNjUwMzg2NTdiZThlYjljMjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fgXvtPP/bl29+v3lMC4x5Kt5yJw
JaHRkMbWXG2Mx+qPnc9JNaA7HfLJDGNTR7Z+xRToLhUAp8uFfGVg78vK3JnW8Wyh
dDLvd7ZuYW8VzwsqvroP56mGXvyB8piNUZFLJY0w0u8TgTIC10AmQGqcntg+47UO
0sC29eeYFETd/gnRMa67EWTTZPM8SzU6HmKL38H88Xdy8cBSPkotftXxw8uA9vS7
eMgWQd1QGrx4RuI4faaFL0aPcHdvysG/4wSCnS6lylQn26JcnweZPmEb2kiPLoNW
Mvnub9ZLEreTRVbHDm61WDTdaPMm/4m62kv+Jf8541svyXIUoJFruFHEpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7UE/JgD3wAIoLBZQOGV76OucIVMB8GA1UdIwQY
MBaAFBaQlw3bt2GcyCGG3bU2606JhdLeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBDWERkdTNZWnpJSVliZHRUYnJUb21GMHQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yZTg1MzctMzZiZS00OThmLTgxNTUt
Y2MwM2JkMzE1ZmY5LzEvRnBDWERkdTNZWnpJSVliZHRUYnJUb21GMHQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8yZTg1MzctMzZiZS00OThmLTgxNTUtY2MwM2JkMzE1ZmY5
LzEvRnBDWERkdTNZWnpJSVliZHRUYnJUb21GMHQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkAuTM7Pv
ftDXr2BN/4mICbr41iKR+mFb3Za3US3MSYnp0zRd84F/FyvdfamrK2wP30mFPrbk
B7lHL+F0VdeouvKM/Q3qmq6cY5L3ucAkptV5w/T/rESOwJF09j8O/R55qPHGJnk4
3s0wxGlBSnLSm+vieZuvwuOSafej80hXY5wwcnpp66qA3Z6bfpTQUmlPC89h6EE9
n81zr+yUdjXyt6P/TrMjHjaLeDSMTGm46ovzxBOVUnqbfIgocZj4VkjrYLwEYq0C
UEDhYOnIphC68JoRDUwDAjiYy0o8Q1b0wqxX+umFHXMeYqPl2d+OLs6tjnW8Zp04
65QtnwNazLgTKQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:39:15 2025 by rpki-client