Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
File: FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft (raw, json)
Hash identifier: /kZtq2MpZoL6RNX6T1X08TbYgIK+hN4nj42zP5Ny/sM=
Subject key identifier: DC:32:5B:5A:75:AE:4F:C5:1F:6A:39:6F:0D:9D:FB:B1:82:2E:96:DA
Authority key identifier: 15:15:E2:FE:F4:D3:12:45:DC:67:01:8B:EF:C3:37:4D:C0:F1:EC:68
Certificate issuer: /CN=1515e2fef4d31245dc67018befc3374dc0f1ec68
Certificate serial: 019644440F52F4A8592ABFC5D70F09671113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
Manifest number: 14F2
Signing time: Thu 17 Apr 2025 15:00:33 +0000
Manifest this update: Thu 17 Apr 2025 15:00:33 +0000
Manifest next update: Fri 18 Apr 2025 15:00:33 +0000
Files and hashes: 1: FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl (hash: s+rhpxuDoSQwWx1bCwACj37//3mOtYota6F6zkgXiM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:44:0f:52:f4:a8:59:2a:bf:c5:d7:0f:09:67:11:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1515e2fef4d31245dc67018befc3374dc0f1ec68
Validity
Not Before: Apr 17 15:00:33 2025 GMT
Not After : Apr 18 15:00:33 2025 GMT
Subject: CN=dc325b5a75ae4fc51f6a396f0d9dfbb1822e96da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d5:e2:be:41:75:27:88:58:ba:68:0f:b5:55:
82:27:cf:73:d2:9b:7d:e1:9e:1c:d0:08:29:60:be:
1f:99:33:90:fa:ac:54:21:18:f9:58:76:1b:19:51:
ca:cf:38:4d:92:2a:bc:f3:a4:c5:55:89:8a:92:45:
a7:ff:10:86:11:bd:5e:85:b7:f2:9b:f1:5f:f1:1a:
e3:5f:74:4e:bd:04:12:c6:b4:76:c6:62:60:8b:fe:
0c:a8:b7:65:61:1e:79:4c:2e:95:d6:85:e3:b6:88:
21:4f:98:29:2d:be:30:de:d6:f3:c3:10:d1:4a:8b:
de:7a:b0:c8:5d:90:ae:ca:90:ea:5b:c1:d5:0c:49:
67:08:62:87:d5:5f:11:fd:8c:64:03:82:94:ec:6a:
72:15:85:58:67:0d:1c:bc:f6:93:a3:a0:6f:3e:8b:
db:d2:aa:ab:9e:a6:bd:0a:e3:44:d3:a9:b2:10:ed:
02:75:bb:8a:cd:66:88:18:e5:98:73:0b:f9:b1:c2:
e0:f4:91:7b:e3:d6:73:ca:13:6e:3a:4d:b4:bd:dc:
df:eb:2a:c1:ed:f5:b6:bb:f3:d4:ac:a4:47:39:b1:
5b:24:05:d3:eb:69:90:cc:3a:88:44:6a:a1:73:ea:
3f:0e:ec:37:bc:84:77:d2:58:cc:ec:ea:47:99:39:
86:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:32:5B:5A:75:AE:4F:C5:1F:6A:39:6F:0D:9D:FB:B1:82:2E:96:DA
X509v3 Authority Key Identifier:
keyid:15:15:E2:FE:F4:D3:12:45:DC:67:01:8B:EF:C3:37:4D:C0:F1:EC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:b5:62:78:12:fb:4f:cc:25:f7:1b:8d:01:13:f3:f1:35:de:
3a:fd:c5:6c:15:5d:47:de:89:fc:16:6b:88:14:8d:72:c2:9f:
11:c7:f4:38:c4:a2:d9:e7:27:e3:91:1a:60:d7:76:c8:ee:9c:
c5:9b:3d:81:4c:9b:ab:40:09:e7:fe:bc:a6:d2:83:c2:c2:b8:
15:80:0b:76:2c:83:84:2c:fc:85:a3:d5:fb:ec:e0:94:ec:79:
81:56:51:dd:39:fd:e5:db:ab:95:dc:2e:9f:96:ab:4d:df:0c:
b0:d2:e0:1d:4f:0a:c2:64:7e:d8:6e:0e:7a:7b:26:91:cd:84:
85:5e:c2:2d:56:30:ea:ee:68:b4:78:3a:2d:71:0b:9e:6d:a6:
40:b2:64:c6:43:61:87:5d:1e:50:74:96:88:c2:75:db:fc:b3:
3b:40:51:b9:2e:b9:6b:95:d3:9a:18:ed:81:5f:ca:e8:d9:12:
95:d9:97:96:c1:4f:31:61:0e:44:98:8f:7b:17:14:1c:aa:f3:
fd:98:4d:bc:f1:2f:55:0a:84:8b:6b:23:76:4a:55:fc:12:55:
e4:4a:54:ba:e4:b2:b2:52:40:72:58:74:e9:74:56:1c:eb:72:
fb:75:ac:52:0b:90:ad:3a:08:5b:7d:c2:e9:02:f0:93:c8:64:
b5:9e:72:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZERA9S9KhZKr/F1w8JZxETMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MTVlMmZlZjRkMzEyNDVkYzY3MDE4YmVmYzMzNzRkYzBm
MWVjNjgwHhcNMjUwNDE3MTUwMDMzWhcNMjUwNDE4MTUwMDMzWjAzMTEwLwYDVQQD
EyhkYzMyNWI1YTc1YWU0ZmM1MWY2YTM5NmYwZDlkZmJiMTgyMmU5NmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldXivkF1J4hYumgPtVWCJ89z0pt9
4Z4c0AgpYL4fmTOQ+qxUIRj5WHYbGVHKzzhNkiq886TFVYmKkkWn/xCGEb1ehbfy
m/Ff8RrjX3ROvQQSxrR2xmJgi/4MqLdlYR55TC6V1oXjtoghT5gpLb4w3tbzwxDR
SoveerDIXZCuypDqW8HVDElnCGKH1V8R/YxkA4KU7GpyFYVYZw0cvPaTo6BvPovb
0qqrnqa9CuNE06myEO0CdbuKzWaIGOWYcwv5scLg9JF749ZzyhNuOk20vdzf6yrB
7fW2u/PUrKRHObFbJAXT62mQzDqIRGqhc+o/Duw3vIR30ljM7OpHmTmGtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwyW1p1rk/FH2o5bw2d+7GCLpbaMB8GA1UdIwQY
MBaAFBUV4v700xJF3GcBi+/DN03A8exoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlJYaV92VFRFa1hjWndHTDc4TTNUY0R4N0dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iMGM5MzYtOTgzZC00MzkwLTg5NmEt
N2QxM2RkMjgzZTgwLzEvRlJYaV92VFRFa1hjWndHTDc4TTNUY0R4N0dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iMGM5MzYtOTgzZC00MzkwLTg5NmEtN2QxM2RkMjgzZTgw
LzEvRlJYaV92VFRFa1hjWndHTDc4TTNUY0R4N0dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx7VieBL7
T8wl9xuNARPz8TXeOv3FbBVdR96J/BZriBSNcsKfEcf0OMSi2ecn45EaYNd2yO6c
xZs9gUybq0AJ5/68ptKDwsK4FYALdiyDhCz8haPV++zglOx5gVZR3Tn95durldwu
n5arTd8MsNLgHU8KwmR+2G4Oensmkc2EhV7CLVYw6u5otHg6LXELnm2mQLJkxkNh
h10eUHSWiMJ12/yzO0BRuS65a5XTmhjtgV/K6NkSldmXlsFPMWEORJiPexcUHKrz
/ZhNvPEvVQqEi2sjdkpV/BJV5EpUuuSyslJAclh06XRWHOty+3WsUguQrToIW33C
6QLwk8hktZ5ygw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:36:23 2025 by rpki-client