Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
File: 1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json)
Hash identifier: 7eBDdf6qT1wkF5q6Cl/SS3yVchwDZO6/AkKEwOFLhvc=
Subject key identifier: 08:31:4C:D6:5A:A4:7B:6E:51:33:89:3A:4A:AA:B9:8E:3A:5D:50:1C
Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055
Certificate serial: 01974A7B317B66FE3CE4BA57572F3E07ED5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
Manifest number: 11E8
Signing time: Sat 07 Jun 2025 13:01:16 +0000
Manifest this update: Sat 07 Jun 2025 13:01:16 +0000
Manifest next update: Sun 08 Jun 2025 13:01:16 +0000
Files and hashes: 1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: OoWJbX3HUdM//tQa3dPMEK75bVUWmdv8V8iAFbmsbgk=)
2: MwEJqReLtYJIDzQC3nxs7sP0tvA.roa (hash: WyxWLsA6emUiFQU/YyUOL864IemIj/7UtRIviv8JcEw=)
3: iAzdsnC_l6rdd2kZ6hvA3HRXqCU.roa (hash: sMPWtnAj59EVmsTaMYwCg3wIrLPxpEslb0ZjPRwWR6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:31:7b:66:fe:3c:e4:ba:57:57:2f:3e:07:ed:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bab208653d4261ebf202f6036334119846055
Validity
Not Before: Jun 7 13:01:16 2025 GMT
Not After : Jun 8 13:01:16 2025 GMT
Subject: CN=08314cd65aa47b6e5133893a4aaab98e3a5d501c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ba:06:28:7c:8e:4a:24:7d:5b:d5:fe:91:fc:
f5:e8:00:59:9a:20:bc:1f:3c:4f:b9:75:06:64:4a:
e3:60:4a:b2:54:75:b9:eb:92:9b:61:3c:cf:0f:d3:
5c:a8:3a:74:03:24:b5:0d:5d:86:6d:d0:c9:ba:96:
10:32:37:ef:99:f7:e7:55:31:96:79:50:d5:82:b6:
45:89:4a:61:98:70:3c:96:66:f9:ef:b4:b3:0c:13:
4b:5f:e1:f4:64:00:b4:4f:c5:a4:1f:ac:8f:d9:83:
af:28:7a:ef:43:92:f2:d1:e3:d3:f3:c3:62:de:52:
6b:50:ef:e4:9f:3f:e0:62:ad:70:99:31:08:4c:d7:
cd:a0:78:d8:71:ff:ee:bb:6c:9f:69:08:17:30:d9:
0c:93:9c:06:2d:22:15:5b:c1:5c:dd:e3:f1:1f:51:
02:c8:95:44:dc:3f:49:47:06:42:47:63:38:ac:da:
62:93:29:6d:d9:10:af:d5:a0:95:18:e0:1b:24:97:
ea:8c:1b:f4:9a:7e:a7:30:41:3e:5d:c9:4b:32:8b:
1e:4f:e0:50:ea:4a:a7:af:cb:f1:74:38:c3:e4:b4:
9a:12:43:fe:35:0c:d6:d1:bf:3c:72:97:27:1e:27:
f2:95:5d:7f:cc:dd:57:39:74:33:89:af:48:af:4c:
19:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:31:4C:D6:5A:A4:7B:6E:51:33:89:3A:4A:AA:B9:8E:3A:5D:50:1C
X509v3 Authority Key Identifier:
keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:99:fe:db:d9:1a:67:c6:5c:20:37:04:8f:4b:4d:52:d8:fa:
13:a7:1d:82:c2:48:44:2e:0a:e1:90:d1:4e:46:b9:a8:91:cd:
c4:fe:9d:ef:e5:19:6e:53:74:bc:01:4b:81:de:9c:6a:3a:88:
68:f0:b0:54:47:e9:c5:63:01:7f:1c:6a:40:ff:18:20:1b:bf:
f5:c3:62:33:0c:a7:39:45:7f:15:80:70:35:af:ba:d8:7f:df:
bc:3b:86:39:68:24:a7:61:01:50:a9:4a:ab:3f:90:f0:e0:c9:
50:7c:cd:46:8f:30:26:8a:57:7a:23:2d:bb:3a:5e:f2:31:77:
fb:ad:d8:93:a3:96:1a:20:5c:a7:05:20:4d:43:7b:c3:49:c6:
e0:72:1b:bf:6e:9e:11:c0:a3:cf:be:6e:62:3f:48:a8:f1:c7:
3e:62:bb:6f:bb:2d:ff:cf:66:b0:5d:dd:04:82:e2:6d:2d:d3:
6c:44:e2:71:d4:b2:81:0d:e4:e6:4f:46:03:8b:9f:e9:64:21:
a2:07:3a:a8:9d:46:8c:b5:b6:a6:59:9c:1b:d9:36:eb:17:8d:
d5:5e:29:0a:82:56:24:09:8d:55:a9:b5:b4:c0:8e:9d:b4:ff:
d4:53:28:6d:d4:7a:d9:e6:47:af:86:50:4e:c1:7f:1a:3f:a3:
90:2f:2a:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKezF7Zv485LpXVy8+B+1fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NWJhYjIwODY1M2Q0MjYxZWJmMjAyZjYwMzYzMzQxMTk4
NDYwNTUwHhcNMjUwNjA3MTMwMTE2WhcNMjUwNjA4MTMwMTE2WjAzMTEwLwYDVQQD
EygwODMxNGNkNjVhYTQ3YjZlNTEzMzg5M2E0YWFhYjk4ZTNhNWQ1MDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjboGKHyOSiR9W9X+kfz16ABZmiC8
HzxPuXUGZErjYEqyVHW565KbYTzPD9NcqDp0AyS1DV2GbdDJupYQMjfvmffnVTGW
eVDVgrZFiUphmHA8lmb577SzDBNLX+H0ZAC0T8WkH6yP2YOvKHrvQ5Ly0ePT88Ni
3lJrUO/knz/gYq1wmTEITNfNoHjYcf/uu2yfaQgXMNkMk5wGLSIVW8Fc3ePxH1EC
yJVE3D9JRwZCR2M4rNpikylt2RCv1aCVGOAbJJfqjBv0mn6nMEE+XclLMoseT+BQ
6kqnr8vxdDjD5LSaEkP+NQzW0b88cpcnHifylV1/zN1XOXQzia9Ir0wZNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgxTNZapHtuUTOJOkqquY46XVAcMB8GA1UdIwQY
MBaAFNRbqyCGU9QmHr8gL2A2M0EZhGBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wYWVjMWYtNjA2NS00ZDg4LTg0NTQt
MTI0ZDNmYjM5MDZhLzEvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wYWVjMWYtNjA2NS00ZDg4LTg0NTQtMTI0ZDNmYjM5MDZh
LzEvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZn+29ka
Z8ZcIDcEj0tNUtj6E6cdgsJIRC4K4ZDRTka5qJHNxP6d7+UZblN0vAFLgd6cajqI
aPCwVEfpxWMBfxxqQP8YIBu/9cNiMwynOUV/FYBwNa+62H/fvDuGOWgkp2EBUKlK
qz+Q8ODJUHzNRo8wJopXeiMtuzpe8jF3+63Yk6OWGiBcpwUgTUN7w0nG4HIbv26e
EcCjz75uYj9IqPHHPmK7b7st/89msF3dBILibS3TbETicdSygQ3k5k9GA4uf6WQh
ogc6qJ1GjLW2plmcG9k26xeN1V4pCoJWJAmNVam1tMCOnbT/1FMobdR62eZHr4ZQ
TsF/Gj+jkC8qMQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:49:23 2025 by rpki-client