Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
File: FfiJ_tAIX8IbCPy7slLDEG35mqg.mft (raw, json)
Hash identifier: 1RYVDrTWhwwko3CaDRbtOmzbh2t1mrCe2m+/MEomRus=
Subject key identifier: 8A:A5:72:3A:C6:AB:0B:9B:A7:AE:7C:7F:8E:8A:F7:DE:C2:03:10:1A
Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Certificate serial: 019646322B12DAF9E22FB512F7710D70739E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
Manifest number: 14F6
Signing time: Fri 18 Apr 2025 00:00:14 +0000
Manifest this update: Fri 18 Apr 2025 00:00:14 +0000
Manifest next update: Sat 19 Apr 2025 00:00:14 +0000
Files and hashes: 1: 88FJYTd8b-KHdvH7x_K99lUYWdQ.roa (hash: ghtnktZiVNaMUpHUfiZ1KkJiqbduMhbZsfbCJ/7Zf6E=)
2: FfiJ_tAIX8IbCPy7slLDEG35mqg.crl (hash: jsNteH5wSQ16MQ9HrmCeiIA/N0ZoenbpCaBcMdX2LCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 00:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:32:2b:12:da:f9:e2:2f:b5:12:f7:71:0d:70:73:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Validity
Not Before: Apr 18 00:00:14 2025 GMT
Not After : Apr 19 00:00:14 2025 GMT
Subject: CN=8aa5723ac6ab0b9ba7ae7c7f8e8af7dec203101a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7e:a6:62:d2:53:15:45:ed:cb:3a:de:98:c6:
97:dd:58:16:f0:da:00:66:b2:90:33:05:5b:62:02:
e7:db:b7:81:42:36:c1:82:44:9d:b0:70:6c:d2:3e:
c9:99:84:74:07:84:b2:6e:fe:4d:a5:3f:26:4b:2e:
0b:d4:30:61:02:49:52:55:0f:b8:ef:d8:6e:a5:d3:
fd:54:93:0d:5f:61:af:b4:43:45:cd:7e:85:d6:74:
ae:80:ba:ed:20:6b:bd:be:c5:e8:e8:2a:5e:ed:5c:
9d:41:74:0e:d9:ec:6f:3e:8e:df:c9:f5:ee:c1:6f:
c5:71:89:d8:38:9c:cf:8b:98:d3:91:55:df:07:da:
f6:d8:b9:8a:44:88:76:83:ce:26:c9:d6:50:8c:54:
43:ae:68:e7:d6:ba:fd:8b:a8:1f:ed:94:11:b5:4d:
7e:d1:6c:81:36:7d:aa:35:7a:0c:de:c9:a8:b5:10:
ba:08:09:31:54:19:49:c5:a0:6e:ad:65:0d:78:a3:
14:6b:75:7a:e6:40:9a:ef:a4:2e:9d:05:57:e0:a6:
d8:29:8c:e7:38:f9:be:c1:4a:16:cd:a2:fb:71:4d:
89:57:56:de:7c:78:bd:3c:df:b8:ea:c2:55:51:1d:
05:8c:b1:5f:f8:ad:c3:dc:c6:94:cc:e8:3a:38:ef:
c9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A5:72:3A:C6:AB:0B:9B:A7:AE:7C:7F:8E:8A:F7:DE:C2:03:10:1A
X509v3 Authority Key Identifier:
keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7f:51:c4:79:01:4e:9a:13:75:71:db:8e:7a:a5:7b:54:5e:
62:da:23:13:70:ca:f9:22:d3:b8:cd:ec:a9:96:1a:1d:0a:23:
17:a7:52:27:e6:35:93:87:e1:bd:93:30:45:9f:4a:46:ff:7b:
aa:ad:4c:3d:7c:47:f3:d0:53:59:84:fd:c6:95:a0:16:e5:97:
f2:0e:6e:d5:c0:17:c6:1b:93:14:b7:51:e3:51:9a:2f:5c:d3:
34:c1:b6:19:8b:9f:ed:a0:48:64:2f:1a:69:69:26:0a:f0:b3:
48:d7:26:42:b6:5e:e4:60:33:78:fb:5a:54:57:d2:3f:b4:2d:
7e:65:c5:14:e2:ba:1c:76:6d:db:02:95:d0:65:0d:46:bb:4c:
ad:ef:ca:7a:15:97:7d:b8:2d:0d:68:37:f0:6c:ff:8c:1b:2b:
2e:17:00:fb:8e:0f:d9:37:67:f9:61:25:3b:c1:13:1f:6d:ae:
27:6b:7e:40:fd:5c:91:b6:35:13:bd:ca:d1:58:ec:1b:32:2c:
e9:a7:05:f4:29:bb:7e:db:1e:a5:b8:6b:06:33:6c:80:e1:1b:
19:49:c4:8e:89:81:94:5b:30:9f:56:f4:06:e2:53:4c:16:b5:
ce:e9:0e:8c:cf:92:31:3d:f7:05:55:c3:24:4a:eb:08:dd:7d:
ec:86:d2:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZGMisS2vniL7US93ENcHOeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Zjg4OWZlZDAwODVmYzIxYjA4ZmNiYmIyNTJjMzEwNmRm
OTlhYTgwHhcNMjUwNDE4MDAwMDE0WhcNMjUwNDE5MDAwMDE0WjAzMTEwLwYDVQQD
Eyg4YWE1NzIzYWM2YWIwYjliYTdhZTdjN2Y4ZThhZjdkZWMyMDMxMDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH6mYtJTFUXtyzremMaX3VgW8NoA
ZrKQMwVbYgLn27eBQjbBgkSdsHBs0j7JmYR0B4Sybv5NpT8mSy4L1DBhAklSVQ+4
79hupdP9VJMNX2GvtENFzX6F1nSugLrtIGu9vsXo6Cpe7VydQXQO2exvPo7fyfXu
wW/FcYnYOJzPi5jTkVXfB9r22LmKRIh2g84mydZQjFRDrmjn1rr9i6gf7ZQRtU1+
0WyBNn2qNXoM3smotRC6CAkxVBlJxaBurWUNeKMUa3V65kCa76QunQVX4KbYKYzn
OPm+wUoWzaL7cU2JV1befHi9PN+46sJVUR0FjLFf+K3D3MaUzOg6OO/JlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqlcjrGqwubp658f46K997CAxAaMB8GA1UdIwQY
MBaAFBX4if7QCF/CGwj8u7JSwxBt+ZqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mOTUyZmItOTMxOC00OWI2LWI5NDYt
MWUzYTE5NTQ3OGUwLzEvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mOTUyZmItOTMxOC00OWI2LWI5NDYtMWUzYTE5NTQ3OGUw
LzEvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFX9RxHkB
TpoTdXHbjnqle1ReYtojE3DK+SLTuM3sqZYaHQojF6dSJ+Y1k4fhvZMwRZ9KRv97
qq1MPXxH89BTWYT9xpWgFuWX8g5u1cAXxhuTFLdR41GaL1zTNMG2GYuf7aBIZC8a
aWkmCvCzSNcmQrZe5GAzePtaVFfSP7QtfmXFFOK6HHZt2wKV0GUNRrtMre/KehWX
fbgtDWg38Gz/jBsrLhcA+44P2Tdn+WElO8ETH22uJ2t+QP1ckbY1E73K0VjsGzIs
6acF9Cm7ftsepbhrBjNsgOEbGUnEjomBlFswn1b0BuJTTBa1zukOjM+SMT33BVXD
JErrCN197IbS7Q==
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:39:54 2025 by rpki-client