Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft
File: FW-pMchet5jGgtwy5CkJ1xySOyM.mft (raw, json)
Hash identifier: EovGrbk5PyaUddhCeRLjpFNYzyU45l3I9hsAb1k0YKg=
Subject key identifier: 52:07:E3:B4:3C:E3:FB:89:40:90:1C:1C:DA:E5:47:55:19:15:97:2F
Authority key identifier: 15:6F:A9:31:C8:5E:B7:98:C6:82:DC:32:E4:29:09:D7:1C:92:3B:23
Certificate issuer: /CN=156fa931c85eb798c682dc32e42909d71c923b23
Certificate serial: 01965838C0384A15D004105B0F82319FFADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FW-pMchet5jGgtwy5CkJ1xySOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft
Manifest number: 03E9
Signing time: Mon 21 Apr 2025 12:00:36 +0000
Manifest this update: Mon 21 Apr 2025 12:00:36 +0000
Manifest next update: Tue 22 Apr 2025 12:00:36 +0000
Files and hashes: 1: FW-pMchet5jGgtwy5CkJ1xySOyM.crl (hash: VwP1bSRbNcihc/3g15DXCvQ7hp/1NStwoCGWOAachhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FW-pMchet5jGgtwy5CkJ1xySOyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:c0:38:4a:15:d0:04:10:5b:0f:82:31:9f:fa:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156fa931c85eb798c682dc32e42909d71c923b23
Validity
Not Before: Apr 21 12:00:36 2025 GMT
Not After : Apr 22 12:00:36 2025 GMT
Subject: CN=5207e3b43ce3fb8940901c1cdae547551915972f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:60:af:e2:58:97:d6:e1:1e:22:ac:2c:cf:50:
2c:51:f1:8b:22:62:f0:72:62:89:14:2e:16:35:3c:
b5:32:16:bf:d3:f5:84:4c:78:9a:e3:e3:8d:08:4b:
ba:75:6e:9a:6c:bc:d5:9b:1b:c1:42:bd:48:1b:b9:
c5:6d:3d:cd:93:0c:93:22:8c:55:7a:80:ae:18:2e:
7d:d3:89:95:0f:b7:91:1f:5d:32:04:94:ec:9e:54:
ba:e5:90:da:a5:39:d8:8c:7c:2b:d8:9c:b4:af:72:
83:f3:d6:5a:18:79:6b:9f:db:8b:14:4b:bc:33:c8:
c8:23:dd:46:cb:d5:38:6a:1c:be:46:0f:93:8a:b9:
d6:ab:5c:01:42:98:10:ee:40:24:b1:a1:c4:04:d6:
15:e1:8c:50:b3:8d:b1:f6:3a:d8:1b:64:a3:89:b6:
d8:e2:b7:3a:94:88:34:66:84:d7:f4:48:c2:6d:c6:
6d:d3:3e:73:50:ff:d8:78:c0:80:56:70:c4:5c:e0:
8d:95:93:df:05:0a:ce:bc:ac:c9:13:e5:48:63:03:
c1:df:af:02:b2:85:4f:93:1d:f4:e8:58:59:ac:62:
b2:a6:fc:ed:cc:f2:cb:b7:06:33:47:9d:c9:d2:64:
cd:e6:4f:c5:a4:69:8b:a4:52:76:4a:df:59:c5:21:
07:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:07:E3:B4:3C:E3:FB:89:40:90:1C:1C:DA:E5:47:55:19:15:97:2F
X509v3 Authority Key Identifier:
keyid:15:6F:A9:31:C8:5E:B7:98:C6:82:DC:32:E4:29:09:D7:1C:92:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW-pMchet5jGgtwy5CkJ1xySOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ae:82:d9:ff:59:e9:83:b8:53:80:cf:04:27:56:21:92:d2:
81:2b:8f:95:35:8d:5f:52:54:f2:98:cc:68:6b:50:1e:eb:c7:
82:4e:1c:56:a4:97:42:e7:ab:2a:ca:ae:97:32:19:ca:4a:c5:
dc:42:0c:cb:27:fe:1f:8d:da:2d:58:39:71:d9:3b:b8:f1:45:
d0:dd:fa:32:3c:3a:03:db:fc:8e:35:31:be:e6:29:28:2d:0d:
8a:d8:94:ef:8a:05:c1:20:1e:43:ce:2a:01:92:d8:7a:53:5e:
6f:9c:82:a7:4b:37:da:e1:c0:94:dc:09:9d:c3:b1:fe:07:b8:
51:87:70:9a:aa:83:4f:84:5e:cb:49:f4:11:20:8d:a4:c7:57:
14:33:b1:67:2e:4a:fa:a6:f7:5c:c6:29:23:ba:0c:c3:e4:bb:
13:2c:bc:34:d9:c7:05:2e:c8:15:5f:f4:d7:6a:eb:4e:d1:e4:
64:d2:61:9e:c6:49:98:68:90:71:5d:6e:bc:3f:ef:7f:45:52:
19:f4:73:49:16:74:8e:27:0d:ff:6d:52:df:aa:36:10:29:08:
59:a5:99:a7:8c:45:60:61:9b:a5:23:1f:ee:0d:7a:53:23:a8:
77:98:6a:94:4a:63:a1:ec:81:fb:a3:5a:3e:96:07:4f:69:2d:
4c:b0:cb:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYOMA4ShXQBBBbD4Ixn/rcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NmZhOTMxYzg1ZWI3OThjNjgyZGMzMmU0MjkwOWQ3MWM5
MjNiMjMwHhcNMjUwNDIxMTIwMDM2WhcNMjUwNDIyMTIwMDM2WjAzMTEwLwYDVQQD
Eyg1MjA3ZTNiNDNjZTNmYjg5NDA5MDFjMWNkYWU1NDc1NTE5MTU5NzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2Cv4liX1uEeIqwsz1AsUfGLImLw
cmKJFC4WNTy1Mha/0/WETHia4+ONCEu6dW6abLzVmxvBQr1IG7nFbT3NkwyTIoxV
eoCuGC5904mVD7eRH10yBJTsnlS65ZDapTnYjHwr2Jy0r3KD89ZaGHlrn9uLFEu8
M8jII91Gy9U4ahy+Rg+TirnWq1wBQpgQ7kAksaHEBNYV4YxQs42x9jrYG2SjibbY
4rc6lIg0ZoTX9EjCbcZt0z5zUP/YeMCAVnDEXOCNlZPfBQrOvKzJE+VIYwPB368C
soVPkx306FhZrGKypvztzPLLtwYzR53J0mTN5k/FpGmLpFJ2St9ZxSEH3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIH47Q84/uJQJAcHNrlR1UZFZcvMB8GA1UdIwQY
MBaAFBVvqTHIXreYxoLcMuQpCdcckjsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlctcE1jaGV0NWpHZ3R3eTVDa0oxeHlTT3lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lYzZhODMtYmJhNi00NWNiLTkwZWMt
NGVhODA2ZmYyOGNkLzEvRlctcE1jaGV0NWpHZ3R3eTVDa0oxeHlTT3lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9lYzZhODMtYmJhNi00NWNiLTkwZWMtNGVhODA2ZmYyOGNk
LzEvRlctcE1jaGV0NWpHZ3R3eTVDa0oxeHlTT3lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi66C2f9Z
6YO4U4DPBCdWIZLSgSuPlTWNX1JU8pjMaGtQHuvHgk4cVqSXQuerKsqulzIZykrF
3EIMyyf+H43aLVg5cdk7uPFF0N36Mjw6A9v8jjUxvuYpKC0NitiU74oFwSAeQ84q
AZLYelNeb5yCp0s32uHAlNwJncOx/ge4UYdwmqqDT4Rey0n0ESCNpMdXFDOxZy5K
+qb3XMYpI7oMw+S7Eyy8NNnHBS7IFV/012rrTtHkZNJhnsZJmGiQcV1uvD/vf0VS
GfRzSRZ0jicN/21S36o2ECkIWaWZp4xFYGGbpSMf7g16UyOod5hqlEpjoeyB+6Na
PpYHT2ktTLDL6w==
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:46:30 2025 by rpki-client