Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
File: FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft (raw, json)
Hash identifier: h/f8HfufaUAhylUfX3paOjHLP2LRdXRphac7fVlyVHM=
Subject key identifier: 5D:B5:9E:71:34:BA:FE:FC:57:12:97:FC:B9:CC:06:D8:05:81:89:10
Authority key identifier: 14:62:A4:97:EF:E0:BC:92:B7:ED:92:52:9E:BB:E3:9C:B1:9D:33:0A
Certificate issuer: /CN=1462a497efe0bc92b7ed92529ebbe39cb19d330a
Certificate serial: 019657939C9D77818152B1C40582937A52DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
Manifest number: 08F7
Signing time: Mon 21 Apr 2025 09:00:13 +0000
Manifest this update: Mon 21 Apr 2025 09:00:13 +0000
Manifest next update: Tue 22 Apr 2025 09:00:13 +0000
Files and hashes: 1: C5kS-eXFEoRGhSGKrj1aky_A-YU.roa (hash: 0Cexvh0L+qwpqym6REc7bvetIUnS6MiKORaDRSgSxQo=)
2: FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl (hash: pB5NluHwdxehsdA5CpLD5RE+2ryzFo/q050TfE9692s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:9c:9d:77:81:81:52:b1:c4:05:82:93:7a:52:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1462a497efe0bc92b7ed92529ebbe39cb19d330a
Validity
Not Before: Apr 21 09:00:13 2025 GMT
Not After : Apr 22 09:00:13 2025 GMT
Subject: CN=5db59e7134bafefc571297fcb9cc06d805818910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ac:b6:49:0e:28:ca:3c:01:ec:79:85:e3:86:
37:d4:d1:0b:d7:11:bf:95:4c:62:bf:6f:0a:2e:d5:
8c:fe:9f:a0:9a:b2:b5:84:2c:b5:62:f9:0a:32:0e:
7d:eb:6e:b8:00:e6:f9:99:30:24:f3:9a:3b:e4:35:
90:d7:24:62:a1:61:ac:48:3d:b1:47:86:7a:a0:79:
0a:d6:14:81:be:6c:38:c9:7f:0c:96:d7:8a:f7:57:
5a:8a:33:93:b3:fb:77:65:50:8b:40:26:cf:ee:2f:
04:cf:8b:84:3f:0c:98:f0:c1:f4:1c:52:13:5f:a2:
8c:73:5a:26:43:d1:df:93:36:5b:79:3c:c6:b3:8a:
9e:f8:cd:88:8e:b8:51:b8:c1:75:f3:fb:22:27:eb:
ae:d7:74:0a:e1:8c:a8:a5:74:a9:c6:b1:8b:53:ff:
a8:b8:6b:95:4e:6f:eb:1b:af:4a:43:59:89:38:3b:
94:61:65:d0:df:45:75:94:c9:6e:9a:33:1a:43:65:
91:eb:de:ad:ce:1f:f6:7b:2e:eb:c1:e5:11:9a:86:
bd:b3:67:5e:8d:aa:54:28:9c:0f:0e:7d:77:03:01:
c1:94:63:34:c8:7d:0e:a2:02:a7:39:2c:56:4d:b1:
c8:70:5a:a7:35:e0:d2:51:36:94:72:28:de:5a:a8:
9e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B5:9E:71:34:BA:FE:FC:57:12:97:FC:B9:CC:06:D8:05:81:89:10
X509v3 Authority Key Identifier:
keyid:14:62:A4:97:EF:E0:BC:92:B7:ED:92:52:9E:BB:E3:9C:B1:9D:33:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ec:38:dd:77:05:23:aa:3a:30:1b:9b:08:2d:dd:8a:c9:60:
3e:29:03:ce:c2:4d:b5:7a:bb:52:34:da:e6:4f:60:58:b2:e1:
9c:f7:ae:39:2b:7c:12:7d:a7:82:6a:92:e2:0e:9e:1a:a4:fe:
de:1c:c7:ed:29:8c:2a:93:43:0b:fe:fe:b5:4d:c1:27:5d:22:
c7:44:71:8d:c9:7a:bb:36:ba:11:94:cd:7f:79:eb:da:22:1b:
91:81:51:20:e9:60:4b:4e:02:96:e6:83:f5:2f:af:7f:e1:6d:
3d:96:e5:cf:13:d8:51:0f:2d:ca:56:9f:c4:77:bb:9e:9c:1c:
f9:e8:dd:f6:57:60:fd:2e:9d:c3:d3:d9:fb:bb:43:f9:98:43:
10:d9:34:8e:d6:8a:ae:13:7a:80:de:9e:e8:a7:24:a7:16:90:
65:e6:e9:d8:ab:ca:f2:d1:e1:f7:31:b2:32:e8:2d:c3:59:09:
00:16:d0:74:b4:85:07:cf:45:0d:50:73:3b:6f:0a:a0:71:bd:
53:9f:66:2d:82:9e:93:d0:1e:3c:c3:33:8a:71:e1:d2:5c:80:
98:17:8f:34:a8:97:12:fc:e9:95:57:00:ea:03:06:ae:3b:5f:
e5:ea:52:32:94:3b:11:1e:ff:d5:47:c1:0a:79:de:ba:ba:73:
76:f1:b7:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXk5ydd4GBUrHEBYKTelLbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NjJhNDk3ZWZlMGJjOTJiN2VkOTI1MjllYmJlMzljYjE5
ZDMzMGEwHhcNMjUwNDIxMDkwMDEzWhcNMjUwNDIyMDkwMDEzWjAzMTEwLwYDVQQD
Eyg1ZGI1OWU3MTM0YmFmZWZjNTcxMjk3ZmNiOWNjMDZkODA1ODE4OTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ay2SQ4oyjwB7HmF44Y31NEL1xG/
lUxiv28KLtWM/p+gmrK1hCy1YvkKMg596264AOb5mTAk85o75DWQ1yRioWGsSD2x
R4Z6oHkK1hSBvmw4yX8MlteK91daijOTs/t3ZVCLQCbP7i8Ez4uEPwyY8MH0HFIT
X6KMc1omQ9HfkzZbeTzGs4qe+M2IjrhRuMF18/siJ+uu13QK4YyopXSpxrGLU/+o
uGuVTm/rG69KQ1mJODuUYWXQ30V1lMlumjMaQ2WR696tzh/2ey7rweURmoa9s2de
japUKJwPDn13AwHBlGM0yH0OogKnOSxWTbHIcFqnNeDSUTaUcijeWqieiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF21nnE0uv78VxKX/LnMBtgFgYkQMB8GA1UdIwQY
MBaAFBRipJfv4LySt+2SUp6745yxnTMKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkdLa2wtX2d2SkszN1pKU25ydmpuTEdkTXdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iZTExNzEtMTIwMi00ZGY4LThjMzAt
ZDM2OTM1ZWJjNmFkLzEvRkdLa2wtX2d2SkszN1pKU25ydmpuTEdkTXdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9iZTExNzEtMTIwMi00ZGY4LThjMzAtZDM2OTM1ZWJjNmFk
LzEvRkdLa2wtX2d2SkszN1pKU25ydmpuTEdkTXdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALuw43XcF
I6o6MBubCC3dislgPikDzsJNtXq7UjTa5k9gWLLhnPeuOSt8En2ngmqS4g6eGqT+
3hzH7SmMKpNDC/7+tU3BJ10ix0Rxjcl6uza6EZTNf3nr2iIbkYFRIOlgS04CluaD
9S+vf+FtPZblzxPYUQ8tylafxHe7npwc+ejd9ldg/S6dw9PZ+7tD+ZhDENk0jtaK
rhN6gN6e6KckpxaQZebp2KvK8tHh9zGyMugtw1kJABbQdLSFB89FDVBzO28KoHG9
U59mLYKek9AePMMzinHh0lyAmBePNKiXEvzplVcA6gMGrjtf5epSMpQ7ER7/1UfB
CnneurpzdvG3Jg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:21:06 2025 by rpki-client