Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
File: FT0HLM7wC_Rk1mDb0F2todoz0sg.mft (raw, json)
Hash identifier: Re+QlQiKpe6Rb259mDHC2CcUkLoOd/fdboowQyaFW0M=
Subject key identifier: F7:7A:2E:BD:3D:BC:29:A1:9C:9D:66:30:C7:63:10:82:C7:F5:95:18
Authority key identifier: 15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
Certificate issuer: /CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Certificate serial: 01960C4344B17D7A7C19B5E79A51BCACA043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
Manifest number: 06FF
Signing time: Sun 06 Apr 2025 18:00:57 +0000
Manifest this update: Sun 06 Apr 2025 18:00:57 +0000
Manifest next update: Mon 07 Apr 2025 18:00:57 +0000
Files and hashes: 1: F0iKq1ijjGBYajSFmQyhreXVAQY.roa (hash: m8/L5cr+uaNLauEK1OLTPn18oa9yVQaLyP+GQwyUFcE=)
2: FT0HLM7wC_Rk1mDb0F2todoz0sg.crl (hash: 9pLvcRIV3RuNMvEke2pV8/FI0ucmVyJb5GqHbJtQwQU=)
3: _2lRv88Gb4s0UGVaP2Mgmxw3ML8.roa (hash: kqmxs4EHa2TZhRmR5+4BZAkd9MXd2Id3FkNPJK6jmmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0c:43:44:b1:7d:7a:7c:19:b5:e7:9a:51:bc:ac:a0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Validity
Not Before: Apr 6 18:00:57 2025 GMT
Not After : Apr 7 18:00:57 2025 GMT
Subject: CN=f77a2ebd3dbc29a19c9d6630c7631082c7f59518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:c1:41:61:a7:86:75:00:c2:55:44:d7:8c:
20:ee:47:f2:51:dc:5d:c4:dc:5a:66:b9:b0:78:3e:
b8:52:6f:4a:45:06:16:a1:7f:f4:60:ad:25:88:b2:
53:2a:74:ac:b8:a8:ae:3c:d1:09:12:e8:0d:1c:1d:
74:16:b7:9a:5f:86:c0:e9:60:b4:41:80:de:7d:ab:
8c:4d:29:4a:58:e0:a8:69:dd:af:b4:f9:d7:c8:a5:
4d:a5:f8:68:9b:fd:17:7c:a0:05:ca:48:9f:3e:6d:
b3:a6:24:4b:8e:a6:e6:5f:b0:71:a0:80:1f:b9:87:
08:4d:e6:4f:c9:36:95:0c:29:f2:69:ac:39:09:51:
7b:94:8d:12:a7:69:e3:74:39:76:ce:34:2e:3a:d9:
99:5f:79:8c:11:04:8a:00:8d:d4:92:f9:5a:ec:c5:
c3:46:ae:82:a3:95:dc:08:d6:8c:98:c0:49:b5:b7:
04:4f:5b:57:af:3a:8b:d4:01:61:f7:52:94:e1:2a:
a3:65:3f:6a:cd:14:17:f5:4c:34:45:69:03:c6:f6:
44:64:30:e0:63:e0:fa:93:22:74:84:29:96:20:0c:
5d:4e:13:45:54:96:af:42:d6:1a:6e:8f:76:e6:dc:
ce:6b:a2:07:a4:da:ea:07:71:28:ed:5c:89:db:04:
c4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7A:2E:BD:3D:BC:29:A1:9C:9D:66:30:C7:63:10:82:C7:F5:95:18
X509v3 Authority Key Identifier:
keyid:15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b0:f6:02:12:35:bf:4e:13:4d:22:06:92:a0:36:0f:67:12:
3b:61:76:31:39:04:2d:58:af:7e:80:18:0e:43:1b:ca:ba:0a:
b8:7b:64:96:38:0a:14:1c:26:57:d3:33:14:ef:58:af:4e:1b:
a6:23:ef:e1:de:01:ff:35:3b:14:b4:ed:77:9a:e3:d1:d6:cb:
56:01:9d:4c:80:47:8a:da:42:6d:b7:a4:81:27:4a:05:df:53:
66:d7:ab:c6:6c:51:38:63:c1:1b:1e:ed:79:0e:9b:2e:22:9a:
07:76:e3:65:04:fa:2f:84:fe:1e:73:cc:7d:43:b1:c5:29:e6:
2b:ad:42:5e:3c:de:b8:eb:4f:0d:ae:be:66:4e:bb:55:ab:da:
62:93:23:7e:5b:64:de:de:7b:7e:61:e8:04:6f:7c:b8:f6:48:
ca:7e:65:d4:ea:79:05:8d:cc:a3:be:b5:b2:3b:74:fa:ca:57:
d9:79:9d:4e:9c:95:cf:cc:42:da:9d:f7:de:30:1d:ee:42:cf:
bf:d4:cc:5a:a1:3f:1b:9b:9e:db:2a:5d:b3:54:61:b6:08:14:
04:97:40:4d:33:fe:cd:4d:22:01:d7:3a:d1:21:ef:37:16:50:
cf:5b:e3:ad:a6:eb:11:31:8a:e5:dc:3b:87:54:f7:43:6b:3b:
05:4b:47:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYMQ0SxfXp8GbXnmlG8rKBDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1M2QwNzJjY2VmMDBiZjQ2NGQ2NjBkYmQwNWRhZGExZGEz
M2QyYzgwHhcNMjUwNDA2MTgwMDU3WhcNMjUwNDA3MTgwMDU3WjAzMTEwLwYDVQQD
EyhmNzdhMmViZDNkYmMyOWExOWM5ZDY2MzBjNzYzMTA4MmM3ZjU5NTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3LBQWGnhnUAwlVE14wg7kfyUdxd
xNxaZrmweD64Um9KRQYWoX/0YK0liLJTKnSsuKiuPNEJEugNHB10FreaX4bA6WC0
QYDefauMTSlKWOCoad2vtPnXyKVNpfhom/0XfKAFykifPm2zpiRLjqbmX7BxoIAf
uYcITeZPyTaVDCnyaaw5CVF7lI0Sp2njdDl2zjQuOtmZX3mMEQSKAI3Ukvla7MXD
Rq6Co5XcCNaMmMBJtbcET1tXrzqL1AFh91KU4SqjZT9qzRQX9Uw0RWkDxvZEZDDg
Y+D6kyJ0hCmWIAxdThNFVJavQtYabo925tzOa6IHpNrqB3Eo7VyJ2wTELQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPd6Lr09vCmhnJ1mMMdjEILH9ZUYMB8GA1UdIwQY
MBaAFBU9ByzO8Av0ZNZg29BdraHaM9LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlQwSExNN3dDX1JrMW1EYjBGMnRvZG96MHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82NGIxZTYtMGExZi00MGVjLTk0Mzct
MDRhNGMyYzQxYzM0LzEvRlQwSExNN3dDX1JrMW1EYjBGMnRvZG96MHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC82NGIxZTYtMGExZi00MGVjLTk0MzctMDRhNGMyYzQxYzM0
LzEvRlQwSExNN3dDX1JrMW1EYjBGMnRvZG96MHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLD2AhI1
v04TTSIGkqA2D2cSO2F2MTkELVivfoAYDkMbyroKuHtkljgKFBwmV9MzFO9Yr04b
piPv4d4B/zU7FLTtd5rj0dbLVgGdTIBHitpCbbekgSdKBd9TZterxmxROGPBGx7t
eQ6bLiKaB3bjZQT6L4T+HnPMfUOxxSnmK61CXjzeuOtPDa6+Zk67VavaYpMjfltk
3t57fmHoBG98uPZIyn5l1Op5BY3Mo761sjt0+spX2XmdTpyVz8xC2p333jAd7kLP
v9TMWqE/G5ue2ypds1RhtggUBJdATTP+zU0iAdc60SHvNxZQz1vjrabrETGK5dw7
h1T3Q2s7BUtHgw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:55:08 2025 by rpki-client