Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
File: fF39tuHZPAkoI96WvdfIi7w2odE.mft (raw, json)
Hash identifier: 5WcmXxcCcnv2+VGZowmo+YwSXWHn2coazQc5BsKyc7w=
Subject key identifier: 47:E0:F1:5B:2B:C8:B0:D3:8D:41:30:67:95:CD:21:D0:4B:22:49:61
Authority key identifier: 7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
Certificate issuer: /CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Certificate serial: 0196549327631DFE9E78E69D894A361929F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
Manifest number: 0FC4
Signing time: Sun 20 Apr 2025 19:00:52 +0000
Manifest this update: Sun 20 Apr 2025 19:00:52 +0000
Manifest next update: Mon 21 Apr 2025 19:00:52 +0000
Files and hashes: 1: RZuMdxzgtqeut8ZsWIjCvxcq_HU.roa (hash: k8PO+wAyawu0IdR6r++/H7W0FSIFO01M/1RM3odCP4I=)
2: fF39tuHZPAkoI96WvdfIi7w2odE.crl (hash: 7+jqG+pk/TgqLXJNzoLVhi/XTu9phlHCqs7FFU1XieY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:27:63:1d:fe:9e:78:e6:9d:89:4a:36:19:29:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Validity
Not Before: Apr 20 19:00:52 2025 GMT
Not After : Apr 21 19:00:52 2025 GMT
Subject: CN=47e0f15b2bc8b0d38d41306795cd21d04b224961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cd:e0:3c:63:b6:f5:79:84:10:c2:df:00:f6:
2f:1f:0c:9c:7f:91:13:18:4a:07:ec:bc:ac:bf:6c:
af:ba:68:51:a4:17:c9:42:e0:d8:47:57:b1:f5:53:
38:67:e8:00:29:3b:0d:9b:8f:a7:3b:3f:75:bf:b4:
3e:28:8d:0f:7c:ad:04:4b:f9:0c:c5:77:77:02:cd:
db:fc:da:56:65:2f:b6:9f:6c:68:c2:1c:10:a4:d0:
24:1a:9c:bb:f6:57:aa:d3:97:8d:65:5f:a6:e0:a2:
86:57:24:e6:94:97:89:79:65:af:5a:c3:f0:1e:34:
0f:00:ac:b5:9e:04:2d:b0:69:46:c5:96:67:6e:f1:
ab:6e:d0:b6:e0:7a:eb:a6:14:43:68:3c:e1:de:92:
70:5b:3e:15:99:5f:4b:38:dc:e1:25:32:63:74:a8:
7e:00:17:f2:c7:23:6d:29:d7:9f:0a:4e:1c:bc:96:
b7:a1:ac:40:4f:9e:64:d9:6a:02:60:b9:2d:c4:2b:
62:cd:9e:0a:0b:c2:2f:6e:45:39:7f:cf:0b:e7:ef:
fe:db:33:e3:e6:cf:77:23:41:a3:10:4c:e0:cf:76:
71:57:ca:50:0e:d9:7c:62:07:b6:c1:b1:19:d9:5c:
1a:b2:91:4a:ad:25:e7:04:94:c5:51:91:d7:df:24:
20:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E0:F1:5B:2B:C8:B0:D3:8D:41:30:67:95:CD:21:D0:4B:22:49:61
X509v3 Authority Key Identifier:
keyid:7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f2:35:81:2d:97:f1:96:de:ff:d4:10:a3:83:0f:9a:1f:7b:
10:21:14:80:ff:11:00:c1:dd:1c:65:49:01:25:dd:f4:b4:35:
e0:81:a4:a9:1b:85:0f:9b:f9:02:5d:bc:dc:ae:cb:16:14:a4:
57:cd:76:01:08:49:cc:e8:82:93:51:a2:af:01:5a:12:ab:45:
92:c0:45:aa:57:45:25:85:50:a8:02:74:dc:05:9c:70:90:3b:
ed:d8:ec:5f:70:47:f9:dd:b0:5b:b9:fc:6a:10:30:1c:7e:5f:
6f:c4:22:41:8f:2a:ee:0a:75:ef:87:64:da:59:3d:b1:d2:d7:
71:80:71:d0:18:0c:23:f8:00:7d:f0:43:cb:70:e7:2b:88:9c:
6e:06:bb:77:7b:a7:5d:35:02:87:93:c4:df:66:43:1b:99:91:
8e:4e:85:11:b0:d3:ae:58:3a:6d:fb:c1:a2:6d:b0:cf:27:a7:
e9:4a:d3:a5:3e:a7:46:ee:d4:e8:46:77:5d:a7:9c:70:dd:8c:
78:04:ec:1d:67:25:fc:fe:85:a6:b6:48:81:11:08:ee:ef:02:
7c:d1:c5:62:05:e8:5e:a5:30:75:33:7b:b4:c4:7e:f7:01:50:
bb:d3:f5:1f:9a:78:28:f6:d6:2c:95:6e:61:36:ce:bb:da:c6:
f0:55:35:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUkydjHf6eeOadiUo2GSnxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNWRmZGI2ZTFkOTNjMDkyODIzZGU5NmJkZDdjODhiYmMz
NmExZDEwHhcNMjUwNDIwMTkwMDUyWhcNMjUwNDIxMTkwMDUyWjAzMTEwLwYDVQQD
Eyg0N2UwZjE1YjJiYzhiMGQzOGQ0MTMwNjc5NWNkMjFkMDRiMjI0OTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c3gPGO29XmEEMLfAPYvHwycf5ET
GEoH7Lysv2yvumhRpBfJQuDYR1ex9VM4Z+gAKTsNm4+nOz91v7Q+KI0PfK0ES/kM
xXd3As3b/NpWZS+2n2xowhwQpNAkGpy79leq05eNZV+m4KKGVyTmlJeJeWWvWsPw
HjQPAKy1ngQtsGlGxZZnbvGrbtC24HrrphRDaDzh3pJwWz4VmV9LONzhJTJjdKh+
ABfyxyNtKdefCk4cvJa3oaxAT55k2WoCYLktxCtizZ4KC8IvbkU5f88L5+/+2zPj
5s93I0GjEEzgz3ZxV8pQDtl8Yge2wbEZ2VwaspFKrSXnBJTFUZHX3yQgDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfg8VsryLDTjUEwZ5XNIdBLIklhMB8GA1UdIwQY
MBaAFHxd/bbh2TwJKCPelr3XyIu8NqHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkYzOXR1SFpQQWtvSTk2V3ZkZklpN3cyb2RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jODIyMTUtZTkzOS00ODVkLTgyZDct
ZDE4OGM4MDg1MzA1LzEvZkYzOXR1SFpQQWtvSTk2V3ZkZklpN3cyb2RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jODIyMTUtZTkzOS00ODVkLTgyZDctZDE4OGM4MDg1MzA1
LzEvZkYzOXR1SFpQQWtvSTk2V3ZkZklpN3cyb2RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvI1gS2X
8Zbe/9QQo4MPmh97ECEUgP8RAMHdHGVJASXd9LQ14IGkqRuFD5v5Al283K7LFhSk
V812AQhJzOiCk1GirwFaEqtFksBFqldFJYVQqAJ03AWccJA77djsX3BH+d2wW7n8
ahAwHH5fb8QiQY8q7gp174dk2lk9sdLXcYBx0BgMI/gAffBDy3DnK4icbga7d3un
XTUCh5PE32ZDG5mRjk6FEbDTrlg6bfvBom2wzyen6UrTpT6nRu7U6EZ3XaeccN2M
eATsHWcl/P6FprZIgREI7u8CfNHFYgXoXqUwdTN7tMR+9wFQu9P1H5p4KPbWLJVu
YTbOu9rG8FU16Q==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:14 2025 by rpki-client