Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
File: FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft (raw, json)
Hash identifier: 0y1cUVtApykdlY6aMureca7nIOhkwe8tMVXaMXdxx38=
Subject key identifier: FF:87:27:2A:E7:FE:76:75:74:7F:D6:09:32:41:3B:49:DB:86:FD:30
Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
Certificate issuer: /CN=1492a20754c9a7650b8279b9390689c469d73595
Certificate serial: 01965680EDEE10A37B2A29EA5E6CBDB5D25A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 04:00:12 +0000
Manifest this update: Mon 21 Apr 2025 04:00:12 +0000
Manifest next update: Tue 22 Apr 2025 04:00:12 +0000
Files and hashes: 1: 2A_3tfsfLBfsIjkj25Wq_P7GURU.roa (hash: 4w2SNRAXRMcEZVSqmqD0dMjfx/4HpwrZYp/R521drvc=)
2: FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl (hash: x1rRDg1KhkBowbDqkFOW7EWtzottAfmnVwldHZ2fLKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:80:ed:ee:10:a3:7b:2a:29:ea:5e:6c:bd:b5:d2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595
Validity
Not Before: Apr 21 04:00:12 2025 GMT
Not After : Apr 22 04:00:12 2025 GMT
Subject: CN=ff87272ae7fe7675747fd60932413b49db86fd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:67:37:d4:11:89:6f:8b:ba:02:ef:6b:90:27:
f2:6f:8b:47:ef:61:b6:61:90:81:d0:41:fa:22:e5:
87:3c:ef:37:20:c9:db:08:ae:08:b1:5a:d9:c0:be:
5d:30:a0:af:12:66:fe:31:25:0b:04:92:f8:7e:bc:
03:7a:b1:6d:73:54:b4:5f:7c:0a:96:4b:83:a0:4c:
06:c0:f8:75:85:5d:c3:8d:d3:e4:1f:d6:dd:64:14:
64:1a:b4:7e:c5:07:3b:da:6d:2e:aa:06:0e:c8:d0:
ea:91:a7:48:75:25:f5:1c:a7:52:8f:b2:ff:3c:2e:
88:71:3b:d9:94:b2:1d:5c:98:db:85:ee:6d:cd:09:
8d:16:06:ac:2e:f2:99:9a:cb:7c:39:a9:f3:ea:76:
27:21:18:68:41:d8:c3:9f:a9:e0:13:66:c1:46:ea:
2b:95:d3:81:ae:04:7b:12:bc:72:50:81:10:03:88:
38:a0:94:35:da:d5:48:51:16:e4:60:18:6e:c7:0f:
2d:37:58:96:9f:11:fc:2c:4a:66:1b:e7:ac:de:b3:
86:58:d2:2a:4f:2a:7e:f7:d7:32:13:7a:05:4e:1a:
15:e2:23:89:3d:22:bd:2a:53:a1:83:d8:e7:64:84:
29:fb:1c:49:47:cd:28:8e:53:4a:fc:91:b9:62:83:
5f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:87:27:2A:E7:FE:76:75:74:7F:D6:09:32:41:3B:49:DB:86:FD:30
X509v3 Authority Key Identifier:
keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:4a:9c:eb:d1:6f:54:ee:87:ef:df:8d:af:54:e2:7a:2d:d4:
09:02:84:7f:c0:58:e5:ee:cf:33:9d:08:f1:94:be:c9:2b:8e:
74:2e:5e:d2:bb:68:86:46:ac:a2:29:cb:41:64:6a:a9:b4:3c:
11:5c:62:d0:50:db:64:24:45:b3:a4:9c:37:02:e0:38:61:5e:
59:3c:43:27:18:ba:27:b9:d2:e4:ec:09:c2:cd:4f:57:12:ad:
f8:ee:e0:4c:2a:2e:ed:ca:b9:95:1c:92:04:20:b6:e3:68:0c:
2c:4f:27:c6:87:44:87:ec:db:10:d0:cd:c5:2f:30:20:17:af:
05:84:86:25:1e:a3:73:69:83:42:05:9c:2a:8e:f3:81:25:43:
1e:8e:4b:b3:6c:df:1d:65:c2:55:df:06:5c:7a:19:69:aa:64:
99:4a:4d:55:9a:35:c2:bb:91:07:23:1c:50:ca:b8:71:25:10:
69:1a:dc:8c:73:b6:5f:db:79:52:30:a3:19:9a:86:b8:97:f2:
9a:04:9a:09:bc:07:30:5c:0f:22:ed:0f:c4:72:24:8a:10:80:
70:42:fe:f6:a8:ba:2b:db:f8:6c:2e:d1:89:d4:5f:90:b3:c1:
f2:5b:97:ca:d7:34:3a:80:53:c1:fc:0c:2f:27:d5:37:2b:1c:
ce:98:1a:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWgO3uEKN7KinqXmy9tdJaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OTJhMjA3NTRjOWE3NjUwYjgyNzliOTM5MDY4OWM0Njlk
NzM1OTUwHhcNMjUwNDIxMDQwMDEyWhcNMjUwNDIyMDQwMDEyWjAzMTEwLwYDVQQD
EyhmZjg3MjcyYWU3ZmU3Njc1NzQ3ZmQ2MDkzMjQxM2I0OWRiODZmZDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42c31BGJb4u6Au9rkCfyb4tH72G2
YZCB0EH6IuWHPO83IMnbCK4IsVrZwL5dMKCvEmb+MSULBJL4frwDerFtc1S0X3wK
lkuDoEwGwPh1hV3DjdPkH9bdZBRkGrR+xQc72m0uqgYOyNDqkadIdSX1HKdSj7L/
PC6IcTvZlLIdXJjbhe5tzQmNFgasLvKZmst8Oanz6nYnIRhoQdjDn6ngE2bBRuor
ldOBrgR7ErxyUIEQA4g4oJQ12tVIURbkYBhuxw8tN1iWnxH8LEpmG+es3rOGWNIq
Typ+99cyE3oFThoV4iOJPSK9KlOhg9jnZIQp+xxJR80ojlNK/JG5YoNfuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+HJyrn/nZ1dH/WCTJBO0nbhv0wMB8GA1UdIwQY
MBaAFBSSogdUyadlC4J5uTkGicRp1zWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82MzFlNmEtN2QwNi00ZmExLWJmZDkt
Y2E3NGEwNjdmZWJmLzEvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS82MzFlNmEtN2QwNi00ZmExLWJmZDktY2E3NGEwNjdmZWJm
LzEvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq0qc69Fv
VO6H79+Nr1Tiei3UCQKEf8BY5e7PM50I8ZS+ySuOdC5e0rtohkasoinLQWRqqbQ8
EVxi0FDbZCRFs6ScNwLgOGFeWTxDJxi6J7nS5OwJws1PVxKt+O7gTCou7cq5lRyS
BCC242gMLE8nxodEh+zbENDNxS8wIBevBYSGJR6jc2mDQgWcKo7zgSVDHo5Ls2zf
HWXCVd8GXHoZaapkmUpNVZo1wruRByMcUMq4cSUQaRrcjHO2X9t5UjCjGZqGuJfy
mgSaCbwHMFwPIu0PxHIkihCAcEL+9qi6K9v4bC7RidRfkLPB8luXytc0OoBTwfwM
LyfVNysczpgaeQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:21:10 2025 by rpki-client