Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
File: FczgYdJAjZqPayuUFi0fdPrD3Kw.mft (raw, json)
Hash identifier: dv1eNuEXsiHtYj2SZPZca7vHdGh5rEw7C6fEH6OUgGw=
Subject key identifier: 01:8E:62:7E:85:00:3F:0D:88:50:EF:54:94:9D:C9:60:FB:0A:0A:6D
Authority key identifier: 15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC
Certificate issuer: /CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac
Certificate serial: 019688B7B87516A2C9B2610D2EA76F94CDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
Manifest number: 0E3C
Signing time: Wed 30 Apr 2025 22:01:03 +0000
Manifest this update: Wed 30 Apr 2025 22:01:03 +0000
Manifest next update: Thu 01 May 2025 22:01:03 +0000
Files and hashes: 1: AHAoAS0NTz8rAfdAi1-FKZQiZzo.roa (hash: UPpJLytuKjP0PEtk9/ACh8gURBOrfTZUj6sBll9GGNE=)
2: FczgYdJAjZqPayuUFi0fdPrD3Kw.crl (hash: 8u7UZOTiIZ7ZvHYXKmdILl6khvsfti4xk0AwnHDlIXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:b7:b8:75:16:a2:c9:b2:61:0d:2e:a7:6f:94:cd:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac
Validity
Not Before: Apr 30 22:01:03 2025 GMT
Not After : May 1 22:01:03 2025 GMT
Subject: CN=018e627e85003f0d8850ef54949dc960fb0a0a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:56:33:c8:45:db:4d:f1:52:84:0f:6b:2a:
45:b3:e5:20:7a:25:fa:fa:0c:b4:61:30:1b:be:6c:
8b:83:60:50:e0:0a:ba:0d:81:62:c2:c0:c0:39:82:
17:6d:98:7d:09:a9:6e:18:69:9a:6d:d0:b9:a4:be:
05:6c:9d:f9:eb:ef:d8:b5:64:6c:eb:b9:21:93:4f:
4c:e8:d2:4f:a3:8a:a5:04:f6:a0:a7:56:5c:79:6a:
a5:74:30:5f:70:e2:b0:df:48:cb:da:cf:9d:51:52:
3b:89:56:f0:f8:e7:5d:3d:2f:be:99:af:df:fd:91:
aa:f7:c9:04:20:46:c6:ae:c3:32:28:70:c6:40:1b:
63:94:9d:cd:f3:09:d6:f0:f8:e2:db:02:b1:a7:73:
6d:0a:dd:7f:b1:2d:11:e4:1b:6d:f9:29:56:ee:16:
4a:a2:85:58:c2:be:b3:51:39:72:64:66:52:b7:96:
86:69:3d:17:dd:a9:c6:d3:57:8f:25:c4:e8:04:bf:
64:cd:a0:a2:53:2f:2e:60:95:92:03:ac:35:cd:69:
69:b2:1c:f6:88:cf:7d:5b:a4:ad:53:6f:cf:b1:a0:
6d:c7:e8:9d:b9:f1:29:4f:c3:2e:6f:b6:88:51:e8:
92:90:90:96:e5:0e:51:76:59:86:2f:ca:fe:f3:09:
30:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8E:62:7E:85:00:3F:0D:88:50:EF:54:94:9D:C9:60:FB:0A:0A:6D
X509v3 Authority Key Identifier:
keyid:15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:63:75:dd:7a:5f:c1:c0:b0:04:51:00:db:22:75:3b:cb:4c:
08:04:d2:b0:fc:68:45:33:a6:be:b6:40:56:be:88:b9:d6:b1:
87:97:46:1c:88:69:c1:69:13:e4:ce:59:c3:33:3e:03:27:d0:
62:c1:44:c8:3d:c8:a4:c5:dc:1b:05:f3:4c:40:50:89:c5:c8:
c8:bf:77:60:44:50:52:56:8d:83:ee:96:eb:ab:a7:f6:04:f2:
1e:fd:6d:50:7c:95:b9:73:0e:78:f9:25:a8:98:40:e6:bc:ce:
ef:f2:c2:15:9b:6c:34:cd:f8:d5:2c:d6:31:0e:8d:2a:1e:cc:
02:da:fc:ae:db:de:2e:ea:17:9c:27:ef:35:1a:55:5d:45:75:
40:0d:40:5a:eb:0d:4f:77:85:0b:0f:ba:5f:f0:47:fa:78:bc:
4e:2c:91:5c:b4:0c:9a:37:f9:fc:80:ba:18:e7:3b:b0:87:15:
71:8c:d4:e4:fb:ea:93:66:1e:70:b5:ad:1b:46:df:ee:74:7a:
3b:2e:cc:ee:3f:0a:16:92:b6:c4:02:54:32:8f:30:27:b5:c6:
44:73:93:9d:44:08:0f:6e:fc:07:f5:ee:8a:2e:90:15:30:fe:
95:90:53:9d:f0:e1:d1:9f:dd:b7:8d:ae:df:2a:4c:ae:f3:22:
3c:45:8b:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaIt7h1FqLJsmENLqdvlM3VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Y2NlMDYxZDI0MDhkOWE4ZjZiMmI5NDE2MmQxZjc0ZmFj
M2RjYWMwHhcNMjUwNDMwMjIwMTAzWhcNMjUwNTAxMjIwMTAzWjAzMTEwLwYDVQQD
EygwMThlNjI3ZTg1MDAzZjBkODg1MGVmNTQ5NDlkYzk2MGZiMGEwYTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ5WM8hF203xUoQPaypFs+UgeiX6
+gy0YTAbvmyLg2BQ4Aq6DYFiwsDAOYIXbZh9CaluGGmabdC5pL4FbJ356+/YtWRs
67khk09M6NJPo4qlBPagp1ZceWqldDBfcOKw30jL2s+dUVI7iVbw+OddPS++ma/f
/ZGq98kEIEbGrsMyKHDGQBtjlJ3N8wnW8Pji2wKxp3NtCt1/sS0R5Btt+SlW7hZK
ooVYwr6zUTlyZGZSt5aGaT0X3anG01ePJcToBL9kzaCiUy8uYJWSA6w1zWlpshz2
iM99W6StU2/PsaBtx+idufEpT8Mub7aIUeiSkJCW5Q5RdlmGL8r+8wkwAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGOYn6FAD8NiFDvVJSdyWD7CgptMB8GA1UdIwQY
MBaAFBXM4GHSQI2aj2srlBYtH3T6w9ysMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmN6Z1lkSkFqWnFQYXl1VUZpMGZkUHJEM0t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85YWY4N2MtZTI3Mi00Zjg0LTkxNDMt
NjY4MmY3ODI3ZGYwLzEvRmN6Z1lkSkFqWnFQYXl1VUZpMGZkUHJEM0t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85YWY4N2MtZTI3Mi00Zjg0LTkxNDMtNjY4MmY3ODI3ZGYw
LzEvRmN6Z1lkSkFqWnFQYXl1VUZpMGZkUHJEM0t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmN13Xpf
wcCwBFEA2yJ1O8tMCATSsPxoRTOmvrZAVr6Iudaxh5dGHIhpwWkT5M5ZwzM+AyfQ
YsFEyD3IpMXcGwXzTEBQicXIyL93YERQUlaNg+6W66un9gTyHv1tUHyVuXMOePkl
qJhA5rzO7/LCFZtsNM341SzWMQ6NKh7MAtr8rtveLuoXnCfvNRpVXUV1QA1AWusN
T3eFCw+6X/BH+ni8TiyRXLQMmjf5/IC6GOc7sIcVcYzU5Pvqk2YecLWtG0bf7nR6
Oy7M7j8KFpK2xAJUMo8wJ7XGRHOTnUQID278B/Xuii6QFTD+lZBTnfDh0Z/dt42u
3ypMrvMiPEWLFg==
-----END CERTIFICATE-----
Generated at Thu May 1 08:08:30 2025 by rpki-client