Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
File: Fc4GtE2NxD3HQsQN472oqjdE4r0.mft (raw, json)
Hash identifier: 4NDYULdyyMW1Do4ziz7mTFFQqS2h1UDFbJ/J/6bBTbg=
Subject key identifier: 0B:2C:11:65:D1:40:92:54:16:FD:7E:83:1A:E7:CF:2B:3B:8A:F3:2E
Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Certificate serial: 01967AC4B766686CA7B4EE483DCD5E2BD547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
Manifest number: 11A5
Signing time: Mon 28 Apr 2025 05:00:34 +0000
Manifest this update: Mon 28 Apr 2025 05:00:34 +0000
Manifest next update: Tue 29 Apr 2025 05:00:34 +0000
Files and hashes: 1: 52KUDdFP_rD3RmJYr6LMpUPEMmM.roa (hash: usibkDt6eCnub+7x6EZqrdrQgsmz6UQ+udh3uzbsAi0=)
2: Fc4GtE2NxD3HQsQN472oqjdE4r0.crl (hash: E9ihFffRrMhRaudOLix3af1eQgcLSAs4NL/O8ohmRWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:b7:66:68:6c:a7:b4:ee:48:3d:cd:5e:2b:d5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Validity
Not Before: Apr 28 05:00:34 2025 GMT
Not After : Apr 29 05:00:34 2025 GMT
Subject: CN=0b2c1165d140925416fd7e831ae7cf2b3b8af32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:23:1c:47:85:72:4d:fa:2b:b7:b0:fd:62:4e:
a8:7a:1a:ed:ab:49:6b:4e:bd:b1:b3:e3:22:50:02:
04:83:97:26:49:03:1a:5f:a5:67:58:5f:be:62:98:
a1:dd:4c:e1:e0:c5:e9:ec:2d:3b:a0:bb:4c:06:fa:
09:ff:dc:86:26:d2:c0:ae:cd:72:ab:35:bf:4d:0c:
5d:0f:cb:2f:96:d4:bd:b1:3e:f8:1c:46:d8:ea:f6:
8d:cf:47:96:1e:1f:19:c7:66:06:0b:a2:f8:28:2b:
46:3e:f9:36:55:94:ec:f5:30:5c:26:54:12:55:5b:
20:90:d5:61:2c:21:e4:e7:c4:da:56:5a:2c:68:2e:
b4:d8:d6:bf:e6:31:1d:f8:5e:aa:6b:13:21:a0:49:
ca:62:2a:2e:1b:ae:81:2c:6d:40:63:fb:ce:58:8e:
10:09:d8:b3:b7:59:48:20:79:16:fb:37:3e:ec:3e:
a3:92:c7:01:15:c7:65:e1:71:b4:86:71:1e:4c:a2:
64:b2:5c:22:09:25:0c:32:a9:5c:fb:aa:48:01:c0:
bc:f2:eb:7a:c6:bb:02:7e:38:12:21:f2:33:73:a6:
dc:67:60:65:f5:95:c9:d7:79:4b:cc:ad:09:6d:fc:
94:d4:8e:75:19:03:09:68:36:54:a3:39:9d:22:7e:
eb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2C:11:65:D1:40:92:54:16:FD:7E:83:1A:E7:CF:2B:3B:8A:F3:2E
X509v3 Authority Key Identifier:
keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:59:1e:a7:0d:01:0c:cd:31:7a:59:92:c5:87:8d:ba:fd:ed:
2d:1f:8c:50:db:23:bb:0d:7d:2d:8d:3b:ef:e4:18:81:5f:1f:
09:95:31:d9:9d:50:ea:1d:17:cb:96:9b:48:0c:b7:4c:c3:84:
21:eb:f8:63:50:35:e3:55:49:c6:f1:d1:18:8b:b8:5c:ed:54:
92:1b:e8:fa:3d:22:7a:11:07:f5:85:ce:ed:06:e6:92:da:bd:
3a:ec:80:51:d5:96:f8:27:44:27:f7:c9:52:ba:69:ee:c9:e3:
05:44:75:57:67:96:3d:ee:3a:ea:35:24:70:65:55:33:33:ae:
7c:80:3d:6f:0e:30:e2:1d:cd:68:a4:09:95:d2:64:10:07:8f:
15:3b:a1:73:9f:e1:02:6f:b2:2b:3a:39:91:c3:81:ea:18:b9:
6d:69:2e:b0:30:eb:ed:ab:ea:c4:bc:61:52:dc:10:1f:cc:f2:
3e:29:9e:77:15:d8:5d:14:c3:9d:5b:6a:8f:94:27:b8:32:64:
a7:f8:80:45:60:e3:5e:73:63:cb:47:62:29:ec:a7:55:b3:25:
78:ab:ed:39:35:5b:2a:84:b8:9f:28:ff:31:83:18:23:3b:c9:
3b:67:08:7d:f1:3f:79:31:28:9b:39:3d:91:1b:5e:e5:35:0a:
a0:a0:e6:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6xLdmaGyntO5IPc1eK9VHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Y2UwNmI0NGQ4ZGM0M2RjNzQyYzQwZGUzYmRhOGFhMzc0
NGUyYmQwHhcNMjUwNDI4MDUwMDM0WhcNMjUwNDI5MDUwMDM0WjAzMTEwLwYDVQQD
EygwYjJjMTE2NWQxNDA5MjU0MTZmZDdlODMxYWU3Y2YyYjNiOGFmMzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiMcR4VyTfort7D9Yk6oehrtq0lr
Tr2xs+MiUAIEg5cmSQMaX6VnWF++Ypih3Uzh4MXp7C07oLtMBvoJ/9yGJtLArs1y
qzW/TQxdD8svltS9sT74HEbY6vaNz0eWHh8Zx2YGC6L4KCtGPvk2VZTs9TBcJlQS
VVsgkNVhLCHk58TaVlosaC602Na/5jEd+F6qaxMhoEnKYiouG66BLG1AY/vOWI4Q
Cdizt1lIIHkW+zc+7D6jkscBFcdl4XG0hnEeTKJkslwiCSUMMqlc+6pIAcC88ut6
xrsCfjgSIfIzc6bcZ2Bl9ZXJ13lLzK0JbfyU1I51GQMJaDZUozmdIn7rzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAssEWXRQJJUFv1+gxrnzys7ivMuMB8GA1UdIwQY
MBaAFBXOBrRNjcQ9x0LEDeO9qKo3ROK9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmM0R3RFMk54RDNIUXNRTjQ3Mm9xamRFNHIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83YmQ5MjctYjUwNy00MzYzLTlhZGEt
ZGVlNDMxN2Y1YjE0LzEvRmM0R3RFMk54RDNIUXNRTjQ3Mm9xamRFNHIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83YmQ5MjctYjUwNy00MzYzLTlhZGEtZGVlNDMxN2Y1YjE0
LzEvRmM0R3RFMk54RDNIUXNRTjQ3Mm9xamRFNHIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1kepw0B
DM0xelmSxYeNuv3tLR+MUNsjuw19LY077+QYgV8fCZUx2Z1Q6h0Xy5abSAy3TMOE
Iev4Y1A141VJxvHRGIu4XO1Ukhvo+j0iehEH9YXO7Qbmktq9OuyAUdWW+CdEJ/fJ
Urpp7snjBUR1V2eWPe466jUkcGVVMzOufIA9bw4w4h3NaKQJldJkEAePFTuhc5/h
Am+yKzo5kcOB6hi5bWkusDDr7avqxLxhUtwQH8zyPimedxXYXRTDnVtqj5QnuDJk
p/iARWDjXnNjy0diKeynVbMleKvtOTVbKoS4nyj/MYMYIzvJO2cIffE/eTEomzk9
kRte5TUKoKDmaA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:54:35 2025 by rpki-client