Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
File: FPt8Mzas1BidP6xjmigNmwAg8pg.mft (raw, json)
Hash identifier: y0VDfMYtlBZsNqzFIlWMhKQ2Sswo/7j8xnCHA3ZNxJE=
Subject key identifier: 33:BC:F1:88:3F:DD:70:34:E3:F4:7F:74:17:B7:DF:FF:49:4F:F8:03
Authority key identifier: 14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98
Certificate issuer: /CN=14fb7c3336acd4189d3fac639a280d9b0020f298
Certificate serial: 01976CCF9FCA2CB2F815FCC87E7BEF08694B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
Manifest number: 14D3
Signing time: Sat 14 Jun 2025 05:00:35 +0000
Manifest this update: Sat 14 Jun 2025 05:00:35 +0000
Manifest next update: Sun 15 Jun 2025 05:00:35 +0000
Files and hashes: 1: FPt8Mzas1BidP6xjmigNmwAg8pg.crl (hash: C/Fbpf1awnYnyxjHfUQTSeHbqbclAmHym5KarHrGs+A=)
2: Jan-36Lo7cls_qlYXAYwCHL-IM0.roa (hash: 9QKHqIJMi/8WyyfdqnXT2xQCCgDbraKMeYqVzfnxL6A=)
3: rrdEpfsB8Gg5zdzJ-FXk4BiB3TE.roa (hash: 4ZmwtT19+5Iz0mku0LqIMr+TT72kqcPqLFHR2qlNxGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:9f:ca:2c:b2:f8:15:fc:c8:7e:7b:ef:08:69:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14fb7c3336acd4189d3fac639a280d9b0020f298
Validity
Not Before: Jun 14 05:00:35 2025 GMT
Not After : Jun 15 05:00:35 2025 GMT
Subject: CN=33bcf1883fdd7034e3f47f7417b7dfff494ff803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8f:bf:2e:84:06:d6:59:63:1a:32:b2:b4:a7:
d6:cb:5b:33:7e:36:e6:d7:31:a8:15:b9:17:f9:d9:
89:59:76:83:8a:33:b2:c8:1e:b1:04:a8:43:86:a7:
37:c4:88:ec:1a:67:15:45:1e:33:97:56:6e:20:e8:
21:5e:d6:22:a4:eb:b8:44:08:84:b3:3c:0a:ab:6e:
8c:36:43:5d:34:99:ac:b6:ac:aa:fa:f9:44:33:26:
cf:ca:1d:60:02:d6:0f:38:48:5c:83:6a:84:27:5d:
ea:7e:7c:36:f0:27:d9:28:0d:8e:3d:8f:6d:2f:7c:
29:e2:ac:8c:98:2c:7a:98:94:fd:93:a1:0e:02:9a:
4d:a8:7b:be:57:aa:27:34:67:90:05:7b:87:10:06:
cd:16:85:cc:56:2e:08:19:56:b4:75:a2:81:df:0c:
28:c2:1a:42:d1:d1:7f:c4:b8:d0:68:21:99:c6:6c:
d7:a5:6e:33:94:bb:b6:b3:d9:a6:1a:b1:32:8e:19:
cf:62:4c:2b:f5:75:e9:21:82:bf:93:bb:ab:6c:98:
4f:89:b3:92:6f:29:dd:f3:5e:da:67:60:da:68:42:
59:cf:aa:69:dd:5e:8b:96:a7:72:4a:14:ee:6e:23:
29:a0:cc:62:37:5d:60:c1:7c:09:65:be:11:8d:9f:
e7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BC:F1:88:3F:DD:70:34:E3:F4:7F:74:17:B7:DF:FF:49:4F:F8:03
X509v3 Authority Key Identifier:
keyid:14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:36:2d:3f:6d:8f:bf:5b:f1:33:01:8b:0d:40:6b:c5:97:1f:
ca:bf:56:db:61:34:90:a9:61:31:4e:66:f5:70:f4:e7:97:65:
bb:a5:71:0b:b5:37:a6:e5:87:7f:fa:43:d0:9a:8d:42:a7:d5:
61:56:c2:06:99:80:96:7a:eb:c4:26:41:f3:76:2c:1d:2d:88:
a7:dc:b4:b9:c4:44:2b:7c:a3:06:e7:71:7d:3e:1a:64:62:5e:
a7:59:08:b7:66:f5:2c:70:90:5c:2e:30:ee:59:4c:8a:30:41:
9f:dc:78:20:c8:2c:d2:b6:cc:37:c0:ea:0a:de:45:44:df:37:
77:81:c3:35:25:33:46:be:b0:cc:bb:f8:0f:06:63:2d:66:b3:
74:56:19:05:ee:ab:92:7d:e3:b5:5b:8e:f8:f4:ac:5c:fc:bb:
e8:6c:ee:2f:77:8c:84:a4:da:e0:82:b2:2e:0c:9c:8a:48:ad:
3b:66:5a:2f:ad:51:a8:d1:12:b6:93:70:12:59:96:52:64:6d:
b9:bc:cb:10:84:a9:74:d5:00:68:db:3c:3f:25:49:a1:bd:01:
26:b4:6e:e4:fc:71:1a:4d:83:7b:ad:b8:12:73:83:8e:cf:3e:
d8:4d:a3:db:f0:ee:a6:7b:90:59:e1:32:88:73:f5:30:e2:d9:
37:26:37:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz5/KLLL4FfzIfnvvCGlLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZmI3YzMzMzZhY2Q0MTg5ZDNmYWM2MzlhMjgwZDliMDAy
MGYyOTgwHhcNMjUwNjE0MDUwMDM1WhcNMjUwNjE1MDUwMDM1WjAzMTEwLwYDVQQD
EygzM2JjZjE4ODNmZGQ3MDM0ZTNmNDdmNzQxN2I3ZGZmZjQ5NGZmODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54+/LoQG1lljGjKytKfWy1szfjbm
1zGoFbkX+dmJWXaDijOyyB6xBKhDhqc3xIjsGmcVRR4zl1ZuIOghXtYipOu4RAiE
szwKq26MNkNdNJmstqyq+vlEMybPyh1gAtYPOEhcg2qEJ13qfnw28CfZKA2OPY9t
L3wp4qyMmCx6mJT9k6EOAppNqHu+V6onNGeQBXuHEAbNFoXMVi4IGVa0daKB3wwo
whpC0dF/xLjQaCGZxmzXpW4zlLu2s9mmGrEyjhnPYkwr9XXpIYK/k7urbJhPibOS
bynd817aZ2DaaEJZz6pp3V6LlqdyShTubiMpoMxiN11gwXwJZb4RjZ/nvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDO88Yg/3XA04/R/dBe33/9JT/gDMB8GA1UdIwQY
MBaAFBT7fDM2rNQYnT+sY5ooDZsAIPKYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlB0OE16YXMxQmlkUDZ4am1pZ05td0FnOHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi82NGRmOGUtNGIwNC00MjIzLTg0Njct
OTkzOWRmMWQwZDA5LzEvRlB0OE16YXMxQmlkUDZ4am1pZ05td0FnOHBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi82NGRmOGUtNGIwNC00MjIzLTg0NjctOTkzOWRmMWQwZDA5
LzEvRlB0OE16YXMxQmlkUDZ4am1pZ05td0FnOHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDYtP22P
v1vxMwGLDUBrxZcfyr9W22E0kKlhMU5m9XD055dlu6VxC7U3puWHf/pD0JqNQqfV
YVbCBpmAlnrrxCZB83YsHS2Ip9y0ucREK3yjBudxfT4aZGJep1kIt2b1LHCQXC4w
7llMijBBn9x4IMgs0rbMN8DqCt5FRN83d4HDNSUzRr6wzLv4DwZjLWazdFYZBe6r
kn3jtVuO+PSsXPy76GzuL3eMhKTa4IKyLgycikitO2ZaL61RqNEStpNwElmWUmRt
ubzLEISpdNUAaNs8PyVJob0BJrRu5PxxGk2De624EnODjs8+2E2j2/DupnuQWeEy
iHP1MOLZNyY3Ww==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:15:29 2025 by rpki-client