Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
File: fTssMztylVesC-AnQLIiltgCv4E.mft (raw, json)
Hash identifier: uUH4+hZ9vrYCV8jrIorgzMid/6F3GoQ+6oz8cohBWXI=
Subject key identifier: 61:91:A1:34:95:96:57:DA:01:F8:82:96:BB:76:9B:26:4B:A4:FC:1D
Authority key identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
Certificate issuer: /CN=7d3b2c333b729557ac0be02740b22296d802bf81
Certificate serial: 019674C243FDEBB8B1054DCD601E38B2AA96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
Manifest number: 14E6
Signing time: Sun 27 Apr 2025 01:00:10 +0000
Manifest this update: Sun 27 Apr 2025 01:00:10 +0000
Manifest next update: Mon 28 Apr 2025 01:00:10 +0000
Files and hashes: 1: WqjB7EtZkSL-ePfOxy2nv62eOkA.roa (hash: PG/xFOwvIaW9rUlAX7rZLKuzOPksgvVi2XmtGvzJW70=)
2: fTssMztylVesC-AnQLIiltgCv4E.crl (hash: Ga38Bx9JIiuiseX/1bfT8SXYHQg+U/eZqnOncKSkNZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:43:fd:eb:b8:b1:05:4d:cd:60:1e:38:b2:aa:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3b2c333b729557ac0be02740b22296d802bf81
Validity
Not Before: Apr 27 01:00:10 2025 GMT
Not After : Apr 28 01:00:10 2025 GMT
Subject: CN=6191a134959657da01f88296bb769b264ba4fc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:33:a0:a8:22:a0:49:3f:01:04:fd:0c:db:
6d:dd:2e:e7:93:77:e3:4f:c4:58:0f:7a:14:55:d4:
48:30:cc:6b:8a:72:ba:cb:97:7b:d4:41:c4:5e:63:
04:a5:8d:b5:82:1e:22:1b:5b:7d:3a:bb:d5:ee:03:
c6:0b:27:d5:c1:a2:86:6d:62:68:27:92:c9:1c:63:
ad:db:37:22:d9:ae:cf:6f:96:db:4c:01:f7:2b:ea:
01:f2:1e:57:7f:e7:f7:d6:be:01:73:10:bc:61:a9:
47:8f:47:17:f8:30:0c:64:33:2c:b6:f6:d3:d2:c9:
e3:88:d5:8b:27:f8:6c:8b:5e:88:57:a7:6f:8d:ac:
9a:78:95:aa:e9:34:bd:78:96:bc:18:a9:a2:36:09:
dc:2e:a1:98:d1:75:17:13:99:0d:5d:58:ac:5d:44:
0c:9d:80:cf:30:b6:f2:c4:b8:6d:4f:ce:0d:8b:7b:
b8:9b:3d:0b:4c:6a:6b:11:10:bb:67:ab:1d:1b:9d:
16:6f:c5:15:32:c3:19:1b:c3:90:63:48:f1:b7:37:
fc:19:13:fc:f7:d6:fa:2c:fc:a4:94:ed:7c:97:0e:
b2:49:90:b0:a8:4d:3e:2a:6e:d8:1b:37:ec:3d:58:
4d:c6:5f:3d:5f:2a:d0:82:39:f0:c3:45:8a:c3:7a:
fc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:91:A1:34:95:96:57:DA:01:F8:82:96:BB:76:9B:26:4B:A4:FC:1D
X509v3 Authority Key Identifier:
keyid:7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e4:37:28:31:b1:9e:1f:f6:d7:93:f4:98:4d:2b:6e:13:51:
d2:a8:38:a1:af:4c:4f:dc:72:00:6b:e6:dc:80:7c:60:aa:fa:
99:63:5a:54:99:60:82:f4:b2:9c:93:9d:0c:51:b7:7c:4b:d2:
10:8f:fe:d1:f5:fe:27:97:55:c4:93:9b:6e:ad:0c:c3:de:98:
18:d5:c1:17:5c:52:25:86:1c:e1:5f:5b:22:1b:55:48:f1:39:
77:52:10:c6:56:ad:99:fa:47:d1:14:7e:bc:a4:0c:43:fc:72:
ca:49:be:bc:99:c0:6c:cd:84:7a:04:dc:21:f3:bc:35:1e:ca:
83:c4:1f:68:d9:0d:c5:c7:fb:c1:da:66:ed:58:96:33:87:c0:
5d:c4:ac:e4:36:63:c2:c0:6b:ab:b4:f1:3a:a0:64:18:a8:1d:
ce:03:3a:c4:0b:df:e9:f7:9f:dc:41:e6:c1:c1:9e:f0:b1:cc:
e7:9f:60:ad:b1:78:27:04:72:f9:f3:92:cf:da:d7:39:33:9e:
01:18:41:9d:72:fc:5c:04:c4:f0:ad:10:ae:96:62:f7:16:e4:
83:ba:54:e1:1b:cf:0f:1a:dc:0f:55:92:46:bd:1c:98:fd:de:
09:dd:89:9b:93:58:ed:6a:b3:1c:40:9b:a4:36:82:c5:15:18:
dd:07:6c:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0wkP967ixBU3NYB44sqqWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkM2IyYzMzM2I3Mjk1NTdhYzBiZTAyNzQwYjIyMjk2ZDgw
MmJmODEwHhcNMjUwNDI3MDEwMDEwWhcNMjUwNDI4MDEwMDEwWjAzMTEwLwYDVQQD
Eyg2MTkxYTEzNDk1OTY1N2RhMDFmODgyOTZiYjc2OWIyNjRiYTRmYzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0kzoKgioEk/AQT9DNtt3S7nk3fj
T8RYD3oUVdRIMMxrinK6y5d71EHEXmMEpY21gh4iG1t9OrvV7gPGCyfVwaKGbWJo
J5LJHGOt2zci2a7Pb5bbTAH3K+oB8h5Xf+f31r4BcxC8YalHj0cX+DAMZDMstvbT
0snjiNWLJ/hsi16IV6dvjayaeJWq6TS9eJa8GKmiNgncLqGY0XUXE5kNXVisXUQM
nYDPMLbyxLhtT84Ni3u4mz0LTGprERC7Z6sdG50Wb8UVMsMZG8OQY0jxtzf8GRP8
99b6LPyklO18lw6ySZCwqE0+Km7YGzfsPVhNxl89XyrQgjnww0WKw3r8JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGRoTSVllfaAfiClrt2myZLpPwdMB8GA1UdIwQY
MBaAFH07LDM7cpVXrAvgJ0CyIpbYAr+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlRzc016dHlsVmVzQy1BblFMSWlsdGdDdjRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82YjFiNjQtMjU2NC00N2E3LWIxYzEt
NTI4MzVkYjY1MTJjLzEvZlRzc016dHlsVmVzQy1BblFMSWlsdGdDdjRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82YjFiNjQtMjU2NC00N2E3LWIxYzEtNTI4MzVkYjY1MTJj
LzEvZlRzc016dHlsVmVzQy1BblFMSWlsdGdDdjRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuQ3KDGx
nh/215P0mE0rbhNR0qg4oa9MT9xyAGvm3IB8YKr6mWNaVJlggvSynJOdDFG3fEvS
EI/+0fX+J5dVxJObbq0Mw96YGNXBF1xSJYYc4V9bIhtVSPE5d1IQxlatmfpH0RR+
vKQMQ/xyykm+vJnAbM2EegTcIfO8NR7Kg8QfaNkNxcf7wdpm7ViWM4fAXcSs5DZj
wsBrq7TxOqBkGKgdzgM6xAvf6fef3EHmwcGe8LHM559grbF4JwRy+fOSz9rXOTOe
ARhBnXL8XATE8K0QrpZi9xbkg7pU4RvPDxrcD1WSRr0cmP3eCd2Jm5NY7WqzHECb
pDaCxRUY3Qdslw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:41:10 2025 by rpki-client