Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
File: FmVeVZX1o8BxwSsXnbknncfbCRM.mft (raw, json)
Hash identifier: MqJf9sVRyP3v+qF4W0FIJ96ZQqhC7BTHv9z5Lkfk6Mo=
Subject key identifier: 02:E8:4D:D7:BF:A1:BC:E6:DE:C0:CB:81:12:8E:51:FE:E4:94:15:1F
Authority key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
Certificate issuer: /CN=16655e5595f5a3c071c12b179db9279dc7db0913
Certificate serial: 0196918343700D803A1D9E834232BF473502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
Manifest number: 0E33
Signing time: Fri 02 May 2025 15:00:20 +0000
Manifest this update: Fri 02 May 2025 15:00:20 +0000
Manifest next update: Sat 03 May 2025 15:00:20 +0000
Files and hashes: 1: ECVhbk7HslDK7Yab6tRyfcUTM-w.roa (hash: Zu9vU6DdogZHy9494u0UUYh7x1SUMPG2Ju9mrOac5EY=)
2: FmVeVZX1o8BxwSsXnbknncfbCRM.crl (hash: gX/HF+TKyjxgjWN21C2lNQIBgGopJbnwPzBXCWEfk/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:83:43:70:0d:80:3a:1d:9e:83:42:32:bf:47:35:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16655e5595f5a3c071c12b179db9279dc7db0913
Validity
Not Before: May 2 15:00:20 2025 GMT
Not After : May 3 15:00:20 2025 GMT
Subject: CN=02e84dd7bfa1bce6dec0cb81128e51fee494151f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a9:15:73:1b:43:f2:a3:a1:dc:3d:01:a3:36:
06:4e:41:69:c8:fe:cf:18:49:54:b7:62:d2:83:c6:
8c:4e:c3:7f:96:1e:d8:e4:b4:28:66:a2:a7:59:4b:
53:12:88:3d:c9:1a:3b:75:cc:c5:22:95:a6:5d:09:
a4:9a:64:de:51:c6:f6:fb:cb:6e:d2:66:02:1c:e7:
e4:2e:1d:7c:e6:ef:24:39:df:84:75:53:a7:af:49:
9c:7d:f5:61:9c:fb:14:68:0f:af:a4:b5:ab:3a:10:
af:34:80:09:b4:3b:d6:34:33:c9:90:47:8b:83:cf:
93:74:ee:e8:c6:8c:c9:59:4a:f3:79:eb:d1:43:cd:
a9:cf:a7:30:6b:40:47:6c:39:96:eb:64:95:de:f4:
66:25:6c:b6:7c:e7:2e:a6:88:92:8d:6d:02:a5:c0:
c0:aa:74:3b:2d:dd:49:da:d8:ed:a6:5a:bc:ba:db:
9a:8b:16:02:43:01:ed:27:7a:b9:74:31:bd:65:cc:
4f:9e:a6:75:9a:dc:b9:a1:96:5a:a7:8e:ee:fc:d8:
46:64:01:4e:f8:0b:9b:91:a7:46:63:05:a6:60:db:
b8:c2:53:40:06:7c:8e:8e:62:a1:bc:b4:d3:07:d5:
fc:16:51:55:a0:2c:38:26:9f:d9:db:16:03:cc:d4:
28:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E8:4D:D7:BF:A1:BC:E6:DE:C0:CB:81:12:8E:51:FE:E4:94:15:1F
X509v3 Authority Key Identifier:
keyid:16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:42:21:41:b2:6b:6b:0a:e7:52:33:fd:0f:99:de:12:b9:87:
01:95:9c:36:5a:89:af:cb:be:b9:73:35:80:88:1c:1e:f7:a0:
c3:6a:ba:72:2e:01:2e:3c:b0:83:e2:00:65:de:46:87:5e:e0:
a4:47:05:a3:9c:6d:62:37:89:d7:74:4e:30:be:0d:53:6a:e5:
1f:bc:b7:a0:cf:51:b0:be:ce:fe:c4:f2:01:c4:d1:04:90:a2:
3f:3e:3e:6f:d3:a1:c9:8e:70:96:28:e2:6f:4c:58:8c:78:8a:
56:f2:70:4a:9c:06:d7:67:23:28:4e:25:ee:e7:a6:f4:ae:7b:
a4:a4:26:47:bf:46:36:ef:52:4f:ce:b8:f4:01:c5:68:39:0f:
00:3d:be:e9:b8:20:7e:96:c4:6e:1c:37:64:0e:06:25:33:b3:
28:88:66:2a:88:06:32:53:f9:d6:4f:05:5e:02:3b:dd:3e:6b:
54:21:e9:b9:6f:12:83:9f:b5:03:b4:f9:83:50:f1:63:ba:44:
29:73:78:d2:da:79:08:22:b0:55:74:0c:1b:44:f4:3f:cd:02:
68:6a:d6:d0:ec:d1:96:ec:55:7d:69:fb:a2:de:57:b5:b1:5d:
7c:84:ca:66:a2:07:a0:e0:7a:63:d4:a1:cc:1c:16:62:ae:78:
be:bc:8a:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaRg0NwDYA6HZ6DQjK/RzUCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NjU1ZTU1OTVmNWEzYzA3MWMxMmIxNzlkYjkyNzlkYzdk
YjA5MTMwHhcNMjUwNTAyMTUwMDIwWhcNMjUwNTAzMTUwMDIwWjAzMTEwLwYDVQQD
EygwMmU4NGRkN2JmYTFiY2U2ZGVjMGNiODExMjhlNTFmZWU0OTQxNTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2akVcxtD8qOh3D0BozYGTkFpyP7P
GElUt2LSg8aMTsN/lh7Y5LQoZqKnWUtTEog9yRo7dczFIpWmXQmkmmTeUcb2+8tu
0mYCHOfkLh185u8kOd+EdVOnr0mcffVhnPsUaA+vpLWrOhCvNIAJtDvWNDPJkEeL
g8+TdO7oxozJWUrzeevRQ82pz6cwa0BHbDmW62SV3vRmJWy2fOcupoiSjW0CpcDA
qnQ7Ld1J2tjtplq8utuaixYCQwHtJ3q5dDG9ZcxPnqZ1mty5oZZap47u/NhGZAFO
+AubkadGYwWmYNu4wlNABnyOjmKhvLTTB9X8FlFVoCw4Jp/Z2xYDzNQomwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALoTde/obzm3sDLgRKOUf7klBUfMB8GA1UdIwQY
MBaAFBZlXlWV9aPAccErF525J53H2wkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82NzE5Y2QtODY0YS00MmYwLTgxOGYt
ZGQ0ODA0ODQwZGQ2LzEvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82NzE5Y2QtODY0YS00MmYwLTgxOGYtZGQ0ODA0ODQwZGQ2
LzEvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHEIhQbJr
awrnUjP9D5neErmHAZWcNlqJr8u+uXM1gIgcHvegw2q6ci4BLjywg+IAZd5Gh17g
pEcFo5xtYjeJ13ROML4NU2rlH7y3oM9RsL7O/sTyAcTRBJCiPz4+b9OhyY5wliji
b0xYjHiKVvJwSpwG12cjKE4l7uem9K57pKQmR79GNu9ST8649AHFaDkPAD2+6bgg
fpbEbhw3ZA4GJTOzKIhmKogGMlP51k8FXgI73T5rVCHpuW8Sg5+1A7T5g1DxY7pE
KXN40tp5CCKwVXQMG0T0P80CaGrW0OzRluxVfWn7ot5XtbFdfITKZqIHoOB6Y9Sh
zBwWYq54vryKAw==
-----END CERTIFICATE-----
Generated at Fri May 2 21:37:12 2025 by rpki-client