Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
File: Fc09GKyTtW_SsxgAAWXc1swwE4I.mft (raw, json)
Hash identifier: M1ng0yHwoxGfecyIj1TF18xGTzhfdkeSqAk0irreMCA=
Subject key identifier: FB:75:73:51:D0:3B:A7:A1:C4:07:95:AF:67:CC:82:21:32:36:47:2A
Authority key identifier: 15:CD:3D:18:AC:93:B5:6F:D2:B3:18:00:01:65:DC:D6:CC:30:13:82
Certificate issuer: /CN=15cd3d18ac93b56fd2b318000165dcd6cc301382
Certificate serial: 0196876E71F5613C25F2BFB9A41DF439CCB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
Manifest number: 1516
Signing time: Wed 30 Apr 2025 16:01:24 +0000
Manifest this update: Wed 30 Apr 2025 16:01:24 +0000
Manifest next update: Thu 01 May 2025 16:01:24 +0000
Files and hashes: 1: Fc09GKyTtW_SsxgAAWXc1swwE4I.crl (hash: 8c+zdtf0n/WjFaLHkAf0B7CTv3MbWgGOJybvOc/vPII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6e:71:f5:61:3c:25:f2:bf:b9:a4:1d:f4:39:cc:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cd3d18ac93b56fd2b318000165dcd6cc301382
Validity
Not Before: Apr 30 16:01:24 2025 GMT
Not After : May 1 16:01:24 2025 GMT
Subject: CN=fb757351d03ba7a1c40795af67cc82213236472a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c9:87:9f:6f:92:ec:89:09:e6:3d:e4:5b:93:
b4:15:c1:be:29:4c:b7:01:84:56:6b:1e:61:e0:a6:
3d:b3:4e:a6:76:76:d2:78:5a:54:09:1e:05:24:d6:
d7:4b:75:ef:09:0a:2d:e1:c3:46:d8:a1:3d:f9:6b:
58:0e:be:7f:45:a9:9f:e4:05:df:85:24:64:89:b0:
9a:cb:eb:5d:a4:04:94:a7:5d:dd:3f:36:1e:a1:bd:
d5:c2:ed:18:db:a4:25:09:47:80:f7:62:14:47:7c:
52:60:76:a7:43:a9:9e:f5:4e:f8:c0:c5:54:d5:d5:
a6:c2:00:5c:fe:50:1c:37:a7:0c:87:e5:44:27:4e:
1a:d5:1f:38:2c:56:88:40:ee:eb:8b:4e:35:c3:88:
4c:d6:a6:b7:8d:f3:2b:c4:7e:e4:32:dd:00:7a:ac:
04:b5:ce:55:36:d2:ce:50:ff:b6:da:a7:0e:27:78:
a6:9a:8a:07:e0:d6:31:a3:20:d1:7b:cf:98:7f:81:
db:c1:53:29:45:43:f3:5d:1b:48:f6:8a:71:48:db:
ae:07:4d:90:a7:ee:8b:a7:61:9d:fc:63:2d:90:87:
bc:68:44:a8:e4:5c:bd:8e:60:40:27:5d:e0:11:65:
9f:27:2e:1f:2f:c2:57:21:79:78:93:d0:18:21:cd:
a7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:75:73:51:D0:3B:A7:A1:C4:07:95:AF:67:CC:82:21:32:36:47:2A
X509v3 Authority Key Identifier:
keyid:15:CD:3D:18:AC:93:B5:6F:D2:B3:18:00:01:65:DC:D6:CC:30:13:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7c:1a:e0:8c:d8:c1:38:54:de:93:88:5c:62:04:bf:8b:78:
ff:c1:3d:bb:33:76:2b:c0:f0:1f:3a:46:40:f4:e4:48:4f:fb:
58:b1:43:6e:f0:07:fb:e7:fe:78:89:63:96:80:cf:fb:fc:50:
61:dd:fc:a7:9c:bf:03:e0:39:1e:61:41:d6:88:10:23:9c:5d:
63:df:13:b6:3a:47:41:39:53:6b:2b:f9:07:0a:67:ce:cf:f0:
e3:9d:a8:57:c1:8b:f5:67:69:3a:79:95:a7:60:1d:99:ee:ea:
51:95:c8:e5:96:19:a1:8b:6c:69:b1:5d:7d:77:0b:2d:1a:9c:
22:58:d8:0f:e8:93:00:cc:2e:a3:8f:4e:f4:5e:ea:a5:ac:a5:
e3:fb:64:1f:95:37:f2:0d:78:69:bd:c9:c2:cd:c5:c1:a8:a7:
cf:05:f3:7f:c6:bc:9a:c6:14:3d:48:77:04:6e:42:90:b8:40:
c0:ea:82:4f:d8:3b:34:ad:67:9b:22:87:cf:23:ba:4e:ea:ab:
26:ce:35:93:d8:d9:eb:97:8a:49:f8:fc:70:59:f9:35:01:4f:
aa:04:bb:2a:a0:24:23:65:c0:07:30:9f:8c:2b:8d:e3:f7:db:
80:e5:65:81:d8:de:e5:6d:60:d4:21:0b:52:2d:ed:01:64:42:
6b:d9:53:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaHbnH1YTwl8r+5pB30Ocy2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Y2QzZDE4YWM5M2I1NmZkMmIzMTgwMDAxNjVkY2Q2Y2Mz
MDEzODIwHhcNMjUwNDMwMTYwMTI0WhcNMjUwNTAxMTYwMTI0WjAzMTEwLwYDVQQD
EyhmYjc1NzM1MWQwM2JhN2ExYzQwNzk1YWY2N2NjODIyMTMyMzY0NzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8mHn2+S7IkJ5j3kW5O0FcG+KUy3
AYRWax5h4KY9s06mdnbSeFpUCR4FJNbXS3XvCQot4cNG2KE9+WtYDr5/Ramf5AXf
hSRkibCay+tdpASUp13dPzYeob3Vwu0Y26QlCUeA92IUR3xSYHanQ6me9U74wMVU
1dWmwgBc/lAcN6cMh+VEJ04a1R84LFaIQO7ri041w4hM1qa3jfMrxH7kMt0AeqwE
tc5VNtLOUP+22qcOJ3immooH4NYxoyDRe8+Yf4HbwVMpRUPzXRtI9opxSNuuB02Q
p+6Lp2Gd/GMtkIe8aESo5Fy9jmBAJ13gEWWfJy4fL8JXIXl4k9AYIc2n1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPt1c1HQO6ehxAeVr2fMgiEyNkcqMB8GA1UdIwQY
MBaAFBXNPRisk7Vv0rMYAAFl3NbMMBOCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmMwOUdLeVR0V19Tc3hnQUFXWGMxc3d3RTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mMzI2NjktOTc3ZS00MzA5LWE4ZGUt
NDFiYzI4YzFkY2FjLzEvRmMwOUdLeVR0V19Tc3hnQUFXWGMxc3d3RTRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mMzI2NjktOTc3ZS00MzA5LWE4ZGUtNDFiYzI4YzFkY2Fj
LzEvRmMwOUdLeVR0V19Tc3hnQUFXWGMxc3d3RTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3wa4IzY
wThU3pOIXGIEv4t4/8E9uzN2K8DwHzpGQPTkSE/7WLFDbvAH++f+eIljloDP+/xQ
Yd38p5y/A+A5HmFB1ogQI5xdY98TtjpHQTlTayv5Bwpnzs/w452oV8GL9WdpOnmV
p2Adme7qUZXI5ZYZoYtsabFdfXcLLRqcIljYD+iTAMwuo49O9F7qpayl4/tkH5U3
8g14ab3Jws3FwainzwXzf8a8msYUPUh3BG5CkLhAwOqCT9g7NK1nmyKHzyO6Tuqr
Js41k9jZ65eKSfj8cFn5NQFPqgS7KqAkI2XABzCfjCuN4/fbgOVlgdje5W1g1CEL
Ui3tAWRCa9lTxA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:15:40 2025 by rpki-client