Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
File: FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft (raw, json)
Hash identifier: RtbAIXr0MqxZXVegxy0kFrbiDXbhkoXVAxmwnmWcivA=
Subject key identifier: 6C:2A:78:E0:D3:7C:A6:22:FC:D9:EC:E2:B3:7F:60:6F:30:AE:81:D8
Authority key identifier: 14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
Certificate issuer: /CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Certificate serial: 01977866089CDA63E1D20E1EF8F12CBA1681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
Manifest number: 0B9B
Signing time: Mon 16 Jun 2025 11:00:42 +0000
Manifest this update: Mon 16 Jun 2025 11:00:42 +0000
Manifest next update: Tue 17 Jun 2025 11:00:42 +0000
Files and hashes: 1: FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl (hash: secuQ/ABq5ZHg5cTOsw3zYc+Xs8UrdCJBb3yqSSk1cw=)
2: XnnmqXJoOR0rO9VDsOL9RjMpoEc.roa (hash: LgD69e+nouQ5z7eZNAgfyUxJCnIL4Pp/DimPZswYsNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:66:08:9c:da:63:e1:d2:0e:1e:f8:f1:2c:ba:16:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Validity
Not Before: Jun 16 11:00:42 2025 GMT
Not After : Jun 17 11:00:42 2025 GMT
Subject: CN=6c2a78e0d37ca622fcd9ece2b37f606f30ae81d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0d:b9:21:01:98:1e:fc:60:14:7f:49:56:a0:
9c:18:bb:18:73:d8:e7:d6:04:e4:5b:f4:a3:6a:32:
65:5a:ed:13:65:61:07:6d:97:07:76:b4:89:e2:5f:
3b:26:11:e9:7d:40:23:b7:bb:9f:96:c0:87:e3:94:
08:5d:45:ac:03:b4:fc:7f:8e:eb:a2:f2:50:52:bb:
a2:37:2c:53:8c:83:d4:23:91:b3:d3:3f:d7:40:b7:
9f:25:25:9f:0d:e1:f9:93:1c:52:f0:b2:b0:9c:19:
61:53:8b:2d:48:a0:a0:6d:c6:cc:f9:0b:5b:47:a1:
c3:6c:8c:84:d6:6d:23:c4:af:0f:43:7d:ea:94:9b:
2c:fe:51:f4:ea:97:46:ec:77:f9:9d:68:8d:f5:13:
fd:c0:34:17:8b:e8:62:f0:82:77:49:20:a8:7d:6c:
c5:8a:f9:bf:d3:61:53:54:58:b0:7e:75:3e:3a:5b:
d3:95:2a:c7:6b:63:77:5a:8a:c1:69:cc:5d:0d:a1:
1a:20:7a:65:e0:e5:16:1f:e3:a7:a6:55:83:48:aa:
ed:e1:e8:4b:af:a8:5c:ba:45:7a:a4:e8:22:26:e6:
15:3c:cb:2b:67:9c:57:37:47:11:f3:05:fc:9f:98:
9d:a9:b0:92:e6:30:60:b3:6e:f1:cf:0c:7c:03:5a:
43:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2A:78:E0:D3:7C:A6:22:FC:D9:EC:E2:B3:7F:60:6F:30:AE:81:D8
X509v3 Authority Key Identifier:
keyid:14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:76:ce:a2:db:67:0f:73:91:9c:9d:b9:86:fb:83:e3:11:62:
9c:4c:52:3c:ba:af:6c:52:95:4e:02:52:3c:0a:af:07:49:f3:
16:ec:d1:f5:be:4e:ac:35:1b:7f:36:28:22:e0:a3:c7:bb:ca:
bb:39:d3:06:ce:8b:25:57:6f:d4:da:fe:74:47:05:69:56:28:
50:f4:3a:93:42:56:77:a4:0e:74:38:19:62:cb:4e:04:da:b5:
2f:49:ff:40:38:50:4e:04:7b:d5:f6:0b:37:d4:8d:97:4d:1d:
f1:f8:0c:68:e9:36:5a:7c:da:a5:88:7e:03:71:03:7c:5f:c4:
b0:ef:84:24:fc:47:c4:68:34:49:c9:69:9c:d0:8c:ec:fe:9d:
95:1a:39:98:b0:31:58:bb:cf:6b:70:f5:f4:3b:3b:88:73:23:
bd:d5:6c:0d:27:b0:2e:33:fc:5a:5f:0d:8e:32:eb:c2:da:12:
40:aa:8c:f4:50:a5:30:96:7f:39:ca:86:7d:01:8d:dd:f1:ac:
e2:57:83:e8:64:ed:ba:27:5b:06:a7:05:30:c6:4d:c9:66:84:
96:20:e0:ab:08:28:d7:fd:6d:8a:44:7e:9a:9a:33:cc:14:d3:
1f:1c:03:75:ac:96:3f:ae:9b:cb:5e:19:6c:ef:cf:e0:29:17:
9a:33:6e:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd4Zgic2mPh0g4e+PEsuhaBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZDY5MjdiNWE3NWI3NjY5YjFmZTJhYzhmZGM3YjYxMzc3
YzkxMDEwHhcNMjUwNjE2MTEwMDQyWhcNMjUwNjE3MTEwMDQyWjAzMTEwLwYDVQQD
Eyg2YzJhNzhlMGQzN2NhNjIyZmNkOWVjZTJiMzdmNjA2ZjMwYWU4MWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4w25IQGYHvxgFH9JVqCcGLsYc9jn
1gTkW/SjajJlWu0TZWEHbZcHdrSJ4l87JhHpfUAjt7uflsCH45QIXUWsA7T8f47r
ovJQUruiNyxTjIPUI5Gz0z/XQLefJSWfDeH5kxxS8LKwnBlhU4stSKCgbcbM+Qtb
R6HDbIyE1m0jxK8PQ33qlJss/lH06pdG7Hf5nWiN9RP9wDQXi+hi8IJ3SSCofWzF
ivm/02FTVFiwfnU+OlvTlSrHa2N3WorBacxdDaEaIHpl4OUWH+OnplWDSKrt4ehL
r6hcukV6pOgiJuYVPMsrZ5xXN0cR8wX8n5idqbCS5jBgs27xzwx8A1pDOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwqeODTfKYi/Nns4rN/YG8wroHYMB8GA1UdIwQY
MBaAFBTWkntadbdmmx/irI/ce2E3fJEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hM2Q4NWUtNDMzNS00MjVhLWIwZjYt
OGY1NGFiMTM0ZDgzLzEvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9hM2Q4NWUtNDMzNS00MjVhLWIwZjYtOGY1NGFiMTM0ZDgz
LzEvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb3bOottn
D3ORnJ25hvuD4xFinExSPLqvbFKVTgJSPAqvB0nzFuzR9b5OrDUbfzYoIuCjx7vK
uznTBs6LJVdv1Nr+dEcFaVYoUPQ6k0JWd6QOdDgZYstOBNq1L0n/QDhQTgR71fYL
N9SNl00d8fgMaOk2WnzapYh+A3EDfF/EsO+EJPxHxGg0SclpnNCM7P6dlRo5mLAx
WLvPa3D19Ds7iHMjvdVsDSewLjP8Wl8NjjLrwtoSQKqM9FClMJZ/OcqGfQGN3fGs
4leD6GTtuidbBqcFMMZNyWaEliDgqwgo1/1tikR+mpozzBTTHxwDdayWP66by14Z
bO/P4CkXmjNuFQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 16:32:27 2025 by rpki-client