Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
File: FZVEc2Bfo00pH7dD2kFeVdaSINY.mft (raw, json)
Hash identifier: zhrugbwiQDtcGTuuSSq9sJwj+7N62Vfh9MorYHXvAY4=
Subject key identifier: 60:9E:F7:51:D4:3A:6C:73:E5:7F:22:3B:29:14:F0:2B:2F:35:3D:AC
Authority key identifier: 15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
Certificate issuer: /CN=15954473605fa34d291fb743da415e55d69220d6
Certificate serial: 0197711ABF83C7AA4FBB34E6FCFE469F1F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
Manifest number: 0771
Signing time: Sun 15 Jun 2025 01:01:07 +0000
Manifest this update: Sun 15 Jun 2025 01:01:07 +0000
Manifest next update: Mon 16 Jun 2025 01:01:07 +0000
Files and hashes: 1: FZVEc2Bfo00pH7dD2kFeVdaSINY.crl (hash: FnLlzYD+xvjzHIM8E8rfbkV8rVsORfRGR42vyQaGot4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:bf:83:c7:aa:4f:bb:34:e6:fc:fe:46:9f:1f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15954473605fa34d291fb743da415e55d69220d6
Validity
Not Before: Jun 15 01:01:07 2025 GMT
Not After : Jun 16 01:01:07 2025 GMT
Subject: CN=609ef751d43a6c73e57f223b2914f02b2f353dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6e:44:36:c1:87:7b:6b:da:a8:70:04:c3:a3:
a4:35:34:80:d5:ab:a1:98:86:7f:7a:c1:a5:9a:fe:
2d:f7:85:57:b6:d4:d0:e4:1e:15:2f:79:1f:b4:de:
ae:94:89:15:76:9c:d7:7b:f8:6e:40:83:d8:ac:72:
79:f3:28:d3:cc:b9:47:8e:ba:6a:09:79:09:2f:34:
3d:75:78:cf:73:32:8b:4c:a8:46:33:05:e4:46:40:
5b:1e:31:28:e5:e0:63:dd:ad:32:b8:df:b8:db:f2:
dd:0f:ad:56:3c:a0:1a:36:d2:5d:7d:69:55:1d:81:
b7:e3:0e:54:d0:2e:a5:e9:5f:a3:37:27:ee:ff:24:
98:d7:cc:58:c5:06:39:e6:84:dd:a6:02:a8:ca:62:
1c:a7:f2:80:60:ac:b0:c0:0f:53:5f:74:8a:36:5e:
ed:13:b4:09:be:5b:82:13:b3:48:02:ef:be:15:09:
85:74:10:d8:a4:76:7f:a0:a5:b9:bd:9b:bc:d9:cd:
4d:35:6a:01:91:08:93:86:a4:7f:73:10:36:07:47:
f9:34:31:3c:79:cb:0a:69:be:73:35:23:8a:3b:37:
09:59:f3:ac:6b:ff:13:31:93:df:1a:27:c7:28:ed:
41:88:04:ed:ed:5b:71:93:ec:b3:70:6c:72:d9:a1:
1d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9E:F7:51:D4:3A:6C:73:E5:7F:22:3B:29:14:F0:2B:2F:35:3D:AC
X509v3 Authority Key Identifier:
keyid:15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7a:a7:0e:ea:e2:27:78:48:7a:8e:b6:7c:6c:9b:10:76:52:
50:53:ac:48:d8:58:63:b0:1d:c9:27:d5:26:f0:15:40:a6:9c:
c0:31:e8:05:24:fc:6a:fb:2e:d1:2e:95:6a:56:f8:67:77:75:
30:21:0d:04:ca:1d:83:2e:b3:e4:24:2a:c5:1c:ea:44:2c:dc:
fb:b1:f5:04:e6:cf:2b:a0:92:e6:2a:96:c1:56:99:97:28:c1:
83:d9:e6:9a:a7:36:88:af:3a:c7:ca:ef:a6:ba:03:65:95:c8:
31:37:ff:09:b5:e1:d1:11:4b:ea:4f:6d:9e:4f:cd:58:33:2c:
7e:f5:24:e3:d3:26:07:c6:a9:64:a8:74:68:89:85:69:49:7a:
fb:27:8d:49:d2:3a:df:81:c3:08:4b:48:30:1a:14:92:b0:d8:
df:c0:d9:76:e3:e8:79:07:5c:b8:28:50:3e:1e:43:c2:35:fa:
a9:27:6c:17:b6:a9:bb:c0:52:a1:7f:54:c1:80:b6:55:2c:22:
9b:7e:a5:2b:c4:90:27:c5:56:01:24:53:70:7b:1a:01:f3:ca:
dd:1c:7f:5e:9f:ef:03:83:1e:f2:fb:88:07:c7:5f:59:54:0e:
3c:5e:fc:a0:22:7e:9f:d3:a9:a8:6f:08:6f:20:71:51:94:f1:
ed:52:fd:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxGr+Dx6pPuzTm/P5Gnx8yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OTU0NDczNjA1ZmEzNGQyOTFmYjc0M2RhNDE1ZTU1ZDY5
MjIwZDYwHhcNMjUwNjE1MDEwMTA3WhcNMjUwNjE2MDEwMTA3WjAzMTEwLwYDVQQD
Eyg2MDllZjc1MWQ0M2E2YzczZTU3ZjIyM2IyOTE0ZjAyYjJmMzUzZGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAym5ENsGHe2vaqHAEw6OkNTSA1auh
mIZ/esGlmv4t94VXttTQ5B4VL3kftN6ulIkVdpzXe/huQIPYrHJ58yjTzLlHjrpq
CXkJLzQ9dXjPczKLTKhGMwXkRkBbHjEo5eBj3a0yuN+42/LdD61WPKAaNtJdfWlV
HYG34w5U0C6l6V+jNyfu/ySY18xYxQY55oTdpgKoymIcp/KAYKywwA9TX3SKNl7t
E7QJvluCE7NIAu++FQmFdBDYpHZ/oKW5vZu82c1NNWoBkQiThqR/cxA2B0f5NDE8
ecsKab5zNSOKOzcJWfOsa/8TMZPfGifHKO1BiATt7Vtxk+yzcGxy2aEdxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCe91HUOmxz5X8iOykU8CsvNT2sMB8GA1UdIwQY
MBaAFBWVRHNgX6NNKR+3Q9pBXlXWkiDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlpWRWMyQmZvMDBwSDdkRDJrRmVWZGFTSU5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84ZTM0MDYtNjMzYy00ZjI5LTk4ZjQt
YWQ2ZjZhNjkzYWM2LzEvRlpWRWMyQmZvMDBwSDdkRDJrRmVWZGFTSU5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84ZTM0MDYtNjMzYy00ZjI5LTk4ZjQtYWQ2ZjZhNjkzYWM2
LzEvRlpWRWMyQmZvMDBwSDdkRDJrRmVWZGFTSU5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHqnDuri
J3hIeo62fGybEHZSUFOsSNhYY7AdySfVJvAVQKacwDHoBST8avsu0S6Valb4Z3d1
MCENBModgy6z5CQqxRzqRCzc+7H1BObPK6CS5iqWwVaZlyjBg9nmmqc2iK86x8rv
proDZZXIMTf/CbXh0RFL6k9tnk/NWDMsfvUk49MmB8apZKh0aImFaUl6+yeNSdI6
34HDCEtIMBoUkrDY38DZduPoeQdcuChQPh5DwjX6qSdsF7apu8BSoX9UwYC2VSwi
m36lK8SQJ8VWASRTcHsaAfPK3Rx/Xp/vA4Me8vuIB8dfWVQOPF78oCJ+n9OpqG8I
byBxUZTx7VL9/w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:35:33 2025 by rpki-client