Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
File: FyKJy7gXn9846fUyyc1ykbT1xC0.mft (raw, json)
Hash identifier: tleMPPgA+x3WjxyZhAqLRliz2woNQLw8Utt41ov2Gn8=
Subject key identifier: BF:2F:19:E5:DE:36:1D:6B:44:7C:F3:B5:56:D8:A9:F6:BA:25:FC:57
Authority key identifier: 17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
Certificate issuer: /CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Certificate serial: 01977C42B29ABF48AF22B41115215013D750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
Manifest number: 0B86
Signing time: Tue 17 Jun 2025 05:00:35 +0000
Manifest this update: Tue 17 Jun 2025 05:00:35 +0000
Manifest next update: Wed 18 Jun 2025 05:00:35 +0000
Files and hashes: 1: FyKJy7gXn9846fUyyc1ykbT1xC0.crl (hash: ReQBtxTpHpWlnS5hLq0Y+UsaAP+XHPhXNKkQmbQKh3E=)
2: ejP-cqngAl2WeEUv13m8XETr7WY.roa (hash: LoPRyo03v+sBUkzNnzQYBljjeo3cKGIRbIW1IcB6h4c=)
3: jRgLBU0x04bcrCqoAsjc1LU66SE.roa (hash: nfzJrFphVt8WQGlI/qwAihviviH5Ky8UyaUYyOFvqY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:42:b2:9a:bf:48:af:22:b4:11:15:21:50:13:d7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Validity
Not Before: Jun 17 05:00:35 2025 GMT
Not After : Jun 18 05:00:35 2025 GMT
Subject: CN=bf2f19e5de361d6b447cf3b556d8a9f6ba25fc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:ea:71:0f:7c:38:85:79:91:73:c9:7e:b9:
45:7b:c7:78:fe:d3:4f:4d:a8:f8:6b:1d:9a:c7:f5:
a4:29:81:a4:96:d7:18:97:f9:59:c6:ba:a4:4a:7d:
be:b3:da:3d:cb:d7:c1:3c:a0:a4:57:37:6c:52:9b:
01:d7:b8:cb:03:be:c8:0d:76:45:a2:d4:c4:bd:cc:
65:1e:9d:06:ea:e9:12:b3:1d:7b:d6:0c:0b:3d:99:
91:48:a7:b8:08:b6:39:e0:ed:b0:6d:c4:cf:5f:c5:
82:d1:cf:74:46:d1:42:ca:a4:24:1f:bf:72:9f:48:
ff:33:e4:b0:3a:cb:d9:3b:58:15:fb:d5:1b:e6:d6:
36:83:39:6a:c5:64:24:a5:27:7b:40:22:87:58:c3:
da:b0:4e:45:73:a8:3a:e7:47:fc:84:fc:05:f5:b0:
ba:33:1d:43:50:41:17:32:d3:92:fb:1b:bd:9f:19:
26:3f:6d:b0:16:b5:85:6f:96:44:c6:09:dc:2f:bb:
0c:5c:60:90:82:bf:30:34:ec:73:c5:c4:d8:ea:f7:
5e:c2:99:d6:96:14:ca:d6:78:d4:a2:f1:a8:56:51:
f7:bf:58:d2:d7:19:fb:d0:22:f6:08:b3:0d:56:38:
47:4b:6b:b8:d5:2a:3d:cb:f1:36:94:fd:79:37:02:
e6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2F:19:E5:DE:36:1D:6B:44:7C:F3:B5:56:D8:A9:F6:BA:25:FC:57
X509v3 Authority Key Identifier:
keyid:17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:16:eb:7d:69:25:1d:ab:47:85:4e:b2:8c:ab:5f:cc:5f:5f:
41:78:29:2d:d3:0d:e2:6d:ce:a2:46:4d:4b:23:a7:df:cc:c6:
00:b4:0a:7b:05:51:84:85:50:f5:79:3f:da:41:bf:5d:b2:7d:
1e:be:dc:d8:0b:b8:a0:d0:ff:43:e3:46:39:43:ac:69:4e:27:
a2:c3:76:80:f6:58:4c:47:8c:4a:5c:99:dd:d5:6f:2f:d4:d2:
7b:ec:ef:10:db:a0:b5:aa:bd:55:ca:0f:61:3d:71:30:31:c4:
f7:51:dc:2f:9d:35:29:69:15:23:33:b8:b9:5f:9a:c4:ef:7f:
1c:86:5b:58:d7:df:6b:de:d7:43:8f:24:69:06:bc:b4:ad:2f:
62:5a:ac:6b:5f:e2:89:58:9f:10:d1:45:24:f8:41:22:1b:6e:
f4:3c:da:a7:72:17:3f:9f:bb:90:1c:5e:96:b6:2d:a8:2e:62:
27:04:4b:73:9f:d9:a8:ec:c6:70:9b:32:97:96:7d:f6:23:05:
3f:80:37:34:f6:0c:d4:e1:54:d4:e8:2e:fb:80:02:30:d4:82:
2e:2a:29:c1:65:51:82:43:3d:fd:73:af:81:3d:f5:fc:69:53:
31:b9:f4:11:80:22:82:1d:c9:39:2d:13:b8:5a:54:94:0b:f8:
07:7c:54:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd8QrKav0ivIrQRFSFQE9dQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MjI4OWNiYjgxNzlmZGYzOGU5ZjUzMmM5Y2Q3MjkxYjRm
NWM0MmQwHhcNMjUwNjE3MDUwMDM1WhcNMjUwNjE4MDUwMDM1WjAzMTEwLwYDVQQD
EyhiZjJmMTllNWRlMzYxZDZiNDQ3Y2YzYjU1NmQ4YTlmNmJhMjVmYzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJXqcQ98OIV5kXPJfrlFe8d4/tNP
Taj4ax2ax/WkKYGkltcYl/lZxrqkSn2+s9o9y9fBPKCkVzdsUpsB17jLA77IDXZF
otTEvcxlHp0G6ukSsx171gwLPZmRSKe4CLY54O2wbcTPX8WC0c90RtFCyqQkH79y
n0j/M+SwOsvZO1gV+9Ub5tY2gzlqxWQkpSd7QCKHWMPasE5Fc6g650f8hPwF9bC6
Mx1DUEEXMtOS+xu9nxkmP22wFrWFb5ZExgncL7sMXGCQgr8wNOxzxcTY6vdewpnW
lhTK1njUovGoVlH3v1jS1xn70CL2CLMNVjhHS2u41So9y/E2lP15NwLmLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8vGeXeNh1rRHzztVbYqfa6JfxXMB8GA1UdIwQY
MBaAFBciicu4F5/fOOn1MsnNcpG09cQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnlLSnk3Z1huOTg0NmZVeXljMXlrYlQxeEMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8yODllMzgtYWM5My00ZThiLWEwOGIt
Zjc0YmFhMTJmZGM5LzEvRnlLSnk3Z1huOTg0NmZVeXljMXlrYlQxeEMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8yODllMzgtYWM5My00ZThiLWEwOGItZjc0YmFhMTJmZGM5
LzEvRnlLSnk3Z1huOTg0NmZVeXljMXlrYlQxeEMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHhbrfWkl
HatHhU6yjKtfzF9fQXgpLdMN4m3OokZNSyOn38zGALQKewVRhIVQ9Xk/2kG/XbJ9
Hr7c2Au4oND/Q+NGOUOsaU4nosN2gPZYTEeMSlyZ3dVvL9TSe+zvENugtaq9VcoP
YT1xMDHE91HcL501KWkVIzO4uV+axO9/HIZbWNffa97XQ48kaQa8tK0vYlqsa1/i
iVifENFFJPhBIhtu9Dzap3IXP5+7kBxelrYtqC5iJwRLc5/ZqOzGcJsyl5Z99iMF
P4A3NPYM1OFU1Ogu+4ACMNSCLiopwWVRgkM9/XOvgT31/GlTMbn0EYAigh3JOS0T
uFpUlAv4B3xUgA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 10:11:45 2025 by rpki-client