Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
File: FqMhIVpNNe0imLBzlx20CIZP02I.mft (raw, json)
Hash identifier: a/4Tzntcyv88RrmkMzILwjq+/zMH12a/kH66ts8zGRc=
Subject key identifier: 4D:83:04:C2:F8:0D:6D:D1:70:03:65:EC:EF:CE:0F:15:4E:06:F2:5D
Authority key identifier: 16:A3:21:21:5A:4D:35:ED:22:98:B0:73:97:1D:B4:08:86:4F:D3:62
Certificate issuer: /CN=16a321215a4d35ed2298b073971db408864fd362
Certificate serial: 019678D641259F7A30C6F550F7C6A1887652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
Manifest number: 0D39
Signing time: Sun 27 Apr 2025 20:00:29 +0000
Manifest this update: Sun 27 Apr 2025 20:00:29 +0000
Manifest next update: Mon 28 Apr 2025 20:00:29 +0000
Files and hashes: 1: FqMhIVpNNe0imLBzlx20CIZP02I.crl (hash: qcu5Ek82n/1mUkx9cFXtiajQTSJ2JYhMQSrX4FaWsGo=)
2: q9FXpjO7WYpYF_PuEvxdIBNk31U.roa (hash: eU80FRwYJKXcKKPdsKCtTdJX7dfta5v66z6KC/V+tqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:41:25:9f:7a:30:c6:f5:50:f7:c6:a1:88:76:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a321215a4d35ed2298b073971db408864fd362
Validity
Not Before: Apr 27 20:00:29 2025 GMT
Not After : Apr 28 20:00:29 2025 GMT
Subject: CN=4d8304c2f80d6dd1700365ecefce0f154e06f25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:14:06:2d:01:0a:4c:f3:3d:54:e5:d2:69:
b5:8f:da:7a:34:ed:68:db:46:2f:3d:df:12:a2:47:
6f:81:8d:bf:56:85:07:1e:50:f2:1b:d0:5c:a8:0c:
87:78:b0:89:19:82:88:86:32:79:a1:fe:2e:14:5d:
a8:3f:4e:10:02:2b:ce:7a:5a:d1:dd:2a:91:da:24:
10:7e:c9:ad:fb:81:2e:d9:c9:2d:03:02:03:d5:4c:
a9:30:ef:9a:1f:65:bd:0f:e1:51:f8:f3:db:12:0c:
e3:fd:c5:a4:b6:7d:17:96:c1:a9:e1:7c:24:4c:cb:
37:94:13:c2:71:41:eb:9e:1c:65:2b:08:3c:d2:5b:
7f:65:a0:c7:94:96:86:58:ff:64:05:3b:78:47:71:
c4:ce:2f:99:be:fb:19:85:e5:cf:d3:aa:69:b4:37:
4f:cd:56:ca:d5:13:49:67:8a:25:d1:6b:78:77:c1:
ed:d8:ac:fd:ae:7c:97:c8:e8:b3:89:32:0a:68:1b:
e9:ec:12:e0:8e:a2:21:e2:c9:c0:88:8f:77:f8:11:
ff:93:94:47:23:54:07:36:f4:47:68:7c:f8:20:b4:
57:3d:68:3f:81:a3:a7:76:46:6a:be:90:61:85:52:
b3:bc:0e:56:b4:c9:62:5f:53:23:76:f2:fd:43:77:
98:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:83:04:C2:F8:0D:6D:D1:70:03:65:EC:EF:CE:0F:15:4E:06:F2:5D
X509v3 Authority Key Identifier:
keyid:16:A3:21:21:5A:4D:35:ED:22:98:B0:73:97:1D:B4:08:86:4F:D3:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9f:ad:9a:1b:da:56:57:50:66:ef:91:72:1a:19:d6:6c:1d:
35:9d:ed:09:0f:ee:d7:2c:55:cf:7f:23:5c:63:c9:de:4f:8f:
5c:1c:be:db:d7:0d:8a:71:12:45:45:07:e5:e0:3e:e4:de:04:
2d:32:a5:2f:5d:3d:d0:ff:ec:4e:25:f3:23:52:bf:1e:f2:58:
e0:dc:e9:55:2c:a8:6b:5c:0e:bc:8d:ee:a3:7b:f7:47:77:8e:
e9:f0:17:10:2d:44:7f:30:62:36:dd:4e:90:4b:67:e2:4e:64:
32:97:03:8d:62:6d:f5:44:8f:2c:3b:c1:cf:06:29:e3:cc:4e:
60:03:1a:28:29:d8:a6:72:43:95:0e:54:a4:2c:19:0f:99:90:
2c:d2:7d:dc:a2:fd:62:70:cd:90:fa:1c:c0:40:88:ce:c6:d8:
64:2b:3b:3d:f7:9a:95:01:5d:af:a3:42:08:75:2f:ba:fd:42:
42:e9:69:c7:12:8e:30:36:ca:7c:11:41:25:43:33:20:4e:23:
99:52:dc:3e:45:39:d7:47:b9:a8:ee:16:d3:94:d6:08:b3:b0:
ba:be:d8:1a:fc:92:12:52:81:b1:87:06:17:1a:2b:96:e0:19:
86:c4:a2:b4:08:7c:ba:90:9a:46:00:42:c8:37:e2:9c:82:0a:
8e:40:ee:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ41kEln3owxvVQ98ahiHZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YTMyMTIxNWE0ZDM1ZWQyMjk4YjA3Mzk3MWRiNDA4ODY0
ZmQzNjIwHhcNMjUwNDI3MjAwMDI5WhcNMjUwNDI4MjAwMDI5WjAzMTEwLwYDVQQD
Eyg0ZDgzMDRjMmY4MGQ2ZGQxNzAwMzY1ZWNlZmNlMGYxNTRlMDZmMjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBQUBi0BCkzzPVTl0mm1j9p6NO1o
20YvPd8SokdvgY2/VoUHHlDyG9BcqAyHeLCJGYKIhjJ5of4uFF2oP04QAivOelrR
3SqR2iQQfsmt+4Eu2cktAwID1UypMO+aH2W9D+FR+PPbEgzj/cWktn0XlsGp4Xwk
TMs3lBPCcUHrnhxlKwg80lt/ZaDHlJaGWP9kBTt4R3HEzi+ZvvsZheXP06pptDdP
zVbK1RNJZ4ol0Wt4d8Ht2Kz9rnyXyOiziTIKaBvp7BLgjqIh4snAiI93+BH/k5RH
I1QHNvRHaHz4ILRXPWg/gaOndkZqvpBhhVKzvA5WtMliX1MjdvL9Q3eYvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2DBML4DW3RcANl7O/ODxVOBvJdMB8GA1UdIwQY
MBaAFBajISFaTTXtIpiwc5cdtAiGT9NiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnFNaElWcE5OZTBpbUxCemx4MjBDSVpQMDJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi85Y2E4YjItNWVjOC00ZDJhLWI5OTQt
YzRjOTRiODgwNzFiLzEvRnFNaElWcE5OZTBpbUxCemx4MjBDSVpQMDJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi85Y2E4YjItNWVjOC00ZDJhLWI5OTQtYzRjOTRiODgwNzFi
LzEvRnFNaElWcE5OZTBpbUxCemx4MjBDSVpQMDJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJ+tmhva
VldQZu+RchoZ1mwdNZ3tCQ/u1yxVz38jXGPJ3k+PXBy+29cNinESRUUH5eA+5N4E
LTKlL1090P/sTiXzI1K/HvJY4NzpVSyoa1wOvI3uo3v3R3eO6fAXEC1EfzBiNt1O
kEtn4k5kMpcDjWJt9USPLDvBzwYp48xOYAMaKCnYpnJDlQ5UpCwZD5mQLNJ93KL9
YnDNkPocwECIzsbYZCs7PfealQFdr6NCCHUvuv1CQulpxxKOMDbKfBFBJUMzIE4j
mVLcPkU510e5qO4W05TWCLOwur7YGvySElKBsYcGFxorluAZhsSitAh8upCaRgBC
yDfinIIKjkDu7Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:55:08 2025 by rpki-client