Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
File: FXHxV8OlvVz_XRpH1BlkiifjWps.mft (raw, json)
Hash identifier: GQM0mmu3ALsqSGLMjizynPHvtbXuqjwyuo/qv7GgwZo=
Subject key identifier: 5B:B0:90:C5:63:06:F5:E5:DB:1F:F4:3E:76:E3:10:39:64:C3:E3:5D
Authority key identifier: 15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B
Certificate issuer: /CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b
Certificate serial: 01976E504D12C0CBF7EBF2CF0B6EB777FBED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
Manifest number: 14A0
Signing time: Sat 14 Jun 2025 12:00:45 +0000
Manifest this update: Sat 14 Jun 2025 12:00:45 +0000
Manifest next update: Sun 15 Jun 2025 12:00:45 +0000
Files and hashes: 1: FXHxV8OlvVz_XRpH1BlkiifjWps.crl (hash: JFJgi2MBNlxz940TMsb/fR+NyHkA1u3+BMvn0EDt8co=)
2: SbwwM1J0cW50ffjT8dS57JOEZaY.roa (hash: KDW7Xd6V5dGu/swRg1Y5NG1n0fbHWB4uQ3FumDxnAtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:4d:12:c0:cb:f7:eb:f2:cf:0b:6e:b7:77:fb:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b
Validity
Not Before: Jun 14 12:00:45 2025 GMT
Not After : Jun 15 12:00:45 2025 GMT
Subject: CN=5bb090c56306f5e5db1ff43e76e3103964c3e35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a7:a2:12:62:84:87:c7:fa:79:36:e7:8f:1f:
82:55:8e:1c:54:b5:0e:81:24:3c:fc:63:f3:69:3c:
52:f9:64:67:c3:92:24:75:61:e8:ca:cc:71:23:7d:
93:08:c7:d2:69:b4:9e:51:61:73:8b:be:f2:a8:d7:
85:2e:d8:38:6a:1c:3f:17:be:1d:5a:fb:41:a2:e2:
0b:0c:0c:59:c1:65:ad:89:c2:3b:7e:3e:5e:bf:51:
13:9e:b7:ab:df:09:94:2d:01:96:93:26:7d:8e:65:
fd:72:89:74:19:99:89:be:86:06:d6:37:fb:df:b5:
60:15:ac:d5:09:0a:6d:a5:89:dd:f8:ef:d6:11:e3:
52:de:67:c8:f0:14:81:f5:a4:02:6e:fa:c2:68:24:
e5:00:58:e5:dc:5f:a2:1b:8a:5a:30:92:ea:8d:a1:
2a:d9:2a:ff:9e:ae:65:00:95:60:90:bf:fb:51:a6:
b4:3f:13:a2:37:ce:16:95:ce:bf:4f:08:03:bf:c8:
45:24:ea:c9:65:5b:95:6e:16:34:96:c6:c7:b3:ab:
ff:bd:c4:35:85:ae:81:59:2a:13:ce:b8:5c:a6:4a:
9f:98:c8:15:7a:9a:a1:64:9d:9b:6e:80:cc:e7:46:
2c:b8:e0:50:e6:ae:57:90:4f:37:4b:91:42:0d:92:
57:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B0:90:C5:63:06:F5:E5:DB:1F:F4:3E:76:E3:10:39:64:C3:E3:5D
X509v3 Authority Key Identifier:
keyid:15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:33:66:c8:85:33:11:27:80:cb:77:21:b6:52:75:fe:ff:57:
76:aa:15:bc:35:9c:b8:c4:52:21:6e:9b:6d:04:42:98:bd:04:
96:9b:d0:85:6a:78:af:b1:b7:2d:03:91:be:3f:99:2d:d6:31:
1e:af:fa:46:9d:ab:35:fa:e2:5c:85:7c:33:90:5c:1a:9a:ab:
3a:4d:35:d5:ed:8b:96:32:d6:25:ed:ed:88:c0:80:ff:7f:1f:
a6:a5:a0:6b:71:d9:0e:90:f8:0d:84:71:17:1f:57:79:71:aa:
4c:c4:fe:36:81:3c:2d:73:94:39:a0:91:58:c3:42:7b:a9:99:
d2:48:63:6a:10:88:d0:41:a8:87:00:d6:31:4b:2f:0b:fc:d3:
6a:2e:a9:f8:01:ee:99:a7:3e:9f:39:1c:90:31:26:04:f2:b7:
68:57:6c:86:e4:44:98:74:31:54:a3:44:16:58:ba:cc:34:b1:
c8:82:29:82:f5:35:33:db:25:1a:96:8e:ab:bc:29:c9:27:40:
b0:d5:fd:a2:6b:fa:96:47:20:ff:ab:3c:d1:13:33:a1:f5:4d:
5e:18:2c:bb:6b:b0:26:10:8f:04:91:dc:93:6f:30:3c:f9:01:
77:05:2c:dc:e3:ac:8c:09:33:80:36:61:9f:9c:de:e6:91:b5:
52:c5:ec:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduUE0SwMv36/LPC263d/vtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NzFmMTU3YzNhNWJkNWNmZjVkMWE0N2Q0MTk2NDhhMjdl
MzVhOWIwHhcNMjUwNjE0MTIwMDQ1WhcNMjUwNjE1MTIwMDQ1WjAzMTEwLwYDVQQD
Eyg1YmIwOTBjNTYzMDZmNWU1ZGIxZmY0M2U3NmUzMTAzOTY0YzNlMzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqeiEmKEh8f6eTbnjx+CVY4cVLUO
gSQ8/GPzaTxS+WRnw5IkdWHoysxxI32TCMfSabSeUWFzi77yqNeFLtg4ahw/F74d
WvtBouILDAxZwWWticI7fj5ev1ETnrer3wmULQGWkyZ9jmX9col0GZmJvoYG1jf7
37VgFazVCQptpYnd+O/WEeNS3mfI8BSB9aQCbvrCaCTlAFjl3F+iG4paMJLqjaEq
2Sr/nq5lAJVgkL/7Uaa0PxOiN84Wlc6/TwgDv8hFJOrJZVuVbhY0lsbHs6v/vcQ1
ha6BWSoTzrhcpkqfmMgVepqhZJ2bboDM50YsuOBQ5q5XkE83S5FCDZJXKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuwkMVjBvXl2x/0PnbjEDlkw+NdMB8GA1UdIwQY
MBaAFBVx8VfDpb1c/10aR9QZZIon41qbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlhIeFY4T2x2VnpfWFJwSDFCbGtpaWZqV3BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80NjI0ZDItNDg0Yi00YmIyLWFhZDIt
MDJkZGNkNmJkYTkyLzEvRlhIeFY4T2x2VnpfWFJwSDFCbGtpaWZqV3BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi80NjI0ZDItNDg0Yi00YmIyLWFhZDItMDJkZGNkNmJkYTky
LzEvRlhIeFY4T2x2VnpfWFJwSDFCbGtpaWZqV3BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTNmyIUz
ESeAy3chtlJ1/v9XdqoVvDWcuMRSIW6bbQRCmL0ElpvQhWp4r7G3LQORvj+ZLdYx
Hq/6Rp2rNfriXIV8M5BcGpqrOk011e2LljLWJe3tiMCA/38fpqWga3HZDpD4DYRx
Fx9XeXGqTMT+NoE8LXOUOaCRWMNCe6mZ0khjahCI0EGohwDWMUsvC/zTai6p+AHu
mac+nzkckDEmBPK3aFdshuREmHQxVKNEFli6zDSxyIIpgvU1M9slGpaOq7wpySdA
sNX9omv6lkcg/6s80RMzofVNXhgsu2uwJhCPBJHck28wPPkBdwUs3OOsjAkzgDZh
n5ze5pG1UsXsRQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:37:19 2025 by rpki-client