Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
File: fiCwNOLEl7GIRIje8QaXJwR2UCk.mft (raw, json)
Hash identifier: C5EhTPlGUz2IvfBFIFYai9cdiX2xo13H+ZCbow4qtKI=
Subject key identifier: 6A:3A:DD:AF:4B:02:13:F9:45:EB:A1:2F:74:DC:3D:2F:5B:47:A6:54
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0196730AF2E61173A1F5AC7BA3BFB6F62EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
Manifest number: 0668
Signing time: Sat 26 Apr 2025 17:00:19 +0000
Manifest this update: Sat 26 Apr 2025 17:00:19 +0000
Manifest next update: Sun 27 Apr 2025 17:00:19 +0000
Files and hashes: 1: EuixT9ldcg3ONH8jn1jySyMuzMQ.roa (hash: cCyIArIo/MtmkGH2yVvTDKe4dI4Gj4OILXluoYwb1cs=)
2: _c7ADB2yCG7ygmEJVKO5UMjX1Mg.roa (hash: wQQa9Mnur4vqn575tKy3l6q/9fmjlstZd96o2yaRPEI=)
3: fiCwNOLEl7GIRIje8QaXJwR2UCk.crl (hash: WhJ7eh2IcsGlLw96E6RjHsjGl3O9EXDHOP6Pj8xNri8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:0a:f2:e6:11:73:a1:f5:ac:7b:a3:bf:b6:f6:2e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Apr 26 17:00:19 2025 GMT
Not After : Apr 27 17:00:19 2025 GMT
Subject: CN=6a3addaf4b0213f945eba12f74dc3d2f5b47a654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c5:ab:22:7f:3a:48:ef:f4:00:68:dd:dd:28:
30:33:1f:7b:17:16:61:55:d0:cd:30:18:93:f1:82:
8f:cd:92:e2:ec:df:7a:8b:dc:30:44:ea:23:51:f2:
a9:4a:96:77:c2:ea:aa:c4:71:04:fd:e6:6c:fd:8a:
ee:3e:97:fd:de:06:fe:ac:ae:9d:e9:48:2f:e5:01:
cc:b1:c7:74:be:2e:69:01:bf:97:17:94:09:d7:03:
50:e1:2c:ca:92:2c:52:89:03:99:fb:95:38:9b:d4:
78:fb:7b:c9:ef:7c:38:97:db:fd:56:11:c2:86:e3:
de:66:f1:ba:b2:86:55:1d:9c:c4:26:58:23:39:ce:
e5:b7:d0:9d:1e:b9:5c:47:81:84:4e:2e:47:a2:23:
ad:60:9e:9a:ee:45:e7:09:97:09:f4:fc:90:b2:64:
cc:14:86:52:13:9e:99:fd:7b:0b:11:68:a7:f2:31:
ba:7a:ca:85:7b:40:77:dc:a4:95:6f:97:86:dc:a9:
ff:05:57:db:1d:0d:48:02:7a:48:8e:24:ae:0e:a2:
f8:e9:fa:24:9e:63:69:2e:dd:34:41:03:0f:55:29:
8b:0e:ed:86:e7:1d:31:8b:1d:f8:95:e4:df:48:91:
fa:c7:bb:ae:f9:26:6e:f7:6b:33:6f:7d:8c:4d:a1:
2a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3A:DD:AF:4B:02:13:F9:45:EB:A1:2F:74:DC:3D:2F:5B:47:A6:54
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:bf:5d:77:c6:98:22:46:e9:1f:6f:3e:89:2a:08:cc:3a:d6:
18:c2:dc:bc:12:ed:7f:d3:04:2e:d1:0f:f1:f8:b7:01:ee:50:
c8:b7:6e:24:31:b4:70:c1:35:f0:9e:6d:6a:81:77:b1:e5:ea:
b8:a7:66:5f:ba:3d:8f:43:91:a8:a5:70:50:f6:b5:2c:0c:c7:
fe:06:bb:4d:91:10:6c:15:4b:84:38:d1:06:63:2f:84:db:92:
90:17:55:ca:8f:cf:8b:70:ed:0a:95:4e:12:8f:ab:e9:95:95:
f6:06:ae:a2:6b:7e:56:69:5c:83:23:cb:e1:04:e3:97:fd:4c:
a5:0b:0e:b5:db:71:23:5a:94:8c:7b:dd:90:91:ba:8a:ed:81:
3b:d6:ef:a3:c0:00:ce:0d:58:86:d9:81:30:1e:de:64:fe:34:
2d:4c:0e:68:03:c9:2e:7e:52:26:2b:84:8a:65:0c:10:a6:9e:
eb:b4:b7:e4:4e:35:0f:ed:b5:25:ed:6b:24:f2:6e:8e:e6:a0:
52:e7:78:9e:64:7f:6c:b9:97:ec:d5:1e:13:91:f2:85:c6:c2:
7f:fb:62:9f:65:d2:b4:f7:12:09:3d:b0:ad:fc:1f:72:bd:fd:
b1:f4:09:65:88:73:0a:f6:86:56:74:90:dc:6a:00:d0:e0:61:
6b:eb:94:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzCvLmEXOh9ax7o7+29i7rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjUwNDI2MTcwMDE5WhcNMjUwNDI3MTcwMDE5WjAzMTEwLwYDVQQD
Eyg2YTNhZGRhZjRiMDIxM2Y5NDVlYmExMmY3NGRjM2QyZjViNDdhNjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMWrIn86SO/0AGjd3SgwMx97FxZh
VdDNMBiT8YKPzZLi7N96i9wwROojUfKpSpZ3wuqqxHEE/eZs/YruPpf93gb+rK6d
6Ugv5QHMscd0vi5pAb+XF5QJ1wNQ4SzKkixSiQOZ+5U4m9R4+3vJ73w4l9v9VhHC
huPeZvG6soZVHZzEJlgjOc7lt9CdHrlcR4GETi5HoiOtYJ6a7kXnCZcJ9PyQsmTM
FIZSE56Z/XsLEWin8jG6esqFe0B33KSVb5eG3Kn/BVfbHQ1IAnpIjiSuDqL46fok
nmNpLt00QQMPVSmLDu2G5x0xix34leTfSJH6x7uu+SZu92szb32MTaEqlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGo63a9LAhP5ReuhL3TcPS9bR6ZUMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACb9dd8aY
IkbpH28+iSoIzDrWGMLcvBLtf9MELtEP8fi3Ae5QyLduJDG0cME18J5taoF3seXq
uKdmX7o9j0ORqKVwUPa1LAzH/ga7TZEQbBVLhDjRBmMvhNuSkBdVyo/Pi3DtCpVO
Eo+r6ZWV9gauomt+VmlcgyPL4QTjl/1MpQsOtdtxI1qUjHvdkJG6iu2BO9bvo8AA
zg1YhtmBMB7eZP40LUwOaAPJLn5SJiuEimUMEKae67S35E41D+21Je1rJPJujuag
Uud4nmR/bLmX7NUeE5HyhcbCf/tin2XStPcSCT2wrfwfcr39sfQJZYhzCvaGVnSQ
3GoA0OBha+uU+g==
-----END CERTIFICATE-----
Generated at Sat Apr 26 22:49:26 2025 by rpki-client