
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
File: Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft (raw, json)
Hash identifier: Ib8dLafYICAJH7VKeZndGJF1xhcaxTdR4668bQI5eGU=
Subject key identifier: FD:54:1F:3D:3E:76:22:09:DC:DA:22:68:03:14:3E:A5:A2:B4:D7:4F
Authority key identifier: 16:ED:CF:EC:9F:6E:32:5B:C2:C3:9D:24:19:3F:83:0F:43:18:31:35
Certificate issuer: /CN=16edcfec9f6e325bc2c39d24193f830f43183135
Certificate serial: 01969416E651F299861E38F89875785CFAD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
Manifest number: 076F
Signing time: Sat 03 May 2025 03:00:50 +0000
Manifest this update: Sat 03 May 2025 03:00:50 +0000
Manifest next update: Sun 04 May 2025 03:00:50 +0000
Files and hashes: 1: Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl (hash: UswX4XZCt9RP67H7iJCZdapH2EVE8uaGMIifWJ4YZAk=)
2: a6yjRQPaEVSmn2Af_50hlyGwo-8.roa (hash: f+GvZNBih0mNs6EfHvNm1HRb2NXRxOiIU+W+BUZl09g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:16:e6:51:f2:99:86:1e:38:f8:98:75:78:5c:fa:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16edcfec9f6e325bc2c39d24193f830f43183135
Validity
Not Before: May 3 03:00:50 2025 GMT
Not After : May 4 03:00:50 2025 GMT
Subject: CN=fd541f3d3e762209dcda226803143ea5a2b4d74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:fd:9b:9c:97:c9:e9:4b:38:b9:c0:e6:6d:
36:43:46:82:d9:59:ea:6a:39:49:47:a0:90:1f:8f:
8e:79:e5:43:90:d2:57:32:be:62:4b:13:7d:92:8d:
c4:f1:93:e4:7b:c2:95:fa:ab:25:f7:a2:c1:e9:27:
97:b1:a6:04:ed:b0:56:f6:4b:cb:44:17:ff:bc:96:
fc:36:95:22:ae:1d:de:dc:70:aa:30:ea:3b:de:c2:
20:28:e5:13:10:fd:07:75:f9:2c:02:62:e4:21:9d:
f0:30:49:63:38:8b:61:da:d0:f8:0b:40:f0:d5:ef:
89:3b:c6:34:2e:ec:2b:dd:46:7b:f0:25:ad:2f:61:
ed:df:4b:8f:c4:8d:af:51:16:1e:dd:b6:b9:de:ad:
87:55:cc:65:b7:75:8e:42:30:22:00:40:e9:1a:6c:
4b:b5:21:21:13:ba:2e:f3:3f:65:d9:d6:8a:83:dd:
be:f9:d9:01:e6:1e:0e:a0:96:9a:5e:9a:d7:ad:6b:
24:c8:86:52:c8:91:69:9a:f5:64:d8:2a:1c:37:a0:
0d:89:eb:7c:43:5c:e1:3a:f5:db:73:ec:33:0b:49:
76:74:6b:db:72:bc:f8:6f:a7:45:a5:3f:a2:52:06:
35:48:36:08:25:a1:b0:52:d9:6d:f9:e9:fc:a5:73:
64:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:54:1F:3D:3E:76:22:09:DC:DA:22:68:03:14:3E:A5:A2:B4:D7:4F
X509v3 Authority Key Identifier:
keyid:16:ED:CF:EC:9F:6E:32:5B:C2:C3:9D:24:19:3F:83:0F:43:18:31:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:03:c0:d7:88:90:7f:f9:3b:f6:fe:c7:56:d5:28:11:fe:ce:
b8:41:d1:8d:67:46:63:9b:15:7b:ce:4d:6a:f8:00:15:a7:39:
32:58:df:57:43:82:4d:f3:11:05:37:de:ab:79:0c:ae:53:e6:
1f:5d:65:d0:b1:29:eb:87:74:01:f2:fa:1d:d6:f1:2e:2b:f0:
f6:5f:00:c7:f2:c0:72:6b:a5:ad:ff:5d:9b:f6:69:22:0d:2e:
ca:d7:d7:0b:6c:5c:bc:49:11:99:42:96:f8:00:ed:3a:a5:e9:
33:72:22:7f:e1:53:69:2b:8c:3f:c4:eb:e9:41:3f:7b:00:9f:
9f:1a:df:1e:24:f3:e9:18:c7:fe:af:5b:c8:4e:9d:f6:e1:07:
bc:09:f7:1b:37:c9:73:f8:a0:3e:ac:1c:74:5a:4e:1a:3f:65:
da:16:4d:ee:a4:aa:a9:e0:cd:26:66:f3:b0:ea:5b:32:31:75:
bc:75:75:59:a0:37:6b:25:ff:8f:b8:62:4e:48:7d:d8:34:f6:
ec:c9:57:47:74:7c:94:b3:60:2e:17:a5:0d:09:a8:94:95:93:
3e:90:7e:78:a6:62:49:44:a0:28:21:31:57:58:87:d3:f7:bf:
ca:70:9a:ae:90:c9:0c:8e:0b:a4:fd:9d:24:49:1b:28:6d:41:
f8:88:e1:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaUFuZR8pmGHjj4mHV4XPrYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZWRjZmVjOWY2ZTMyNWJjMmMzOWQyNDE5M2Y4MzBmNDMx
ODMxMzUwHhcNMjUwNTAzMDMwMDUwWhcNMjUwNTA0MDMwMDUwWjAzMTEwLwYDVQQD
EyhmZDU0MWYzZDNlNzYyMjA5ZGNkYTIyNjgwMzE0M2VhNWEyYjRkNzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulX9m5yXyelLOLnA5m02Q0aC2Vnq
ajlJR6CQH4+OeeVDkNJXMr5iSxN9ko3E8ZPke8KV+qsl96LB6SeXsaYE7bBW9kvL
RBf/vJb8NpUirh3e3HCqMOo73sIgKOUTEP0HdfksAmLkIZ3wMEljOIth2tD4C0Dw
1e+JO8Y0Luwr3UZ78CWtL2Ht30uPxI2vURYe3ba53q2HVcxlt3WOQjAiAEDpGmxL
tSEhE7ou8z9l2daKg92++dkB5h4OoJaaXprXrWskyIZSyJFpmvVk2CocN6ANiet8
Q1zhOvXbc+wzC0l2dGvbcrz4b6dFpT+iUgY1SDYIJaGwUtlt+en8pXNk8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1UHz0+diIJ3NoiaAMUPqWitNdPMB8GA1UdIwQY
MBaAFBbtz+yfbjJbwsOdJBk/gw9DGDE1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnUzUDdKOXVNbHZDdzUwa0dULUREME1ZTVRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC81OTExZDUtMTYwZS00NjM1LTkyOTct
NWU1YjA0NjkzYWRjLzEvRnUzUDdKOXVNbHZDdzUwa0dULUREME1ZTVRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC81OTExZDUtMTYwZS00NjM1LTkyOTctNWU1YjA0NjkzYWRj
LzEvRnUzUDdKOXVNbHZDdzUwa0dULUREME1ZTVRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQPA14iQ
f/k79v7HVtUoEf7OuEHRjWdGY5sVe85NavgAFac5MljfV0OCTfMRBTfeq3kMrlPm
H11l0LEp64d0AfL6HdbxLivw9l8Ax/LAcmulrf9dm/ZpIg0uytfXC2xcvEkRmUKW
+ADtOqXpM3Iif+FTaSuMP8Tr6UE/ewCfnxrfHiTz6RjH/q9byE6d9uEHvAn3GzfJ
c/igPqwcdFpOGj9l2hZN7qSqqeDNJmbzsOpbMjF1vHV1WaA3ayX/j7hiTkh92DT2
7MlXR3R8lLNgLhelDQmolJWTPpB+eKZiSUSgKCExV1iH0/e/ynCarpDJDI4LpP2d
JEkbKG1B+Ijh0Q==
-----END CERTIFICATE-----
Generated at Sat May 3 08:53:17 2025 by rpki-client