Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
File: FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft (raw, json)
Hash identifier: 2nSDg0rT4Gf7YamHyhOQFbHEST6g8vj67md7St3i+Pw=
Subject key identifier: 3F:8A:B8:39:3E:CB:E2:0A:B6:97:AB:6E:FE:83:D9:D7:5E:B2:9A:5E
Authority key identifier: 15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
Certificate issuer: /CN=1594f00471e248abe394d521e96cba9630d8520e
Certificate serial: 019686FFA573B2AA0455CA26D44CAD5AE157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
Manifest number: 151A
Signing time: Wed 30 Apr 2025 14:00:23 +0000
Manifest this update: Wed 30 Apr 2025 14:00:23 +0000
Manifest next update: Thu 01 May 2025 14:00:23 +0000
Files and hashes: 1: FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl (hash: AwCvhUmSmqYSgWJKCMsmdXZazvuJMm2wPzmMNImukkc=)
2: gWBn1z5wJ573-A_JCrTWoUMVcwU.roa (hash: eRnLQ0R/etEfmVAViRE9PujI2pbJzVSTqcsk+ucvQDM=)
3: gf-ztZnGBMD3gis8NYuG9N92sfw.roa (hash: ehCASISZ7Fk/s7piTjFKUNtpfPH5xpu2BhLg9f7INf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:ff:a5:73:b2:aa:04:55:ca:26:d4:4c:ad:5a:e1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1594f00471e248abe394d521e96cba9630d8520e
Validity
Not Before: Apr 30 14:00:23 2025 GMT
Not After : May 1 14:00:23 2025 GMT
Subject: CN=3f8ab8393ecbe20ab697ab6efe83d9d75eb29a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:74:cb:41:49:ca:c3:b0:64:c2:ea:e8:4f:
f4:26:e4:92:42:35:dc:8d:04:c9:7a:66:df:60:82:
40:be:33:1b:45:55:57:a9:b8:54:33:f5:0e:61:21:
5e:6e:df:1c:82:42:38:87:3b:b5:67:48:51:8f:65:
08:ad:2d:32:10:56:88:51:b1:a4:6c:ab:7e:f7:5b:
2b:23:41:75:4b:65:76:53:44:41:d5:fc:fb:31:d1:
51:1f:75:7b:9f:35:e9:1c:7b:4a:fa:dc:04:32:bf:
1a:d6:b4:d3:33:d2:16:7c:33:9c:0a:69:e5:b8:ab:
a1:20:f4:eb:5f:0c:91:51:02:c2:d1:ed:c2:99:84:
2b:41:66:39:aa:c8:f4:8f:41:46:1b:4b:77:ed:67:
50:ce:25:c3:9b:6d:47:8b:ad:0c:8f:6b:6c:5b:39:
3d:50:61:19:d4:b6:4a:9e:da:c2:34:43:7c:13:47:
c7:a1:14:57:8e:81:90:cd:cb:13:50:dc:dc:19:3d:
ae:0d:24:9d:b5:66:91:1f:8f:1f:2d:6a:9a:c8:55:
40:f6:8d:3b:d5:fb:7f:38:5d:fe:c5:6e:5e:69:00:
b4:8f:4d:72:fe:b7:b3:13:58:d4:e7:cf:ee:0b:a1:
08:22:0a:39:60:91:2f:14:0c:6d:64:0b:50:c6:f7:
5d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8A:B8:39:3E:CB:E2:0A:B6:97:AB:6E:FE:83:D9:D7:5E:B2:9A:5E
X509v3 Authority Key Identifier:
keyid:15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:36:94:43:a5:ca:06:54:3f:ad:70:65:8d:a5:fc:6f:48:b3:
80:06:23:5a:29:09:ab:c1:f2:ab:9d:63:ba:0f:7a:b1:28:68:
d6:75:3d:50:fc:8b:2e:dd:ef:ce:6e:5b:b5:d6:14:8b:83:dd:
8b:a5:3c:2a:c3:e2:68:dc:ea:80:0e:2a:df:4e:03:e0:06:ad:
b2:44:c2:30:eb:a6:6a:94:da:d6:06:4c:6e:04:39:67:8e:f7:
d0:76:a5:58:b0:e8:da:35:83:ae:24:1f:ff:93:96:26:6b:78:
a1:94:a2:26:ed:15:82:55:4e:f9:0e:79:e0:d0:b9:33:ea:53:
65:3e:ad:49:09:85:25:d1:83:27:06:ec:8a:f2:72:c6:0c:d2:
ef:fc:5a:83:a9:a8:23:84:29:23:c8:7c:7d:d0:d4:d6:a5:c7:
82:21:41:30:64:bc:6e:7e:4d:4b:71:96:5a:8f:ed:53:6c:58:
96:c2:23:ea:e5:dd:ed:49:4f:5f:86:ec:66:8d:64:3e:05:f3:
3c:d6:e5:9c:ee:5f:ed:fa:33:43:f0:92:85:6c:65:00:a9:8e:
71:d7:85:3a:38:c8:ae:f0:8c:e5:89:c5:e2:af:3b:f9:ac:fe:
0c:e5:d1:7e:0e:d3:ee:30:2f:07:3c:fe:3e:c5:90:da:58:04:
0f:68:06:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaG/6VzsqoEVcom1EytWuFXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OTRmMDA0NzFlMjQ4YWJlMzk0ZDUyMWU5NmNiYTk2MzBk
ODUyMGUwHhcNMjUwNDMwMTQwMDIzWhcNMjUwNTAxMTQwMDIzWjAzMTEwLwYDVQQD
EygzZjhhYjgzOTNlY2JlMjBhYjY5N2FiNmVmZTgzZDlkNzVlYjI5YTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE50y0FJysOwZMLq6E/0JuSSQjXc
jQTJembfYIJAvjMbRVVXqbhUM/UOYSFebt8cgkI4hzu1Z0hRj2UIrS0yEFaIUbGk
bKt+91srI0F1S2V2U0RB1fz7MdFRH3V7nzXpHHtK+twEMr8a1rTTM9IWfDOcCmnl
uKuhIPTrXwyRUQLC0e3CmYQrQWY5qsj0j0FGG0t37WdQziXDm21Hi60Mj2tsWzk9
UGEZ1LZKntrCNEN8E0fHoRRXjoGQzcsTUNzcGT2uDSSdtWaRH48fLWqayFVA9o07
1ft/OF3+xW5eaQC0j01y/rezE1jU58/uC6EIIgo5YJEvFAxtZAtQxvddvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+KuDk+y+IKtperbv6D2ddesppeMB8GA1UdIwQY
MBaAFBWU8ARx4kir45TVIelsupYw2FIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlpUd0JISGlTS3ZqbE5VaDZXeTZsakRZVWc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83OWE2NGUtMDY5Zi00OTlkLWE2MzEt
OGNkNDJjZWRlMjIwLzEvRlpUd0JISGlTS3ZqbE5VaDZXeTZsakRZVWc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi83OWE2NGUtMDY5Zi00OTlkLWE2MzEtOGNkNDJjZWRlMjIw
LzEvRlpUd0JISGlTS3ZqbE5VaDZXeTZsakRZVWc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACzaUQ6XK
BlQ/rXBljaX8b0izgAYjWikJq8Hyq51jug96sSho1nU9UPyLLt3vzm5btdYUi4Pd
i6U8KsPiaNzqgA4q304D4AatskTCMOumapTa1gZMbgQ5Z4730HalWLDo2jWDriQf
/5OWJmt4oZSiJu0VglVO+Q554NC5M+pTZT6tSQmFJdGDJwbsivJyxgzS7/xag6mo
I4QpI8h8fdDU1qXHgiFBMGS8bn5NS3GWWo/tU2xYlsIj6uXd7UlPX4bsZo1kPgXz
PNblnO5f7fozQ/CShWxlAKmOcdeFOjjIrvCM5YnF4q87+az+DOXRfg7T7jAvBzz+
PsWQ2lgED2gGyg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 23:59:38 2025 by rpki-client