Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
File: FXaJHPKx2OxWwDvHqW3pWKDgADI.mft (raw, json)
Hash identifier: 6MEKy1/X2IT4mzMttz3tUvpsB9cbZnZMGxn4MCBfDq4=
Subject key identifier: 8C:AF:85:E4:E7:5F:F6:C8:E8:C9:4C:21:6D:C3:27:BE:FD:22:28:C1
Authority key identifier: 15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32
Certificate issuer: /CN=1576891cf2b1d8ec56c03bc7a96de958a0e00032
Certificate serial: 0196748BBE0F8002441F77237B43DD82505B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
Manifest number: 02B7
Signing time: Sun 27 Apr 2025 00:00:37 +0000
Manifest this update: Sun 27 Apr 2025 00:00:37 +0000
Manifest next update: Mon 28 Apr 2025 00:00:37 +0000
Files and hashes: 1: FXaJHPKx2OxWwDvHqW3pWKDgADI.crl (hash: CrMaYQjPp1qZnheKcZ9QU2V8hjQyTsatoafufIHazgs=)
2: pkUWU7hoqn1MoMfV_e6H2-KJHtM.roa (hash: pNc3IO7oSLkfW6eqPtj4TJMlIbS8z2hqWPYZAIIHzEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:be:0f:80:02:44:1f:77:23:7b:43:dd:82:50:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1576891cf2b1d8ec56c03bc7a96de958a0e00032
Validity
Not Before: Apr 27 00:00:37 2025 GMT
Not After : Apr 28 00:00:37 2025 GMT
Subject: CN=8caf85e4e75ff6c8e8c94c216dc327befd2228c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ac:e9:c7:61:19:f1:59:8b:1d:8c:06:dc:96:
88:6d:35:fc:fb:b1:b5:17:28:c0:0a:8c:cc:18:29:
fd:d1:12:b6:8d:3e:d8:c9:2a:b0:e7:84:f3:fb:1c:
9e:11:cd:e8:2b:12:eb:c4:9c:a0:0b:61:42:fe:5b:
f6:6d:20:1a:97:5e:0d:f0:a6:a9:5f:d1:bd:53:42:
bb:01:db:c3:8e:4f:c2:4b:97:55:35:cc:e5:66:75:
7f:cb:16:9c:08:d0:95:2c:03:8d:37:72:6d:aa:4a:
d5:69:d5:3c:e7:1d:5d:bc:c5:3a:44:3f:9a:cb:5a:
d1:3f:35:63:d4:cb:58:49:8e:8a:40:16:8b:7b:4c:
35:92:61:f1:7b:28:d2:b1:5b:5a:7d:f8:9b:1b:c3:
22:41:43:db:fb:31:d6:82:9a:0d:1d:54:7e:19:7c:
7d:35:11:e0:fd:ba:ab:03:2e:58:29:e7:a2:4c:53:
7c:cb:2d:98:9a:f5:03:fb:f3:98:15:b7:34:57:6c:
52:21:d2:fd:1f:64:a0:5f:e0:e2:c2:d5:f2:fe:c8:
e8:59:a3:a6:7a:0c:18:93:27:d0:67:a3:6a:ec:f8:
5a:cd:b1:e9:e6:71:67:8f:47:b4:5c:40:18:ec:90:
65:a3:83:13:c8:e2:db:6a:2c:de:1d:9e:04:0c:b3:
dd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AF:85:E4:E7:5F:F6:C8:E8:C9:4C:21:6D:C3:27:BE:FD:22:28:C1
X509v3 Authority Key Identifier:
keyid:15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a5:61:bc:d0:5b:a4:b1:17:9d:da:f3:76:c6:e2:ec:2d:18:
34:30:ea:17:08:fa:a3:1f:5b:2d:b2:d5:2a:99:c2:83:bd:2c:
ca:e5:0e:20:2d:3b:ed:38:f5:8e:f2:10:2d:04:42:20:ef:50:
6b:63:62:41:14:4c:46:66:05:f7:a8:f9:1a:9f:c3:a6:74:49:
ae:49:a8:fd:b7:63:a9:81:01:5f:b0:22:42:2d:05:95:c6:91:
b4:ad:5d:34:e0:7b:db:05:c5:2e:15:53:ac:08:66:b6:eb:b8:
5c:5f:d4:3d:45:8e:e8:ed:14:64:05:f7:a0:61:11:04:ab:01:
c6:e6:b7:d2:8b:00:5a:70:91:0c:36:7e:46:e6:bf:e2:89:b2:
a2:aa:9e:ce:6c:1f:93:f7:11:05:3b:b2:a1:31:7c:7d:0f:5a:
1a:4d:50:61:1d:7f:bc:28:82:a1:43:36:98:94:23:8f:87:3c:
1a:49:ff:12:c9:7e:9e:f7:8a:ca:e6:c7:7a:b0:41:70:1e:fb:
d5:56:ef:58:85:1a:83:d4:12:96:8e:c7:b9:f5:bb:1d:be:5a:
99:2d:d8:5e:c2:59:8b:b0:e3:2b:e9:94:df:18:2f:1e:e7:40:
42:ef:47:7e:a7:5b:b2:63:f4:ea:7f:e3:15:48:52:6d:04:63:
b6:cc:e9:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0i74PgAJEH3cje0PdglBbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NzY4OTFjZjJiMWQ4ZWM1NmMwM2JjN2E5NmRlOTU4YTBl
MDAwMzIwHhcNMjUwNDI3MDAwMDM3WhcNMjUwNDI4MDAwMDM3WjAzMTEwLwYDVQQD
Eyg4Y2FmODVlNGU3NWZmNmM4ZThjOTRjMjE2ZGMzMjdiZWZkMjIyOGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqzpx2EZ8VmLHYwG3JaIbTX8+7G1
FyjACozMGCn90RK2jT7YySqw54Tz+xyeEc3oKxLrxJygC2FC/lv2bSAal14N8Kap
X9G9U0K7AdvDjk/CS5dVNczlZnV/yxacCNCVLAONN3JtqkrVadU85x1dvMU6RD+a
y1rRPzVj1MtYSY6KQBaLe0w1kmHxeyjSsVtaffibG8MiQUPb+zHWgpoNHVR+GXx9
NRHg/bqrAy5YKeeiTFN8yy2YmvUD+/OYFbc0V2xSIdL9H2SgX+DiwtXy/sjoWaOm
egwYkyfQZ6Nq7PhazbHp5nFnj0e0XEAY7JBlo4MTyOLbaizeHZ4EDLPd1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyvheTnX/bI6MlMIW3DJ779IijBMB8GA1UdIwQY
MBaAFBV2iRzysdjsVsA7x6lt6Vig4AAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlhhSkhQS3gyT3hXd0R2SHFXM3BXS0RnQURJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xYmY1ZmEtZjY5Yi00MTdjLWJjMGIt
NWQ1YmI3ZmU1NzFhLzEvRlhhSkhQS3gyT3hXd0R2SHFXM3BXS0RnQURJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xYmY1ZmEtZjY5Yi00MTdjLWJjMGItNWQ1YmI3ZmU1NzFh
LzEvRlhhSkhQS3gyT3hXd0R2SHFXM3BXS0RnQURJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6VhvNBb
pLEXndrzdsbi7C0YNDDqFwj6ox9bLbLVKpnCg70syuUOIC077Tj1jvIQLQRCIO9Q
a2NiQRRMRmYF96j5Gp/DpnRJrkmo/bdjqYEBX7AiQi0FlcaRtK1dNOB72wXFLhVT
rAhmtuu4XF/UPUWO6O0UZAX3oGERBKsBxua30osAWnCRDDZ+Rua/4omyoqqezmwf
k/cRBTuyoTF8fQ9aGk1QYR1/vCiCoUM2mJQjj4c8Gkn/Esl+nveKyubHerBBcB77
1VbvWIUag9QSlo7HufW7Hb5amS3YXsJZi7DjK+mU3xgvHudAQu9HfqdbsmP06n/j
FUhSbQRjtszpAQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:41:14 2025 by rpki-client