Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
File: FT8kGD1slRhZGTSebpJTNzZDe5Q.mft (raw, json)
Hash identifier: rr+wt0tUBjrngxJwrH6EdKKEEXn9C4P7kQbHwGsxg9M=
Subject key identifier: 21:EA:19:D2:AB:5C:80:01:2B:6D:5A:2D:EA:6B:CF:FF:B7:37:EB:B5
Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
Certificate issuer: /CN=153f24183d6c95185919349e6e92533736437b94
Certificate serial: 01967D57F0B235BEC7126470132AE8947D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
Manifest number: 060D
Signing time: Mon 28 Apr 2025 17:00:37 +0000
Manifest this update: Mon 28 Apr 2025 17:00:37 +0000
Manifest next update: Tue 29 Apr 2025 17:00:37 +0000
Files and hashes: 1: 02srA_dodlsqHDgp--vASVvWX9E.roa (hash: lJ1KGWWna7XFX1YELq/QOjPK38+hDLl/0ZeJxdIW2VA=)
2: FT8kGD1slRhZGTSebpJTNzZDe5Q.crl (hash: n8Y87aGHXOruxDv2O2HiB6CZog8B0U8ypqBHhPXjE54=)
3: MBq9_d6LT2vyQzQfNudTMEVPC5w.roa (hash: md4P7geg1tPk/NRWigzWi02Y2+T+SaZ3+I/C1pIam5U=)
4: w6nyjw8CCPdGWE2r0om0qvXFyXo.roa (hash: 1O15ZgeKf2Rbzxb6TQY0MNC2RDhbgVcfZUfdxbDgya4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:57:f0:b2:35:be:c7:12:64:70:13:2a:e8:94:7d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153f24183d6c95185919349e6e92533736437b94
Validity
Not Before: Apr 28 17:00:37 2025 GMT
Not After : Apr 29 17:00:37 2025 GMT
Subject: CN=21ea19d2ab5c80012b6d5a2dea6bcfffb737ebb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:68:d5:ce:8f:6b:7a:7c:7f:6f:1c:04:38:3f:
14:31:89:80:b3:67:72:b7:01:c0:25:f2:32:74:42:
6b:19:2e:3e:1f:76:62:5b:4d:95:1f:d4:e4:0f:d7:
34:05:4e:fa:fa:09:9b:81:da:54:46:09:8a:1b:4e:
6b:65:2a:87:ee:ba:13:ee:7f:37:49:aa:7c:28:e1:
70:f4:ea:ef:21:66:64:05:3c:5c:d4:e8:60:75:5d:
9c:e5:7d:fc:88:09:53:a6:12:ae:2b:60:8a:9a:91:
3b:4d:44:8a:10:30:7b:6a:4c:0f:76:2d:a1:4f:ab:
bd:47:f7:77:ae:f0:82:3a:99:95:cd:c4:f0:39:c9:
1a:b9:27:89:45:77:69:9d:44:c1:f2:6a:98:1d:d6:
ac:24:28:5d:89:c9:70:c6:f9:b8:9f:9c:ab:41:b4:
bf:74:2c:7a:47:58:c9:71:6b:c9:4e:c2:32:a9:9c:
89:50:3d:95:0a:dd:18:8f:1e:97:b2:ea:05:e5:51:
63:cb:66:24:8f:72:eb:61:6d:7f:2a:83:a3:f0:8a:
59:3d:76:29:eb:b6:91:cb:13:04:00:ce:47:a0:f1:
15:af:bc:59:e4:55:08:37:79:73:ed:ec:2c:41:07:
38:24:27:1d:c8:81:1f:da:79:c4:8b:d2:84:05:e3:
78:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EA:19:D2:AB:5C:80:01:2B:6D:5A:2D:EA:6B:CF:FF:B7:37:EB:B5
X509v3 Authority Key Identifier:
keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:bf:f0:9a:57:ae:1e:1b:ea:9b:6f:22:8b:3f:ec:fa:58:07:
f7:a3:b3:c7:38:a5:f9:97:b1:de:c3:aa:51:f5:45:e4:2d:6e:
41:18:28:8e:c4:4a:53:eb:2e:34:74:25:82:f0:d1:9a:0c:1e:
68:58:98:b5:5f:6a:42:23:e8:71:0d:2a:c3:71:b9:3a:9b:31:
64:bb:c4:d5:a5:3c:63:62:b5:88:ff:35:85:4c:6d:d5:7f:a6:
0e:98:02:80:ef:08:8d:d4:04:6a:1d:f0:0e:4e:80:42:7e:5e:
47:7b:40:5d:58:6c:ab:5a:a2:14:d9:46:ae:e2:f0:89:cb:a4:
b9:74:85:33:98:97:14:23:b7:c3:58:9b:88:ff:86:fb:c7:41:
56:c9:9e:c8:c6:04:50:cc:38:8f:33:a5:1c:e6:fe:62:72:76:
15:5f:5a:dd:a2:fc:91:9e:67:79:d8:a5:12:c5:b6:49:f0:c3:
15:ab:80:b4:83:bb:f4:9d:c3:8f:68:c0:70:32:55:32:98:a2:
c8:66:40:9d:20:d8:1b:6d:fb:e4:a4:0d:27:e6:61:5c:de:5b:
19:67:bf:b1:49:b3:3d:c9:f2:79:2c:eb:7a:6b:b2:ee:94:d4:
bc:38:cf:b3:b5:6f:d2:0d:67:bc:95:4b:85:73:bf:56:82:22:
c3:f3:4f:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9V/CyNb7HEmRwEyrolH1FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1M2YyNDE4M2Q2Yzk1MTg1OTE5MzQ5ZTZlOTI1MzM3MzY0
MzdiOTQwHhcNMjUwNDI4MTcwMDM3WhcNMjUwNDI5MTcwMDM3WjAzMTEwLwYDVQQD
EygyMWVhMTlkMmFiNWM4MDAxMmI2ZDVhMmRlYTZiY2ZmZmI3MzdlYmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGjVzo9renx/bxwEOD8UMYmAs2dy
twHAJfIydEJrGS4+H3ZiW02VH9TkD9c0BU76+gmbgdpURgmKG05rZSqH7roT7n83
Sap8KOFw9OrvIWZkBTxc1OhgdV2c5X38iAlTphKuK2CKmpE7TUSKEDB7akwPdi2h
T6u9R/d3rvCCOpmVzcTwOckauSeJRXdpnUTB8mqYHdasJChdiclwxvm4n5yrQbS/
dCx6R1jJcWvJTsIyqZyJUD2VCt0Yjx6XsuoF5VFjy2Ykj3LrYW1/KoOj8IpZPXYp
67aRyxMEAM5HoPEVr7xZ5FUIN3lz7ewsQQc4JCcdyIEf2nnEi9KEBeN4XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHqGdKrXIABK21aLeprz/+3N+u1MB8GA1UdIwQY
MBaAFBU/JBg9bJUYWRk0nm6SUzc2Q3uUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iMDVlMDgtMDc2Mi00ZGM3LWE0YjAt
NTgwNWQzZjNkYmIyLzEvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9iMDVlMDgtMDc2Mi00ZGM3LWE0YjAtNTgwNWQzZjNkYmIy
LzEvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAib/wmleu
Hhvqm28iiz/s+lgH96Ozxzil+Zex3sOqUfVF5C1uQRgojsRKU+suNHQlgvDRmgwe
aFiYtV9qQiPocQ0qw3G5OpsxZLvE1aU8Y2K1iP81hUxt1X+mDpgCgO8IjdQEah3w
Dk6AQn5eR3tAXVhsq1qiFNlGruLwicukuXSFM5iXFCO3w1ibiP+G+8dBVsmeyMYE
UMw4jzOlHOb+YnJ2FV9a3aL8kZ5nedilEsW2SfDDFauAtIO79J3Dj2jAcDJVMpii
yGZAnSDYG2375KQNJ+ZhXN5bGWe/sUmzPcnyeSzremuy7pTUvDjPs7Vv0g1nvJVL
hXO/VoIiw/NPxg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:21 2025 by rpki-client