Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
File: FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json)
Hash identifier: 6KV3xbOEobbKdRIRSARWCC4QddmTNcUAqg1CHpDYjhM=
Subject key identifier: 2A:3D:8B:CF:2A:5C:7C:DB:4A:FE:51:82:21:C6:4C:EF:65:CF:B8:A8
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 01976F9A17412A7C35D6B66C23173FA05BCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
Manifest number: 10D5
Signing time: Sat 14 Jun 2025 18:00:58 +0000
Manifest this update: Sat 14 Jun 2025 18:00:58 +0000
Manifest next update: Sun 15 Jun 2025 18:00:58 +0000
Files and hashes: 1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: TThizbUxmDFtLsfVEzRFK1QdrAvuU+6Bb7l62ZrDSDg=)
2: QrSU_Lf7dcN4wLABGo09onOb-5k.roa (hash: d8YS3u/35OANrm0h/7ZyhxDmlo6tTG/PBizWtzmzfo4=)
3: eb-heUaDZ_codDy_g1my71P0p7Y.roa (hash: 7spa1VP0F+9Wr91aLAHj5ebr1/oFjn6POPsYKzuLimU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:17:41:2a:7c:35:d6:b6:6c:23:17:3f:a0:5b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: Jun 14 18:00:58 2025 GMT
Not After : Jun 15 18:00:58 2025 GMT
Subject: CN=2a3d8bcf2a5c7cdb4afe518221c64cef65cfb8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:35:60:8d:fa:2b:64:bd:19:d2:85:ea:15:b3:
f1:82:31:99:af:c2:05:4b:49:7f:8c:36:d1:16:96:
95:d2:fc:c7:97:41:0a:24:78:c5:cb:d2:40:a7:a0:
a6:9c:11:30:0b:6b:6f:bf:41:5b:30:f7:0b:15:58:
99:3b:e7:98:a7:da:8d:a4:52:0a:a7:bb:6e:ec:9b:
3c:fc:ed:ba:70:db:c7:26:04:54:51:43:4b:0a:06:
fa:46:c0:55:a2:41:4d:00:5c:1b:4c:bf:fe:da:17:
32:fc:97:82:bf:9f:04:b8:91:cf:34:ca:2c:79:94:
de:c9:b1:14:c4:fd:aa:7d:48:8c:c0:87:e6:58:ca:
3f:ba:70:c5:19:0d:a3:4a:44:97:e8:ca:52:7a:84:
2d:61:0a:65:42:73:c3:1c:60:cf:b7:14:b9:ba:fd:
c5:84:14:d2:2c:3b:ed:5a:b9:f2:f6:ae:4b:18:d2:
76:77:44:53:f3:f8:b2:9d:74:19:a3:f7:c8:20:fa:
0c:fc:a7:d0:2d:60:22:bf:80:06:41:76:a6:a7:9c:
2b:48:b0:ae:e6:d5:33:13:27:3f:db:c9:4f:cc:31:
a9:54:27:f8:a4:3c:b3:17:bb:9b:3d:db:ae:10:69:
74:68:40:d8:df:44:ab:cf:4d:c1:06:60:10:46:6c:
63:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3D:8B:CF:2A:5C:7C:DB:4A:FE:51:82:21:C6:4C:EF:65:CF:B8:A8
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:9e:85:5f:c0:79:c3:e7:4d:68:58:4c:ac:5d:5c:f8:fe:6c:
1d:f0:34:fd:6f:1a:2f:f3:c8:12:0c:14:4d:37:86:75:1b:c1:
f3:46:04:01:32:f6:14:a6:5e:66:88:88:ec:08:d5:3d:1f:f7:
f2:91:70:bc:d0:1a:4c:0b:72:64:8c:1b:87:ad:c8:45:18:bd:
54:6e:2a:45:d4:9b:42:a9:d5:8d:1c:52:a6:1c:10:13:5a:9f:
58:7d:e5:31:92:ce:28:2e:94:2e:ab:81:92:a7:e8:04:ee:55:
c8:31:9b:9c:5b:2b:60:73:0a:06:e7:d6:a4:42:ab:b6:4c:fc:
5d:2a:c5:78:64:50:48:9d:30:08:72:a0:6f:af:6f:d6:a6:2e:
bb:81:f6:71:d6:9d:86:36:c5:fc:f3:cb:4b:4a:cc:6c:5b:08:
4a:87:8a:39:5b:00:32:90:3b:1a:3b:a8:cb:fb:c6:1b:8b:11:
0b:e9:c7:42:f8:c3:99:00:d2:a1:0b:e3:6a:2e:79:be:23:0c:
55:a2:af:02:b3:83:12:e9:36:1b:15:a4:52:77:a0:2b:48:da:
6b:af:83:51:b7:6a:d8:36:3b:78:a1:45:59:8e:7e:65:7b:0b:
dc:41:6a:3d:4a:47:42:53:63:b7:24:f4:c5:c8:bf:b7:0f:ed:
d7:64:a5:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmhdBKnw11rZsIxc/oFvLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NDRlMWNhOTMxMmJhNzliZTU1OWUxMWM4ZWEwOTEwMDYw
ZGQ0OGQwHhcNMjUwNjE0MTgwMDU4WhcNMjUwNjE1MTgwMDU4WjAzMTEwLwYDVQQD
EygyYTNkOGJjZjJhNWM3Y2RiNGFmZTUxODIyMWM2NGNlZjY1Y2ZiOGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzVgjforZL0Z0oXqFbPxgjGZr8IF
S0l/jDbRFpaV0vzHl0EKJHjFy9JAp6CmnBEwC2tvv0FbMPcLFViZO+eYp9qNpFIK
p7tu7Js8/O26cNvHJgRUUUNLCgb6RsBVokFNAFwbTL/+2hcy/JeCv58EuJHPNMos
eZTeybEUxP2qfUiMwIfmWMo/unDFGQ2jSkSX6MpSeoQtYQplQnPDHGDPtxS5uv3F
hBTSLDvtWrny9q5LGNJ2d0RT8/iynXQZo/fIIPoM/KfQLWAiv4AGQXamp5wrSLCu
5tUzEyc/28lPzDGpVCf4pDyzF7ubPduuEGl0aEDY30Srz03BBmAQRmxjtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCo9i88qXHzbSv5RgiHGTO9lz7ioMB8GA1UdIwQY
MBaAFBZE4cqTErp5vlWeEcjqCRAGDdSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZDZkNzktZWViMS00OTJhLWI2MDIt
NThlZWZjZDY1MmQ4LzEvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZDZkNzktZWViMS00OTJhLWI2MDItNThlZWZjZDY1MmQ4
LzEvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyZ6FX8B5
w+dNaFhMrF1c+P5sHfA0/W8aL/PIEgwUTTeGdRvB80YEATL2FKZeZoiI7AjVPR/3
8pFwvNAaTAtyZIwbh63IRRi9VG4qRdSbQqnVjRxSphwQE1qfWH3lMZLOKC6ULquB
kqfoBO5VyDGbnFsrYHMKBufWpEKrtkz8XSrFeGRQSJ0wCHKgb69v1qYuu4H2cdad
hjbF/PPLS0rMbFsISoeKOVsAMpA7Gjuoy/vGG4sRC+nHQvjDmQDSoQvjai55viMM
VaKvArODEuk2GxWkUnegK0jaa6+DUbdq2DY7eKFFWY5+ZXsL3EFqPUpHQlNjtyT0
xci/tw/t12SlWg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:19:13 2025 by rpki-client