Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
File: FxMSnvT6RU4PCsQH4AjpV6G3laA.mft (raw, json)
Hash identifier: PJSFmyvjLIp+9Z7KCY82V9+djAKTuhrGQf+GMxHQFwY=
Subject key identifier: 09:E5:2A:1D:7C:ED:2A:4D:03:84:9B:D3:33:9A:46:55:45:0C:E6:A9
Authority key identifier: 17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
Certificate issuer: /CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Certificate serial: 0197745259AD89AA0BDAFFF2200FD6E93D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 16:00:43 +0000
Manifest this update: Sun 15 Jun 2025 16:00:43 +0000
Manifest next update: Mon 16 Jun 2025 16:00:43 +0000
Files and hashes: 1: Awd1yGOmw0G9ufYkJyOwIDHo3Qk.roa (hash: NpDJRKt/f4syIfXokbOL4x73rCHTvURrkdu0Yrl2tN4=)
2: BIIEZlMRbg4gFcs3vd0E2vnjAC0.roa (hash: dLd9sOD+PRZDAt8utITG0xeDO7qLojT8kdoKvMI+HQ0=)
3: FxMSnvT6RU4PCsQH4AjpV6G3laA.crl (hash: tGF3UbR5SOEvkRRb3AXNb2kF+ayqaFgyn7k7ICT/xq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:52:59:ad:89:aa:0b:da:ff:f2:20:0f:d6:e9:3d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Validity
Not Before: Jun 15 16:00:43 2025 GMT
Not After : Jun 16 16:00:43 2025 GMT
Subject: CN=09e52a1d7ced2a4d03849bd3339a4655450ce6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:02:22:36:d9:d9:17:e1:8e:23:63:51:12:7b:
df:ef:cf:c5:b3:9b:0b:cd:8a:8c:b6:d6:5b:3f:72:
29:38:0c:0c:f3:b7:e2:c3:35:d6:1c:60:68:b7:91:
74:2f:0b:66:86:ec:9c:aa:40:bc:c9:32:16:cf:f3:
ac:58:b2:fb:93:31:3a:d0:1a:11:51:9c:f5:17:ca:
b7:13:1e:0a:8c:51:de:5e:e3:80:fd:4f:45:2a:e4:
7a:96:1c:d0:71:c9:07:7d:b4:15:98:0f:bb:1a:bf:
a5:d0:0b:c6:b0:9b:b2:43:a5:c5:f5:a1:c3:91:1d:
88:9d:71:b7:f0:25:c2:58:2a:7c:a5:5f:36:fa:a2:
38:26:2f:df:66:d6:4c:bf:65:53:a6:b0:1b:61:dd:
25:23:8a:62:1f:ed:a1:43:50:9f:84:b9:ff:d1:cf:
26:65:f5:4e:ae:47:54:c2:64:6d:64:f2:d0:1f:06:
9d:75:80:41:c5:df:71:5c:bf:45:9d:53:05:ab:e7:
92:0a:1c:cf:66:17:50:b1:9c:e9:cb:dd:cf:0e:1e:
0f:44:e1:69:45:8f:3f:2d:0e:59:37:d7:16:2e:cb:
4c:f1:0f:cf:0d:68:f9:83:2c:56:76:f2:54:c3:35:
a8:7d:42:ed:69:e2:5d:cf:1a:dc:c0:5d:35:5c:60:
db:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E5:2A:1D:7C:ED:2A:4D:03:84:9B:D3:33:9A:46:55:45:0C:E6:A9
X509v3 Authority Key Identifier:
keyid:17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:20:d5:eb:53:4c:a0:0b:df:a8:26:40:a2:ec:32:a7:81:4a:
07:ae:dd:7d:88:e3:65:94:2d:92:0b:93:8b:0f:30:eb:a1:ee:
70:8e:25:79:ea:5e:69:d1:df:d6:6f:ea:2c:2d:f1:3e:df:d8:
bc:2d:84:c9:fb:c7:f7:de:39:e3:ff:bc:53:57:67:b6:b9:fe:
62:3b:68:10:e5:ab:47:36:37:00:9f:8c:35:0b:6a:54:54:0f:
63:40:1b:bb:68:85:31:c7:91:d7:d7:57:b8:7a:ba:b3:c5:97:
50:b1:6c:c2:89:8f:1a:95:93:cf:07:d7:98:65:db:c7:0d:5d:
8c:22:75:10:4b:f7:51:da:4e:d1:09:dd:0d:fb:3d:c0:01:5f:
25:bb:6d:a3:ad:2f:01:82:2c:45:0b:5f:78:29:2f:5e:47:7e:
c3:9e:66:0f:9c:56:68:c7:23:02:48:c8:95:4a:18:35:34:07:
f6:70:54:36:d7:49:a4:1d:76:62:93:b9:49:82:c9:90:a2:31:
f0:91:a3:0f:b8:04:53:de:9d:4f:31:9d:d8:79:c8:9e:b6:89:
31:8f:97:ab:67:88:9a:c8:76:e2:cd:9e:6f:bc:00:5b:d4:85:
55:42:88:10:86:f7:f0:39:0a:58:10:e1:fa:b0:5e:94:85:9d:
ae:e1:0d:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd0UlmtiaoL2v/yIA/W6T0gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MTMxMjllZjRmYTQ1NGUwZjBhYzQwN2UwMDhlOTU3YTFi
Nzk1YTAwHhcNMjUwNjE1MTYwMDQzWhcNMjUwNjE2MTYwMDQzWjAzMTEwLwYDVQQD
EygwOWU1MmExZDdjZWQyYTRkMDM4NDliZDMzMzlhNDY1NTQ1MGNlNmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wIiNtnZF+GOI2NREnvf78/Fs5sL
zYqMttZbP3IpOAwM87fiwzXWHGBot5F0LwtmhuycqkC8yTIWz/OsWLL7kzE60BoR
UZz1F8q3Ex4KjFHeXuOA/U9FKuR6lhzQcckHfbQVmA+7Gr+l0AvGsJuyQ6XF9aHD
kR2InXG38CXCWCp8pV82+qI4Ji/fZtZMv2VTprAbYd0lI4piH+2hQ1CfhLn/0c8m
ZfVOrkdUwmRtZPLQHwaddYBBxd9xXL9FnVMFq+eSChzPZhdQsZzpy93PDh4PROFp
RY8/LQ5ZN9cWLstM8Q/PDWj5gyxWdvJUwzWofULtaeJdzxrcwF01XGDbswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnlKh187SpNA4Sb0zOaRlVFDOapMB8GA1UdIwQY
MBaAFBcTEp70+kVODwrEB+AI6Veht5WgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnhNU252VDZSVTRQQ3NRSDRBanBWNkczbGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xNTcyOTktOWQxYy00YzViLTlhNDEt
YzI1ZmRjNGNhMmY2LzEvRnhNU252VDZSVTRQQ3NRSDRBanBWNkczbGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8xNTcyOTktOWQxYy00YzViLTlhNDEtYzI1ZmRjNGNhMmY2
LzEvRnhNU252VDZSVTRQQ3NRSDRBanBWNkczbGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiiDV61NM
oAvfqCZAouwyp4FKB67dfYjjZZQtkguTiw8w66HucI4leepeadHf1m/qLC3xPt/Y
vC2EyfvH99454/+8U1dntrn+YjtoEOWrRzY3AJ+MNQtqVFQPY0Abu2iFMceR19dX
uHq6s8WXULFswomPGpWTzwfXmGXbxw1djCJ1EEv3UdpO0QndDfs9wAFfJbtto60v
AYIsRQtfeCkvXkd+w55mD5xWaMcjAkjIlUoYNTQH9nBUNtdJpB12YpO5SYLJkKIx
8JGjD7gEU96dTzGd2HnInraJMY+Xq2eImsh24s2eb7wAW9SFVUKIEIb38DkKWBDh
+rBelIWdruENYg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:09:15 2025 by rpki-client