Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
File: FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft (raw, json)
Hash identifier: o80qDPtdDqUDi/7pyv5PyPBQMUfAKAT0UQY+8HN3Z78=
Subject key identifier: 4A:A7:2E:DF:86:27:FD:47:3D:4E:78:D3:BA:B2:A7:70:48:65:38:32
Authority key identifier: 16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
Certificate issuer: /CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Certificate serial: 019683C7CA315B0A3D4FCEB3D5D1F05E3DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
Manifest number: 0836
Signing time: Tue 29 Apr 2025 23:00:30 +0000
Manifest this update: Tue 29 Apr 2025 23:00:30 +0000
Manifest next update: Wed 30 Apr 2025 23:00:30 +0000
Files and hashes: 1: FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl (hash: KBwb39LUsoLlFimNcRvL108TSVr/UJ4u09/wEOPGHGk=)
2: g3b-X86nv3p6U9DOq4hCU_Dnmdo.roa (hash: 2YoEPjb/mUp/HqQp7Qak5HkOS9XgXc9API514lfVQEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:ca:31:5b:0a:3d:4f:ce:b3:d5:d1:f0:5e:3d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Validity
Not Before: Apr 29 23:00:30 2025 GMT
Not After : Apr 30 23:00:30 2025 GMT
Subject: CN=4aa72edf8627fd473d4e78d3bab2a77048653832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e0:c6:14:6b:c6:97:57:12:79:0b:de:da:9c:
ed:4a:a4:1d:72:60:f1:89:10:f6:a4:2e:86:7e:b1:
8a:ef:eb:e9:fb:61:9f:9f:5c:b8:07:37:34:44:d0:
7a:a3:d3:1a:a2:1e:89:1d:72:6d:2a:95:e4:fa:2e:
1f:8d:8a:44:b7:e0:79:15:86:cc:8f:c2:cd:c4:4c:
eb:f8:d9:5a:ee:02:2b:b3:f3:41:22:7d:83:76:f2:
30:e3:32:a7:7d:bb:bc:01:06:dc:5c:d4:e5:19:ce:
06:f0:05:81:c2:65:8c:97:11:a7:e0:4c:1e:54:25:
aa:10:d2:88:7c:c7:e8:0b:60:41:18:b1:47:93:e3:
f2:2e:64:61:17:69:3f:75:fb:5d:6f:a3:d4:9f:5e:
98:d1:78:16:72:c7:71:dd:0f:1d:fb:9a:71:8c:b9:
b2:ff:a5:01:50:29:76:2e:9d:d0:38:49:6b:70:89:
a6:48:34:8c:53:9a:eb:73:b7:67:a8:3f:8f:99:68:
25:8e:a3:27:a5:26:e6:ce:1f:f3:42:05:15:59:0c:
1d:a1:82:64:08:41:32:89:ac:e3:90:a0:9d:36:9e:
20:6d:f8:56:9e:07:7c:cd:0f:db:56:6b:e6:0e:40:
59:fa:c9:70:62:d5:6f:6f:b3:f5:17:ce:81:1c:f1:
92:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A7:2E:DF:86:27:FD:47:3D:4E:78:D3:BA:B2:A7:70:48:65:38:32
X509v3 Authority Key Identifier:
keyid:16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f8:da:f0:34:74:6f:5b:f8:f0:f7:85:7a:e7:ef:f3:bb:80:
de:47:f4:66:90:f3:b4:82:e3:92:39:4b:d1:69:01:49:5c:93:
65:6e:73:9e:d1:57:86:01:7c:29:d9:29:c1:71:13:37:f0:4b:
d8:aa:07:a7:d6:40:06:50:1d:8a:df:07:ba:6d:11:76:4c:ff:
08:15:2c:df:af:c9:b9:75:9d:6f:3b:ef:2d:3e:ad:3c:ee:22:
d7:6a:2b:2d:e6:48:53:a2:1c:92:91:1c:b5:61:94:62:91:65:
3b:53:22:04:7b:d4:72:6e:b6:a2:47:93:27:e6:af:4f:89:34:
11:69:8f:82:eb:1c:13:c0:96:aa:77:15:50:eb:d5:3c:b5:71:
74:49:9b:86:38:46:b9:57:bd:25:e5:d8:1d:5f:93:f7:38:a6:
3d:17:6b:24:11:b9:da:07:75:4f:bf:b8:69:92:81:1c:53:7f:
82:66:80:39:a7:17:8b:8f:17:5f:41:09:d4:05:e7:27:e0:b9:
30:8b:9a:0f:fa:9a:79:44:85:54:f3:b5:32:f9:17:58:79:3b:
e1:37:41:e2:b2:c2:10:93:5a:24:93:5e:3f:08:8e:c9:00:00:
d4:89:17:d5:2e:52:fe:ce:a6:87:b2:9d:55:9d:cc:71:b4:d2:
0b:c9:19:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDx8oxWwo9T86z1dHwXj3QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZDMxYjJkODk5ZDZlYjJiY2I3YTRkNzhjYzMxMDBkY2Uz
MGM5MGMwHhcNMjUwNDI5MjMwMDMwWhcNMjUwNDMwMjMwMDMwWjAzMTEwLwYDVQQD
Eyg0YWE3MmVkZjg2MjdmZDQ3M2Q0ZTc4ZDNiYWIyYTc3MDQ4NjUzODMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueDGFGvGl1cSeQve2pztSqQdcmDx
iRD2pC6GfrGK7+vp+2Gfn1y4Bzc0RNB6o9Maoh6JHXJtKpXk+i4fjYpEt+B5FYbM
j8LNxEzr+Nla7gIrs/NBIn2DdvIw4zKnfbu8AQbcXNTlGc4G8AWBwmWMlxGn4Ewe
VCWqENKIfMfoC2BBGLFHk+PyLmRhF2k/dftdb6PUn16Y0XgWcsdx3Q8d+5pxjLmy
/6UBUCl2Lp3QOElrcImmSDSMU5rrc7dnqD+PmWgljqMnpSbmzh/zQgUVWQwdoYJk
CEEyiazjkKCdNp4gbfhWngd8zQ/bVmvmDkBZ+slwYtVvb7P1F86BHPGSlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqnLt+GJ/1HPU5407qyp3BIZTgyMB8GA1UdIwQY
MBaAFBbTGy2JnW6yvLek14zDEA3OMMkMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnRNYkxZbWRicks4dDZUWGpNTVFEYzR3eVF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83YzNhMTgtMGVjOS00MTU3LWJmNWEt
NTIwN2Y2NjRkZjIxLzEvRnRNYkxZbWRicks4dDZUWGpNTVFEYzR3eVF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS83YzNhMTgtMGVjOS00MTU3LWJmNWEtNTIwN2Y2NjRkZjIx
LzEvRnRNYkxZbWRicks4dDZUWGpNTVFEYzR3eVF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvja8DR0
b1v48PeFeufv87uA3kf0ZpDztILjkjlL0WkBSVyTZW5zntFXhgF8KdkpwXETN/BL
2KoHp9ZABlAdit8Hum0Rdkz/CBUs36/JuXWdbzvvLT6tPO4i12orLeZIU6IckpEc
tWGUYpFlO1MiBHvUcm62okeTJ+avT4k0EWmPguscE8CWqncVUOvVPLVxdEmbhjhG
uVe9JeXYHV+T9zimPRdrJBG52gd1T7+4aZKBHFN/gmaAOacXi48XX0EJ1AXnJ+C5
MIuaD/qaeUSFVPO1MvkXWHk74TdB4rLCEJNaJJNePwiOyQAA1IkX1S5S/s6mh7Kd
VZ3McbTSC8kZdQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 09:35:06 2025 by rpki-client