Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
File: FJD8Fzgt1gZqOOQjutstihjRwEU.mft (raw, json)
Hash identifier: dazxB14Xsu7YSNarRkFtoT4c0N+r6S79cJL7PSfWt/E=
Subject key identifier: 59:39:C8:36:92:EF:DD:07:04:97:AA:A3:56:6F:D1:6A:8A:06:C9:0F
Authority key identifier: 14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
Certificate issuer: /CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Certificate serial: 0196741E56E560D5BDF49FF205C3FE819237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
Manifest number: 1290
Signing time: Sat 26 Apr 2025 22:01:07 +0000
Manifest this update: Sat 26 Apr 2025 22:01:07 +0000
Manifest next update: Sun 27 Apr 2025 22:01:07 +0000
Files and hashes: 1: FJD8Fzgt1gZqOOQjutstihjRwEU.crl (hash: OSOr9RSJr7YV8Ll3D0hoSdirJBvEJ4b/zNRR4iZzj4Q=)
2: GBpd_CXuB-9kNsxFo6gk--Reihk.roa (hash: g01Wtwi7iT3bkjePjiBnddon67j1RhvdGQsrObyK/EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:56:e5:60:d5:bd:f4:9f:f2:05:c3:fe:81:92:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Validity
Not Before: Apr 26 22:01:07 2025 GMT
Not After : Apr 27 22:01:07 2025 GMT
Subject: CN=5939c83692efdd070497aaa3566fd16a8a06c90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:be:1d:7e:10:ba:32:a7:72:ed:a5:b7:8b:02:
f5:e4:de:ac:88:4a:2d:ce:ab:94:86:15:06:ab:85:
26:0a:3e:5f:6b:2d:6c:c1:47:5c:e4:a7:29:80:47:
b3:bc:df:b4:69:5f:37:b3:35:df:e1:b7:7f:92:18:
f0:b7:26:40:35:a9:7a:ba:73:18:3d:4b:9e:e5:e3:
dc:15:c9:f0:48:cf:5e:b1:2d:7d:66:fc:47:b2:6e:
97:41:9d:53:f9:b1:1d:85:9e:ce:25:28:27:fb:7b:
95:70:45:02:ae:55:a8:08:ef:04:cb:4a:ab:e9:ee:
40:cb:fa:8a:a0:f7:26:d4:bc:5f:6f:06:da:41:91:
57:0c:ad:90:bc:27:c0:72:2c:2b:00:17:d9:b0:e9:
4d:7f:4a:c1:e7:a6:0f:7c:a1:c6:88:17:0b:4c:e3:
96:3b:ed:bd:cc:6c:e4:c5:bd:82:f0:e0:81:bf:04:
d6:39:85:58:bd:a8:42:38:28:01:4b:ad:9b:98:0e:
63:32:b5:4f:63:4c:5f:02:72:cb:d5:c0:62:02:1f:
cf:e1:cd:65:10:3a:4e:61:7e:2f:5f:6d:35:e0:3a:
46:7a:1d:f9:a2:73:7c:db:d1:15:88:ae:67:02:83:
28:76:65:c5:20:a0:ac:f2:6c:78:b0:c0:33:91:11:
83:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:39:C8:36:92:EF:DD:07:04:97:AA:A3:56:6F:D1:6A:8A:06:C9:0F
X509v3 Authority Key Identifier:
keyid:14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:70:3f:0c:51:8c:58:0a:30:14:35:07:fe:a3:d4:ce:63:4e:
00:8b:09:1b:f4:d0:83:fc:4b:76:d5:ac:e5:38:89:ee:f7:da:
75:42:f1:ea:77:d1:a9:25:37:f1:c9:98:a5:98:9c:aa:8e:67:
38:6b:95:69:05:42:c3:90:6b:53:8f:f0:df:ae:5c:53:14:04:
91:b5:b5:cb:17:23:9c:e5:cd:d2:5f:70:6d:5c:37:1e:96:3a:
65:73:5d:05:35:98:1f:b0:3c:6b:6f:bb:d8:21:21:c3:90:b1:
5c:97:99:06:aa:e2:d4:0e:3c:6d:26:2e:44:87:17:76:82:d8:
81:10:1d:7d:8c:ea:1f:e7:fc:42:ef:e2:d6:ba:68:39:a0:a1:
82:d3:58:19:b7:ab:a0:b1:16:f0:e4:71:23:17:c7:ba:0d:52:
58:08:4b:ae:e7:95:2c:49:20:73:b5:d9:70:54:7c:cf:1e:12:
95:47:a9:31:b6:67:11:09:60:da:78:55:98:19:0a:8e:5f:a7:
d6:96:0b:06:f0:a2:c7:ee:25:5c:dd:79:ca:ae:5f:94:69:09:
fb:98:6f:0c:92:af:77:b5:b1:44:76:bf:1a:7d:5d:37:41:53:
34:c7:87:d1:ea:be:d3:da:18:d1:ab:2a:6a:c4:9e:ad:87:aa:
7e:f9:20:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0HlblYNW99J/yBcP+gZI3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OTBmYzE3MzgyZGQ2MDY2YTM4ZTQyM2JhZGIyZDhhMThk
MWMwNDUwHhcNMjUwNDI2MjIwMTA3WhcNMjUwNDI3MjIwMTA3WjAzMTEwLwYDVQQD
Eyg1OTM5YzgzNjkyZWZkZDA3MDQ5N2FhYTM1NjZmZDE2YThhMDZjOTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb4dfhC6Mqdy7aW3iwL15N6siEot
zquUhhUGq4UmCj5fay1swUdc5KcpgEezvN+0aV83szXf4bd/khjwtyZANal6unMY
PUue5ePcFcnwSM9esS19ZvxHsm6XQZ1T+bEdhZ7OJSgn+3uVcEUCrlWoCO8Ey0qr
6e5Ay/qKoPcm1LxfbwbaQZFXDK2QvCfAciwrABfZsOlNf0rB56YPfKHGiBcLTOOW
O+29zGzkxb2C8OCBvwTWOYVYvahCOCgBS62bmA5jMrVPY0xfAnLL1cBiAh/P4c1l
EDpOYX4vX2014DpGeh35onN829EViK5nAoModmXFIKCs8mx4sMAzkRGDxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFk5yDaS790HBJeqo1Zv0WqKBskPMB8GA1UdIwQY
MBaAFBSQ/Bc4LdYGajjkI7rbLYoY0cBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkpEOEZ6Z3QxZ1pxT09RanV0c3RpaGpSd0VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS85NmViNzAtMGQwNC00NzZmLTgyNWUt
NTU2Y2MyZTA3MWRjLzEvRkpEOEZ6Z3QxZ1pxT09RanV0c3RpaGpSd0VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS85NmViNzAtMGQwNC00NzZmLTgyNWUtNTU2Y2MyZTA3MWRj
LzEvRkpEOEZ6Z3QxZ1pxT09RanV0c3RpaGpSd0VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3A/DFGM
WAowFDUH/qPUzmNOAIsJG/TQg/xLdtWs5TiJ7vfadULx6nfRqSU38cmYpZicqo5n
OGuVaQVCw5BrU4/w365cUxQEkbW1yxcjnOXN0l9wbVw3HpY6ZXNdBTWYH7A8a2+7
2CEhw5CxXJeZBqri1A48bSYuRIcXdoLYgRAdfYzqH+f8Qu/i1rpoOaChgtNYGber
oLEW8ORxIxfHug1SWAhLrueVLEkgc7XZcFR8zx4SlUepMbZnEQlg2nhVmBkKjl+n
1pYLBvCix+4lXN15yq5flGkJ+5hvDJKvd7WxRHa/Gn1dN0FTNMeH0eq+09oY0asq
asSerYeqfvkgJg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:42 2025 by rpki-client