Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
File: FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft (raw, json)
Hash identifier: E0d/Z34CnrxTq6eY+wacoYIKrUmcYZEdOPwq7HGurLg=
Subject key identifier: 08:F9:D1:16:E5:F4:8E:47:1C:D0:00:1D:97:17:AC:F6:2F:F0:85:31
Authority key identifier: 14:9F:A6:D4:FE:0E:D0:E0:12:EB:3B:CF:FD:F2:BF:9E:1F:74:79:72
Certificate issuer: /CN=149fa6d4fe0ed0e012eb3bcffdf2bf9e1f747972
Certificate serial: 01976F9A6CFB7411AA0DBE12337FDE8983A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
Manifest number: 03C5
Signing time: Sat 14 Jun 2025 18:01:20 +0000
Manifest this update: Sat 14 Jun 2025 18:01:20 +0000
Manifest next update: Sun 15 Jun 2025 18:01:20 +0000
Files and hashes: 1: 5wZ-uBzQ29mM_QfzDccMNqqdNYo.roa (hash: 2S+nSZvpWE37VjSR3BnNzUoM6C8tVAdRbE/bGKNExEc=)
2: FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl (hash: WOGaivtxEd7LB8ncu1uhw19LHe4mmNp76bGvWsDwnps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:6c:fb:74:11:aa:0d:be:12:33:7f:de:89:83:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149fa6d4fe0ed0e012eb3bcffdf2bf9e1f747972
Validity
Not Before: Jun 14 18:01:20 2025 GMT
Not After : Jun 15 18:01:20 2025 GMT
Subject: CN=08f9d116e5f48e471cd0001d9717acf62ff08531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e2:95:00:31:70:28:63:fe:c4:98:14:62:f9:
50:67:44:79:32:0f:d1:26:4e:b6:bb:b4:36:79:2c:
db:0e:69:b0:c2:64:69:2b:91:8d:53:14:88:ef:37:
fc:28:61:99:e2:9c:06:f0:7f:b0:7b:3b:fc:cb:5a:
76:0b:4e:03:c2:4a:52:ad:d3:87:86:be:3c:c9:9c:
52:f7:cb:be:0f:b2:4e:ad:54:f5:ab:e5:42:fc:de:
b0:95:8d:aa:06:71:06:4b:9e:ed:7e:7c:32:0a:75:
31:9d:9e:83:6a:fb:54:7d:e2:e9:43:cc:d7:ce:7e:
4b:39:f7:a2:98:89:40:4a:cb:5f:5b:f0:1e:fc:10:
28:96:c3:50:bf:70:99:f8:56:d8:47:2e:bb:00:43:
95:a6:ab:e7:05:8a:44:34:bc:f6:50:13:d5:25:ae:
fb:55:4c:ef:41:1e:47:99:a8:26:4a:69:70:8c:da:
94:5b:87:50:54:eb:09:66:67:7a:18:b0:b4:74:79:
88:db:35:1c:6d:f5:29:eb:dc:ee:9c:b5:d6:08:c9:
be:84:96:db:97:af:03:3d:12:b8:29:95:dc:1c:b1:
ef:55:e5:e7:67:c4:6e:29:66:2c:3c:86:1e:79:e8:
55:b4:1c:10:bc:6e:3d:b0:a9:79:13:fc:9e:39:c8:
f0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F9:D1:16:E5:F4:8E:47:1C:D0:00:1D:97:17:AC:F6:2F:F0:85:31
X509v3 Authority Key Identifier:
keyid:14:9F:A6:D4:FE:0E:D0:E0:12:EB:3B:CF:FD:F2:BF:9E:1F:74:79:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:18:a2:e9:ea:ee:2b:6d:55:50:56:52:4a:0f:89:a5:5f:3f:
11:ea:d8:73:6f:43:20:9e:5f:b7:3c:73:00:10:aa:14:e9:a0:
2b:4e:24:98:84:37:bd:d1:ef:0f:b8:fa:9b:b3:c1:9d:3e:fa:
7e:1f:05:ea:77:13:a9:ba:c4:50:00:8e:fd:29:9e:48:75:21:
ff:83:ea:62:3b:71:c2:23:fd:96:28:81:b0:7b:db:03:82:d9:
ff:df:ed:a9:3f:43:fd:15:8e:fa:e3:bc:08:6f:86:23:b4:f2:
dd:bd:36:e2:61:cb:12:ea:ae:0f:85:3b:3d:c0:d2:20:b0:93:
83:53:69:bf:f2:23:a3:40:9c:f8:76:15:d4:be:9a:9f:40:9d:
0c:c9:ed:26:d4:a9:68:85:5d:1e:b6:67:a0:b2:ff:be:9f:4f:
b4:ce:20:b2:5b:fe:08:5d:1a:21:ac:c3:1a:32:44:0e:67:13:
72:4e:68:89:bf:3e:d3:a7:c5:8a:27:22:48:44:3c:14:bb:f7:
9d:5b:5a:a7:e3:06:bf:10:51:22:a5:ee:17:f9:a4:89:d2:93:
1b:56:72:87:aa:8c:8d:4a:6b:4e:13:02:0f:d6:be:0f:97:b0:
4d:ea:a1:7d:53:57:6b:13:98:a0:15:59:ce:b1:86:34:0d:58:
af:67:f1:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmmz7dBGqDb4SM3/eiYOhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OWZhNmQ0ZmUwZWQwZTAxMmViM2JjZmZkZjJiZjllMWY3
NDc5NzIwHhcNMjUwNjE0MTgwMTIwWhcNMjUwNjE1MTgwMTIwWjAzMTEwLwYDVQQD
EygwOGY5ZDExNmU1ZjQ4ZTQ3MWNkMDAwMWQ5NzE3YWNmNjJmZjA4NTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOKVADFwKGP+xJgUYvlQZ0R5Mg/R
Jk62u7Q2eSzbDmmwwmRpK5GNUxSI7zf8KGGZ4pwG8H+wezv8y1p2C04DwkpSrdOH
hr48yZxS98u+D7JOrVT1q+VC/N6wlY2qBnEGS57tfnwyCnUxnZ6DavtUfeLpQ8zX
zn5LOfeimIlASstfW/Ae/BAolsNQv3CZ+FbYRy67AEOVpqvnBYpENLz2UBPVJa77
VUzvQR5HmagmSmlwjNqUW4dQVOsJZmd6GLC0dHmI2zUcbfUp69zunLXWCMm+hJbb
l68DPRK4KZXcHLHvVeXnZ8RuKWYsPIYeeehVtBwQvG49sKl5E/yeOcjwpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAj50Rbl9I5HHNAAHZcXrPYv8IUxMB8GA1UdIwQY
MBaAFBSfptT+DtDgEus7z/3yv54fdHlyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkotbTFQNE8wT0FTNnp2UF9mS19uaDkwZVhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS81Njg1NmEtYmU4OC00YTdkLTllMDEt
NzM3ODQwZTI3ZWE2LzEvRkotbTFQNE8wT0FTNnp2UF9mS19uaDkwZVhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS81Njg1NmEtYmU4OC00YTdkLTllMDEtNzM3ODQwZTI3ZWE2
LzEvRkotbTFQNE8wT0FTNnp2UF9mS19uaDkwZVhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhii6eru
K21VUFZSSg+JpV8/EerYc29DIJ5ftzxzABCqFOmgK04kmIQ3vdHvD7j6m7PBnT76
fh8F6ncTqbrEUACO/SmeSHUh/4PqYjtxwiP9liiBsHvbA4LZ/9/tqT9D/RWO+uO8
CG+GI7Ty3b024mHLEuquD4U7PcDSILCTg1Npv/Ijo0Cc+HYV1L6an0CdDMntJtSp
aIVdHrZnoLL/vp9PtM4gslv+CF0aIazDGjJEDmcTck5oib8+06fFiiciSEQ8FLv3
nVtap+MGvxBRIqXuF/mkidKTG1Zyh6qMjUprThMCD9a+D5ewTeqhfVNXaxOYoBVZ
zrGGNA1Yr2fxbg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 01:10:43 2025 by rpki-client