Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
File: F2w05a5wFsNgXTJpVkrpaFRDWV0.mft (raw, json)
Hash identifier: GklO/uuql0CPpkc5HmmnWoqqQvqj29AXPd672SSDr2A=
Subject key identifier: 52:4A:45:8B:35:FC:2C:8D:88:A8:06:42:6E:B0:F7:11:71:99:E2:EB
Authority key identifier: 17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D
Certificate issuer: /CN=176c34e5ae7016c3605d3269564ae9685443595d
Certificate serial: 0196903A27EDA3FF9735E5237011CEF51FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
Manifest number: 0783
Signing time: Fri 02 May 2025 09:00:52 +0000
Manifest this update: Fri 02 May 2025 09:00:52 +0000
Manifest next update: Sat 03 May 2025 09:00:52 +0000
Files and hashes: 1: F2w05a5wFsNgXTJpVkrpaFRDWV0.crl (hash: G67nWashq9aDYZikaS9wFFb48sNEtiqiJ2vwiFlVEmM=)
2: wlY-QtAkBrD3gjKIpeQoXPyzFOM.roa (hash: zJBXQ4JCSb3Ylp4EVKprUMeUDS30W25c/gEiCbzENgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:3a:27:ed:a3:ff:97:35:e5:23:70:11:ce:f5:1f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=176c34e5ae7016c3605d3269564ae9685443595d
Validity
Not Before: May 2 09:00:52 2025 GMT
Not After : May 3 09:00:52 2025 GMT
Subject: CN=524a458b35fc2c8d88a806426eb0f7117199e2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e8:54:15:27:66:ed:76:8a:1a:ff:cd:6e:dd:
6d:a4:04:28:a4:7e:bb:d5:78:d8:f9:e4:c9:bf:bb:
c9:95:19:95:f2:43:ab:fd:15:12:d7:11:bb:e4:45:
19:7e:db:5b:d9:a5:ac:1c:25:b1:96:6d:f9:36:e7:
65:e1:e8:3d:79:0e:63:2e:80:f9:2a:6e:69:c6:db:
da:63:c3:50:cc:ed:2f:5e:9f:e8:03:6b:54:09:fa:
1e:a4:6d:b9:f2:00:7e:04:75:eb:75:e8:3f:1f:3e:
96:ae:d2:94:30:5f:a0:08:58:93:bf:a8:2f:f7:22:
78:13:49:70:96:89:16:f3:4d:ba:f3:88:27:51:43:
34:55:b2:20:b2:7f:c4:38:2b:86:6c:1d:98:ed:06:
ef:50:26:54:87:fa:53:82:42:98:f9:98:3d:22:7d:
a1:14:6d:3e:d2:d4:9e:8e:a4:3d:61:f0:41:0a:86:
e0:87:2d:56:6e:5b:37:61:0c:fb:a1:54:86:13:46:
63:38:a6:d0:92:12:00:97:12:3e:b7:d1:e6:57:79:
cd:fd:9d:a5:0c:62:d6:f1:73:bb:35:08:36:b2:eb:
6d:8f:95:c3:60:c2:d5:7d:2c:36:a8:ef:7d:57:c5:
b1:c1:f4:e4:dd:c4:f9:d4:1d:15:2f:69:b7:a6:89:
0a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4A:45:8B:35:FC:2C:8D:88:A8:06:42:6E:B0:F7:11:71:99:E2:EB
X509v3 Authority Key Identifier:
keyid:17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:4f:a6:7c:b0:7e:ba:bc:3d:e7:2d:24:a7:f0:17:33:00:08:
d6:32:c2:71:d5:43:97:23:91:4a:28:e5:33:cc:33:25:8f:2d:
eb:a8:80:9d:24:44:e3:d6:50:dc:09:1f:3e:cc:cf:99:66:29:
42:66:b9:88:07:85:4a:71:ac:d3:93:be:c4:38:8c:f7:bf:51:
6e:40:0d:d6:d4:18:87:45:b8:5e:27:0c:e7:8f:c5:fc:35:71:
47:f3:51:be:96:87:cd:b4:ea:66:93:15:54:5b:81:3e:35:92:
6d:f4:57:ec:04:71:93:46:77:48:c8:f5:d3:94:1e:75:06:80:
21:ab:7c:df:52:74:8e:f6:78:7d:49:34:92:27:cf:0b:e1:f7:
21:a8:b8:77:1f:68:a1:c1:29:88:bc:80:76:af:7f:71:51:7f:
da:2e:74:65:a3:9c:2f:13:63:e7:d7:5b:be:5b:94:b8:53:1d:
85:7d:77:13:cd:1f:b7:5f:b1:18:2a:50:30:d1:69:bc:62:98:
2a:93:9f:51:89:99:3a:7b:09:3e:c5:33:27:d4:cc:0a:5c:ee:
8b:63:46:dd:5b:53:84:b8:7e:04:1a:cf:a5:d5:94:01:d4:16:
8c:45:4d:63:87:40:a2:f6:39:96:d4:52:99:0a:62:11:10:a9:
5c:3d:43:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaQOifto/+XNeUjcBHO9R+jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NmMzNGU1YWU3MDE2YzM2MDVkMzI2OTU2NGFlOTY4NTQ0
MzU5NWQwHhcNMjUwNTAyMDkwMDUyWhcNMjUwNTAzMDkwMDUyWjAzMTEwLwYDVQQD
Eyg1MjRhNDU4YjM1ZmMyYzhkODhhODA2NDI2ZWIwZjcxMTcxOTllMmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ehUFSdm7XaKGv/Nbt1tpAQopH67
1XjY+eTJv7vJlRmV8kOr/RUS1xG75EUZfttb2aWsHCWxlm35Nudl4eg9eQ5jLoD5
Km5pxtvaY8NQzO0vXp/oA2tUCfoepG258gB+BHXrdeg/Hz6WrtKUMF+gCFiTv6gv
9yJ4E0lwlokW802684gnUUM0VbIgsn/EOCuGbB2Y7QbvUCZUh/pTgkKY+Zg9In2h
FG0+0tSejqQ9YfBBCobghy1Wbls3YQz7oVSGE0ZjOKbQkhIAlxI+t9HmV3nN/Z2l
DGLW8XO7NQg2suttj5XDYMLVfSw2qO99V8WxwfTk3cT51B0VL2m3pokKcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJKRYs1/CyNiKgGQm6w9xFxmeLrMB8GA1UdIwQY
MBaAFBdsNOWucBbDYF0yaVZK6WhUQ1ldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjJ3MDVhNXdGc05nWFRKcFZrcnBhRlJEV1YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NDI2YTUtNmIxNC00OTExLTg4ZTEt
YTc1ZjNkZjQ2YWYxLzEvRjJ3MDVhNXdGc05nWFRKcFZrcnBhRlJEV1YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82NDI2YTUtNmIxNC00OTExLTg4ZTEtYTc1ZjNkZjQ2YWYx
LzEvRjJ3MDVhNXdGc05nWFRKcFZrcnBhRlJEV1YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnE+mfLB+
urw95y0kp/AXMwAI1jLCcdVDlyORSijlM8wzJY8t66iAnSRE49ZQ3AkfPszPmWYp
Qma5iAeFSnGs05O+xDiM979RbkAN1tQYh0W4XicM54/F/DVxR/NRvpaHzbTqZpMV
VFuBPjWSbfRX7ARxk0Z3SMj105QedQaAIat831J0jvZ4fUk0kifPC+H3Iai4dx9o
ocEpiLyAdq9/cVF/2i50ZaOcLxNj59dbvluUuFMdhX13E80ft1+xGCpQMNFpvGKY
KpOfUYmZOnsJPsUzJ9TMClzui2NG3VtThLh+BBrPpdWUAdQWjEVNY4dAovY5ltRS
mQpiERCpXD1DIw==
-----END CERTIFICATE-----
Generated at Fri May 2 12:04:01 2025 by rpki-client