Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
File: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json)
Hash identifier: iJ/shrb59ZegSzRNtsLqAs/1otrN5KZioTpV4JiiaKA=
Subject key identifier: 3F:ED:D8:D5:F1:83:E7:AD:7D:90:E5:D5:38:84:E5:EF:53:FF:74:9A
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial: 0196832340C5F1496769A0F22EF763E5F1E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
Manifest number: 1519
Signing time: Tue 29 Apr 2025 20:00:47 +0000
Manifest this update: Tue 29 Apr 2025 20:00:47 +0000
Manifest next update: Wed 30 Apr 2025 20:00:47 +0000
Files and hashes: 1: 1-TdRJj4h2RmubOdxb9rkHHG6bhc.roa (hash: IbIK2UxlwKjCUY9QjIcWsizwAMtE57kEDfBifLf6mzQ=)
2: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: DKar7epkyFqvQxvuoeibpSlZvcnc8WoK44V92i0tgVw=)
3: QR0Kgwt3HCwjc-xcqO7iblC-rKY.roa (hash: 0rkvAXImNg4dab81A4VmHvprnFlgPXRICVp6eT39HwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:23:40:c5:f1:49:67:69:a0:f2:2e:f7:63:e5:f1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Validity
Not Before: Apr 29 20:00:47 2025 GMT
Not After : Apr 30 20:00:47 2025 GMT
Subject: CN=3fedd8d5f183e7ad7d90e5d53884e5ef53ff749a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:64:76:ae:77:72:f8:0f:f3:99:4f:5e:3c:
fc:14:29:3c:9d:90:49:dd:3a:6c:7c:20:9d:5c:3d:
a9:b7:66:9e:a6:06:7b:06:3f:5f:e6:26:c6:30:e0:
90:b4:03:0e:f3:4b:f9:04:a3:fc:34:c6:2d:f2:21:
b8:21:2e:42:c3:db:b8:08:a9:7e:6e:0c:36:27:48:
c7:de:0b:aa:4e:27:cb:34:99:90:b4:fc:14:48:cf:
31:75:77:1b:4a:5e:cb:9a:e7:0a:00:09:03:df:98:
cf:47:fc:93:a0:90:96:6e:c1:51:7c:00:4f:75:7f:
2c:9e:02:fc:08:14:d6:a2:80:73:90:fa:f5:d5:f9:
47:1f:1d:6b:fb:d4:6a:1a:e6:d8:dd:36:64:3c:1a:
90:ef:09:a6:7f:8b:ca:d9:97:0b:ed:28:b8:3d:23:
73:15:0a:44:89:16:ca:af:d6:a2:6a:6f:ed:f2:af:
af:c1:f1:38:12:65:43:6b:f7:f1:a9:4d:b4:b7:fa:
8c:03:ea:0f:21:9e:73:8a:2a:89:a0:d4:a5:17:83:
ae:94:c2:b8:ea:27:8b:9d:46:b8:0f:9d:16:83:fe:
70:4b:90:c7:65:8d:1a:66:3c:b9:c3:92:77:7d:c4:
a8:1f:d2:c7:17:cb:68:84:5f:10:af:0a:e6:26:bb:
ff:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:ED:D8:D5:F1:83:E7:AD:7D:90:E5:D5:38:84:E5:EF:53:FF:74:9A
X509v3 Authority Key Identifier:
keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:c2:1e:59:d6:53:39:b8:7f:9d:57:75:84:82:42:76:b1:2c:
72:26:7f:9e:6a:33:c6:d3:16:90:4f:db:4b:df:d8:78:1b:81:
ba:ea:9d:f8:f5:20:a1:b1:c2:04:48:c8:b9:72:8b:56:69:7d:
56:1c:05:c1:83:e1:1c:ff:f5:54:db:f2:f3:cb:0c:e7:d8:e0:
2e:1d:ab:34:a7:51:3c:d2:86:23:5f:5f:6e:4c:b8:9a:f4:e8:
4e:8b:64:12:74:c1:89:d2:af:0e:34:41:2a:a3:58:bd:86:2a:
2a:e7:40:af:b0:0c:15:03:ba:9f:b7:1c:12:3b:7d:f2:65:e0:
c8:0c:db:d5:1a:d3:5b:b5:5a:d8:26:81:f5:e0:e3:bf:ee:5a:
1b:5a:fa:28:57:9c:e0:52:49:c4:eb:5c:47:6f:e2:4f:f7:aa:
08:83:99:c2:06:c0:39:d8:66:58:42:d5:3d:9d:18:c0:0b:b8:
bb:9e:d8:5a:f7:0d:98:b2:95:b9:4f:73:b2:67:fc:50:66:ad:
20:66:60:eb:4f:9d:39:fc:89:5b:22:15:12:a1:64:ab:1f:69:
82:ad:bc:e9:bc:f5:01:2b:74:02:f5:77:c7:3f:5f:e1:17:63:
8d:58:5c:de:de:35:4f:be:6f:3a:5a:6e:b4:b9:df:2c:5e:fc:
7a:e5:6f:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDI0DF8UlnaaDyLvdj5fHlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NDk3ZDg0NTNjNWVlM2ViYmIzODhlMWE0N2ExOTVmZjMw
ZmUwMDkwHhcNMjUwNDI5MjAwMDQ3WhcNMjUwNDMwMjAwMDQ3WjAzMTEwLwYDVQQD
EygzZmVkZDhkNWYxODNlN2FkN2Q5MGU1ZDUzODg0ZTVlZjUzZmY3NDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsNkdq53cvgP85lPXjz8FCk8nZBJ
3TpsfCCdXD2pt2aepgZ7Bj9f5ibGMOCQtAMO80v5BKP8NMYt8iG4IS5Cw9u4CKl+
bgw2J0jH3guqTifLNJmQtPwUSM8xdXcbSl7LmucKAAkD35jPR/yToJCWbsFRfABP
dX8sngL8CBTWooBzkPr11flHHx1r+9RqGubY3TZkPBqQ7wmmf4vK2ZcL7Si4PSNz
FQpEiRbKr9aiam/t8q+vwfE4EmVDa/fxqU20t/qMA+oPIZ5ziiqJoNSlF4OulMK4
6ieLnUa4D50Wg/5wS5DHZY0aZjy5w5J3fcSoH9LHF8tohF8QrwrmJrv/fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/t2NXxg+etfZDl1TiE5e9T/3SaMB8GA1UdIwQY
MBaAFBZJfYRTxe4+u7OI4aR6GV/zD+AJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEt
YjIzNGRkNmVkNjM3LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEtYjIzNGRkNmVkNjM3
LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsMIeWdZT
Obh/nVd1hIJCdrEsciZ/nmozxtMWkE/bS9/YeBuBuuqd+PUgobHCBEjIuXKLVml9
VhwFwYPhHP/1VNvy88sM59jgLh2rNKdRPNKGI19fbky4mvToTotkEnTBidKvDjRB
KqNYvYYqKudAr7AMFQO6n7ccEjt98mXgyAzb1RrTW7Va2CaB9eDjv+5aG1r6KFec
4FJJxOtcR2/iT/eqCIOZwgbAOdhmWELVPZ0YwAu4u57YWvcNmLKVuU9zsmf8UGat
IGZg60+dOfyJWyIVEqFkqx9pgq286bz1ASt0AvV3xz9f4RdjjVhc3t41T75vOlpu
tLnfLF78euVvQw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 05:25:11 2025 by rpki-client