Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
File: FXsyCDCtBupxpybpuLPEcyQSGds.mft (raw, json)
Hash identifier: HmlsnbeYeecTJSRTtWssBMkQSBejrryD/i4Savyr0kA=
Subject key identifier: FA:72:93:E9:D6:99:98:AC:63:1D:8D:44:D0:18:F7:C2:B8:06:94:0F
Authority key identifier: 15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
Certificate issuer: /CN=157b320830ad06ea71a726e9b8b3c473241219db
Certificate serial: 0196767AA35C74B1E56635AA6EF31C1B7BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
Manifest number: 099D
Signing time: Sun 27 Apr 2025 09:01:10 +0000
Manifest this update: Sun 27 Apr 2025 09:01:10 +0000
Manifest next update: Mon 28 Apr 2025 09:01:10 +0000
Files and hashes: 1: FXsyCDCtBupxpybpuLPEcyQSGds.crl (hash: Y3jpsrcx3kj9sUT9RP2EgSpQogLZWY5YAw3tOH04XIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:a3:5c:74:b1:e5:66:35:aa:6e:f3:1c:1b:7b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157b320830ad06ea71a726e9b8b3c473241219db
Validity
Not Before: Apr 27 09:01:10 2025 GMT
Not After : Apr 28 09:01:10 2025 GMT
Subject: CN=fa7293e9d69998ac631d8d44d018f7c2b806940f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9b:45:23:7c:3f:17:b3:0f:5c:f4:64:00:51:
5c:a0:7f:5b:51:bd:39:ed:87:c8:1e:2e:66:f9:e8:
2f:58:8f:e1:ae:42:f5:43:2e:d3:1c:e6:e9:80:9d:
ab:71:55:87:13:91:0e:67:37:51:8e:77:4a:86:43:
37:8e:32:6b:49:ab:67:20:de:97:33:cf:9c:2d:89:
ca:b9:48:7b:34:07:f5:28:e0:6a:38:b0:88:96:a0:
29:bb:0e:5b:73:72:60:60:6e:b8:b7:46:91:83:d2:
ec:a4:91:46:a3:99:fd:a7:b9:4b:70:d8:99:ff:ca:
00:8c:b9:b2:dc:06:61:99:5b:0c:56:e6:83:db:7d:
7b:53:21:f9:a8:0f:79:ba:79:3f:0e:41:e8:13:35:
96:45:ee:a7:9a:bc:31:7b:19:32:00:e6:54:53:d9:
92:08:5c:6c:e7:ca:b7:fc:46:38:c6:bd:e7:48:17:
44:96:81:3f:3a:96:b7:bd:38:19:8c:2a:63:ae:0c:
d7:4f:55:e1:b9:96:7b:e7:1c:07:be:3e:13:03:ca:
fc:2e:47:f4:aa:e0:7a:6e:6e:7e:27:34:4c:63:88:
8b:ba:34:96:b6:1d:85:63:49:94:98:fb:3f:a8:c5:
11:fb:71:b5:47:55:7f:fc:4e:00:dc:54:cf:09:91:
c7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:72:93:E9:D6:99:98:AC:63:1D:8D:44:D0:18:F7:C2:B8:06:94:0F
X509v3 Authority Key Identifier:
keyid:15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:08:42:f4:13:81:f3:cb:eb:e9:0c:07:5c:ca:fe:87:17:50:
a0:b5:b6:8d:15:8a:6c:dc:c8:36:ef:cd:5d:2a:62:ed:13:48:
00:60:e8:72:6e:a3:de:c2:b0:68:45:0f:46:5d:6c:f5:39:a7:
19:78:be:7e:1e:2a:de:f7:e8:a9:a4:d1:08:54:37:47:4b:df:
5b:dd:82:d7:d0:a3:93:31:b0:8c:e4:9b:2a:4a:0d:89:0b:d9:
5a:ea:d6:f4:d2:e5:05:78:11:b1:af:7c:c8:19:08:8a:9b:e2:
03:2c:73:2d:ca:13:56:5a:64:23:17:8c:7d:1b:7e:75:0a:de:
3e:77:19:e0:f8:b7:77:d6:9b:e6:bb:04:a5:c5:7c:14:4a:ef:
14:ea:85:74:67:bb:ce:78:5a:10:7b:ea:1c:91:85:8f:03:5a:
73:ee:87:5d:e2:d9:6d:a9:95:a9:6f:d3:6a:4a:6d:ed:4e:df:
35:ef:5a:ec:62:3e:05:17:a9:d7:f2:4f:30:52:24:1b:50:b9:
2e:3a:a6:f5:7d:37:5c:61:ba:34:69:73:31:d9:07:ac:de:2d:
7f:f3:6d:b4:2b:f2:cf:17:4a:9c:1e:88:e7:aa:6a:94:98:05:
dc:2f:d0:0d:ac:e0:6e:68:10:27:e2:fb:8a:f4:69:7b:56:a0:
f2:3d:1e:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2eqNcdLHlZjWqbvMcG3vJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1N2IzMjA4MzBhZDA2ZWE3MWE3MjZlOWI4YjNjNDczMjQx
MjE5ZGIwHhcNMjUwNDI3MDkwMTEwWhcNMjUwNDI4MDkwMTEwWjAzMTEwLwYDVQQD
EyhmYTcyOTNlOWQ2OTk5OGFjNjMxZDhkNDRkMDE4ZjdjMmI4MDY5NDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZtFI3w/F7MPXPRkAFFcoH9bUb05
7YfIHi5m+egvWI/hrkL1Qy7THObpgJ2rcVWHE5EOZzdRjndKhkM3jjJrSatnIN6X
M8+cLYnKuUh7NAf1KOBqOLCIlqApuw5bc3JgYG64t0aRg9LspJFGo5n9p7lLcNiZ
/8oAjLmy3AZhmVsMVuaD2317UyH5qA95unk/DkHoEzWWRe6nmrwxexkyAOZUU9mS
CFxs58q3/EY4xr3nSBdEloE/Opa3vTgZjCpjrgzXT1XhuZZ75xwHvj4TA8r8Lkf0
quB6bm5+JzRMY4iLujSWth2FY0mUmPs/qMUR+3G1R1V//E4A3FTPCZHHmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpyk+nWmZisYx2NRNAY98K4BpQPMB8GA1UdIwQY
MBaAFBV7MggwrQbqcacm6bizxHMkEhnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlhzeUNEQ3RCdXB4cHlicHVMUEVjeVFTR2RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80YzM2NGEtZGI2OC00NDA0LTg5ZTMt
YzY1MGM3NmQwOGNlLzEvRlhzeUNEQ3RCdXB4cHlicHVMUEVjeVFTR2RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi80YzM2NGEtZGI2OC00NDA0LTg5ZTMtYzY1MGM3NmQwOGNl
LzEvRlhzeUNEQ3RCdXB4cHlicHVMUEVjeVFTR2RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwhC9BOB
88vr6QwHXMr+hxdQoLW2jRWKbNzINu/NXSpi7RNIAGDocm6j3sKwaEUPRl1s9Tmn
GXi+fh4q3vfoqaTRCFQ3R0vfW92C19CjkzGwjOSbKkoNiQvZWurW9NLlBXgRsa98
yBkIipviAyxzLcoTVlpkIxeMfRt+dQrePncZ4Pi3d9ab5rsEpcV8FErvFOqFdGe7
znhaEHvqHJGFjwNac+6HXeLZbamVqW/Takpt7U7fNe9a7GI+BRep1/JPMFIkG1C5
Ljqm9X03XGG6NGlzMdkHrN4tf/NttCvyzxdKnB6I56pqlJgF3C/QDazgbmgQJ+L7
ivRpe1ag8j0esg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:16:49 2025 by rpki-client