Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
File: FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft (raw, json)
Hash identifier: COF21wKGBPD9z2D11cAI/mUuixhHiBiqv1fX543j9dg=
Subject key identifier: 65:B2:A9:9D:06:54:62:20:C4:B1:56:E3:2E:EA:13:DA:A7:DA:C1:BD
Authority key identifier: 15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE
Certificate issuer: /CN=1571e6684306b748156c2ae3f420bb366b2efcee
Certificate serial: 01968EB961EC3D013F578C7BD0033D394DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
Manifest number: 06DA
Signing time: Fri 02 May 2025 02:00:35 +0000
Manifest this update: Fri 02 May 2025 02:00:35 +0000
Manifest next update: Sat 03 May 2025 02:00:35 +0000
Files and hashes: 1: FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl (hash: 5fR0HztYPAuuM83j1gBTB7GZoLkyMbEEbbVZBPR9HLs=)
2: kpSxAGf-JEobwBlUTuy9w2kq9CQ.roa (hash: g89MP8+0dMYS7AxnUtFPb35wq3oTVlO8M0aQrm02TxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:b9:61:ec:3d:01:3f:57:8c:7b:d0:03:3d:39:4d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1571e6684306b748156c2ae3f420bb366b2efcee
Validity
Not Before: May 2 02:00:35 2025 GMT
Not After : May 3 02:00:35 2025 GMT
Subject: CN=65b2a99d06546220c4b156e32eea13daa7dac1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a8:24:e5:96:8f:90:15:73:d9:4d:00:e3:ad:
4c:ed:32:6a:e1:61:ab:3a:02:d0:5e:bf:9d:bf:55:
71:1b:1c:9e:13:43:27:19:34:d2:f8:fe:39:48:8a:
c0:52:7d:0f:7d:f4:c1:79:0d:fb:43:55:a8:bd:8e:
e9:8f:66:62:d4:78:17:56:7a:01:a7:0f:d6:8f:9e:
ab:12:de:ec:3c:c3:3b:f2:0b:1a:1b:4d:31:38:29:
b1:e5:62:f7:38:32:4c:b9:df:20:28:33:b6:2b:9a:
76:ba:fe:84:cc:44:ae:df:4a:5b:15:e0:92:36:c7:
ec:5e:94:c3:fa:86:0e:a1:3c:fa:80:16:c4:e2:9f:
ca:5c:ef:a4:03:de:ba:65:ee:7c:b8:34:d0:dc:2c:
8e:e5:69:2a:35:61:24:9d:69:95:3e:f8:76:9f:dd:
48:f8:c0:cc:d1:a9:7f:46:88:b8:18:3a:ec:ca:5c:
46:a7:96:0d:d4:0b:a1:d9:f9:81:eb:21:b7:a5:1a:
a5:f2:d2:2d:8d:36:0d:d0:41:73:8d:c5:34:f2:d2:
81:73:81:85:c2:e2:08:30:86:35:18:af:b5:43:b4:
b2:88:75:d0:9d:d6:92:7e:3e:e6:a2:b1:2a:23:08:
d5:37:bd:67:c8:63:17:09:84:12:9a:98:ca:f5:0d:
a6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B2:A9:9D:06:54:62:20:C4:B1:56:E3:2E:EA:13:DA:A7:DA:C1:BD
X509v3 Authority Key Identifier:
keyid:15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:cf:32:2c:cd:2f:f2:dd:1d:d0:da:ac:5f:81:fe:7a:8c:20:
ff:5e:18:8d:4a:8a:ec:59:bb:ef:37:a4:88:28:83:45:0c:be:
27:f7:73:8b:fa:f9:dc:c1:35:d0:87:72:eb:42:77:28:7d:35:
e3:f1:96:6f:18:88:a2:6d:df:15:82:57:f2:1d:67:77:6a:74:
a5:f5:8c:5d:97:05:f2:0c:40:bf:9b:ee:b7:ba:18:ef:aa:9e:
e0:cb:fa:9a:3d:7f:28:d2:b0:4a:85:b3:9c:e0:50:dd:c7:ec:
cd:1e:e5:bc:71:25:0f:7a:4d:3d:1b:86:95:2f:7f:26:aa:f0:
43:b5:27:01:85:87:6c:d2:39:f8:ce:1b:a8:05:1d:b6:66:5c:
58:af:12:aa:6c:9d:06:38:03:39:97:f2:17:c0:51:c4:69:20:
fc:55:94:40:0f:7c:a4:49:26:4a:89:f1:f9:74:59:5a:db:25:
01:d0:56:16:69:b8:9c:81:5f:79:89:18:87:4c:f4:82:01:c6:
a3:ea:09:11:b4:b7:a7:59:c9:04:e4:df:53:50:7f:1a:de:f7:
ad:cf:d4:ee:30:25:1d:a4:a8:22:f8:36:ca:18:5c:62:e2:89:
f7:79:3e:0b:c8:67:5a:83:12:74:8d:23:e4:66:18:37:16:86:
39:b8:73:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaOuWHsPQE/V4x70AM9OU2nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NzFlNjY4NDMwNmI3NDgxNTZjMmFlM2Y0MjBiYjM2NmIy
ZWZjZWUwHhcNMjUwNTAyMDIwMDM1WhcNMjUwNTAzMDIwMDM1WjAzMTEwLwYDVQQD
Eyg2NWIyYTk5ZDA2NTQ2MjIwYzRiMTU2ZTMyZWVhMTNkYWE3ZGFjMWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6gk5ZaPkBVz2U0A461M7TJq4WGr
OgLQXr+dv1VxGxyeE0MnGTTS+P45SIrAUn0PffTBeQ37Q1WovY7pj2Zi1HgXVnoB
pw/Wj56rEt7sPMM78gsaG00xOCmx5WL3ODJMud8gKDO2K5p2uv6EzESu30pbFeCS
NsfsXpTD+oYOoTz6gBbE4p/KXO+kA966Ze58uDTQ3CyO5WkqNWEknWmVPvh2n91I
+MDM0al/Roi4GDrsylxGp5YN1Auh2fmB6yG3pRql8tItjTYN0EFzjcU08tKBc4GF
wuIIMIY1GK+1Q7SyiHXQndaSfj7morEqIwjVN71nyGMXCYQSmpjK9Q2mcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWyqZ0GVGIgxLFW4y7qE9qn2sG9MB8GA1UdIwQY
MBaAFBVx5mhDBrdIFWwq4/QguzZrLvzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlhIbWFFTUd0MGdWYkNyajlDQzdObXN1X080LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81MDZmMmEtNzI0Ni00MTkwLTk2ZmYt
NzM4YzBiZjhlYTk4LzEvRlhIbWFFTUd0MGdWYkNyajlDQzdObXN1X080Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC81MDZmMmEtNzI0Ni00MTkwLTk2ZmYtNzM4YzBiZjhlYTk4
LzEvRlhIbWFFTUd0MGdWYkNyajlDQzdObXN1X080LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAM8yLM0v
8t0d0NqsX4H+eowg/14YjUqK7Fm77zekiCiDRQy+J/dzi/r53ME10Idy60J3KH01
4/GWbxiIom3fFYJX8h1nd2p0pfWMXZcF8gxAv5vut7oY76qe4Mv6mj1/KNKwSoWz
nOBQ3cfszR7lvHElD3pNPRuGlS9/JqrwQ7UnAYWHbNI5+M4bqAUdtmZcWK8Sqmyd
BjgDOZfyF8BRxGkg/FWUQA98pEkmSonx+XRZWtslAdBWFmm4nIFfeYkYh0z0ggHG
o+oJEbS3p1nJBOTfU1B/Gt73rc/U7jAlHaSoIvg2yhhcYuKJ93k+C8hnWoMSdI0j
5GYYNxaGObhzyw==
-----END CERTIFICATE-----
Generated at Fri May 2 05:01:24 2025 by rpki-client