Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
File: xFIGsdbzkSqG62KPYZxaVSxVNQE.mft (raw, json)
Hash identifier: zioVUv8p9tLwi1FCF+rcY+74SYlgM1vYRlarI5Bgons=
Subject key identifier: 2D:3E:F1:63:39:E0:47:98:A3:E7:6E:3F:7F:F2:10:F6:0C:30:10:80
Authority key identifier: C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01
Certificate issuer: /CN=c45206b1d6f3912a86eb628f619c5a552c553501
Certificate serial: 019694F2582BA8F73B79BD48BC18DC8FAFB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
Manifest number: E4
Signing time: Sat 03 May 2025 07:00:32 +0000
Manifest this update: Sat 03 May 2025 07:00:32 +0000
Manifest next update: Sun 04 May 2025 07:00:32 +0000
Files and hashes: 1: 7dcgBIplMkDE9Me9_TBtww4XI9Y.roa (hash: 8O59mET8aiqW0DpLtIYLTmGhal2eNwvoi0MphoxbxkI=)
2: xFIGsdbzkSqG62KPYZxaVSxVNQE.crl (hash: 6E6KswWsE3zRqsd6y5Hln5fqvv03J+aioHnk5w3g3DA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:f2:58:2b:a8:f7:3b:79:bd:48:bc:18:dc:8f:af:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45206b1d6f3912a86eb628f619c5a552c553501
Validity
Not Before: May 3 07:00:32 2025 GMT
Not After : May 4 07:00:32 2025 GMT
Subject: CN=2d3ef16339e04798a3e76e3f7ff210f60c301080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3c:a9:d6:f3:a1:3d:3f:48:a9:fd:33:ab:32:
ba:1e:9e:a7:56:15:db:07:17:8f:8c:a6:64:16:a9:
90:cf:4f:a2:11:a0:47:ce:1f:63:ce:52:4e:7d:13:
d6:5b:76:47:5c:f2:a3:67:fd:ee:b1:74:ee:9e:95:
5f:09:34:bf:38:c0:d3:16:9b:1c:e8:c7:4f:8d:29:
8f:be:d5:0c:9f:0d:ca:a9:d5:a0:66:b7:e1:1c:e5:
ab:ef:4e:52:dd:f0:fb:30:0f:fb:1f:1a:67:8d:0f:
f2:12:a0:e0:a4:59:b0:80:d7:36:72:fd:92:28:2e:
64:ce:69:b4:ef:28:8f:85:13:57:e2:9e:22:58:b6:
2c:9e:d1:09:09:a1:f7:1a:09:d1:e0:70:f8:99:75:
9f:ea:92:5a:19:b7:ce:b6:4f:61:90:51:30:a0:45:
76:25:b8:db:d2:2d:6e:8e:e3:94:37:13:72:63:03:
f5:67:ad:94:a6:e8:cb:ab:c1:fd:3d:cf:6e:76:12:
fb:19:cc:46:54:3a:8e:06:66:c7:35:a3:a2:4b:92:
ef:84:68:f6:a6:24:4a:12:65:5f:04:10:4e:3b:02:
97:55:67:03:67:d8:c8:c0:0c:21:bf:2b:d8:e3:2c:
7e:61:03:da:7a:1d:02:5b:8e:a6:a8:a0:94:c9:01:
4a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3E:F1:63:39:E0:47:98:A3:E7:6E:3F:7F:F2:10:F6:0C:30:10:80
X509v3 Authority Key Identifier:
keyid:C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7a:75:ce:00:8f:7b:d1:98:05:09:d8:5e:79:1c:4b:7b:5b:
bd:fb:93:9d:6a:66:4a:57:80:71:6b:b9:09:7c:44:a1:59:5b:
44:66:0a:b6:52:8a:6a:46:f7:ef:54:a1:63:68:e3:21:93:38:
e1:4e:b8:8a:7c:0f:cb:99:3f:55:c5:f5:61:21:aa:e7:1a:c7:
5b:07:48:5a:dc:59:bb:f7:b4:f8:fb:a5:b5:2a:8a:7f:89:28:
03:06:22:22:b2:94:83:e7:d4:94:dd:5f:00:f0:54:b4:72:7f:
4e:58:7e:01:56:c6:72:da:d6:7c:f1:ef:b2:3b:d5:9d:13:eb:
e6:dd:d1:64:12:3c:dd:9f:ba:1f:80:bb:fc:07:0c:0a:13:03:
eb:c8:de:b7:73:2a:1d:24:c7:e6:dd:1c:53:33:6c:e2:47:69:
7e:ae:f5:fe:34:94:c2:f2:86:4b:82:e2:6f:ec:6f:ca:d7:51:
26:5d:61:89:10:de:4d:3d:18:83:10:ee:42:5e:d6:d2:3b:47:
85:b8:b1:2d:9d:53:11:7e:27:83:73:56:a9:48:3d:4f:58:29:
dc:36:f3:08:04:a1:f7:43:ba:87:04:35:9f:3d:23:65:d5:2b:
50:3d:ca:d4:78:1f:42:29:14:a7:d7:4a:88:2d:3c:73:4c:c8:
71:bd:3a:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaU8lgrqPc7eb1IvBjcj6+3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NTIwNmIxZDZmMzkxMmE4NmViNjI4ZjYxOWM1YTU1MmM1
NTM1MDEwHhcNMjUwNTAzMDcwMDMyWhcNMjUwNTA0MDcwMDMyWjAzMTEwLwYDVQQD
EygyZDNlZjE2MzM5ZTA0Nzk4YTNlNzZlM2Y3ZmYyMTBmNjBjMzAxMDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Typ1vOhPT9Iqf0zqzK6Hp6nVhXb
BxePjKZkFqmQz0+iEaBHzh9jzlJOfRPWW3ZHXPKjZ/3usXTunpVfCTS/OMDTFpsc
6MdPjSmPvtUMnw3KqdWgZrfhHOWr705S3fD7MA/7HxpnjQ/yEqDgpFmwgNc2cv2S
KC5kzmm07yiPhRNX4p4iWLYsntEJCaH3GgnR4HD4mXWf6pJaGbfOtk9hkFEwoEV2
Jbjb0i1ujuOUNxNyYwP1Z62UpujLq8H9Pc9udhL7GcxGVDqOBmbHNaOiS5LvhGj2
piRKEmVfBBBOOwKXVWcDZ9jIwAwhvyvY4yx+YQPaeh0CW46mqKCUyQFK6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0+8WM54EeYo+duP3/yEPYMMBCAMB8GA1UdIwQY
MBaAFMRSBrHW85Eqhutij2GcWlUsVTUBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEZJR3NkYnprU3FHNjJLUFlaeGFWU3hWTlFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jYzgzNWYtNDkwNi00Yzk1LWI4ZTUt
NWJlNDBiMTRmOGRmLzEveEZJR3NkYnprU3FHNjJLUFlaeGFWU3hWTlFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jYzgzNWYtNDkwNi00Yzk1LWI4ZTUtNWJlNDBiMTRmOGRm
LzEveEZJR3NkYnprU3FHNjJLUFlaeGFWU3hWTlFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnp1zgCP
e9GYBQnYXnkcS3tbvfuTnWpmSleAcWu5CXxEoVlbRGYKtlKKakb371ShY2jjIZM4
4U64inwPy5k/VcX1YSGq5xrHWwdIWtxZu/e0+PultSqKf4koAwYiIrKUg+fUlN1f
APBUtHJ/Tlh+AVbGctrWfPHvsjvVnRPr5t3RZBI83Z+6H4C7/AcMChMD68jet3Mq
HSTH5t0cUzNs4kdpfq71/jSUwvKGS4Lib+xvytdRJl1hiRDeTT0YgxDuQl7W0jtH
hbixLZ1TEX4ng3NWqUg9T1gp3DbzCASh90O6hwQ1nz0jZdUrUD3K1HgfQikUp9dK
iC08c0zIcb06Yw==
-----END CERTIFICATE-----
Generated at Sat May 3 12:35:04 2025 by rpki-client