Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
File: FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json)
Hash identifier: 9dEAuIREsCp/MGCoyZY3JYGPLTBo0gGH6nYf1pY0IHg=
Subject key identifier: 16:B4:38:0D:AE:71:7E:4F:3A:93:B5:64:DF:A5:0E:34:FF:55:80:DD
Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
Certificate issuer: /CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Certificate serial: 01976C987E65FF72C94EB2371B7C347A7BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
Manifest number: 14FA
Signing time: Sat 14 Jun 2025 04:00:22 +0000
Manifest this update: Sat 14 Jun 2025 04:00:22 +0000
Manifest next update: Sun 15 Jun 2025 04:00:22 +0000
Files and hashes: 1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: F88aoOr48HD9eVB3vF97k+brwohbEEPabIIvDBROJ7c=)
2: kh6Y6l5pM_4l1e06rKEm1LbTzj8.roa (hash: K3F9IA4gy3lGNBan+gMrBm2P+dEVmz4mQ6ObmV/2TV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:7e:65:ff:72:c9:4e:b2:37:1b:7c:34:7a:7b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Validity
Not Before: Jun 14 04:00:22 2025 GMT
Not After : Jun 15 04:00:22 2025 GMT
Subject: CN=16b4380dae717e4f3a93b564dfa50e34ff5580dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:be:72:8a:20:81:99:8d:f8:43:c8:95:c2:d5:
d9:70:7f:95:da:2b:2c:3a:c8:c9:a9:29:24:f4:1c:
e6:cc:13:a8:ea:ba:71:ae:5c:de:d8:4b:7d:cf:08:
a7:f5:81:0a:aa:02:e5:ba:c6:92:72:ed:87:38:3a:
63:f7:e8:18:9c:ed:25:eb:55:86:2f:17:c5:11:9a:
ed:cd:4c:9c:6d:ae:bf:0a:28:82:af:c6:f7:94:06:
71:3e:8a:6c:a2:95:95:a4:38:37:6a:d5:42:45:37:
2d:b2:43:02:c1:20:68:2e:6c:54:65:f1:e3:e9:cc:
f5:73:f6:9d:c3:ce:6d:4d:28:3d:c9:19:4b:aa:23:
94:0e:94:6a:e1:89:52:9e:2b:0a:ae:9b:b2:34:45:
1a:c5:58:e1:d8:fa:4d:2a:d8:18:9b:0f:40:ec:7e:
0d:83:2a:36:b6:d0:c1:94:ff:3a:e7:a9:3d:c0:3c:
99:92:99:cd:5a:69:96:69:75:e6:11:f3:5b:46:46:
3f:5a:90:95:bc:92:b0:73:d7:f0:ae:58:80:d1:0f:
a5:12:40:96:49:51:54:bd:63:7b:c2:34:dd:51:13:
a5:e4:79:e3:55:e4:ef:e1:c5:80:54:a3:6d:97:e2:
ac:2f:dd:73:0e:33:da:32:cb:ea:04:10:48:81:db:
fd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B4:38:0D:AE:71:7E:4F:3A:93:B5:64:DF:A5:0E:34:FF:55:80:DD
X509v3 Authority Key Identifier:
keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:25:af:f9:74:9e:03:5d:f2:12:81:97:3a:56:1b:33:09:c0:
3b:4d:e3:40:cb:dc:73:7d:aa:e8:11:56:0e:48:9c:2c:af:f3:
e6:79:46:84:3a:84:bb:40:82:53:4c:ab:a7:b7:71:6c:bb:2c:
7a:44:f9:cd:86:08:3f:07:96:e0:99:00:02:94:8e:01:42:c9:
bb:db:cf:f5:b9:ae:35:cb:e6:51:cd:2e:f1:14:20:0e:f1:9c:
66:9e:4e:1a:21:bc:83:fe:c6:be:aa:45:c3:f7:48:8a:aa:5d:
40:98:8e:3e:d8:9c:b3:cc:db:55:ad:a0:ad:43:a4:b5:52:c6:
e9:da:7c:f9:86:5d:b1:af:d6:e8:12:1d:92:7f:15:1d:ce:dd:
d5:0a:c2:26:62:0a:5c:e9:8f:47:b4:48:8c:b2:90:f9:93:96:
0d:12:ea:0e:b3:19:02:c4:63:0b:f7:2f:83:a5:9e:b5:50:8e:
65:54:ae:44:d3:dc:75:fe:a5:a2:24:b2:0c:02:88:eb:47:01:
7f:63:81:49:07:38:6e:c3:44:58:85:3a:3b:43:b4:04:21:71:
48:33:ab:51:e4:81:5e:1e:46:f1:a1:ba:fd:bb:a8:42:17:6b:
66:7d:55:59:d6:fc:e6:77:c3:99:f0:d2:9f:44:2b:16:ef:a1:
99:d6:6f:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmH5l/3LJTrI3G3w0envBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZTI4MmNmNjE2Mjg0YjU4Zjg1ZWM0M2U1NGM5MGJmOTU5
NGU0OWMwHhcNMjUwNjE0MDQwMDIyWhcNMjUwNjE1MDQwMDIyWjAzMTEwLwYDVQQD
EygxNmI0MzgwZGFlNzE3ZTRmM2E5M2I1NjRkZmE1MGUzNGZmNTU4MGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi75yiiCBmY34Q8iVwtXZcH+V2iss
OsjJqSkk9BzmzBOo6rpxrlze2Et9zwin9YEKqgLlusaScu2HODpj9+gYnO0l61WG
LxfFEZrtzUycba6/CiiCr8b3lAZxPopsopWVpDg3atVCRTctskMCwSBoLmxUZfHj
6cz1c/adw85tTSg9yRlLqiOUDpRq4YlSnisKrpuyNEUaxVjh2PpNKtgYmw9A7H4N
gyo2ttDBlP8656k9wDyZkpnNWmmWaXXmEfNbRkY/WpCVvJKwc9fwrliA0Q+lEkCW
SVFUvWN7wjTdUROl5HnjVeTv4cWAVKNtl+KsL91zDjPaMsvqBBBIgdv9KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBa0OA2ucX5POpO1ZN+lDjT/VYDdMB8GA1UdIwQY
MBaAFBTigs9hYoS1j4XsQ+VMkL+VlOScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jOGQ4YWQtY2Q3Mi00MTliLTk3M2Yt
NTYwOTRmZDZjYzZjLzEvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9jOGQ4YWQtY2Q3Mi00MTliLTk3M2YtNTYwOTRmZDZjYzZj
LzEvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGiWv+XSe
A13yEoGXOlYbMwnAO03jQMvcc32q6BFWDkicLK/z5nlGhDqEu0CCU0yrp7dxbLss
ekT5zYYIPweW4JkAApSOAULJu9vP9bmuNcvmUc0u8RQgDvGcZp5OGiG8g/7GvqpF
w/dIiqpdQJiOPtics8zbVa2grUOktVLG6dp8+YZdsa/W6BIdkn8VHc7d1QrCJmIK
XOmPR7RIjLKQ+ZOWDRLqDrMZAsRjC/cvg6WetVCOZVSuRNPcdf6loiSyDAKI60cB
f2OBSQc4bsNEWIU6O0O0BCFxSDOrUeSBXh5G8aG6/buoQhdrZn1VWdb85nfDmfDS
n0QrFu+hmdZv3g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:21:12 2025 by rpki-client