Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
File: F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft (raw, json)
Hash identifier: r3AkQTbLucs64YOL+H1qn84R598sfM6PiSZFEYvQ1Y8=
Subject key identifier: FC:4A:76:68:3E:B7:55:0E:DA:4F:AA:A6:44:10:44:E8:42:F4:2A:C5
Authority key identifier: 17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52
Certificate issuer: /CN=177005177526d668e844b2a7a5a59ac64a495652
Certificate serial: 0196C0B84BABC4D0B12802A78FF655AFD4F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
Manifest number: 0491
Signing time: Sun 11 May 2025 19:00:25 +0000
Manifest this update: Sun 11 May 2025 19:00:25 +0000
Manifest next update: Mon 12 May 2025 19:00:25 +0000
Files and hashes: 1: F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl (hash: 79i8Xhpc49VuJiFTDDg0hUaO9rw0CHpI47fWA0rk/Bs=)
2: mF32KrmR7qkPWXVgQfXewbxtOHE.roa (hash: iXEGOcbHzPC+9l+k6XZzUAzgZY6fYnZW9+XlT/82/iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:4b:ab:c4:d0:b1:28:02:a7:8f:f6:55:af:d4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177005177526d668e844b2a7a5a59ac64a495652
Validity
Not Before: May 11 19:00:25 2025 GMT
Not After : May 12 19:00:25 2025 GMT
Subject: CN=fc4a76683eb7550eda4faaa6441044e842f42ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:25:4f:9a:47:04:df:98:d2:20:e2:05:0e:85:
42:38:eb:9e:33:89:b4:b2:4b:85:45:97:0d:02:14:
cb:bd:77:62:40:b1:09:64:ac:da:ae:ad:12:95:22:
62:89:85:1c:05:3a:1a:f4:c9:e4:57:17:e0:f5:0b:
1a:81:54:10:09:e5:1c:f6:b9:2c:7a:33:be:b2:8f:
67:e7:5a:85:8d:af:88:f7:6d:01:16:88:5a:f5:9c:
98:73:14:7a:fd:d9:21:6d:39:45:69:c5:02:c3:a0:
b5:05:25:0d:1e:eb:4e:b0:9a:2c:55:a8:f5:64:56:
d9:fa:e1:b3:9d:22:61:ca:d8:25:57:3c:39:c6:2a:
99:5b:9a:a4:87:6d:c3:57:94:88:31:a2:12:3c:a3:
32:a4:a7:00:78:be:9d:51:48:64:77:08:d2:82:39:
70:db:4e:1c:77:10:65:df:0f:17:51:ab:f7:d1:4a:
f8:cd:99:90:3e:b6:f6:d9:e5:67:28:22:03:31:01:
12:4b:4d:6f:5c:d4:81:ac:5c:c0:fb:ca:c9:52:56:
a1:d8:04:44:67:d1:1d:bb:50:cf:6a:71:2b:b5:c1:
9d:6a:ab:80:78:f6:ef:e6:08:26:19:44:df:e0:7d:
f9:aa:17:a9:e7:27:c5:af:53:fc:02:29:70:6b:19:
86:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4A:76:68:3E:B7:55:0E:DA:4F:AA:A6:44:10:44:E8:42:F4:2A:C5
X509v3 Authority Key Identifier:
keyid:17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:89:4c:00:e1:32:d2:91:5c:81:bb:4f:44:96:65:50:79:21:
ee:c0:89:ee:f5:42:62:34:51:fe:43:03:34:d8:07:f0:d0:f8:
4d:ca:b2:23:29:2c:48:eb:93:ef:71:38:83:4a:ea:94:f3:8e:
75:71:97:61:d4:9b:05:f8:8f:d7:48:6e:d6:6c:bd:09:33:38:
5c:97:88:23:4f:6d:18:81:43:be:d4:58:bd:38:90:83:f7:6c:
11:56:d2:ca:35:44:08:94:12:fa:17:c1:83:18:7c:64:3b:3f:
2c:82:c1:98:05:7e:08:46:5a:5b:e2:b0:f0:4a:9e:1d:c2:e0:
de:43:74:1e:fa:40:d4:7a:ad:b6:39:3c:fa:85:fa:34:de:25:
85:3b:3b:be:12:83:0b:f8:63:ab:a1:c3:80:f9:53:85:68:75:
e0:7e:38:12:44:17:ba:c7:13:d1:f6:4b:30:e3:9f:63:9f:17:
0c:31:8b:90:67:0b:98:da:08:fb:cf:71:22:fe:66:21:d4:6d:
ff:aa:62:d9:8c:f5:40:59:2e:5a:fb:ae:5a:54:3f:cd:f2:fe:
7c:10:f3:8a:5b:b3:a7:a1:00:6d:3f:5a:8b:0e:f1:6b:79:3c:
c1:65:f0:ba:55:65:26:76:1f:43:57:87:ee:4c:ea:c5:a3:c3:
84:da:ae:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAuEurxNCxKAKnj/ZVr9T1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzAwNTE3NzUyNmQ2NjhlODQ0YjJhN2E1YTU5YWM2NGE0
OTU2NTIwHhcNMjUwNTExMTkwMDI1WhcNMjUwNTEyMTkwMDI1WjAzMTEwLwYDVQQD
EyhmYzRhNzY2ODNlYjc1NTBlZGE0ZmFhYTY0NDEwNDRlODQyZjQyYWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yVPmkcE35jSIOIFDoVCOOueM4m0
skuFRZcNAhTLvXdiQLEJZKzarq0SlSJiiYUcBToa9MnkVxfg9QsagVQQCeUc9rks
ejO+so9n51qFja+I920BFoha9ZyYcxR6/dkhbTlFacUCw6C1BSUNHutOsJosVaj1
ZFbZ+uGznSJhytglVzw5xiqZW5qkh23DV5SIMaISPKMypKcAeL6dUUhkdwjSgjlw
204cdxBl3w8XUav30Ur4zZmQPrb22eVnKCIDMQESS01vXNSBrFzA+8rJUlah2ARE
Z9Edu1DPanErtcGdaquAePbv5ggmGUTf4H35qhep5yfFr1P8AilwaxmGvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxKdmg+t1UO2k+qpkQQROhC9CrFMB8GA1UdIwQY
MBaAFBdwBRd1JtZo6ESyp6WlmsZKSVZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNBRkYzVW0xbWpvUkxLbnBhV2F4a3BKVmxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zYWYxNTMtZWQwZC00OWMwLTk5ZGYt
MGNkZWZiZmM3ODdhLzEvRjNBRkYzVW0xbWpvUkxLbnBhV2F4a3BKVmxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8zYWYxNTMtZWQwZC00OWMwLTk5ZGYtMGNkZWZiZmM3ODdh
LzEvRjNBRkYzVW0xbWpvUkxLbnBhV2F4a3BKVmxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYlMAOEy
0pFcgbtPRJZlUHkh7sCJ7vVCYjRR/kMDNNgH8ND4TcqyIyksSOuT73E4g0rqlPOO
dXGXYdSbBfiP10hu1my9CTM4XJeII09tGIFDvtRYvTiQg/dsEVbSyjVECJQS+hfB
gxh8ZDs/LILBmAV+CEZaW+Kw8EqeHcLg3kN0HvpA1Hqttjk8+oX6NN4lhTs7vhKD
C/hjq6HDgPlThWh14H44EkQXuscT0fZLMOOfY58XDDGLkGcLmNoI+89xIv5mIdRt
/6pi2Yz1QFkuWvuuWlQ/zfL+fBDziluzp6EAbT9aiw7xa3k8wWXwulVlJnYfQ1eH
7kzqxaPDhNquZA==
-----END CERTIFICATE-----
Generated at Mon May 12 02:28:09 2025 by rpki-client