Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
File: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft (raw, json)
Hash identifier: xOlVND7yk+EhDErHL+oPOKZ33LNFCs0wKmzOa99eRKk=
Subject key identifier: 8F:63:A6:24:6A:3E:A2:87:9F:AD:C1:29:FF:CC:A7:4A:F7:2E:0F:29
Authority key identifier: 16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
Certificate issuer: /CN=1683805319d8485584dc39cf5381583fb6431d7a
Certificate serial: 0196BBFFC664CDCB71D29C22F12648617CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
Manifest number: 070C
Signing time: Sat 10 May 2025 21:00:23 +0000
Manifest this update: Sat 10 May 2025 21:00:23 +0000
Manifest next update: Sun 11 May 2025 21:00:23 +0000
Files and hashes: 1: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl (hash: JnJWnRljlt0Rx/StlsLkRC1iMlEO7r4hkfLdrrhcUDY=)
2: TF7nAj58d6ltPhTUNcDwpZ4Ncic.roa (hash: bLmXSoYJumVpK9YJA9L+Jf2+aVCyzGG5sj4lmj+Mw7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:ff:c6:64:cd:cb:71:d2:9c:22:f1:26:48:61:7c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1683805319d8485584dc39cf5381583fb6431d7a
Validity
Not Before: May 10 21:00:23 2025 GMT
Not After : May 11 21:00:23 2025 GMT
Subject: CN=8f63a6246a3ea2879fadc129ffcca74af72e0f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:d2:81:c1:53:58:26:c9:aa:70:e2:fa:4c:
06:91:2a:ec:73:17:9a:9b:5f:86:f9:3a:d7:2f:ae:
d5:ed:2d:76:78:7b:1d:8b:75:12:16:8e:11:4b:2f:
78:0c:6e:58:f8:a9:00:6c:76:53:83:04:7d:4e:12:
b3:d0:76:ad:4e:0e:02:bd:bc:83:e9:8f:7d:23:d6:
83:04:7b:45:d0:25:6c:19:a8:c3:86:19:44:dd:0a:
2c:bd:9e:f3:8f:5d:fe:bd:bf:05:d7:84:e2:bf:49:
fd:f5:8a:4b:aa:01:64:40:e0:36:fb:b2:2a:5a:9a:
8d:b6:ac:1a:80:62:77:c3:f3:7a:ee:06:7f:de:59:
15:6e:0c:fa:ac:5f:90:34:92:f3:ba:fa:a4:c3:78:
8e:d0:4f:3a:d3:c4:3d:0d:fb:56:68:13:26:67:dc:
20:ba:f2:58:99:70:ad:93:66:f2:90:f0:21:59:ae:
95:c0:49:1f:74:19:b8:e0:e2:bf:46:e5:42:32:1b:
20:e8:e8:ec:97:8f:d3:99:34:51:4b:74:fe:ff:05:
5e:41:d7:ea:1d:a1:7c:63:2c:d9:24:31:a9:23:8a:
ab:a5:18:cf:1f:43:02:0d:58:34:5b:50:aa:49:c4:
3b:9b:cb:c0:df:13:fb:48:92:a7:1d:9f:62:fc:83:
88:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:63:A6:24:6A:3E:A2:87:9F:AD:C1:29:FF:CC:A7:4A:F7:2E:0F:29
X509v3 Authority Key Identifier:
keyid:16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a2:e7:09:00:36:20:ff:d6:a8:72:02:ba:aa:21:d0:1d:27:
be:15:ba:0b:25:52:2e:41:8e:fc:55:a9:0b:99:c2:38:50:a8:
7f:e5:fb:86:b3:2b:33:10:0e:01:0c:df:80:b0:4b:3b:85:2c:
c6:f8:a9:f7:54:66:c4:81:10:04:a4:b5:5b:4e:6e:20:68:f2:
6c:21:e9:24:15:b4:19:8c:0c:d7:48:89:2c:73:c4:c9:5f:c3:
b6:84:91:3a:d8:75:64:f1:ba:50:69:7a:6a:60:cb:05:cc:c3:
89:cb:3e:fd:82:b6:00:2e:85:54:23:ae:5a:cd:46:8f:1f:7b:
cf:3e:06:53:be:c1:a5:1c:19:e8:00:ac:55:ba:6c:ee:8e:0f:
a1:9c:6f:c5:38:59:c0:18:3c:8b:02:61:31:3c:a9:70:0b:e6:
7d:0b:0b:37:05:ba:5d:d9:cf:5d:0f:3d:9c:6b:85:d9:35:82:
18:f2:5e:95:13:d0:67:0d:d4:b2:6d:de:17:7d:3e:d3:fb:15:
a8:0b:9e:b7:05:c6:7e:65:30:f9:6e:c0:98:b5:84:3f:8d:72:
84:ee:e7:ba:26:2d:54:9f:69:77:b3:e6:c3:1f:1f:0d:e3:f2:
82:49:f5:f3:e5:c4:1d:56:a8:ad:3c:86:a3:a3:b4:f1:4a:e8:
32:1c:b0:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7/8Zkzctx0pwi8SZIYXzqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ODM4MDUzMTlkODQ4NTU4NGRjMzljZjUzODE1ODNmYjY0
MzFkN2EwHhcNMjUwNTEwMjEwMDIzWhcNMjUwNTExMjEwMDIzWjAzMTEwLwYDVQQD
Eyg4ZjYzYTYyNDZhM2VhMjg3OWZhZGMxMjlmZmNjYTc0YWY3MmUwZjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGrSgcFTWCbJqnDi+kwGkSrscxea
m1+G+TrXL67V7S12eHsdi3USFo4RSy94DG5Y+KkAbHZTgwR9ThKz0HatTg4CvbyD
6Y99I9aDBHtF0CVsGajDhhlE3QosvZ7zj13+vb8F14Tiv0n99YpLqgFkQOA2+7Iq
WpqNtqwagGJ3w/N67gZ/3lkVbgz6rF+QNJLzuvqkw3iO0E8608Q9DftWaBMmZ9wg
uvJYmXCtk2bykPAhWa6VwEkfdBm44OK/RuVCMhsg6Ojsl4/TmTRRS3T+/wVeQdfq
HaF8YyzZJDGpI4qrpRjPH0MCDVg0W1CqScQ7m8vA3xP7SJKnHZ9i/IOIJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9jpiRqPqKHn63BKf/Mp0r3Lg8pMB8GA1UdIwQY
MBaAFBaDgFMZ2EhVhNw5z1OBWD+2Qx16MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm9PQVV4bllTRldFM0RuUFU0RllQN1pESFhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iMjVjZjQtMGEzNS00YmRiLTlkY2Qt
ZWUxNjA4NmNmYzcyLzEvRm9PQVV4bllTRldFM0RuUFU0RllQN1pESFhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iMjVjZjQtMGEzNS00YmRiLTlkY2QtZWUxNjA4NmNmYzcy
LzEvRm9PQVV4bllTRldFM0RuUFU0RllQN1pESFhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOaLnCQA2
IP/WqHICuqoh0B0nvhW6CyVSLkGO/FWpC5nCOFCof+X7hrMrMxAOAQzfgLBLO4Us
xvip91RmxIEQBKS1W05uIGjybCHpJBW0GYwM10iJLHPEyV/DtoSROth1ZPG6UGl6
amDLBczDics+/YK2AC6FVCOuWs1Gjx97zz4GU77BpRwZ6ACsVbps7o4PoZxvxThZ
wBg8iwJhMTypcAvmfQsLNwW6XdnPXQ89nGuF2TWCGPJelRPQZw3Usm3eF30+0/sV
qAuetwXGfmUw+W7AmLWEP41yhO7nuiYtVJ9pd7Pmwx8fDePygkn18+XEHVaorTyG
o6O08UroMhyw6g==
-----END CERTIFICATE-----
Generated at Sun May 11 02:28:45 2025 by rpki-client