Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
File: FaevcHtYSLNTljanQxd51wFM2mE.mft (raw, json)
Hash identifier: FsqJ2r52SGiAso45LnYUtuFA2nNC7PRT6TZ/Pa33zgU=
Subject key identifier: 2F:D1:D3:3F:01:27:2D:CD:6C:03:A2:2C:9F:B6:F8:4F:86:B8:28:25
Authority key identifier: 15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61
Certificate issuer: /CN=15a7af707b5848b3539636a7431779d7014cda61
Certificate serial: 01969F08AA33242CBCB0C57564CAB57BC8C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
Manifest number: 0429
Signing time: Mon 05 May 2025 06:01:07 +0000
Manifest this update: Mon 05 May 2025 06:01:07 +0000
Manifest next update: Tue 06 May 2025 06:01:07 +0000
Files and hashes: 1: FaevcHtYSLNTljanQxd51wFM2mE.crl (hash: +1f6ANz3LM8Y99rErmJ0IGnqLtg0AvWTbuk13mKSqI8=)
2: bX3oZWjtTuzwx_xG-vCMVNG-cOc.roa (hash: d1VXe5ysdAxKyO5IduA6oLfO1V4ILKmPg+j75Lo6HnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:aa:33:24:2c:bc:b0:c5:75:64:ca:b5:7b:c8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15a7af707b5848b3539636a7431779d7014cda61
Validity
Not Before: May 5 06:01:07 2025 GMT
Not After : May 6 06:01:07 2025 GMT
Subject: CN=2fd1d33f01272dcd6c03a22c9fb6f84f86b82825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:60:25:39:d8:c7:a5:10:f7:67:26:68:8b:c7:
c0:1a:ec:21:04:62:e1:7f:d3:af:54:08:58:95:42:
1c:52:9e:47:fe:66:41:ab:f9:b3:c8:d1:ba:2a:4b:
34:70:97:d3:44:a2:28:35:07:e9:d7:28:49:4d:6b:
95:33:92:92:15:27:a3:f9:d6:f7:69:0d:a6:33:3d:
fc:4c:db:04:ef:20:b0:c7:60:6a:35:61:a7:c2:9a:
40:a4:2c:40:85:48:7d:61:76:fc:85:e6:a4:77:e5:
10:8c:f1:67:f8:7f:98:1a:f9:da:f5:e0:20:f9:18:
7e:6b:e6:46:00:32:d3:af:94:be:01:43:29:5b:43:
c1:ca:b9:dd:52:33:7c:3a:6d:6b:99:b9:3b:ff:6d:
8b:1f:f0:32:20:f3:90:04:8f:b0:60:7c:cf:5d:4d:
01:25:7f:0c:59:33:86:6f:0c:bb:64:49:b0:a7:75:
79:29:65:1f:2d:50:93:96:a1:a0:a6:b0:33:13:85:
eb:32:1f:66:d0:0d:f4:4b:b8:03:bd:ec:5c:71:31:
9a:7b:02:48:cd:27:f8:b2:f6:04:2c:ab:0b:28:80:
3d:de:76:8a:e4:b3:e5:2b:c5:6b:68:29:bf:ea:7e:
a6:30:3e:b1:00:88:0a:7a:d7:f1:68:63:11:bc:88:
de:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D1:D3:3F:01:27:2D:CD:6C:03:A2:2C:9F:B6:F8:4F:86:B8:28:25
X509v3 Authority Key Identifier:
keyid:15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b8:51:32:f0:94:96:c1:f4:25:2c:80:91:83:42:98:f1:22:
3e:3b:d5:a1:4a:fc:8f:00:2b:f2:d5:8a:de:1d:d2:57:80:66:
c6:bb:3e:39:c4:36:8f:cc:e1:55:4e:cf:c1:57:5f:5b:78:5f:
49:5c:8e:41:86:f1:d5:ad:51:c1:96:d0:4c:f3:17:fe:cf:8e:
fd:3f:b4:23:4b:0a:71:1f:8c:af:cc:3f:21:a8:88:99:a1:39:
5a:10:34:fd:f5:30:ca:a6:75:71:1f:7a:82:8a:53:29:e5:7a:
72:3b:85:14:20:ed:6b:f4:6e:2a:c6:14:ee:e8:8c:c4:01:b6:
fe:ab:b0:dd:91:d3:5d:99:7a:d2:1e:33:45:19:28:16:7d:be:
06:d5:bb:3a:81:dc:a5:79:61:25:ba:84:0c:01:13:18:70:96:
bc:a6:d3:1f:2c:37:4a:66:1c:dd:7a:95:43:2c:0c:9d:bd:10:
2d:45:f1:69:45:a2:e5:68:56:e3:0a:78:43:98:c4:da:c4:d1:
cd:65:c4:62:51:a5:8c:d3:b9:53:89:fc:cb:c3:62:7b:50:87:
16:08:91:f4:59:50:35:9d:13:f2:9b:3b:b9:a3:98:1b:44:98:
58:0f:6c:a3:e8:3c:d5:be:40:e8:bd:ad:70:a6:32:42:cf:7a:
ba:f9:24:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafCKozJCy8sMV1ZMq1e8jEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YTdhZjcwN2I1ODQ4YjM1Mzk2MzZhNzQzMTc3OWQ3MDE0
Y2RhNjEwHhcNMjUwNTA1MDYwMTA3WhcNMjUwNTA2MDYwMTA3WjAzMTEwLwYDVQQD
EygyZmQxZDMzZjAxMjcyZGNkNmMwM2EyMmM5ZmI2Zjg0Zjg2YjgyODI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmAlOdjHpRD3ZyZoi8fAGuwhBGLh
f9OvVAhYlUIcUp5H/mZBq/mzyNG6Kks0cJfTRKIoNQfp1yhJTWuVM5KSFSej+db3
aQ2mMz38TNsE7yCwx2BqNWGnwppApCxAhUh9YXb8heakd+UQjPFn+H+YGvna9eAg
+Rh+a+ZGADLTr5S+AUMpW0PByrndUjN8Om1rmbk7/22LH/AyIPOQBI+wYHzPXU0B
JX8MWTOGbwy7ZEmwp3V5KWUfLVCTlqGgprAzE4XrMh9m0A30S7gDvexccTGaewJI
zSf4svYELKsLKIA93naK5LPlK8VraCm/6n6mMD6xAIgKetfxaGMRvIjeVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/R0z8BJy3NbAOiLJ+2+E+GuCglMB8GA1UdIwQY
MBaAFBWnr3B7WEizU5Y2p0MXedcBTNphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmFldmNIdFlTTE5UbGphblF4ZDUxd0ZNMm1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kZDUwZGUtOGUyYS00OTBjLWE0MTgt
NjAxMTY4NjI2MTZhLzEvRmFldmNIdFlTTE5UbGphblF4ZDUxd0ZNMm1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9kZDUwZGUtOGUyYS00OTBjLWE0MTgtNjAxMTY4NjI2MTZh
LzEvRmFldmNIdFlTTE5UbGphblF4ZDUxd0ZNMm1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm7hRMvCU
lsH0JSyAkYNCmPEiPjvVoUr8jwAr8tWK3h3SV4Bmxrs+OcQ2j8zhVU7PwVdfW3hf
SVyOQYbx1a1RwZbQTPMX/s+O/T+0I0sKcR+Mr8w/IaiImaE5WhA0/fUwyqZ1cR96
gopTKeV6cjuFFCDta/RuKsYU7uiMxAG2/quw3ZHTXZl60h4zRRkoFn2+BtW7OoHc
pXlhJbqEDAETGHCWvKbTHyw3SmYc3XqVQywMnb0QLUXxaUWi5WhW4wp4Q5jE2sTR
zWXEYlGljNO5U4n8y8Nie1CHFgiR9FlQNZ0T8ps7uaOYG0SYWA9so+g81b5A6L2t
cKYyQs96uvkk0Q==
-----END CERTIFICATE-----
Generated at Mon May 5 12:14:41 2025 by rpki-client