Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
File: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft (raw, json)
Hash identifier: KB3ZZRBwjCQ7N0imH8QhvQvaq9IiT4pnKAH5QUnWlYA=
Subject key identifier: C8:F5:16:56:3C:B3:C8:77:A7:5C:DE:80:2B:74:EB:FA:53:48:8F:EC
Authority key identifier: 7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24
Certificate issuer: /CN=7eaf5714c5056cbe269d12fa3099378a95728424
Certificate serial: 0196B521F13FB92B4623614739D575E6853D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
Manifest number: 1285
Signing time: Fri 09 May 2025 13:00:22 +0000
Manifest this update: Fri 09 May 2025 13:00:22 +0000
Manifest next update: Sat 10 May 2025 13:00:22 +0000
Files and hashes: 1: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl (hash: PWuFnsMUPZwEOXRWurDscM55/4NCf9e9yA6pUf01BgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:21:f1:3f:b9:2b:46:23:61:47:39:d5:75:e6:85:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eaf5714c5056cbe269d12fa3099378a95728424
Validity
Not Before: May 9 13:00:22 2025 GMT
Not After : May 10 13:00:22 2025 GMT
Subject: CN=c8f516563cb3c877a75cde802b74ebfa53488fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:3b:3c:b2:8a:ff:26:85:46:35:92:f6:af:
80:f8:64:e7:fb:4b:4a:dc:0b:d6:3d:2e:90:f7:82:
4d:66:5b:8a:77:a6:ba:e5:fc:b1:60:bb:ae:4b:35:
93:4a:56:d5:16:51:3d:c7:d2:d1:0d:55:0a:dc:fc:
f9:6c:6b:96:2a:4c:b9:a2:ff:d1:a9:9c:29:84:52:
dc:55:0d:bb:74:11:9f:9d:08:e2:24:dd:61:3e:55:
83:d8:77:9c:05:f7:58:64:e4:3a:4c:37:77:52:8b:
0d:4a:dc:9e:52:08:ba:f2:d7:fc:66:20:9b:20:66:
8c:61:8b:5a:07:4e:e2:14:88:87:c4:61:21:59:bd:
da:51:31:1d:8d:39:71:d3:5f:3c:43:94:63:4d:76:
6a:98:7b:f5:31:43:88:d1:3e:c8:a6:0b:61:ae:ee:
3d:eb:5c:fc:9a:44:f2:1b:74:03:42:47:49:d3:83:
a1:11:a5:4d:2a:f7:f8:be:bd:08:26:21:ff:d2:9c:
a8:9e:e9:2a:6f:d7:2b:e5:47:e1:d6:8b:7b:cf:41:
d6:97:da:62:9d:55:fc:08:d8:4b:b9:7a:a2:cc:d2:
c4:53:69:fb:24:ba:ae:e4:21:af:2a:7d:ef:af:9e:
ec:88:7d:2c:26:00:94:1c:31:35:c1:bd:ca:86:e5:
f7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F5:16:56:3C:B3:C8:77:A7:5C:DE:80:2B:74:EB:FA:53:48:8F:EC
X509v3 Authority Key Identifier:
keyid:7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:99:a5:44:f8:94:81:62:3e:04:04:c0:55:0f:67:5a:88:12:
04:07:6d:c4:c1:17:c0:4c:b7:f4:02:6c:b2:42:6e:77:a8:f9:
a2:8b:dd:31:3d:b8:b4:19:d1:91:b1:40:2d:b9:b7:bb:20:3b:
6c:c8:22:4b:19:b7:54:3d:67:eb:c9:b3:30:e7:95:85:f4:09:
e8:5a:ca:36:ed:5f:0b:1b:6a:1b:62:7b:2e:d1:14:da:a6:6e:
69:1c:aa:60:49:0b:b3:be:62:7f:9c:ae:66:0d:2b:80:bc:5b:
a9:e8:bf:ac:5b:d4:53:d5:96:c1:0c:6a:b0:62:df:fd:4e:0a:
a3:48:c9:42:23:85:eb:d9:0c:b4:ec:91:fd:3a:f9:32:9c:58:
da:5f:2f:c3:84:56:0e:9f:4e:11:58:30:c4:bc:23:58:75:13:
ef:8d:e8:22:d3:33:d5:37:f2:5a:92:66:75:07:64:65:5e:3b:
4f:7b:04:e1:25:26:65:21:bb:20:7c:7b:c9:d8:14:60:53:84:
94:25:86:46:fc:65:4f:53:56:b5:2b:94:94:5f:5b:aa:73:3a:
a5:a4:57:c7:19:be:2f:3a:b7:9e:39:bd:d3:74:c4:91:53:80:
d9:7d:6f:6a:4c:3e:24:00:e9:fc:b5:3b:9b:83:41:d2:b3:80:
1f:7e:3e:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa1IfE/uStGI2FHOdV15oU9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYWY1NzE0YzUwNTZjYmUyNjlkMTJmYTMwOTkzNzhhOTU3
Mjg0MjQwHhcNMjUwNTA5MTMwMDIyWhcNMjUwNTEwMTMwMDIyWjAzMTEwLwYDVQQD
EyhjOGY1MTY1NjNjYjNjODc3YTc1Y2RlODAyYjc0ZWJmYTUzNDg4ZmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6g7PLKK/yaFRjWS9q+A+GTn+0tK
3AvWPS6Q94JNZluKd6a65fyxYLuuSzWTSlbVFlE9x9LRDVUK3Pz5bGuWKky5ov/R
qZwphFLcVQ27dBGfnQjiJN1hPlWD2HecBfdYZOQ6TDd3UosNStyeUgi68tf8ZiCb
IGaMYYtaB07iFIiHxGEhWb3aUTEdjTlx0188Q5RjTXZqmHv1MUOI0T7Ipgthru49
61z8mkTyG3QDQkdJ04OhEaVNKvf4vr0IJiH/0pyonukqb9cr5Ufh1ot7z0HWl9pi
nVX8CNhLuXqizNLEU2n7JLqu5CGvKn3vr57siH0sJgCUHDE1wb3KhuX3owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMj1FlY8s8h3p1zegCt06/pTSI/sMB8GA1UdIwQY
MBaAFH6vVxTFBWy+Jp0S+jCZN4qVcoQkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnE5WEZNVUZiTDRtblJMNk1KazNpcFZ5aENRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lODdhYTgtNmU1YS00YzRjLWJjYzkt
ZjIwZDRlODY4MDNiLzEvZnE5WEZNVUZiTDRtblJMNk1KazNpcFZ5aENRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9lODdhYTgtNmU1YS00YzRjLWJjYzktZjIwZDRlODY4MDNi
LzEvZnE5WEZNVUZiTDRtblJMNk1KazNpcFZ5aENRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZmlRPiU
gWI+BATAVQ9nWogSBAdtxMEXwEy39AJsskJud6j5oovdMT24tBnRkbFALbm3uyA7
bMgiSxm3VD1n68mzMOeVhfQJ6FrKNu1fCxtqG2J7LtEU2qZuaRyqYEkLs75if5yu
Zg0rgLxbqei/rFvUU9WWwQxqsGLf/U4Ko0jJQiOF69kMtOyR/Tr5MpxY2l8vw4RW
Dp9OEVgwxLwjWHUT743oItMz1TfyWpJmdQdkZV47T3sE4SUmZSG7IHx7ydgUYFOE
lCWGRvxlT1NWtSuUlF9bqnM6paRXxxm+Lzq3njm903TEkVOA2X1vakw+JADp/LU7
m4NB0rOAH34+aQ==
-----END CERTIFICATE-----
Generated at Fri May 9 19:04:16 2025 by rpki-client