Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
File: FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft (raw, json)
Hash identifier: 0W3uDE2FW6gga92tvQzCb4aqM9WbYPmtib3ZOlQN6q4=
Subject key identifier: 58:7E:D5:3F:AF:D2:0A:69:62:AF:F5:F8:77:CE:5C:6C:62:74:AC:1F
Authority key identifier: 14:C2:EA:B6:A2:96:05:06:04:6A:1D:A4:31:27:73:D9:8E:97:CD:5A
Certificate issuer: /CN=14c2eab6a2960506046a1da4312773d98e97cd5a
Certificate serial: 0196C34B526D356639D993268EC1EA9C56BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMLqtqKWBQYEah2kMSdz2Y6XzVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
Manifest number: 09D9
Signing time: Mon 12 May 2025 07:00:15 +0000
Manifest this update: Mon 12 May 2025 07:00:15 +0000
Manifest next update: Tue 13 May 2025 07:00:15 +0000
Files and hashes: 1: FMLqtqKWBQYEah2kMSdz2Y6XzVo.crl (hash: ZmIQxEHB++0m3IeN9lBtB42xjM1LrCszjiRkbPQwWcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMLqtqKWBQYEah2kMSdz2Y6XzVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:52:6d:35:66:39:d9:93:26:8e:c1:ea:9c:56:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c2eab6a2960506046a1da4312773d98e97cd5a
Validity
Not Before: May 12 07:00:15 2025 GMT
Not After : May 13 07:00:15 2025 GMT
Subject: CN=587ed53fafd20a6962aff5f877ce5c6c6274ac1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:77:43:9f:aa:08:e2:3c:04:6f:7f:cb:dc:f4:
9d:3f:40:05:41:5e:c9:37:08:a4:f8:51:28:4a:e4:
bd:b2:e1:b7:75:df:35:af:89:86:60:40:da:b8:91:
d4:55:33:72:d5:11:0b:15:ca:da:45:d6:95:c7:bc:
7a:26:f2:ef:18:26:9c:de:d5:7a:c0:e7:2f:dc:62:
80:1f:d3:2c:bd:b6:b8:52:3c:d7:b3:4d:3c:91:96:
18:61:55:0b:50:20:a8:1e:44:62:1b:86:7c:d7:92:
9c:cf:3e:ac:99:47:6f:bd:15:c0:08:fe:64:97:2b:
28:c1:d2:db:23:6a:a6:7e:e2:17:2c:71:d2:48:6e:
04:bd:ed:b0:3f:df:32:a9:63:20:1b:3e:76:68:4c:
d9:51:b0:47:ff:44:cb:57:5d:ab:88:05:a0:9f:de:
31:2d:59:7a:8f:3b:df:ee:ca:a8:5a:94:af:c6:f8:
ef:7a:0b:ee:98:35:be:ea:74:6a:8a:50:c3:b6:c8:
9a:7a:29:4a:38:7e:75:c5:53:21:31:4b:59:b3:8f:
8d:a2:ed:cd:98:df:d7:e5:7e:f5:ef:a7:90:0c:ba:
0f:dc:21:e2:1c:e7:2a:68:05:cd:c2:9e:a5:1d:dc:
b2:db:cd:a4:6f:f5:f7:4b:c7:3a:25:a4:1e:40:4d:
78:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7E:D5:3F:AF:D2:0A:69:62:AF:F5:F8:77:CE:5C:6C:62:74:AC:1F
X509v3 Authority Key Identifier:
keyid:14:C2:EA:B6:A2:96:05:06:04:6A:1D:A4:31:27:73:D9:8E:97:CD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMLqtqKWBQYEah2kMSdz2Y6XzVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ce:b3:da:b6:69:65:af:f6:14:a1:77:3f:8d:18:f8:88:6c:
a0:f1:99:c7:47:bf:41:07:59:50:fd:52:59:45:7b:20:f0:ea:
8f:6a:8e:28:f4:9f:7a:c8:91:98:b6:6c:22:b7:55:7d:96:ee:
eb:15:c1:56:56:58:c2:b0:29:3a:3d:3c:bb:e9:03:9f:ad:ba:
32:9e:f2:23:01:0e:c7:99:a9:17:37:71:e7:8a:9d:de:cd:a8:
9f:52:be:82:e8:f8:14:2c:92:4a:b0:b0:84:e4:78:4c:c3:08:
92:3c:9a:4d:3f:b7:c2:5b:db:22:f9:7c:11:1d:0c:24:2f:89:
49:ed:8f:1b:f6:e2:6f:7f:25:8e:a4:d3:8c:ec:18:1c:25:1e:
89:a8:6a:6e:27:7c:46:a2:8e:26:b9:6b:3f:20:d6:40:9a:6f:
6d:71:61:75:5e:d8:86:b6:de:1f:0a:49:5a:82:73:fb:f0:ba:
9c:58:f0:26:b6:69:67:5c:3f:7e:32:c7:85:9f:6b:4b:c4:4d:
97:f5:69:a3:a1:9a:dd:6f:33:f0:3c:3d:59:8e:79:9c:f5:af:
39:83:86:b4:39:5c:e1:cc:33:55:a5:c0:ef:ce:fc:74:66:4d:
57:a0:90:df:96:05:61:f1:de:25:aa:31:13:34:8a:1f:6f:79:
6d:d1:c5:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDS1JtNWY52ZMmjsHqnFa+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YzJlYWI2YTI5NjA1MDYwNDZhMWRhNDMxMjc3M2Q5OGU5
N2NkNWEwHhcNMjUwNTEyMDcwMDE1WhcNMjUwNTEzMDcwMDE1WjAzMTEwLwYDVQQD
Eyg1ODdlZDUzZmFmZDIwYTY5NjJhZmY1Zjg3N2NlNWM2YzYyNzRhYzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsndDn6oI4jwEb3/L3PSdP0AFQV7J
Nwik+FEoSuS9suG3dd81r4mGYEDauJHUVTNy1RELFcraRdaVx7x6JvLvGCac3tV6
wOcv3GKAH9Msvba4UjzXs008kZYYYVULUCCoHkRiG4Z815Kczz6smUdvvRXACP5k
lysowdLbI2qmfuIXLHHSSG4Eve2wP98yqWMgGz52aEzZUbBH/0TLV12riAWgn94x
LVl6jzvf7sqoWpSvxvjvegvumDW+6nRqilDDtsiaeilKOH51xVMhMUtZs4+Nou3N
mN/X5X7176eQDLoP3CHiHOcqaAXNwp6lHdyy282kb/X3S8c6JaQeQE14lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFh+1T+v0gppYq/1+HfOXGxidKwfMB8GA1UdIwQY
MBaAFBTC6railgUGBGodpDEnc9mOl81aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk1McXRxS1dCUVlFYWgya01TZHoyWTZYelZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS80YjRkN2EtY2U0OC00N2E0LWEzYzQt
NjExZTU3ZGE5NWMwLzEvRk1McXRxS1dCUVlFYWgya01TZHoyWTZYelZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS80YjRkN2EtY2U0OC00N2E0LWEzYzQtNjExZTU3ZGE5NWMw
LzEvRk1McXRxS1dCUVlFYWgya01TZHoyWTZYelZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXM6z2rZp
Za/2FKF3P40Y+IhsoPGZx0e/QQdZUP1SWUV7IPDqj2qOKPSfesiRmLZsIrdVfZbu
6xXBVlZYwrApOj08u+kDn626Mp7yIwEOx5mpFzdx54qd3s2on1K+guj4FCySSrCw
hOR4TMMIkjyaTT+3wlvbIvl8ER0MJC+JSe2PG/bib38ljqTTjOwYHCUeiahqbid8
RqKOJrlrPyDWQJpvbXFhdV7YhrbeHwpJWoJz+/C6nFjwJrZpZ1w/fjLHhZ9rS8RN
l/Vpo6Ga3W8z8Dw9WY55nPWvOYOGtDlc4cwzVaXA7878dGZNV6CQ35YFYfHeJaox
EzSKH295bdHF8A==
-----END CERTIFICATE-----
Generated at Mon May 12 11:06:19 2025 by rpki-client