Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
File: Fvz0hmtshesMt2iO3UODD0GdZqI.mft (raw, json)
Hash identifier: f8myQbzsjCXuHuFW+QMr3RCucAJysUIvCNRJfXkA8zk=
Subject key identifier: 4F:F3:69:A0:41:AD:0D:03:05:16:7C:F0:2B:EC:85:14:07:0F:29:18
Authority key identifier: 16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
Certificate issuer: /CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Certificate serial: 0196BC3735C0D4A7CE8A8B869B69D21EDAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
Manifest number: 1247
Signing time: Sat 10 May 2025 22:00:56 +0000
Manifest this update: Sat 10 May 2025 22:00:56 +0000
Manifest next update: Sun 11 May 2025 22:00:56 +0000
Files and hashes: 1: Fvz0hmtshesMt2iO3UODD0GdZqI.crl (hash: BrTjn3BukJfvVc5gbmR3Z5HR2KOAMpHc4jjrtmoDhRQ=)
2: a5UnemfayVAdbbDqB5jidjgbSJ8.roa (hash: FqrPLPAJKzFu5i1kf8q3fsGuwgt9nQGlLWvvqh/+z7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:35:c0:d4:a7:ce:8a:8b:86:9b:69:d2:1e:da:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Validity
Not Before: May 10 22:00:56 2025 GMT
Not After : May 11 22:00:56 2025 GMT
Subject: CN=4ff369a041ad0d0305167cf02bec8514070f2918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:81:8d:bc:9d:3a:8f:98:37:e7:de:33:89:
bd:38:ad:dc:22:49:84:0b:eb:2e:e3:1b:a3:eb:a8:
3c:2e:75:cd:be:20:f0:aa:69:9b:55:e6:48:a0:07:
19:4f:2f:16:67:ae:47:d8:1a:e5:7b:fd:a0:12:96:
6e:ef:fd:96:47:6b:aa:ef:ad:23:a8:77:3b:66:4c:
df:aa:ae:08:46:92:78:2a:ac:ec:59:f7:9d:6b:18:
24:5a:dc:b9:92:cd:25:5a:35:bc:65:57:c3:a5:5a:
ba:97:6e:3c:64:f7:b8:c7:9f:dc:89:3a:c9:81:03:
eb:d1:ef:35:d3:24:c1:c1:a6:cb:cd:14:cd:b8:d0:
53:97:e2:c4:c1:76:db:98:4d:1c:79:ce:44:c2:db:
9d:9f:b0:d4:e2:ca:04:2b:18:5e:e7:84:ed:63:03:
53:00:dc:87:4d:d4:5c:dd:b2:13:88:b4:f7:ef:71:
9c:89:5c:d1:0a:24:c9:e2:83:52:12:33:df:cc:84:
e2:4f:a6:29:66:c4:af:64:7e:06:58:d7:1d:f3:57:
47:b1:89:1b:09:24:3a:24:af:fd:61:2b:63:a5:d2:
47:32:e1:82:e3:47:99:0f:4a:50:e8:c8:22:0f:d2:
3d:07:e8:fc:54:d6:95:e9:32:14:21:48:12:ac:1b:
ce:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F3:69:A0:41:AD:0D:03:05:16:7C:F0:2B:EC:85:14:07:0F:29:18
X509v3 Authority Key Identifier:
keyid:16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e6:b0:02:e3:5d:cc:f7:54:03:05:fa:03:67:1a:1a:f1:e7:
53:30:fd:d3:a1:22:81:4d:34:8f:5a:a8:71:17:d9:25:d9:31:
f5:6f:92:d3:60:26:72:5f:86:81:71:b2:e5:c4:dd:0b:88:ff:
67:4e:d4:14:50:b4:87:eb:f6:e9:24:43:5c:16:4e:0d:d1:1b:
05:a3:dd:8c:2c:89:e1:3e:95:d4:2d:80:95:a7:ae:d2:25:c4:
3e:0f:c3:71:af:f8:8b:82:a0:cc:a5:db:6c:a9:7d:82:9a:6f:
2d:eb:22:f3:0b:de:ed:f8:02:65:1a:c7:e7:4f:a4:c0:fb:0b:
1b:09:fe:b1:40:54:ec:f1:a8:4b:2e:a7:01:5d:63:0e:43:7f:
dc:0a:a2:7e:e2:12:18:2b:5e:69:b4:a4:a5:fc:b9:43:4b:79:
ab:a8:78:31:1c:d5:44:f6:95:ac:b3:90:2d:65:62:fe:98:c5:
30:8b:e6:70:ef:57:46:e5:44:bd:18:d8:de:d8:53:a7:b7:35:
43:24:8c:40:dd:f6:36:22:e8:d9:f9:db:e2:81:4d:91:a2:4a:
04:f2:66:c3:a5:38:02:44:21:8e:46:a8:a1:ac:1b:51:77:98:
d0:ba:f6:d6:e2:67:4a:39:21:c7:51:aa:94:c0:ab:be:f2:b6:
5a:34:87:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8NzXA1KfOiouGm2nSHtryMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZmNmNDg2NmI2Yzg1ZWIwY2I3Njg4ZWRkNDM4MzBmNDE5
ZDY2YTIwHhcNMjUwNTEwMjIwMDU2WhcNMjUwNTExMjIwMDU2WjAzMTEwLwYDVQQD
Eyg0ZmYzNjlhMDQxYWQwZDAzMDUxNjdjZjAyYmVjODUxNDA3MGYyOTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhyBjbydOo+YN+feM4m9OK3cIkmE
C+su4xuj66g8LnXNviDwqmmbVeZIoAcZTy8WZ65H2Brle/2gEpZu7/2WR2uq760j
qHc7Zkzfqq4IRpJ4KqzsWfedaxgkWty5ks0lWjW8ZVfDpVq6l248ZPe4x5/ciTrJ
gQPr0e810yTBwabLzRTNuNBTl+LEwXbbmE0cec5Ewtudn7DU4soEKxhe54TtYwNT
ANyHTdRc3bITiLT373GciVzRCiTJ4oNSEjPfzITiT6YpZsSvZH4GWNcd81dHsYkb
CSQ6JK/9YStjpdJHMuGC40eZD0pQ6MgiD9I9B+j8VNaV6TIUIUgSrBvOOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/zaaBBrQ0DBRZ88CvshRQHDykYMB8GA1UdIwQY
MBaAFBb89IZrbIXrDLdojt1Dgw9BnWaiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnZ6MGhtdHNoZXNNdDJpTzNVT0REMEdkWnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mYzg4ODMtYWFkMi00MThiLTliODct
ZWEyMTZiYTI1OTRkLzEvRnZ6MGhtdHNoZXNNdDJpTzNVT0REMEdkWnFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9mYzg4ODMtYWFkMi00MThiLTliODctZWEyMTZiYTI1OTRk
LzEvRnZ6MGhtdHNoZXNNdDJpTzNVT0REMEdkWnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZuawAuNd
zPdUAwX6A2caGvHnUzD906EigU00j1qocRfZJdkx9W+S02Amcl+GgXGy5cTdC4j/
Z07UFFC0h+v26SRDXBZODdEbBaPdjCyJ4T6V1C2Alaeu0iXEPg/Dca/4i4KgzKXb
bKl9gppvLesi8wve7fgCZRrH50+kwPsLGwn+sUBU7PGoSy6nAV1jDkN/3AqifuIS
GCteabSkpfy5Q0t5q6h4MRzVRPaVrLOQLWVi/pjFMIvmcO9XRuVEvRjY3thTp7c1
QySMQN32NiLo2fnb4oFNkaJKBPJmw6U4AkQhjkaooawbUXeY0Lr21uJnSjkhx1Gq
lMCrvvK2WjSH1Q==
-----END CERTIFICATE-----
Generated at Sun May 11 08:19:18 2025 by rpki-client