Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
File: fTssMztylVesC-AnQLIiltgCv4E.mft (raw, json)
Hash identifier: GXZ9zlOKRjPNLLQ6iIB2Q8T445bXH5rvAefs0JwLURA=
Subject key identifier: AE:1A:8D:60:6F:D5:C2:D5:02:E7:A3:10:E2:6C:16:5C:AE:27:29:6D
Authority key identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
Certificate issuer: /CN=7d3b2c333b729557ac0be02740b22296d802bf81
Certificate serial: 0196A50A292FAE33375E0D414C12E97C64C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
Manifest number: 14FF
Signing time: Tue 06 May 2025 10:00:28 +0000
Manifest this update: Tue 06 May 2025 10:00:28 +0000
Manifest next update: Wed 07 May 2025 10:00:28 +0000
Files and hashes: 1: WqjB7EtZkSL-ePfOxy2nv62eOkA.roa (hash: PG/xFOwvIaW9rUlAX7rZLKuzOPksgvVi2XmtGvzJW70=)
2: fTssMztylVesC-AnQLIiltgCv4E.crl (hash: ByWFUx+yqW+4KkTL7zWXX+6AezFnUorHk9iaoQpZbWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:0a:29:2f:ae:33:37:5e:0d:41:4c:12:e9:7c:64:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3b2c333b729557ac0be02740b22296d802bf81
Validity
Not Before: May 6 10:00:28 2025 GMT
Not After : May 7 10:00:28 2025 GMT
Subject: CN=ae1a8d606fd5c2d502e7a310e26c165cae27296d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e9:f1:ed:dc:c5:86:65:ba:34:91:50:54:ae:
0d:aa:48:1d:67:fd:95:e3:91:af:ba:96:42:bd:6a:
bb:69:f0:a4:45:23:5b:2a:f7:54:12:4e:10:0f:f5:
09:4e:a5:ef:5b:0f:07:24:89:23:c1:2a:b5:15:90:
60:92:eb:92:83:06:0e:f5:99:67:28:44:30:e6:01:
0a:a1:b2:b7:0d:8e:5d:a9:44:63:c0:63:89:4d:2f:
bd:3a:a4:28:e6:18:d5:09:51:28:3a:29:73:04:fa:
90:fe:62:bf:94:2d:4b:2b:29:61:24:9c:cb:cd:06:
9b:ad:56:2f:fe:7d:a0:58:35:9f:20:7a:53:9c:3d:
f7:4d:08:c4:75:1a:45:58:ab:07:fb:e9:fe:70:c9:
3d:59:fb:30:9b:d3:9a:18:0d:af:8a:6b:48:28:c9:
e1:82:08:80:c0:d4:96:71:53:b0:3e:e6:be:99:a5:
68:e1:35:a7:8f:8f:42:ac:60:23:b7:7d:fd:31:9c:
c5:9c:d6:27:7f:6f:5d:8f:21:d1:98:22:1e:67:25:
65:fe:8b:c9:88:1f:18:63:5c:d7:29:c6:73:44:23:
a6:fa:40:de:9f:2d:45:aa:36:20:dc:6a:26:d5:19:
44:5e:ec:09:f5:f8:1b:97:c9:bd:1d:55:7e:d5:50:
f0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1A:8D:60:6F:D5:C2:D5:02:E7:A3:10:E2:6C:16:5C:AE:27:29:6D
X509v3 Authority Key Identifier:
keyid:7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:57:d0:1a:c3:24:83:1d:e4:19:06:1b:8f:d1:99:5b:9c:2b:
e4:13:c0:e6:1d:99:56:cc:8a:60:19:93:91:7e:6e:71:7b:65:
a1:01:60:1d:f8:7e:ff:31:a5:5c:2f:d0:bc:2f:c2:ee:6e:43:
bb:17:5c:ad:46:cd:24:40:46:07:78:08:7a:1b:cb:19:42:60:
c2:65:4c:ad:53:e3:15:c5:6d:17:3b:9d:83:fd:7b:fb:bd:57:
3f:ff:62:9c:65:c1:73:95:91:83:11:e5:66:9d:83:64:62:ff:
47:00:f4:1b:d2:42:ab:28:c4:38:36:84:2f:91:05:0a:ce:f7:
86:2e:d7:8f:b6:60:43:68:8a:f7:e9:68:81:af:3a:90:7a:70:
98:13:dd:e8:43:cf:d0:31:9c:92:84:a4:ac:00:a5:26:21:84:
55:27:c8:df:cb:e6:e3:a2:da:77:a7:70:db:3a:25:b2:b7:92:
89:c9:30:a8:62:fa:82:9b:02:eb:91:95:30:46:50:10:a3:96:
cc:a1:98:ef:dc:fa:b0:a2:33:a6:49:cb:6b:84:c5:3f:fe:a0:
51:4e:ab:5c:d4:2d:8d:cd:71:ca:e5:a0:18:c7:cc:3e:1e:61:
a7:34:9f:ec:c8:37:81:be:28:d0:5f:36:d7:5f:12:c1:42:a7:
09:4c:56:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZalCikvrjM3Xg1BTBLpfGTHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkM2IyYzMzM2I3Mjk1NTdhYzBiZTAyNzQwYjIyMjk2ZDgw
MmJmODEwHhcNMjUwNTA2MTAwMDI4WhcNMjUwNTA3MTAwMDI4WjAzMTEwLwYDVQQD
EyhhZTFhOGQ2MDZmZDVjMmQ1MDJlN2EzMTBlMjZjMTY1Y2FlMjcyOTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlunx7dzFhmW6NJFQVK4NqkgdZ/2V
45GvupZCvWq7afCkRSNbKvdUEk4QD/UJTqXvWw8HJIkjwSq1FZBgkuuSgwYO9Zln
KEQw5gEKobK3DY5dqURjwGOJTS+9OqQo5hjVCVEoOilzBPqQ/mK/lC1LKylhJJzL
zQabrVYv/n2gWDWfIHpTnD33TQjEdRpFWKsH++n+cMk9Wfswm9OaGA2vimtIKMnh
ggiAwNSWcVOwPua+maVo4TWnj49CrGAjt339MZzFnNYnf29djyHRmCIeZyVl/ovJ
iB8YY1zXKcZzRCOm+kDeny1FqjYg3Gom1RlEXuwJ9fgbl8m9HVV+1VDwswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4ajWBv1cLVAuejEOJsFlyuJyltMB8GA1UdIwQY
MBaAFH07LDM7cpVXrAvgJ0CyIpbYAr+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlRzc016dHlsVmVzQy1BblFMSWlsdGdDdjRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82YjFiNjQtMjU2NC00N2E3LWIxYzEt
NTI4MzVkYjY1MTJjLzEvZlRzc016dHlsVmVzQy1BblFMSWlsdGdDdjRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82YjFiNjQtMjU2NC00N2E3LWIxYzEtNTI4MzVkYjY1MTJj
LzEvZlRzc016dHlsVmVzQy1BblFMSWlsdGdDdjRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVfQGsMk
gx3kGQYbj9GZW5wr5BPA5h2ZVsyKYBmTkX5ucXtloQFgHfh+/zGlXC/QvC/C7m5D
uxdcrUbNJEBGB3gIehvLGUJgwmVMrVPjFcVtFzudg/17+71XP/9inGXBc5WRgxHl
Zp2DZGL/RwD0G9JCqyjEODaEL5EFCs73hi7Xj7ZgQ2iK9+loga86kHpwmBPd6EPP
0DGckoSkrAClJiGEVSfI38vm46Lad6dw2zolsreSickwqGL6gpsC65GVMEZQEKOW
zKGY79z6sKIzpknLa4TFP/6gUU6rXNQtjc1xyuWgGMfMPh5hpzSf7Mg3gb4o0F82
118SwUKnCUxWZg==
-----END CERTIFICATE-----
Generated at Tue May 6 19:24:56 2025 by rpki-client