Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
File: FpfEbq-hDsXZB7sF43EjtpKrSUw.mft (raw, json)
Hash identifier: fvK+faZkhP+TeNpgHX6fXItK2HmhLcQDKcBqG4XIIfs=
Subject key identifier: BC:87:9D:EC:6A:A4:9B:D3:0A:12:B8:35:3C:B5:F0:34:36:BB:2A:CC
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial: 0196C2390C876638EDF1E994E864F238D16E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
Manifest number: 14E4
Signing time: Mon 12 May 2025 02:00:40 +0000
Manifest this update: Mon 12 May 2025 02:00:40 +0000
Manifest next update: Tue 13 May 2025 02:00:40 +0000
Files and hashes: 1: FpfEbq-hDsXZB7sF43EjtpKrSUw.crl (hash: lYEokRqQtl01+Rec9fHdYQ9Zpi8d+hAISa5QPHv5qFE=)
2: XWiker2v7GIlhkuZZtR48lVm108.roa (hash: NhUbFkPuOTxAHiVlHIvGiCnLEnSRvJwEzL+UojBb8qg=)
3: zJ5MYEMzWfucEDGxLfmRzsaSeEg.roa (hash: 13et8HkfUmrO0+ptVe41OzMBwG62Ru5G13R9afNJkP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:0c:87:66:38:ed:f1:e9:94:e8:64:f2:38:d1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Validity
Not Before: May 12 02:00:40 2025 GMT
Not After : May 13 02:00:40 2025 GMT
Subject: CN=bc879dec6aa49bd30a12b8353cb5f03436bb2acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:f2:93:ea:cd:e5:ea:2a:f0:c1:1c:51:9f:09:
d3:a6:7e:22:cc:46:55:7f:19:b3:f1:19:4d:9a:99:
fa:1c:ad:25:83:b9:26:ac:36:f9:dd:d2:81:c3:06:
0a:31:33:a0:4a:1a:bd:07:d9:b4:50:d5:b1:4e:a8:
59:b4:7c:1d:d3:aa:3f:23:a9:26:1d:b2:85:cb:74:
1d:3b:7d:c2:b5:18:91:7f:80:4a:78:c2:e0:bd:8f:
6b:a7:e5:57:de:66:08:53:75:66:b2:22:5a:28:81:
10:5c:d5:22:b7:c4:51:17:a1:a3:83:98:e2:d9:43:
8c:08:91:58:c4:44:74:9b:ea:57:a8:75:3e:ce:e8:
41:ce:52:d5:9b:7f:ab:2c:4d:e5:92:b8:50:05:58:
60:37:33:21:08:7d:1d:68:06:3a:0c:98:a2:84:45:
93:8b:4f:15:21:a0:ab:13:09:e9:62:78:e4:b9:e7:
92:f1:d0:71:ca:a7:7a:58:8c:0a:bf:fc:f2:14:9b:
f7:be:cd:29:c2:ae:3b:18:be:57:df:56:f0:06:fb:
d0:c5:14:78:7a:34:04:c4:b3:04:7c:9d:23:65:88:
7e:0b:ee:90:b4:a9:c1:54:b9:1d:f9:57:a1:88:69:
a7:b5:e7:5a:c9:7f:7f:19:8d:ca:9c:10:4a:f3:f8:
01:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:87:9D:EC:6A:A4:9B:D3:0A:12:B8:35:3C:B5:F0:34:36:BB:2A:CC
X509v3 Authority Key Identifier:
keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:14:2e:0e:41:8d:d9:0a:32:d8:7b:78:1b:93:d5:b2:15:e4:
d9:5f:dd:85:36:03:d0:ec:b1:6a:11:d2:ec:03:17:62:8b:c1:
74:a7:f2:45:0c:e4:95:c5:18:5d:27:45:bf:f6:be:bf:5e:8b:
24:2a:9a:7e:84:c3:4a:25:a0:b6:0c:1a:e0:90:47:7a:94:32:
54:9e:1d:a0:73:f3:16:de:3c:94:3e:04:a5:5d:ab:c9:16:96:
1f:78:bb:be:05:b6:ac:07:10:95:d6:a4:80:6a:61:97:3b:d5:
37:e6:3e:12:3c:ac:d2:d2:d8:69:9c:a3:40:20:3e:c4:f7:a3:
cf:07:1a:f1:ff:1c:8f:92:9d:ad:c8:52:03:e9:bf:20:f4:b7:
5b:47:50:cd:5a:3f:77:22:48:72:e8:e0:fe:e1:f7:25:e8:9e:
1e:ea:88:29:f4:65:13:04:ac:15:81:e1:62:71:9b:48:27:61:
db:ba:64:9e:2b:6d:0b:ff:40:f9:34:a0:a0:c7:b6:28:36:78:
ec:be:5d:3f:d5:26:9a:3d:26:97:52:40:4b:d0:37:88:b5:64:
1c:aa:59:ad:a8:69:5a:54:d0:ea:83:a1:85:01:9e:94:0a:2c:
42:ab:97:0b:b1:9e:7b:a2:43:21:c6:00:9e:a4:73:25:b3:46:
ff:d5:c4:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCOQyHZjjt8emU6GTyONFuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OTdjNDZlYWZhMTBlYzVkOTA3YmIwNWUzNzEyM2I2OTJh
YjQ5NGMwHhcNMjUwNTEyMDIwMDQwWhcNMjUwNTEzMDIwMDQwWjAzMTEwLwYDVQQD
EyhiYzg3OWRlYzZhYTQ5YmQzMGExMmI4MzUzY2I1ZjAzNDM2YmIyYWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+PKT6s3l6irwwRxRnwnTpn4izEZV
fxmz8RlNmpn6HK0lg7kmrDb53dKBwwYKMTOgShq9B9m0UNWxTqhZtHwd06o/I6km
HbKFy3QdO33CtRiRf4BKeMLgvY9rp+VX3mYIU3VmsiJaKIEQXNUit8RRF6Gjg5ji
2UOMCJFYxER0m+pXqHU+zuhBzlLVm3+rLE3lkrhQBVhgNzMhCH0daAY6DJiihEWT
i08VIaCrEwnpYnjkueeS8dBxyqd6WIwKv/zyFJv3vs0pwq47GL5X31bwBvvQxRR4
ejQExLMEfJ0jZYh+C+6QtKnBVLkd+VehiGmntedayX9/GY3KnBBK8/gBeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyHnexqpJvTChK4NTy18DQ2uyrMMB8GA1UdIwQY
MBaAFBaXxG6voQ7F2Qe7BeNxI7aSq0lMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBmRWJxLWhEc1haQjdzRjQzRWp0cEtyU1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kMDk5MmQtOTNmYS00ODQ2LWE0OTUt
NzY1MjJjMjA3YzU1LzEvRnBmRWJxLWhEc1haQjdzRjQzRWp0cEtyU1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kMDk5MmQtOTNmYS00ODQ2LWE0OTUtNzY1MjJjMjA3YzU1
LzEvRnBmRWJxLWhEc1haQjdzRjQzRWp0cEtyU1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhQuDkGN
2Qoy2Ht4G5PVshXk2V/dhTYD0OyxahHS7AMXYovBdKfyRQzklcUYXSdFv/a+v16L
JCqafoTDSiWgtgwa4JBHepQyVJ4doHPzFt48lD4EpV2ryRaWH3i7vgW2rAcQldak
gGphlzvVN+Y+Ejys0tLYaZyjQCA+xPejzwca8f8cj5KdrchSA+m/IPS3W0dQzVo/
dyJIcujg/uH3JeieHuqIKfRlEwSsFYHhYnGbSCdh27pknittC/9A+TSgoMe2KDZ4
7L5dP9Ummj0ml1JAS9A3iLVkHKpZrahpWlTQ6oOhhQGelAosQquXC7Gee6JDIcYA
nqRzJbNG/9XEpA==
-----END CERTIFICATE-----
Generated at Mon May 12 04:28:05 2025 by rpki-client