Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
File: FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft (raw, json)
Hash identifier: 4uL7SRgPp+yS6VmYdwrt2PnizNcfYEfX9E4RANezC0M=
Subject key identifier: F6:10:26:8A:BB:DA:B8:43:FE:C5:E2:56:37:EC:86:30:69:F8:17:FE
Authority key identifier: 15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5
Certificate issuer: /CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
Certificate serial: 01969FE46B85DE821372A03C35E7F7748E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
Manifest number: 02D1
Signing time: Mon 05 May 2025 10:01:09 +0000
Manifest this update: Mon 05 May 2025 10:01:09 +0000
Manifest next update: Tue 06 May 2025 10:01:09 +0000
Files and hashes: 1: AQb4NA0iIwYMaS4khoDyVt9RCG4.roa (hash: 58LXgLCBDudul5koOz+4VHQS0wDCBrVYTUIAiNkgAxo=)
2: FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl (hash: iLpMkCa+KFikInIO0LV9BIxBxNpK8v0D+LvmIzBTwWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:6b:85:de:82:13:72:a0:3c:35:e7:f7:74:8e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
Validity
Not Before: May 5 10:01:09 2025 GMT
Not After : May 6 10:01:09 2025 GMT
Subject: CN=f610268abbdab843fec5e25637ec863069f817fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:f2:92:5a:a8:f0:39:b5:7a:f3:e7:b0:55:5e:
c8:fa:72:4f:b1:d8:c2:70:f1:f2:3f:6d:7c:dd:4d:
4a:a7:75:49:f1:48:97:ba:c5:a3:6e:ad:af:4f:d0:
09:57:96:38:bb:ab:03:4d:a5:91:a1:30:c1:42:85:
71:8e:41:f0:b7:41:42:c4:f8:34:36:68:ae:a5:dd:
21:a1:7c:e8:da:27:30:7f:25:b3:72:48:ed:44:e8:
50:ba:21:6f:3f:10:05:dd:d9:f7:61:5b:43:b5:50:
f4:90:3b:65:50:be:7e:67:7f:28:5b:27:56:f0:60:
26:f9:a9:7f:87:9a:54:64:16:33:dc:d3:1a:ef:7e:
60:ef:a8:22:32:b1:21:62:3e:b2:8c:4d:ba:b9:b7:
8c:59:44:4b:d3:02:3a:af:17:b5:53:b6:e3:9f:a6:
83:d2:53:99:69:3c:46:0a:e5:d8:62:1c:93:7c:c1:
42:df:b1:14:2d:c8:c3:d7:d2:db:b7:d3:42:2a:52:
b0:05:a8:df:52:f6:26:6e:4a:50:ec:f2:fa:84:6c:
96:dd:5d:ce:a0:16:94:ee:5b:67:5d:08:cd:8e:b0:
60:a8:1b:4b:92:9e:e6:3b:01:93:00:b3:89:44:c1:
8c:27:08:15:7d:78:88:bc:78:ad:b5:cd:dc:13:c9:
2e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:10:26:8A:BB:DA:B8:43:FE:C5:E2:56:37:EC:86:30:69:F8:17:FE
X509v3 Authority Key Identifier:
keyid:15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:31:67:62:14:2d:2c:ab:57:f4:ab:3e:2a:31:f5:3e:c7:4a:
7f:ab:cd:f5:95:fb:56:80:a4:75:73:e2:29:c8:43:de:c8:2e:
c2:ae:75:5b:06:1d:4e:60:c2:25:50:1c:a9:52:74:44:b1:8b:
b8:f3:81:9b:86:0f:72:34:90:fa:d1:46:94:d3:ff:c9:b2:94:
24:f5:b2:aa:29:ed:2f:a8:0f:5e:1c:0d:77:92:0a:56:c0:46:
5f:e1:5d:25:7c:ea:b5:34:7c:6b:69:e3:1c:f5:1e:63:95:df:
26:a5:3c:ef:9d:56:73:17:c9:4e:6b:98:e4:0e:e8:d8:22:69:
04:e4:51:54:94:dd:b6:b5:4e:8e:22:76:4e:37:c4:9f:ea:e3:
e2:ce:29:cc:c7:5a:1e:ed:f8:f8:d6:08:28:79:24:f8:a4:c8:
ae:d1:20:a3:9f:9f:94:d0:c0:aa:c4:e2:60:ff:06:c4:6e:86:
81:a1:28:08:0a:eb:ae:e0:d4:8f:f4:5c:30:05:92:d1:81:4a:
ad:54:1d:60:4c:8b:1f:13:ea:f4:5a:b2:ec:0d:b5:17:56:3b:
91:af:00:fa:ad:0a:9a:45:d3:ee:b1:71:3c:63:fe:7e:3c:76:
08:c2:99:82:86:58:4c:a5:2f:de:5d:7f:a2:d1:35:48:99:6f:
3d:09:24:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaf5GuF3oITcqA8Nef3dI5GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjFmYjEyOTAzYTVjZDRiYzE3YWJiNTk4NzNjOWQ2ZGE3
ZTY5YjUwHhcNMjUwNTA1MTAwMTA5WhcNMjUwNTA2MTAwMTA5WjAzMTEwLwYDVQQD
EyhmNjEwMjY4YWJiZGFiODQzZmVjNWUyNTYzN2VjODYzMDY5ZjgxN2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+PKSWqjwObV68+ewVV7I+nJPsdjC
cPHyP2183U1Kp3VJ8UiXusWjbq2vT9AJV5Y4u6sDTaWRoTDBQoVxjkHwt0FCxPg0
Nmiupd0hoXzo2icwfyWzckjtROhQuiFvPxAF3dn3YVtDtVD0kDtlUL5+Z38oWydW
8GAm+al/h5pUZBYz3NMa735g76giMrEhYj6yjE26ubeMWURL0wI6rxe1U7bjn6aD
0lOZaTxGCuXYYhyTfMFC37EULcjD19Lbt9NCKlKwBajfUvYmbkpQ7PL6hGyW3V3O
oBaU7ltnXQjNjrBgqBtLkp7mOwGTALOJRMGMJwgVfXiIvHittc3cE8kuLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYQJoq72rhD/sXiVjfshjBp+Bf+MB8GA1UdIwQY
MBaAFBXx+xKQOlzUvBertZhzydbafmm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZIN0VwQTZYTlM4RjZ1MW1IUEoxdHAtYWJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lYzRhMmItNzZkNy00NDczLTk5NDUt
MmYyZjhiNTkwNTAzLzEvRmZIN0VwQTZYTlM4RjZ1MW1IUEoxdHAtYWJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9lYzRhMmItNzZkNy00NDczLTk5NDUtMmYyZjhiNTkwNTAz
LzEvRmZIN0VwQTZYTlM4RjZ1MW1IUEoxdHAtYWJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizFnYhQt
LKtX9Ks+KjH1PsdKf6vN9ZX7VoCkdXPiKchD3sguwq51WwYdTmDCJVAcqVJ0RLGL
uPOBm4YPcjSQ+tFGlNP/ybKUJPWyqintL6gPXhwNd5IKVsBGX+FdJXzqtTR8a2nj
HPUeY5XfJqU8751WcxfJTmuY5A7o2CJpBORRVJTdtrVOjiJ2TjfEn+rj4s4pzMda
Hu34+NYIKHkk+KTIrtEgo5+flNDAqsTiYP8GxG6GgaEoCArrruDUj/RcMAWS0YFK
rVQdYEyLHxPq9Fqy7A21F1Y7ka8A+q0KmkXT7rFxPGP+fjx2CMKZgoZYTKUv3l1/
otE1SJlvPQkkcg==
-----END CERTIFICATE-----
Generated at Mon May 5 12:57:32 2025 by rpki-client