Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
File: FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft (raw, json)
Hash identifier: 2+VPeJJopqtxnxWUao0SiOmLU/74iHHZK/Zmsup/3+4=
Subject key identifier: D1:71:B6:BF:F6:E8:C6:E9:71:F4:06:A8:7A:50:83:6E:7D:DE:8D:F1
Authority key identifier: 14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
Certificate issuer: /CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Certificate serial: 0197C5A5E5AD25415BBDD4E437F13361346E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
Manifest number: 0BC3
Signing time: Tue 01 Jul 2025 11:01:13 +0000
Manifest this update: Tue 01 Jul 2025 11:01:13 +0000
Manifest next update: Wed 02 Jul 2025 11:01:13 +0000
Files and hashes: 1: FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl (hash: 8tvz0VvDd0d8KnCpRw8TiMGOiMJvDSjlT+xNPVpVVRs=)
2: XnnmqXJoOR0rO9VDsOL9RjMpoEc.roa (hash: LgD69e+nouQ5z7eZNAgfyUxJCnIL4Pp/DimPZswYsNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:a5:e5:ad:25:41:5b:bd:d4:e4:37:f1:33:61:34:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Validity
Not Before: Jul 1 11:01:13 2025 GMT
Not After : Jul 2 11:01:13 2025 GMT
Subject: CN=d171b6bff6e8c6e971f406a87a50836e7dde8df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:57:54:3f:5d:d7:4f:49:aa:54:a6:ae:78:69:
39:22:b1:07:c9:bf:4c:87:d6:30:29:69:b1:f4:b4:
f2:7f:a7:3a:38:fd:c6:45:94:01:f3:8e:59:72:02:
d2:55:60:49:9e:c9:c3:c4:fe:9e:c1:35:e4:e9:27:
3d:2b:29:4f:86:24:5d:cd:39:0b:5c:86:0b:da:4d:
64:fb:68:7b:84:0c:3d:c4:09:38:d0:98:92:f6:85:
0c:99:07:5f:49:6e:c9:41:f3:92:3b:4a:90:b3:b2:
bb:46:64:72:6a:b0:7a:ac:51:76:36:88:17:c5:84:
41:22:93:92:4b:4f:1f:55:20:1a:b7:71:1f:6c:9b:
77:96:1c:04:1b:14:86:36:e8:61:4e:71:bb:16:a3:
19:60:fb:ff:fc:bb:43:90:15:9c:dc:bc:1a:45:30:
a7:86:61:19:d4:48:70:52:86:b6:94:d3:9e:36:2b:
d0:d6:ab:82:7e:a1:93:10:83:21:f6:f0:4d:ee:0a:
da:91:c4:30:90:73:8b:2a:01:2b:43:b5:84:7a:b7:
18:e0:ff:9e:ed:0b:70:98:32:ab:c4:90:67:f8:c1:
86:5a:12:59:34:8a:33:e8:98:70:34:3e:13:20:7e:
56:9c:c4:30:01:1a:93:ba:cc:f1:41:29:44:a8:dd:
61:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:71:B6:BF:F6:E8:C6:E9:71:F4:06:A8:7A:50:83:6E:7D:DE:8D:F1
X509v3 Authority Key Identifier:
keyid:14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:28:ed:92:8b:db:59:54:71:74:3b:8f:10:36:b9:fc:6b:bb:
92:3d:ed:2d:d8:1d:f5:cd:c8:16:87:bb:8b:d6:a2:bf:3d:89:
6d:94:43:4f:c0:fd:80:09:c6:ca:3f:8c:a2:f5:3a:4d:77:2a:
b0:40:90:d9:37:eb:51:da:b9:1d:11:a7:38:20:ab:d7:66:6c:
72:1e:0b:c8:7b:1e:e3:52:9d:81:26:05:a8:24:64:e6:38:8f:
6b:93:cd:88:eb:43:a4:7c:28:d0:3f:89:47:84:10:e0:ae:86:
35:9b:9d:46:40:cb:04:d4:05:96:82:0f:0d:4b:83:c9:ec:1c:
d3:30:51:a7:c6:7a:c4:78:a2:3a:cc:fc:d9:f6:00:a9:9a:0e:
c4:11:6d:4c:43:f9:a5:bf:0f:6d:37:c5:57:46:b6:ba:92:e7:
36:46:52:5e:71:4e:f0:13:d0:e7:c0:d0:08:36:39:b7:22:3e:
58:3d:02:12:41:30:71:bc:98:f8:1d:3e:67:67:74:7e:4d:6f:
7f:ce:c1:6d:2f:05:37:51:93:bb:98:da:b5:f8:68:98:01:9e:
ad:0f:9c:9c:47:42:84:25:d1:88:10:31:f3:b1:1c:81:25:f9:
91:75:92:5d:86:f6:25:6e:c2:64:53:1d:09:e9:41:d3:24:93:
e0:fe:2e:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfFpeWtJUFbvdTkN/EzYTRuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZDY5MjdiNWE3NWI3NjY5YjFmZTJhYzhmZGM3YjYxMzc3
YzkxMDEwHhcNMjUwNzAxMTEwMTEzWhcNMjUwNzAyMTEwMTEzWjAzMTEwLwYDVQQD
EyhkMTcxYjZiZmY2ZThjNmU5NzFmNDA2YTg3YTUwODM2ZTdkZGU4ZGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VdUP13XT0mqVKaueGk5IrEHyb9M
h9YwKWmx9LTyf6c6OP3GRZQB845ZcgLSVWBJnsnDxP6ewTXk6Sc9KylPhiRdzTkL
XIYL2k1k+2h7hAw9xAk40JiS9oUMmQdfSW7JQfOSO0qQs7K7RmRyarB6rFF2NogX
xYRBIpOSS08fVSAat3EfbJt3lhwEGxSGNuhhTnG7FqMZYPv//LtDkBWc3LwaRTCn
hmEZ1EhwUoa2lNOeNivQ1quCfqGTEIMh9vBN7grakcQwkHOLKgErQ7WEercY4P+e
7QtwmDKrxJBn+MGGWhJZNIoz6JhwND4TIH5WnMQwARqTuszxQSlEqN1hZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFxtr/26MbpcfQGqHpQg2593o3xMB8GA1UdIwQY
MBaAFBTWkntadbdmmx/irI/ce2E3fJEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hM2Q4NWUtNDMzNS00MjVhLWIwZjYt
OGY1NGFiMTM0ZDgzLzEvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9hM2Q4NWUtNDMzNS00MjVhLWIwZjYtOGY1NGFiMTM0ZDgz
LzEvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSjtkovb
WVRxdDuPEDa5/Gu7kj3tLdgd9c3IFoe7i9aivz2JbZRDT8D9gAnGyj+MovU6TXcq
sECQ2TfrUdq5HRGnOCCr12Zsch4LyHse41KdgSYFqCRk5jiPa5PNiOtDpHwo0D+J
R4QQ4K6GNZudRkDLBNQFloIPDUuDyewc0zBRp8Z6xHiiOsz82fYAqZoOxBFtTEP5
pb8PbTfFV0a2upLnNkZSXnFO8BPQ58DQCDY5tyI+WD0CEkEwcbyY+B0+Z2d0fk1v
f87BbS8FN1GTu5jatfhomAGerQ+cnEdChCXRiBAx87EcgSX5kXWSXYb2JW7CZFMd
CelB0yST4P4uaQ==
-----END CERTIFICATE-----
Generated at Tue Jul 1 18:11:40 2025 by rpki-client