Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
File: FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft (raw, json)
Hash identifier: To0fP1TKLocXDnxyHnZbxG9NxelKj5j7wp+TdlFUn28=
Subject key identifier: 59:56:28:C4:96:E4:FD:5D:A8:8C:7D:43:20:ED:83:67:9E:58:A9:F2
Authority key identifier: 16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
Certificate issuer: /CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Certificate serial: 0196C3F08241E59137FE50C36F5400EA8742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
Manifest number: 1542
Signing time: Mon 12 May 2025 10:00:41 +0000
Manifest this update: Mon 12 May 2025 10:00:41 +0000
Manifest next update: Tue 13 May 2025 10:00:41 +0000
Files and hashes: 1: FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl (hash: sL6ett5NSE/FvpiuRM2/Gn/TPEkRmbfBitDis3HUcVk=)
2: N5Gh8WU6LbeHtUd8XRyhLT7tdkQ.roa (hash: mitxt5I+lSF+4rUo8JMUQCIfsBb/PVUX3ZvyGSCEfWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:82:41:e5:91:37:fe:50:c3:6f:54:00:ea:87:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Validity
Not Before: May 12 10:00:41 2025 GMT
Not After : May 13 10:00:41 2025 GMT
Subject: CN=595628c496e4fd5da88c7d4320ed83679e58a9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6f:bb:ff:68:af:ca:fc:5e:cd:7d:72:f5:c6:
b6:3a:6a:8e:4a:02:4d:ce:cd:03:26:e5:93:90:c1:
78:3f:9e:71:7d:6c:26:87:45:9d:ee:3d:77:f4:f2:
ba:46:3d:bf:1e:15:b1:46:1d:12:6e:5c:de:af:d8:
8b:1b:55:1e:01:4b:b5:7b:ae:cc:3d:2d:d7:bf:b5:
a3:6c:29:3a:7b:55:79:28:5b:44:f9:74:4e:72:3c:
45:45:ef:e7:52:76:14:f2:4d:0e:5e:e5:c6:67:f9:
42:f1:17:b4:29:89:ae:52:96:a1:7c:35:b9:4c:f7:
dc:b2:f6:60:cb:2d:a5:14:7d:65:b1:a0:e0:d5:ec:
6f:a8:12:c4:45:ae:4e:26:2f:1f:45:f4:c0:c6:37:
2e:68:65:19:c9:3e:6d:ba:13:95:f6:ef:d7:d6:d3:
49:cf:4e:2b:2c:2d:46:a9:88:c9:b6:cc:9d:7e:f5:
51:fe:ae:e9:08:b5:42:d2:1e:5c:81:b0:e8:21:aa:
82:78:bf:17:e7:6a:47:da:c2:fa:f6:02:c8:ff:cb:
44:1c:19:fe:71:6f:d0:49:ff:8d:7a:ae:26:17:f7:
9c:75:57:87:e0:8b:8b:ad:04:e7:27:77:e0:8b:5b:
34:dc:ad:06:b4:df:ad:77:1e:e5:4e:9c:ce:c2:5a:
9e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:56:28:C4:96:E4:FD:5D:A8:8C:7D:43:20:ED:83:67:9E:58:A9:F2
X509v3 Authority Key Identifier:
keyid:16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:31:47:5e:be:11:b2:6c:35:74:c8:d5:46:0d:d1:63:82:d6:
05:41:fe:b4:93:8a:69:b6:e2:dc:c3:53:c9:d5:97:bb:02:d2:
71:80:69:83:0c:5a:03:ba:46:65:68:b9:4e:cb:29:b4:c0:e8:
75:2a:c1:e0:42:ed:dc:fd:e5:d4:a0:b9:46:d0:3d:bd:7d:d2:
99:72:44:d1:90:0f:6e:4b:0f:85:c0:d0:a4:ed:ce:e5:84:a1:
04:c8:30:f0:06:11:6d:13:6f:29:99:75:8f:56:1b:40:ad:2c:
a2:70:aa:b4:a2:fc:fd:76:c4:b8:41:cf:9a:65:64:23:e0:fd:
a6:8f:80:d0:c7:ef:15:e6:26:50:d0:e4:df:45:7b:da:95:5e:
48:1c:6d:48:df:3a:0f:92:a9:37:17:84:75:8d:65:dd:b6:17:
09:33:7d:52:30:11:54:59:4f:35:0f:d8:ad:8d:57:70:bb:dd:
70:d5:81:61:21:a5:5c:93:9c:4f:56:fa:5d:4b:5e:d2:c5:6d:
49:0d:52:e4:57:35:97:87:32:e7:c2:7c:a5:f4:90:69:cb:23:
30:d2:23:8b:1b:95:da:ba:1f:a0:ae:e8:61:87:f9:81:54:ec:
18:18:30:37:e3:1f:a0:9a:91:11:be:d6:16:77:7b:c6:32:8f:
e2:33:0a:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbD8IJB5ZE3/lDDb1QA6odCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MjQxZGQ4M2Q4YWMwODBiNjY1MDRiZjkzNzQ1OWZmY2Vj
NGNjYzQwHhcNMjUwNTEyMTAwMDQxWhcNMjUwNTEzMTAwMDQxWjAzMTEwLwYDVQQD
Eyg1OTU2MjhjNDk2ZTRmZDVkYTg4YzdkNDMyMGVkODM2NzllNThhOWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2G+7/2ivyvxezX1y9ca2OmqOSgJN
zs0DJuWTkMF4P55xfWwmh0Wd7j139PK6Rj2/HhWxRh0Sblzer9iLG1UeAUu1e67M
PS3Xv7WjbCk6e1V5KFtE+XROcjxFRe/nUnYU8k0OXuXGZ/lC8Re0KYmuUpahfDW5
TPfcsvZgyy2lFH1lsaDg1exvqBLERa5OJi8fRfTAxjcuaGUZyT5tuhOV9u/X1tNJ
z04rLC1GqYjJtsydfvVR/q7pCLVC0h5cgbDoIaqCeL8X52pH2sL69gLI/8tEHBn+
cW/QSf+Neq4mF/ecdVeH4IuLrQTnJ3fgi1s03K0GtN+tdx7lTpzOwlqenQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlWKMSW5P1dqIx9QyDtg2eeWKnyMB8GA1UdIwQY
MBaAFBYkHdg9isCAtmUEv5N0Wf/OxMzEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmlRZDJEMkt3SUMyWlFTX2szUlpfODdFek1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iOTAwNjAtNWFhYS00M2VhLWJjZWIt
NWU3NDlmNDM0MWE0LzEvRmlRZDJEMkt3SUMyWlFTX2szUlpfODdFek1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9iOTAwNjAtNWFhYS00M2VhLWJjZWItNWU3NDlmNDM0MWE0
LzEvRmlRZDJEMkt3SUMyWlFTX2szUlpfODdFek1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApzFHXr4R
smw1dMjVRg3RY4LWBUH+tJOKabbi3MNTydWXuwLScYBpgwxaA7pGZWi5TssptMDo
dSrB4ELt3P3l1KC5RtA9vX3SmXJE0ZAPbksPhcDQpO3O5YShBMgw8AYRbRNvKZl1
j1YbQK0sonCqtKL8/XbEuEHPmmVkI+D9po+A0MfvFeYmUNDk30V72pVeSBxtSN86
D5KpNxeEdY1l3bYXCTN9UjARVFlPNQ/YrY1XcLvdcNWBYSGlXJOcT1b6XUte0sVt
SQ1S5Fc1l4cy58J8pfSQacsjMNIjixuV2rofoK7oYYf5gVTsGBgwN+MfoJqREb7W
Fnd7xjKP4jMKig==
-----END CERTIFICATE-----
Generated at Mon May 12 20:53:05 2025 by rpki-client