Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
File: FMEnKYgtb8xADSTHoWGR6_ea064.mft (raw, json)
Hash identifier: XtY5ijeFdCR3SVdNi8VknkX5/u6bxLC4B8QbqEa0ZAI=
Subject key identifier: DC:5C:2F:F4:EE:24:7A:ED:9C:4D:5D:AF:A9:9B:C4:46:53:F8:91:E5
Authority key identifier: 14:C1:27:29:88:2D:6F:CC:40:0D:24:C7:A1:61:91:EB:F7:9A:D3:AE
Certificate issuer: /CN=14c12729882d6fcc400d24c7a16191ebf79ad3ae
Certificate serial: 0196A577F151BE967C9F060FCF88306C084E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
Manifest number: 14C2
Signing time: Tue 06 May 2025 12:00:23 +0000
Manifest this update: Tue 06 May 2025 12:00:23 +0000
Manifest next update: Wed 07 May 2025 12:00:23 +0000
Files and hashes: 1: FMEnKYgtb8xADSTHoWGR6_ea064.crl (hash: roSOIDX3sGTpVxeA+536ov4mn+0hmxWeZmO5ZZ2+5PA=)
2: gTXc09MBtqnmw3GOQ02qrwpMS84.roa (hash: c/faZAzER1FA8lwrLMG8MZsQ5SgoZv9mWu1aAorpMcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:77:f1:51:be:96:7c:9f:06:0f:cf:88:30:6c:08:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c12729882d6fcc400d24c7a16191ebf79ad3ae
Validity
Not Before: May 6 12:00:23 2025 GMT
Not After : May 7 12:00:23 2025 GMT
Subject: CN=dc5c2ff4ee247aed9c4d5dafa99bc44653f891e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5b:a5:b9:4d:03:ca:b1:aa:9b:54:22:d5:10:
c2:5d:98:8b:c6:d7:89:ee:fe:bc:0a:df:21:b6:16:
e7:95:6a:1f:50:13:9e:18:cb:fe:51:cc:79:da:28:
36:eb:37:7c:c3:3f:7c:0a:a9:91:60:d8:3a:e6:13:
48:a3:8b:5b:3c:d4:20:d1:72:56:37:6c:ca:45:fa:
52:4c:f2:0f:b3:80:3b:5e:90:bc:43:d8:e1:a6:e1:
3e:43:3f:90:59:40:ee:40:1e:ca:c6:1d:6e:87:cf:
33:b8:6e:83:84:fe:14:06:5c:1e:44:2e:1e:82:2b:
f1:56:8a:2a:8e:79:c9:2a:d8:c6:3d:d5:b7:50:26:
02:b5:9d:c8:62:0a:a2:a3:82:92:e5:f7:f1:82:99:
8c:0b:5f:0e:ad:76:06:61:0e:5b:9c:84:2d:39:1f:
4a:3b:b0:18:5d:da:fd:79:ba:25:2f:c4:71:3d:51:
e8:aa:fb:4d:ba:63:5c:cb:f6:7b:87:a2:16:1f:1b:
7d:55:24:9c:6c:30:9f:a8:17:d1:09:33:80:62:cf:
7b:21:21:0d:c0:a1:1a:65:c0:cc:ce:0b:25:0e:05:
bc:bc:6e:b1:eb:22:b6:1a:fa:de:7b:83:3e:ab:4b:
49:a8:19:bf:30:4a:71:34:2b:e6:21:1b:9f:78:b7:
cd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5C:2F:F4:EE:24:7A:ED:9C:4D:5D:AF:A9:9B:C4:46:53:F8:91:E5
X509v3 Authority Key Identifier:
keyid:14:C1:27:29:88:2D:6F:CC:40:0D:24:C7:A1:61:91:EB:F7:9A:D3:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7b:25:b9:0d:3d:5f:9e:06:73:32:d4:64:b6:82:88:31:8e:
12:3c:4d:13:7b:eb:05:79:91:cd:60:53:50:63:ab:80:69:cc:
d5:b8:18:88:9b:cb:9d:6b:e4:80:b4:67:6b:b2:41:25:75:48:
2f:e0:37:c5:90:5a:2b:2e:d6:a3:cf:bf:60:97:ff:2e:4a:6a:
86:03:4b:b5:d2:66:c4:d8:0a:78:13:6a:b6:8f:17:0d:58:05:
59:d3:50:17:c8:f6:58:96:96:25:ba:0f:57:c8:c3:f1:7d:69:
66:73:13:60:bb:b8:f2:38:73:ae:e7:a9:89:71:da:48:2e:fd:
03:ff:74:d7:d2:6c:7a:f7:29:6f:33:fb:df:e2:d9:45:2c:11:
ea:9f:c6:4d:dd:a9:00:8d:91:60:fe:0c:df:f1:ed:6a:2b:c5:
a6:94:d1:71:06:df:78:f5:2d:b1:7d:8e:31:f5:5b:52:15:35:
a1:27:3b:e0:89:cb:4b:e6:09:63:24:06:9d:8c:04:06:7f:bc:
74:65:7f:6e:4b:e8:43:cb:28:f8:44:6a:db:e4:49:ad:52:19:
98:42:18:f8:a2:08:1a:9e:fd:66:c9:4b:26:43:5e:bf:d8:5a:
42:04:19:ef:8d:4d:f5:7f:20:f5:37:10:33:e8:64:f7:6b:68:
72:fe:24:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZald/FRvpZ8nwYPz4gwbAhOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YzEyNzI5ODgyZDZmY2M0MDBkMjRjN2ExNjE5MWViZjc5
YWQzYWUwHhcNMjUwNTA2MTIwMDIzWhcNMjUwNTA3MTIwMDIzWjAzMTEwLwYDVQQD
EyhkYzVjMmZmNGVlMjQ3YWVkOWM0ZDVkYWZhOTliYzQ0NjUzZjg5MWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1uluU0DyrGqm1Qi1RDCXZiLxteJ
7v68Ct8hthbnlWofUBOeGMv+Ucx52ig26zd8wz98CqmRYNg65hNIo4tbPNQg0XJW
N2zKRfpSTPIPs4A7XpC8Q9jhpuE+Qz+QWUDuQB7Kxh1uh88zuG6DhP4UBlweRC4e
givxVooqjnnJKtjGPdW3UCYCtZ3IYgqio4KS5ffxgpmMC18OrXYGYQ5bnIQtOR9K
O7AYXdr9ebolL8RxPVHoqvtNumNcy/Z7h6IWHxt9VSScbDCfqBfRCTOAYs97ISEN
wKEaZcDMzgslDgW8vG6x6yK2Gvree4M+q0tJqBm/MEpxNCvmIRufeLfNxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxcL/TuJHrtnE1dr6mbxEZT+JHlMB8GA1UdIwQY
MBaAFBTBJymILW/MQA0kx6Fhkev3mtOuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk1FbktZZ3RiOHhBRFNUSG9XR1I2X2VhMDY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jYjNhNTMtMDg4Ny00YzJhLTlkZDIt
ZGQ3MGZkNjc5ZWZiLzEvRk1FbktZZ3RiOHhBRFNUSG9XR1I2X2VhMDY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jYjNhNTMtMDg4Ny00YzJhLTlkZDItZGQ3MGZkNjc5ZWZi
LzEvRk1FbktZZ3RiOHhBRFNUSG9XR1I2X2VhMDY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAansluQ09
X54GczLUZLaCiDGOEjxNE3vrBXmRzWBTUGOrgGnM1bgYiJvLnWvkgLRna7JBJXVI
L+A3xZBaKy7Wo8+/YJf/LkpqhgNLtdJmxNgKeBNqto8XDVgFWdNQF8j2WJaWJboP
V8jD8X1pZnMTYLu48jhzruepiXHaSC79A/9019JsevcpbzP73+LZRSwR6p/GTd2p
AI2RYP4M3/HtaivFppTRcQbfePUtsX2OMfVbUhU1oSc74InLS+YJYyQGnYwEBn+8
dGV/bkvoQ8so+ERq2+RJrVIZmEIY+KIIGp79ZslLJkNev9haQgQZ741N9X8g9TcQ
M+hk92tocv4kiw==
-----END CERTIFICATE-----
Generated at Tue May 6 15:51:19 2025 by rpki-client