Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
File: FdaRyV0UuLzeZpKgMgzA4odWsFk.mft (raw, json)
Hash identifier: TYaKprzRHZ815b+zYRfgGyLE8DkL1bvkdcFm2EePV0A=
Subject key identifier: B5:DF:BC:E3:5F:95:48:BF:E7:3E:46:0E:71:4C:34:89:1A:FC:65:88
Authority key identifier: 15:D6:91:C9:5D:14:B8:BC:DE:66:92:A0:32:0C:C0:E2:87:56:B0:59
Certificate issuer: /CN=15d691c95d14b8bcde6692a0320cc0e28756b059
Certificate serial: 0196C45E50EF84F4B61BA095F66B1441D4E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
Manifest number: 0365
Signing time: Mon 12 May 2025 12:00:37 +0000
Manifest this update: Mon 12 May 2025 12:00:37 +0000
Manifest next update: Tue 13 May 2025 12:00:37 +0000
Files and hashes: 1: FdaRyV0UuLzeZpKgMgzA4odWsFk.crl (hash: 3LLqljHpr34XVF+XT9zJBuKOSLuoqAb3VGHs6EoDXW4=)
2: l3kIS-H41zLKlD417TNejtnJFY4.roa (hash: FXoM//hoNobYIufdMl7hBHWJsSDmxoPmDOYAZonvSC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:50:ef:84:f4:b6:1b:a0:95:f6:6b:14:41:d4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15d691c95d14b8bcde6692a0320cc0e28756b059
Validity
Not Before: May 12 12:00:37 2025 GMT
Not After : May 13 12:00:37 2025 GMT
Subject: CN=b5dfbce35f9548bfe73e460e714c34891afc6588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:26:e9:43:2f:2f:bd:64:46:39:47:93:80:
73:97:f9:a1:6e:b3:b1:1b:3a:5c:e0:6e:45:5a:63:
c1:83:ee:c7:dd:65:e7:20:e7:b5:88:54:1a:9f:c4:
46:33:8e:fa:63:d1:a2:8d:ed:9a:4b:cd:cc:f7:39:
aa:b1:6d:cd:62:79:90:c1:f6:cc:5a:e5:53:0a:58:
74:f7:a0:34:0b:5e:34:6c:35:46:0e:72:5b:2a:8c:
9e:1f:bd:15:42:a5:d8:60:e6:bf:48:7a:67:2c:4c:
f8:97:fd:bf:63:01:e4:32:e8:fc:14:6a:3e:20:5f:
ce:68:eb:4f:85:94:c1:9c:9d:d6:3c:dc:43:47:0c:
2f:ba:05:5b:27:08:4d:bf:81:9c:e0:77:53:33:67:
5b:34:cc:d3:2c:ad:e4:5a:94:c7:7e:35:3c:84:1c:
74:9f:43:c5:86:ee:c3:ac:33:49:2f:be:7b:00:55:
59:23:11:f0:d0:a7:d5:da:f3:f1:4b:cc:a0:32:2a:
fc:43:6b:09:3f:e6:b6:5e:67:0a:a3:01:1b:db:24:
db:ee:42:e6:22:00:db:b7:23:5d:46:60:a9:42:d3:
8e:2a:de:2e:f7:1d:e2:1b:9a:84:9a:c9:40:8e:ab:
28:46:88:27:74:79:13:06:f4:20:fc:d1:59:aa:8a:
c4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DF:BC:E3:5F:95:48:BF:E7:3E:46:0E:71:4C:34:89:1A:FC:65:88
X509v3 Authority Key Identifier:
keyid:15:D6:91:C9:5D:14:B8:BC:DE:66:92:A0:32:0C:C0:E2:87:56:B0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ae:86:cf:af:01:f9:02:a3:36:7c:1e:35:f6:dc:4e:e3:ef:
78:44:03:76:60:1a:bc:a9:ff:1b:08:af:1d:5e:7c:1d:2a:64:
42:d8:ef:9f:e9:d2:11:2a:c7:92:f8:70:9b:e8:66:27:4d:81:
da:7f:68:8f:4c:9c:9a:fa:96:da:60:ea:42:79:be:7a:c2:ec:
e1:fc:cd:72:c4:b7:cf:6a:02:fc:85:9d:36:59:5a:30:4b:76:
30:d8:52:17:66:7d:b5:6b:0f:b6:3d:33:78:06:58:53:b4:f6:
96:61:21:59:07:ad:ad:df:84:da:06:77:6b:5f:68:60:cb:69:
9a:77:49:a1:85:68:e4:bf:dc:fe:52:b3:b3:3d:b5:92:a0:7d:
76:51:44:49:3b:1d:a4:74:77:90:2f:4c:9e:36:9f:2a:a3:f5:
c5:51:58:19:ee:14:e6:d1:00:23:e9:2f:8e:ae:81:59:69:d3:
b0:2d:fc:74:64:17:57:82:6b:7d:ad:7d:f6:ef:ec:b9:1e:a7:
b9:70:f9:bc:67:94:b0:53:da:b3:07:3c:ab:62:3e:90:27:70:
ce:56:93:53:90:c5:9f:65:7c:9e:12:07:a2:26:b0:3e:a2:36:
5b:b5:88:b2:30:2c:50:ed:1d:0d:7d:62:8b:61:ed:13:39:b6:
de:41:c8:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEXlDvhPS2G6CV9msUQdTgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZDY5MWM5NWQxNGI4YmNkZTY2OTJhMDMyMGNjMGUyODc1
NmIwNTkwHhcNMjUwNTEyMTIwMDM3WhcNMjUwNTEzMTIwMDM3WjAzMTEwLwYDVQQD
EyhiNWRmYmNlMzVmOTU0OGJmZTczZTQ2MGU3MTRjMzQ4OTFhZmM2NTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3Mm6UMvL71kRjlHk4Bzl/mhbrOx
Gzpc4G5FWmPBg+7H3WXnIOe1iFQan8RGM476Y9Gije2aS83M9zmqsW3NYnmQwfbM
WuVTClh096A0C140bDVGDnJbKoyeH70VQqXYYOa/SHpnLEz4l/2/YwHkMuj8FGo+
IF/OaOtPhZTBnJ3WPNxDRwwvugVbJwhNv4Gc4HdTM2dbNMzTLK3kWpTHfjU8hBx0
n0PFhu7DrDNJL757AFVZIxHw0KfV2vPxS8ygMir8Q2sJP+a2XmcKowEb2yTb7kLm
IgDbtyNdRmCpQtOOKt4u9x3iG5qEmslAjqsoRogndHkTBvQg/NFZqorESQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXfvONflUi/5z5GDnFMNIka/GWIMB8GA1UdIwQY
MBaAFBXWkcldFLi83maSoDIMwOKHVrBZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmRhUnlWMFV1THplWnBLZ01nekE0b2RXc0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81ZDZlMjktOTQyZi00Y2FmLTk4YTgt
ZmQ1ZDU1YjYxZWM0LzEvRmRhUnlWMFV1THplWnBLZ01nekE0b2RXc0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81ZDZlMjktOTQyZi00Y2FmLTk4YTgtZmQ1ZDU1YjYxZWM0
LzEvRmRhUnlWMFV1THplWnBLZ01nekE0b2RXc0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdq6Gz68B
+QKjNnweNfbcTuPveEQDdmAavKn/GwivHV58HSpkQtjvn+nSESrHkvhwm+hmJ02B
2n9oj0ycmvqW2mDqQnm+esLs4fzNcsS3z2oC/IWdNllaMEt2MNhSF2Z9tWsPtj0z
eAZYU7T2lmEhWQetrd+E2gZ3a19oYMtpmndJoYVo5L/c/lKzsz21kqB9dlFESTsd
pHR3kC9MnjafKqP1xVFYGe4U5tEAI+kvjq6BWWnTsC38dGQXV4Jrfa199u/suR6n
uXD5vGeUsFPaswc8q2I+kCdwzlaTU5DFn2V8nhIHoiawPqI2W7WIsjAsUO0dDX1i
i2HtEzm23kHIdg==
-----END CERTIFICATE-----
Generated at Mon May 12 20:06:55 2025 by rpki-client