Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
File: FCaOTC4CUzDfJv1ATK4PavJszCM.mft (raw, json)
Hash identifier: RFspagyQrUen2Bh50y3cMHnpnNhLMYS5pwFeuU82m7w=
Subject key identifier: 14:20:D7:4D:3F:E1:F4:22:8A:EE:84:21:D7:72:55:CD:5A:32:8C:42
Authority key identifier: 14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
Certificate issuer: /CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Certificate serial: 0197B8908E5016D020614CBAEB332165D1EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
Manifest number: 0DF5
Signing time: Sat 28 Jun 2025 22:02:50 +0000
Manifest this update: Sat 28 Jun 2025 22:02:50 +0000
Manifest next update: Sun 29 Jun 2025 22:02:50 +0000
Files and hashes: 1: FCaOTC4CUzDfJv1ATK4PavJszCM.crl (hash: 6IUOisvRpdkDhBqdag29M4V1Q237CveZxgCi4Cu8OPU=)
2: u0DOKBtKEXfOYPXrhlfb2Ryk4Zc.roa (hash: VOn09+bdFNjvpl/Gu+Ha0G2LvOgVJGvmVcF7NTjr9S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:8e:50:16:d0:20:61:4c:ba:eb:33:21:65:d1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Validity
Not Before: Jun 28 22:02:50 2025 GMT
Not After : Jun 29 22:02:50 2025 GMT
Subject: CN=1420d74d3fe1f4228aee8421d77255cd5a328c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:39:9a:32:f8:3d:ac:d3:82:71:09:23:66:bd:
87:5b:e9:b0:e6:28:3b:96:7d:ae:ed:77:30:b9:9b:
61:d8:d9:1a:b1:29:fd:93:6a:51:14:38:73:cd:91:
d4:39:7b:6a:82:e2:66:4e:1e:d5:7c:10:1b:c7:c4:
01:7e:8e:b2:fa:5a:21:7c:70:ed:9c:1a:b9:1f:f2:
22:7a:73:f6:ce:be:d8:6c:ee:d5:1d:07:f9:b8:c3:
9f:f1:6f:50:a9:15:5f:83:2f:ed:cc:6b:f7:54:63:
94:3d:76:4f:68:2d:97:83:87:98:88:20:06:cf:b2:
32:ac:f4:00:3c:f9:3c:59:46:4c:41:67:23:e9:17:
a8:f3:cb:ff:25:03:c9:50:eb:5e:fc:8e:ea:bf:e8:
a0:07:56:50:58:6b:40:c6:fe:74:90:6d:f2:3e:bc:
54:47:f8:2c:8b:ea:e5:2b:58:ec:f9:9e:61:f0:75:
a1:92:e8:ed:54:2a:07:a9:db:8b:a4:62:5c:18:22:
8c:7f:f7:c1:de:96:59:74:d7:36:68:33:5c:9e:ec:
36:b4:db:e1:fb:a8:08:b2:5c:d3:33:c2:c6:f9:cf:
20:6e:4b:82:bc:b6:28:98:2d:35:30:54:7e:8b:44:
db:b9:5e:9d:2d:3d:c8:85:db:57:66:4a:48:92:fa:
a6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:20:D7:4D:3F:E1:F4:22:8A:EE:84:21:D7:72:55:CD:5A:32:8C:42
X509v3 Authority Key Identifier:
keyid:14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:12:79:c8:bc:84:86:6c:6d:94:c6:f5:ef:5d:4a:7b:d3:20:
9a:82:ad:8a:a3:ca:5b:d6:0d:c0:57:af:e9:3f:eb:5f:35:d5:
62:9c:1f:4d:2e:96:bb:8c:6c:f2:52:93:1d:52:8f:6c:24:8c:
52:77:f7:39:89:bd:c9:6f:bb:81:a9:e1:e0:a7:65:3d:d5:5e:
24:09:9d:78:32:83:99:cf:20:b3:4c:bf:16:71:8b:3f:db:ce:
63:cb:07:f4:5a:bd:20:40:4a:13:43:a0:8d:4d:64:6f:48:72:
f4:24:93:51:ef:24:4b:fd:79:ba:49:f9:01:b3:cb:e2:0b:77:
a9:ab:aa:6e:3b:a4:a4:3a:58:09:61:68:79:a7:29:56:6d:4e:
1d:11:73:8c:1d:26:3b:1a:0e:17:8c:bf:43:1f:91:ac:36:0a:
43:61:89:f8:13:c3:29:7e:c2:65:0b:73:28:49:af:49:e6:46:
94:27:ee:92:9b:8f:a1:68:5a:f7:bc:08:c0:8f:74:15:b5:97:
e4:e4:17:20:ac:6f:74:87:1a:7c:92:95:c2:b1:ec:6a:55:7b:
a4:a2:8c:6f:ef:bb:c2:5f:23:76:19:ce:c7:11:02:c3:1a:c8:
5d:e2:b3:c4:7f:dd:79:77:6e:99:29:95:88:39:13:3d:4b:64:
ce:8f:59:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kI5QFtAgYUy66zMhZdHvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0MjY4ZTRjMmUwMjUzMzBkZjI2ZmQ0MDRjYWUwZjZhZjI2
Y2NjMjMwHhcNMjUwNjI4MjIwMjUwWhcNMjUwNjI5MjIwMjUwWjAzMTEwLwYDVQQD
EygxNDIwZDc0ZDNmZTFmNDIyOGFlZTg0MjFkNzcyNTVjZDVhMzI4YzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TmaMvg9rNOCcQkjZr2HW+mw5ig7
ln2u7XcwuZth2NkasSn9k2pRFDhzzZHUOXtqguJmTh7VfBAbx8QBfo6y+lohfHDt
nBq5H/IienP2zr7YbO7VHQf5uMOf8W9QqRVfgy/tzGv3VGOUPXZPaC2Xg4eYiCAG
z7IyrPQAPPk8WUZMQWcj6Reo88v/JQPJUOte/I7qv+igB1ZQWGtAxv50kG3yPrxU
R/gsi+rlK1js+Z5h8HWhkujtVCoHqduLpGJcGCKMf/fB3pZZdNc2aDNcnuw2tNvh
+6gIslzTM8LG+c8gbkuCvLYomC01MFR+i0TbuV6dLT3IhdtXZkpIkvqmYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQg100/4fQiiu6EIddyVc1aMoxCMB8GA1UdIwQY
MBaAFBQmjkwuAlMw3yb9QEyuD2rybMwjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkNhT1RDNENVekRmSnYxQVRLNFBhdkpzekNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xZjhhMDktNDM2NS00YmJhLThlMzUt
NWVlMjc0ZWI3ZWFiLzEvRkNhT1RDNENVekRmSnYxQVRLNFBhdkpzekNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8xZjhhMDktNDM2NS00YmJhLThlMzUtNWVlMjc0ZWI3ZWFi
LzEvRkNhT1RDNENVekRmSnYxQVRLNFBhdkpzekNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRJ5yLyE
hmxtlMb1711Ke9MgmoKtiqPKW9YNwFev6T/rXzXVYpwfTS6Wu4xs8lKTHVKPbCSM
Unf3OYm9yW+7ganh4KdlPdVeJAmdeDKDmc8gs0y/FnGLP9vOY8sH9Fq9IEBKE0Og
jU1kb0hy9CSTUe8kS/15ukn5AbPL4gt3qauqbjukpDpYCWFoeacpVm1OHRFzjB0m
OxoOF4y/Qx+RrDYKQ2GJ+BPDKX7CZQtzKEmvSeZGlCfukpuPoWha97wIwI90FbWX
5OQXIKxvdIcafJKVwrHsalV7pKKMb++7wl8jdhnOxxECwxrIXeKzxH/deXdumSmV
iDkTPUtkzo9ZaA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:34:05 2025 by rpki-client