Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
File: FNlKazCSDR96LRUXG1CPkiZkduM.mft (raw, json)
Hash identifier: DxJcT8MGeTPOVHFuhkhnWZu11sYr2H+oLpn9zt2A1nE=
Subject key identifier: C9:5B:16:C5:EE:D6:D3:AB:31:39:17:30:F4:D7:18:5D:B5:D0:15:F8
Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
Certificate issuer: /CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Certificate serial: 0196A3C0A0A3DD5707947A5AD9781DE00218
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
Manifest number: 14B7
Signing time: Tue 06 May 2025 04:00:32 +0000
Manifest this update: Tue 06 May 2025 04:00:32 +0000
Manifest next update: Wed 07 May 2025 04:00:32 +0000
Files and hashes: 1: FNlKazCSDR96LRUXG1CPkiZkduM.crl (hash: wQ66BVrOLvH/8k/ZV+fHmeTo6ITkcOB1OclKAt0g5pk=)
2: Zlb5bVUIDERXo4xdSGjVMQ8TdNA.roa (hash: stdZJ0N6TnO5P8nlAhBGBijPlJ/mbcLMM3mJJx7zrV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:c0:a0:a3:dd:57:07:94:7a:5a:d9:78:1d:e0:02:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Validity
Not Before: May 6 04:00:32 2025 GMT
Not After : May 7 04:00:32 2025 GMT
Subject: CN=c95b16c5eed6d3ab31391730f4d7185db5d015f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:5a:b9:c7:79:53:20:4e:04:c8:27:55:1a:
06:50:47:7a:f9:06:4a:2d:b9:fc:26:71:b7:5d:98:
56:f8:b3:ef:30:ae:76:8e:d2:4a:1a:ae:82:0d:14:
3c:5a:dc:93:aa:a1:24:57:94:07:8e:be:96:d7:34:
a0:64:23:24:7f:e8:77:c2:b1:44:ac:0e:6f:f3:03:
fc:a6:73:d9:40:ec:ba:15:69:13:e0:07:db:0d:c6:
b4:95:88:1e:87:02:c9:44:22:23:6a:2d:3b:1b:b3:
16:f8:a8:70:8f:08:54:3f:6b:c3:77:ee:c4:12:38:
df:49:e0:12:5a:32:65:30:2d:0d:47:36:79:1f:fa:
64:e0:05:d6:b5:c3:62:b0:10:8d:10:83:2a:32:d6:
47:c2:52:5d:19:60:a8:88:07:e6:c7:fc:65:1c:59:
2b:bb:fe:01:bd:46:f5:bb:d4:17:6a:2c:dd:44:fc:
ba:be:d6:4a:b7:53:19:1f:ec:7c:f6:a2:4d:d7:4b:
69:d3:30:78:54:b6:f8:92:92:63:ea:54:79:08:b6:
e3:41:7f:1f:69:bc:19:dd:40:2f:47:9e:c5:ce:d0:
6f:48:a1:11:81:06:28:87:46:0d:9d:54:a4:03:14:
b0:e3:df:ba:d6:ef:49:0d:a4:ae:2d:fb:0c:65:18:
a2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5B:16:C5:EE:D6:D3:AB:31:39:17:30:F4:D7:18:5D:B5:D0:15:F8
X509v3 Authority Key Identifier:
keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ff:e7:d7:82:24:20:85:e1:63:6c:80:81:0d:37:d7:0c:5c:
b1:8b:15:b7:ed:db:c9:b0:6e:da:42:ef:44:3e:9e:5f:11:7b:
43:d2:e7:66:70:c3:dc:5a:f4:e2:a3:63:b7:6e:2c:e6:5f:af:
30:27:9f:c7:11:05:a2:31:dc:09:0e:29:07:60:2b:8b:58:1d:
13:45:8e:46:5d:34:01:fb:ca:9f:12:60:99:d9:5c:6b:f2:a3:
c2:c0:a8:ca:7d:21:d5:f7:07:f8:41:7e:c3:19:88:10:c9:84:
fa:cf:08:c4:61:a1:80:ed:45:e3:ac:7b:96:f8:81:fc:32:de:
3a:6f:4d:5c:7b:b9:e4:b6:6e:ce:be:59:68:73:f8:28:4e:73:
fd:dd:dd:5e:e6:b0:a0:c5:11:5a:e2:95:c8:ef:17:27:e3:02:
ee:bc:30:6e:0d:25:3e:07:d3:0b:68:50:1c:7e:cd:90:ee:f9:
f9:d7:d3:89:aa:5f:da:53:19:32:96:13:a2:a0:37:bf:26:da:
6c:19:a1:d4:fc:2d:13:21:96:5b:46:41:5c:b1:e4:03:4e:0f:
45:46:e1:fc:15:33:9a:26:de:c9:2b:92:28:39:43:8f:68:86:
8d:36:da:55:01:dc:c3:ad:9f:22:78:65:22:ea:0e:de:19:94:
f5:57:c9:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZajwKCj3VcHlHpa2Xgd4AIYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZDk0YTZiMzA5MjBkMWY3YTJkMTUxNzFiNTA4ZjkyMjY2
NDc2ZTMwHhcNMjUwNTA2MDQwMDMyWhcNMjUwNTA3MDQwMDMyWjAzMTEwLwYDVQQD
EyhjOTViMTZjNWVlZDZkM2FiMzEzOTE3MzBmNGQ3MTg1ZGI1ZDAxNWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv35aucd5UyBOBMgnVRoGUEd6+QZK
Lbn8JnG3XZhW+LPvMK52jtJKGq6CDRQ8WtyTqqEkV5QHjr6W1zSgZCMkf+h3wrFE
rA5v8wP8pnPZQOy6FWkT4AfbDca0lYgehwLJRCIjai07G7MW+KhwjwhUP2vDd+7E
EjjfSeASWjJlMC0NRzZ5H/pk4AXWtcNisBCNEIMqMtZHwlJdGWCoiAfmx/xlHFkr
u/4BvUb1u9QXaizdRPy6vtZKt1MZH+x89qJN10tp0zB4VLb4kpJj6lR5CLbjQX8f
abwZ3UAvR57FztBvSKERgQYoh0YNnVSkAxSw49+61u9JDaSuLfsMZRii6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlbFsXu1tOrMTkXMPTXGF210BX4MB8GA1UdIwQY
MBaAFBTZSmswkg0fei0VFxtQj5ImZHbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5sS2F6Q1NEUjk2TFJVWEcxQ1BraVprZHVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9lNWQ1ZWItYWRhMC00ZDVjLTg2NjQt
ZjJiMjJjNjlkNWZjLzEvRk5sS2F6Q1NEUjk2TFJVWEcxQ1BraVprZHVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9lNWQ1ZWItYWRhMC00ZDVjLTg2NjQtZjJiMjJjNjlkNWZj
LzEvRk5sS2F6Q1NEUjk2TFJVWEcxQ1BraVprZHVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ//n14Ik
IIXhY2yAgQ031wxcsYsVt+3bybBu2kLvRD6eXxF7Q9LnZnDD3Fr04qNjt24s5l+v
MCefxxEFojHcCQ4pB2Ari1gdE0WORl00AfvKnxJgmdlca/KjwsCoyn0h1fcH+EF+
wxmIEMmE+s8IxGGhgO1F46x7lviB/DLeOm9NXHu55LZuzr5ZaHP4KE5z/d3dXuaw
oMURWuKVyO8XJ+MC7rwwbg0lPgfTC2hQHH7NkO75+dfTiapf2lMZMpYToqA3vyba
bBmh1PwtEyGWW0ZBXLHkA04PRUbh/BUzmibeySuSKDlDj2iGjTbaVQHcw62fInhl
IuoO3hmU9VfJMQ==
-----END CERTIFICATE-----
Generated at Tue May 6 13:51:04 2025 by rpki-client