Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
File: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json)
Hash identifier: SJfp2CQLP0YrlYi5eL7HJK0Vg6RAAX7XttpmlxvPN3s=
Subject key identifier: A1:A7:B1:C2:19:2F:19:25:EA:20:BA:E1:E0:6F:C5:9D:F6:33:5C:ED
Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
Certificate issuer: /CN=156849587a23bfb5d65b2a1404082232b439271b
Certificate serial: 0196C15D42217D53E9942DA49B147E32F44A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
Manifest number: 09ED
Signing time: Sun 11 May 2025 22:00:36 +0000
Manifest this update: Sun 11 May 2025 22:00:36 +0000
Manifest next update: Mon 12 May 2025 22:00:36 +0000
Files and hashes: 1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: HH2er8zIE3MVDXNfG+6bj2Uyhvsjm6Q2ukmkRzOypx0=)
2: VZ-kHDApXcDT9_2kTleGC7kcJA4.roa (hash: 8N2QqFM6UOQbHR5Tx8BGVp4hMQ1auv8Qt97IgnTaVI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:42:21:7d:53:e9:94:2d:a4:9b:14:7e:32:f4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b
Validity
Not Before: May 11 22:00:36 2025 GMT
Not After : May 12 22:00:36 2025 GMT
Subject: CN=a1a7b1c2192f1925ea20bae1e06fc59df6335ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b2:5c:70:b9:1f:fa:d9:04:56:ae:88:fb:d1:
1c:f6:8b:ad:c4:73:53:ce:ed:54:ea:73:99:a7:db:
85:46:0c:70:a6:18:a6:0f:7f:55:c0:5f:57:d6:cb:
f4:93:ba:f2:77:20:91:cd:49:28:14:f1:ac:85:11:
bb:8c:86:69:4c:7b:b7:74:be:d7:6f:d4:f0:61:d3:
c6:8d:01:1c:e3:cf:f7:a0:93:54:38:34:f0:0b:8f:
d6:ea:c4:ab:56:b4:0e:4c:d0:89:b8:d8:8f:61:ec:
91:b0:61:35:f3:41:42:ef:76:b2:a1:3d:aa:cf:52:
a4:c7:d3:40:39:9c:50:f4:28:fa:d5:ac:6e:c1:21:
97:03:f3:2f:45:aa:c0:92:85:b1:bb:28:27:0f:aa:
df:b4:c3:31:8a:0a:68:1d:c3:ed:c0:7c:3f:95:9f:
25:b9:5a:82:69:50:13:e8:cb:f5:47:80:68:3b:45:
47:df:03:32:1d:e4:03:28:c7:c2:c9:47:8c:ed:82:
58:df:06:42:ba:b0:b6:62:6c:ce:fb:1a:76:b1:b6:
0b:c3:5f:18:d4:f4:bc:fb:32:dc:1c:c8:bc:f8:4a:
e5:f8:59:f2:41:4a:ec:96:14:16:52:26:2b:69:5a:
bd:7d:12:2c:a4:6d:a3:80:b0:6e:cc:b7:7a:99:6d:
34:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A7:B1:C2:19:2F:19:25:EA:20:BA:E1:E0:6F:C5:9D:F6:33:5C:ED
X509v3 Authority Key Identifier:
keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ef:b7:34:53:2e:fa:85:12:af:3e:08:24:5c:29:e7:20:aa:
d0:f2:6f:29:f9:57:c9:b7:22:da:05:ee:a2:a4:ec:64:ca:93:
b7:d5:92:87:69:d1:23:07:05:89:7a:c7:49:25:08:a6:2e:90:
ff:71:cc:af:e2:2a:56:89:b7:dc:83:ed:ad:5d:1c:7b:e0:17:
97:40:bf:3a:c3:74:54:ed:f5:ec:4e:4a:c5:e4:ba:d7:70:d0:
35:cb:a5:48:da:79:47:a9:09:c9:94:58:2b:f3:03:99:bc:de:
51:bb:04:ea:87:96:41:3b:8a:50:af:c0:9c:e6:18:d6:dc:6d:
4a:75:db:2c:d8:b6:37:0f:da:31:c8:9f:3c:2d:4a:ed:2c:47:
44:ce:51:47:b8:0a:8b:cb:14:94:63:e1:1b:c8:83:a4:a3:ee:
74:92:4b:05:e5:45:27:93:7b:0b:4d:9d:a4:52:38:eb:fe:f7:
55:02:1e:de:8c:89:87:59:1e:e1:df:37:09:ab:1d:5e:a7:37:
32:28:fd:98:73:67:79:7d:88:dd:6a:38:03:84:b9:e3:0c:e2:
a6:89:45:77:1c:a0:91:c7:b0:3f:bf:e4:6a:2a:3a:90:ac:f1:
3a:9f:22:ac:8c:6c:49:17:64:c8:50:8b:14:cf:41:4b:34:c1:
47:b7:e8:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBXUIhfVPplC2kmxR+MvRKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Njg0OTU4N2EyM2JmYjVkNjViMmExNDA0MDgyMjMyYjQz
OTI3MWIwHhcNMjUwNTExMjIwMDM2WhcNMjUwNTEyMjIwMDM2WjAzMTEwLwYDVQQD
EyhhMWE3YjFjMjE5MmYxOTI1ZWEyMGJhZTFlMDZmYzU5ZGY2MzM1Y2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbJccLkf+tkEVq6I+9Ec9outxHNT
zu1U6nOZp9uFRgxwphimD39VwF9X1sv0k7rydyCRzUkoFPGshRG7jIZpTHu3dL7X
b9TwYdPGjQEc48/3oJNUODTwC4/W6sSrVrQOTNCJuNiPYeyRsGE180FC73ayoT2q
z1Kkx9NAOZxQ9Cj61axuwSGXA/MvRarAkoWxuygnD6rftMMxigpoHcPtwHw/lZ8l
uVqCaVAT6Mv1R4BoO0VH3wMyHeQDKMfCyUeM7YJY3wZCurC2YmzO+xp2sbYLw18Y
1PS8+zLcHMi8+Erl+FnyQUrslhQWUiYraVq9fRIspG2jgLBuzLd6mW006QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGnscIZLxkl6iC64eBvxZ32M1ztMB8GA1UdIwQY
MBaAFBVoSVh6I7+11lsqFAQIIjK0OScbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80YmYzY2MtMDIzZC00YjAyLTgwMjgt
YzU5ZWZkMzQ4MTU4LzEvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS80YmYzY2MtMDIzZC00YjAyLTgwMjgtYzU5ZWZkMzQ4MTU4
LzEvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAje+3NFMu
+oUSrz4IJFwp5yCq0PJvKflXybci2gXuoqTsZMqTt9WSh2nRIwcFiXrHSSUIpi6Q
/3HMr+IqVom33IPtrV0ce+AXl0C/OsN0VO317E5KxeS613DQNculSNp5R6kJyZRY
K/MDmbzeUbsE6oeWQTuKUK/AnOYY1txtSnXbLNi2Nw/aMcifPC1K7SxHRM5RR7gK
i8sUlGPhG8iDpKPudJJLBeVFJ5N7C02dpFI46/73VQIe3oyJh1ke4d83CasdXqc3
Mij9mHNneX2I3Wo4A4S54wzipolFdxygkcewP7/kaio6kKzxOp8irIxsSRdkyFCL
FM9BSzTBR7fojg==
-----END CERTIFICATE-----
Generated at Mon May 12 07:31:38 2025 by rpki-client