Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
File: FxMSnvT6RU4PCsQH4AjpV6G3laA.mft (raw, json)
Hash identifier: ojsE05onhQsJBuJov9i8Vl/a/RmX2phA22r56UND4/g=
Subject key identifier: 14:B6:17:60:8C:61:C3:BD:09:B4:81:24:CE:27:F0:1C:88:18:A6:D3
Authority key identifier: 17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
Certificate issuer: /CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Certificate serial: 0197B7EAE8CD05FA3F4572EAFE9EDCFD0C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 19:01:54 +0000
Manifest this update: Sat 28 Jun 2025 19:01:54 +0000
Manifest next update: Sun 29 Jun 2025 19:01:54 +0000
Files and hashes: 1: Awd1yGOmw0G9ufYkJyOwIDHo3Qk.roa (hash: NpDJRKt/f4syIfXokbOL4x73rCHTvURrkdu0Yrl2tN4=)
2: BIIEZlMRbg4gFcs3vd0E2vnjAC0.roa (hash: dLd9sOD+PRZDAt8utITG0xeDO7qLojT8kdoKvMI+HQ0=)
3: FxMSnvT6RU4PCsQH4AjpV6G3laA.crl (hash: JbPSQmIpFRkRABoGBNh5RzwjBqJQjyBNfqSp/sdS86o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:e8:cd:05:fa:3f:45:72:ea:fe:9e:dc:fd:0c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Validity
Not Before: Jun 28 19:01:54 2025 GMT
Not After : Jun 29 19:01:54 2025 GMT
Subject: CN=14b617608c61c3bd09b48124ce27f01c8818a6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:83:34:bc:f6:98:56:3d:53:ea:68:45:b8:10:
5e:e8:2f:3d:35:ea:17:7d:d1:38:9c:0c:fa:9f:23:
6a:e8:3e:9d:01:1f:23:ae:13:2c:cb:33:e4:24:f1:
bc:f1:be:77:4c:38:28:3c:50:06:d5:8e:d6:0d:4c:
ce:11:6e:91:9c:d9:ee:01:0e:b0:2f:41:4d:31:6f:
79:e0:49:35:00:84:91:07:45:e0:64:89:26:e6:3e:
c3:ab:64:18:7d:5a:a1:01:47:3c:fa:2c:96:ec:a6:
41:43:4b:28:5b:e5:22:87:04:e9:a7:e1:74:5c:44:
83:c9:af:48:19:c9:8e:57:84:ab:fe:1d:c4:6d:a6:
be:ed:2d:77:34:71:1c:6b:50:02:aa:5a:c3:40:58:
c6:8c:e0:1f:1a:01:9a:1b:cf:8f:d4:63:c5:fb:c8:
55:e5:f6:40:34:be:28:ba:86:68:8c:50:ed:aa:1f:
2b:8b:dd:54:e4:e5:c8:bc:da:73:32:68:ac:eb:9f:
b2:b9:53:fb:61:a1:77:43:c9:15:73:91:ff:5c:58:
ae:b8:e7:c4:68:c2:9c:65:6e:48:33:ff:60:ce:3a:
01:93:78:9c:76:b7:54:99:89:bd:7b:eb:bb:2f:35:
19:c1:be:a2:e8:1f:37:24:3f:b0:4c:13:6e:a1:8d:
78:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B6:17:60:8C:61:C3:BD:09:B4:81:24:CE:27:F0:1C:88:18:A6:D3
X509v3 Authority Key Identifier:
keyid:17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:71:ed:c4:de:a2:da:e2:b1:99:b2:96:6b:50:4f:57:ab:e3:
8f:6f:5e:0d:03:07:25:81:38:e5:e1:41:96:e5:0b:06:48:d8:
95:b5:69:17:b8:59:f4:0e:a5:2f:71:0a:62:3e:c1:9d:a9:3f:
8b:61:3d:ed:b8:23:ac:c2:53:f1:c5:20:7b:4d:69:fd:ac:ee:
5d:22:a3:3c:1a:a6:22:14:91:1c:ed:13:bb:73:44:d2:e2:b9:
d6:33:b2:33:49:c3:e9:f3:42:e7:98:80:b2:da:f3:95:78:c3:
57:ae:a3:78:a3:0d:fb:4f:96:fe:43:69:da:80:4b:7a:59:72:
3d:6b:18:84:b5:58:f9:2c:fc:29:1d:b7:49:1b:aa:64:b2:ea:
b1:9d:66:ba:92:cf:89:06:c6:7b:f1:8e:c8:d7:25:52:4d:f8:
2c:6a:9c:7d:fe:04:53:d3:01:48:6d:d5:e9:fe:5c:3b:86:92:
c2:89:95:1e:c6:d7:8e:d0:5c:64:33:e5:40:38:4a:34:b3:5b:
3d:5c:f3:3c:2d:b5:8c:f8:49:50:fd:53:fd:94:f4:81:f1:73:
c4:03:22:80:56:5b:18:fc:91:16:00:3c:b3:19:36:08:e4:06:
a5:a7:00:d0:e1:c7:c0:e4:f1:17:f9:7a:44:b0:f6:f6:ca:70:
8a:ae:3e:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36ujNBfo/RXLq/p7c/QyUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MTMxMjllZjRmYTQ1NGUwZjBhYzQwN2UwMDhlOTU3YTFi
Nzk1YTAwHhcNMjUwNjI4MTkwMTU0WhcNMjUwNjI5MTkwMTU0WjAzMTEwLwYDVQQD
EygxNGI2MTc2MDhjNjFjM2JkMDliNDgxMjRjZTI3ZjAxYzg4MThhNmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oM0vPaYVj1T6mhFuBBe6C89NeoX
fdE4nAz6nyNq6D6dAR8jrhMsyzPkJPG88b53TDgoPFAG1Y7WDUzOEW6RnNnuAQ6w
L0FNMW954Ek1AISRB0XgZIkm5j7Dq2QYfVqhAUc8+iyW7KZBQ0soW+UihwTpp+F0
XESDya9IGcmOV4Sr/h3Ebaa+7S13NHEca1ACqlrDQFjGjOAfGgGaG8+P1GPF+8hV
5fZANL4ouoZojFDtqh8ri91U5OXIvNpzMmis65+yuVP7YaF3Q8kVc5H/XFiuuOfE
aMKcZW5IM/9gzjoBk3icdrdUmYm9e+u7LzUZwb6i6B83JD+wTBNuoY14qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBS2F2CMYcO9CbSBJM4n8ByIGKbTMB8GA1UdIwQY
MBaAFBcTEp70+kVODwrEB+AI6Veht5WgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnhNU252VDZSVTRQQ3NRSDRBanBWNkczbGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xNTcyOTktOWQxYy00YzViLTlhNDEt
YzI1ZmRjNGNhMmY2LzEvRnhNU252VDZSVTRQQ3NRSDRBanBWNkczbGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8xNTcyOTktOWQxYy00YzViLTlhNDEtYzI1ZmRjNGNhMmY2
LzEvRnhNU252VDZSVTRQQ3NRSDRBanBWNkczbGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXHtxN6i
2uKxmbKWa1BPV6vjj29eDQMHJYE45eFBluULBkjYlbVpF7hZ9A6lL3EKYj7Bnak/
i2E97bgjrMJT8cUge01p/azuXSKjPBqmIhSRHO0Tu3NE0uK51jOyM0nD6fNC55iA
strzlXjDV66jeKMN+0+W/kNp2oBLellyPWsYhLVY+Sz8KR23SRuqZLLqsZ1mupLP
iQbGe/GOyNclUk34LGqcff4EU9MBSG3V6f5cO4aSwomVHsbXjtBcZDPlQDhKNLNb
PVzzPC21jPhJUP1T/ZT0gfFzxAMigFZbGPyRFgA8sxk2COQGpacA0OHHwOTxF/l6
RLD29spwiq4+6g==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:46:59 2025 by rpki-client