Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
File: FUA-FXyC9176fFSpvH0NG_AbHK4.mft (raw, json)
Hash identifier: jdCkS+Si0HiqX8pu1UoNndW6S6cj0jFGsVdjr4GI6jc=
Subject key identifier: 16:23:9B:FA:F5:A2:AC:AB:DD:02:4C:30:F0:75:6A:F4:A9:FC:B6:EC
Authority key identifier: 15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
Certificate issuer: /CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Certificate serial: 0196D39AB550BC5D3BCF80A12A548E8501AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
Manifest number: 1542
Signing time: Thu 15 May 2025 11:00:53 +0000
Manifest this update: Thu 15 May 2025 11:00:53 +0000
Manifest next update: Fri 16 May 2025 11:00:53 +0000
Files and hashes: 1: 9svdSi4VMR39LcPpfRqTZ_ivzWU.roa (hash: qkFZEN8wS5/7d3PWnlFnfBgG42VLZsiC6RIzbDuNeoI=)
2: FUA-FXyC9176fFSpvH0NG_AbHK4.crl (hash: wXT3wuDJ597zT/630ZXz5bfA0SyKBdj/r9Wki8bZoEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:9a:b5:50:bc:5d:3b:cf:80:a1:2a:54:8e:85:01:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Validity
Not Before: May 15 11:00:53 2025 GMT
Not After : May 16 11:00:53 2025 GMT
Subject: CN=16239bfaf5a2acabdd024c30f0756af4a9fcb6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:41:69:b5:e3:66:b2:1a:04:6d:d1:76:59:
b2:0a:07:77:ba:6a:99:85:2e:58:d8:b2:b5:38:c6:
9d:ce:24:08:25:92:37:85:c7:1a:f6:12:a3:14:7a:
11:3f:5d:26:ee:4c:e8:9f:a4:1d:b7:a6:ca:47:32:
7d:2c:7e:8f:71:d0:36:b4:e7:60:f9:b8:d0:b3:d5:
9f:27:4a:f4:98:94:61:7a:fc:0e:79:8f:e9:93:e0:
16:5a:02:ec:b8:57:4e:38:6c:a7:64:35:36:d4:be:
c7:ff:e8:1a:d7:e3:7f:d2:82:6c:5b:d9:15:f3:e9:
9c:d1:34:6d:f2:10:e1:44:e8:56:cf:6e:d0:72:00:
0b:73:d1:08:40:ee:70:7f:93:2e:eb:68:48:c2:a3:
78:f3:1f:5e:84:14:fb:a0:99:77:f8:1f:98:e6:45:
d7:4f:26:d4:f1:54:6c:0d:87:c3:0e:49:1b:7e:b7:
a2:12:f0:53:de:05:6a:ed:bb:8d:6b:a2:b2:af:82:
6c:d2:5a:85:8c:0c:a0:02:07:40:7c:21:fd:0d:4f:
9c:c8:93:92:a4:c9:ca:13:f9:42:9f:fd:56:f7:29:
17:1c:d1:8c:87:4c:28:5d:55:27:13:5a:c6:c4:fb:
e2:1b:52:20:a2:0a:99:75:b8:b5:a9:59:16:24:13:
13:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:23:9B:FA:F5:A2:AC:AB:DD:02:4C:30:F0:75:6A:F4:A9:FC:B6:EC
X509v3 Authority Key Identifier:
keyid:15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e8:6c:e5:68:c9:cb:0f:18:26:6b:92:2c:02:a1:b7:1d:2d:
a3:2a:92:92:42:54:11:68:d9:48:fc:25:90:1e:d6:48:4c:2e:
5a:fd:3d:bb:06:1a:7b:14:23:8b:63:d3:5a:73:d2:af:11:f2:
b7:57:32:c1:58:85:35:50:ee:56:8d:2d:f9:44:d6:c2:e9:f6:
84:4d:e5:85:cb:b6:44:c5:93:6b:dd:fa:a6:27:da:78:ad:fd:
55:be:25:99:7b:86:14:7e:21:ef:41:26:e3:bc:dc:65:51:8f:
49:9c:b8:15:1f:da:d8:6b:14:05:77:41:cb:7d:ed:89:51:b8:
1c:24:21:53:f5:df:ca:91:d3:0c:1b:cc:00:00:4b:ee:45:f0:
fb:d1:a4:2e:88:4a:f1:8a:f2:44:2a:e1:72:07:c4:d7:57:48:
14:f4:c5:68:cf:e7:7a:6e:7f:0d:01:07:bd:72:c7:23:70:ab:
70:15:96:e1:91:f3:d4:96:e6:3c:0b:8d:98:16:90:d3:c4:4e:
d0:55:5d:a4:2e:3f:3e:4e:75:7d:4b:0c:9d:45:7c:66:f8:f2:
8e:15:52:c2:25:fe:38:4f:bf:03:1c:81:27:b2:cb:8e:c4:02:
3a:31:98:98:76:5d:83:d2:4a:8c:41:91:37:71:52:35:46:77:
29:82:73:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbTmrVQvF07z4ChKlSOhQGrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NDAzZTE1N2M4MmY3NWVmYTdjNTRhOWJjN2QwZDFiZjAx
YjFjYWUwHhcNMjUwNTE1MTEwMDUzWhcNMjUwNTE2MTEwMDUzWjAzMTEwLwYDVQQD
EygxNjIzOWJmYWY1YTJhY2FiZGQwMjRjMzBmMDc1NmFmNGE5ZmNiNmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9RBabXjZrIaBG3RdlmyCgd3umqZ
hS5Y2LK1OMadziQIJZI3hcca9hKjFHoRP10m7kzon6Qdt6bKRzJ9LH6PcdA2tOdg
+bjQs9WfJ0r0mJRhevwOeY/pk+AWWgLsuFdOOGynZDU21L7H/+ga1+N/0oJsW9kV
8+mc0TRt8hDhROhWz27QcgALc9EIQO5wf5Mu62hIwqN48x9ehBT7oJl3+B+Y5kXX
TybU8VRsDYfDDkkbfreiEvBT3gVq7buNa6Kyr4Js0lqFjAygAgdAfCH9DU+cyJOS
pMnKE/lCn/1W9ykXHNGMh0woXVUnE1rGxPviG1IgogqZdbi1qVkWJBMTCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYjm/r1oqyr3QJMMPB1avSp/LbsMB8GA1UdIwQY
MBaAFBVAPhV8gvde+nxUqbx9DRvwGxyuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlVBLUZYeUM5MTc2ZkZTcHZIME5HX0FiSEs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9lYWY4ODAtNzEwNi00ZDMzLTg3MzUt
MzM0Zjk0MjkyNDhlLzEvRlVBLUZYeUM5MTc2ZkZTcHZIME5HX0FiSEs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9lYWY4ODAtNzEwNi00ZDMzLTg3MzUtMzM0Zjk0MjkyNDhl
LzEvRlVBLUZYeUM5MTc2ZkZTcHZIME5HX0FiSEs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACehs5WjJ
yw8YJmuSLAKhtx0toyqSkkJUEWjZSPwlkB7WSEwuWv09uwYaexQji2PTWnPSrxHy
t1cywViFNVDuVo0t+UTWwun2hE3lhcu2RMWTa936pifaeK39Vb4lmXuGFH4h70Em
47zcZVGPSZy4FR/a2GsUBXdBy33tiVG4HCQhU/XfypHTDBvMAABL7kXw+9GkLohK
8YryRCrhcgfE11dIFPTFaM/nem5/DQEHvXLHI3CrcBWW4ZHz1JbmPAuNmBaQ08RO
0FVdpC4/Pk51fUsMnUV8ZvjyjhVSwiX+OE+/AxyBJ7LLjsQCOjGYmHZdg9JKjEGR
N3FSNUZ3KYJzMg==
-----END CERTIFICATE-----
Generated at Thu May 15 19:05:54 2025 by rpki-client