Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.mft
File: FW1wMw7FHp_x93J7F4HEenqapW0.mft (raw, json)
Hash identifier: RHdxxF7S1fRwWNnKfdGRh+KozS6Z1HmNb7wq7FNniqo=
Subject key identifier: 00:24:BF:12:35:A6:05:33:A1:C7:0E:AF:0B:C3:42:3A:BF:DF:71:9C
Authority key identifier: 15:6D:70:33:0E:C5:1E:9F:F1:F7:72:7B:17:81:C4:7A:7A:9A:A5:6D
Certificate issuer: /CN=156d70330ec51e9ff1f7727b1781c47a7a9aa56d
Certificate serial: 0196C38267FD90243F8C4DEC0E1AEE488B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FW1wMw7FHp_x93J7F4HEenqapW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.mft
Manifest number: 1536
Signing time: Mon 12 May 2025 08:00:25 +0000
Manifest this update: Mon 12 May 2025 08:00:25 +0000
Manifest next update: Tue 13 May 2025 08:00:25 +0000
Files and hashes: 1: FW1wMw7FHp_x93J7F4HEenqapW0.crl (hash: LM9a8YC7KfqaNUzW+rTjBkBs5isiaTLFpW1dBMfLKlk=)
2: s3eE-P6KHaZhEFtp-p4OcOMIO5k.roa (hash: M2Uo4Gpb+a0DQhYTKJ2pCUBjR72TE2YaQI7XFu5tfN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FW1wMw7FHp_x93J7F4HEenqapW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:67:fd:90:24:3f:8c:4d:ec:0e:1a:ee:48:8b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156d70330ec51e9ff1f7727b1781c47a7a9aa56d
Validity
Not Before: May 12 08:00:25 2025 GMT
Not After : May 13 08:00:25 2025 GMT
Subject: CN=0024bf1235a60533a1c70eaf0bc3423abfdf719c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:b9:0c:e9:80:ba:fc:2f:cc:6c:71:25:0e:
3f:e7:b4:db:63:a5:6d:64:b9:4a:d9:15:83:43:72:
35:a4:48:53:55:d1:96:f9:4a:7b:62:fb:3e:a6:06:
9e:16:8d:b0:c9:49:e0:1c:54:d2:93:0c:74:a9:1d:
17:e3:9d:85:0e:7b:89:87:59:bc:a9:26:df:60:06:
31:c2:b5:6c:f7:60:ad:8d:5d:70:15:8a:05:4d:45:
96:20:f5:61:2d:fe:31:7f:82:0d:b1:8c:03:6e:67:
9c:b7:89:8f:31:6d:46:be:26:e4:b1:0b:1f:6d:d6:
41:44:3e:b3:c4:5c:81:33:3f:0f:5d:e8:b0:5f:c6:
50:c6:fb:f2:43:69:4a:d4:50:96:86:b9:82:12:92:
b9:15:36:49:9e:7d:40:3f:09:ab:5b:0c:82:a7:50:
4e:99:44:90:bc:1c:52:56:01:87:17:f2:d8:91:f3:
44:64:17:dd:84:bb:da:e4:22:f1:a6:55:80:f5:ff:
bd:0e:55:fa:87:1b:1f:37:c1:02:3a:e9:f4:6f:d6:
a4:0b:af:ae:d7:3e:b4:48:d5:4e:a7:c5:62:e8:6c:
d7:67:d6:6a:fc:ed:e0:06:a1:b0:d1:8d:c0:4d:f8:
29:6c:86:fe:55:0a:f6:43:26:fc:74:bb:78:0b:53:
4c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:24:BF:12:35:A6:05:33:A1:C7:0E:AF:0B:C3:42:3A:BF:DF:71:9C
X509v3 Authority Key Identifier:
keyid:15:6D:70:33:0E:C5:1E:9F:F1:F7:72:7B:17:81:C4:7A:7A:9A:A5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW1wMw7FHp_x93J7F4HEenqapW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:12:7d:83:31:6d:0b:33:03:2d:bb:ae:a2:18:2c:c6:bd:7b:
b0:ce:a4:ff:32:78:96:b2:db:09:16:5a:86:d0:75:40:27:11:
9b:d3:1d:8c:ed:5e:3d:72:1c:ca:1c:97:8b:d9:27:d8:18:29:
02:1b:fd:e1:e9:16:29:3f:7f:b2:c4:3e:de:93:a4:4a:07:03:
4f:5c:7c:ea:1b:ae:0f:1b:98:df:75:00:52:0b:7e:0e:84:b7:
95:3c:8d:14:d1:b0:93:70:20:cf:ee:34:46:b7:8c:5c:12:63:
4c:2b:ff:32:c0:cd:33:92:bc:e4:c1:de:6d:5e:58:0d:58:d1:
cc:3c:a0:d2:90:0d:07:72:46:7b:67:3c:3e:20:44:1e:a2:92:
82:55:3f:ac:35:b1:84:6f:86:43:01:b0:a0:1a:d1:56:59:7d:
f8:9e:ef:94:97:d4:fc:19:cd:f3:d0:5c:25:c5:32:2f:43:44:
e6:ad:a2:0f:2c:6a:52:af:d4:17:da:13:b7:bf:99:ea:e0:e4:
1d:dc:ba:d4:6e:90:1e:cd:cc:03:59:a7:fe:c9:22:55:c7:d0:
41:48:d9:50:95:f2:00:24:1f:a2:36:16:39:64:38:77:ee:da:
6c:69:00:83:d1:d3:d0:ca:fc:79:36:53:dc:ff:90:10:7b:67:
05:7d:4c:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDgmf9kCQ/jE3sDhruSIt4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NmQ3MDMzMGVjNTFlOWZmMWY3NzI3YjE3ODFjNDdhN2E5
YWE1NmQwHhcNMjUwNTEyMDgwMDI1WhcNMjUwNTEzMDgwMDI1WjAzMTEwLwYDVQQD
EygwMDI0YmYxMjM1YTYwNTMzYTFjNzBlYWYwYmMzNDIzYWJmZGY3MTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrq5DOmAuvwvzGxxJQ4/57TbY6Vt
ZLlK2RWDQ3I1pEhTVdGW+Up7Yvs+pgaeFo2wyUngHFTSkwx0qR0X452FDnuJh1m8
qSbfYAYxwrVs92CtjV1wFYoFTUWWIPVhLf4xf4INsYwDbmect4mPMW1GvibksQsf
bdZBRD6zxFyBMz8PXeiwX8ZQxvvyQ2lK1FCWhrmCEpK5FTZJnn1APwmrWwyCp1BO
mUSQvBxSVgGHF/LYkfNEZBfdhLva5CLxplWA9f+9DlX6hxsfN8ECOun0b9akC6+u
1z60SNVOp8Vi6GzXZ9Zq/O3gBqGw0Y3ATfgpbIb+VQr2Qyb8dLt4C1NMrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAkvxI1pgUzoccOrwvDQjq/33GcMB8GA1UdIwQY
MBaAFBVtcDMOxR6f8fdyexeBxHp6mqVtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlcxd013N0ZIcF94OTNKN0Y0SEVlbnFhcFcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82Zjg1N2QtYzM5OC00ZDE0LTkwNzQt
Mzc0OWQ5NWRjZDFmLzEvRlcxd013N0ZIcF94OTNKN0Y0SEVlbnFhcFcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82Zjg1N2QtYzM5OC00ZDE0LTkwNzQtMzc0OWQ5NWRjZDFm
LzEvRlcxd013N0ZIcF94OTNKN0Y0SEVlbnFhcFcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAshJ9gzFt
CzMDLbuuohgsxr17sM6k/zJ4lrLbCRZahtB1QCcRm9MdjO1ePXIcyhyXi9kn2Bgp
Ahv94ekWKT9/ssQ+3pOkSgcDT1x86huuDxuY33UAUgt+DoS3lTyNFNGwk3Agz+40
RreMXBJjTCv/MsDNM5K85MHebV5YDVjRzDyg0pANB3JGe2c8PiBEHqKSglU/rDWx
hG+GQwGwoBrRVll9+J7vlJfU/BnN89BcJcUyL0NE5q2iDyxqUq/UF9oTt7+Z6uDk
Hdy61G6QHs3MA1mn/skiVcfQQUjZUJXyACQfojYWOWQ4d+7abGkAg9HT0Mr8eTZT
3P+QEHtnBX1MTg==
-----END CERTIFICATE-----
Generated at Mon May 12 15:42:29 2025 by rpki-client