Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
File: Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json)
Hash identifier: BKflnIPyfUTQD3MM39AhqKM8AFkMEwgHzRI973Ec0hw=
Subject key identifier: 47:2B:BA:31:3F:F3:E1:99:3D:63:CC:CD:13:B3:59:67:FE:EF:C8:F0
Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
Certificate issuer: /CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Certificate serial: 0196C75F1D1C8DB14D19ACA09FC26F705A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
Manifest number: 0479
Signing time: Tue 13 May 2025 02:00:21 +0000
Manifest this update: Tue 13 May 2025 02:00:21 +0000
Manifest next update: Wed 14 May 2025 02:00:21 +0000
Files and hashes: 1: FDrMY25luzUgEicNY75FE-uO2tw.roa (hash: fjlUWgHKI2vkNS9JhhFgEKy2oBhGIJFwaeJzp29a1Pc=)
2: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: C0hVz9wZZ7NVDZ5z4Trd9WwIpYTATqvwC+D22Ewnu4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:5f:1d:1c:8d:b1:4d:19:ac:a0:9f:c2:6f:70:5a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Validity
Not Before: May 13 02:00:21 2025 GMT
Not After : May 14 02:00:21 2025 GMT
Subject: CN=472bba313ff3e1993d63cccd13b35967feefc8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:16:2d:8c:f2:20:aa:1d:96:80:bc:e5:7a:5f:
f4:a5:86:c1:6e:33:a8:d1:00:10:b6:b9:dd:69:d5:
4d:eb:64:21:76:0b:c1:6d:3d:85:b9:ad:78:4e:c0:
44:f2:d3:ec:82:27:8f:d9:6b:11:d1:84:80:44:82:
15:80:3c:57:0e:36:b3:4d:42:27:c1:71:98:e9:96:
d9:cc:23:44:81:26:e1:0d:dd:2e:fc:e9:00:60:af:
b5:0c:8a:a4:ca:61:45:f0:b7:be:c1:6f:20:9e:3a:
2a:f5:77:34:97:b7:a8:21:57:2a:44:4d:7e:d8:bf:
47:68:27:2b:07:ba:08:b7:37:a5:0d:34:c0:64:68:
9f:4f:d1:51:de:39:12:29:df:c4:23:70:9d:5c:19:
37:a2:05:f7:de:45:00:85:37:c1:f1:e0:45:83:a3:
78:cc:01:60:2b:10:ee:aa:a6:31:83:18:57:15:d9:
1a:71:04:fc:99:45:e3:2a:1e:48:4c:fc:7e:8e:1a:
b9:4e:d4:58:df:c6:88:29:31:13:46:af:a2:53:3f:
de:9e:87:c2:82:7f:24:86:e2:74:6b:fa:85:5b:e6:
4c:fc:55:0e:88:20:b6:7f:3b:86:85:73:98:6d:4e:
bf:76:72:ab:8c:0e:2c:9d:c9:7c:9f:ef:ca:b9:15:
0f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2B:BA:31:3F:F3:E1:99:3D:63:CC:CD:13:B3:59:67:FE:EF:C8:F0
X509v3 Authority Key Identifier:
keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:fa:6c:4f:ea:14:e8:d7:4f:d6:c0:ed:22:ce:e3:3f:be:51:
36:2d:5e:56:d4:66:31:3a:10:4c:0e:52:18:ae:6e:af:23:fe:
9d:88:1f:16:99:0f:a1:26:f1:68:43:37:06:8a:0b:7a:ed:36:
ef:80:87:fc:65:70:c2:8a:c9:f6:85:d8:9d:c9:35:eb:64:aa:
3e:a6:86:ef:d9:0a:33:5f:07:c3:94:4f:6f:1b:a2:d5:f2:62:
d4:b5:a9:21:ed:4d:97:29:67:a9:70:bb:9e:a6:10:a9:fb:1a:
ad:40:3b:36:d7:62:aa:d5:6f:fe:2b:70:b2:d4:18:13:a5:1a:
1b:c4:9c:68:8b:f3:f4:22:e7:0c:33:a6:38:af:41:09:8c:d8:
7b:b0:70:0b:fd:b9:05:9c:3f:30:ac:cf:39:22:ee:3f:c9:a4:
ca:c8:2b:b1:e4:e2:45:45:13:77:d6:3b:c7:ab:ca:f1:1b:af:
9f:16:fa:58:f9:27:f2:f6:2e:67:96:c1:00:ca:90:36:82:5e:
30:61:f5:36:e2:b0:f6:c2:db:fd:2b:d5:e6:f3:91:19:1a:78:
fd:7a:a3:8d:55:d1:60:49:99:3b:d1:74:66:90:88:31:e2:8c:
3a:6d:89:9e:b7:53:84:7d:40:a1:6d:cb:e7:a3:25:35:46:dc:
cc:10:4f:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbHXx0cjbFNGaygn8JvcFprMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MWRhNzUxMjhkYTc1ODJlMTBmNmE0YmYyMmI5MzkxMzQ5
YmE5ZjEwHhcNMjUwNTEzMDIwMDIxWhcNMjUwNTE0MDIwMDIxWjAzMTEwLwYDVQQD
Eyg0NzJiYmEzMTNmZjNlMTk5M2Q2M2NjY2QxM2IzNTk2N2ZlZWZjOGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxYtjPIgqh2WgLzlel/0pYbBbjOo
0QAQtrndadVN62QhdgvBbT2Fua14TsBE8tPsgieP2WsR0YSARIIVgDxXDjazTUIn
wXGY6ZbZzCNEgSbhDd0u/OkAYK+1DIqkymFF8Le+wW8gnjoq9Xc0l7eoIVcqRE1+
2L9HaCcrB7oItzelDTTAZGifT9FR3jkSKd/EI3CdXBk3ogX33kUAhTfB8eBFg6N4
zAFgKxDuqqYxgxhXFdkacQT8mUXjKh5ITPx+jhq5TtRY38aIKTETRq+iUz/enofC
gn8khuJ0a/qFW+ZM/FUOiCC2fzuGhXOYbU6/dnKrjA4sncl8n+/KuRUPGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcrujE/8+GZPWPMzROzWWf+78jwMB8GA1UdIwQY
MBaAFBcdp1Eo2nWC4Q9qS/Irk5E0m6nxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81OWY3NDMtZjFjNS00MmY4LTg2N2Mt
NjFkZWFhNTYzMWIyLzEvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC81OWY3NDMtZjFjNS00MmY4LTg2N2MtNjFkZWFhNTYzMWIy
LzEvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePpsT+oU
6NdP1sDtIs7jP75RNi1eVtRmMToQTA5SGK5uryP+nYgfFpkPoSbxaEM3BooLeu02
74CH/GVwworJ9oXYnck162SqPqaG79kKM18Hw5RPbxui1fJi1LWpIe1NlylnqXC7
nqYQqfsarUA7NtdiqtVv/itwstQYE6UaG8ScaIvz9CLnDDOmOK9BCYzYe7BwC/25
BZw/MKzPOSLuP8mkysgrseTiRUUTd9Y7x6vK8Ruvnxb6WPkn8vYuZ5bBAMqQNoJe
MGH1NuKw9sLb/SvV5vORGRp4/XqjjVXRYEmZO9F0ZpCIMeKMOm2JnrdThH1AoW3L
56MlNUbczBBPxQ==
-----END CERTIFICATE-----
Generated at Tue May 13 06:32:22 2025 by rpki-client