Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
File: Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft (raw, json)
Hash identifier: 39gy8Y3bhsrp3SprFUWmXoYSRg6iI7MRGOmTbqykf00=
Subject key identifier: 59:8D:6B:C8:D9:4A:64:9B:0B:46:C7:FC:76:EF:1C:5C:D3:10:77:E1
Authority key identifier: 16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
Certificate issuer: /CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Certificate serial: 0196C201F2632A1E04AE9B69128491D68AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
Manifest number: 1235
Signing time: Mon 12 May 2025 01:00:29 +0000
Manifest this update: Mon 12 May 2025 01:00:29 +0000
Manifest next update: Tue 13 May 2025 01:00:29 +0000
Files and hashes: 1: AcPmWwo94r8m4Vj4-gToYDvTsGU.roa (hash: +evKtbSFjpYA6xBirW2To9jZahtd3cCQYx8e8YIZ/g8=)
2: Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl (hash: c8di2+Z1+Yi5KY5kTHapzDKW4pgrBr35R3pRxRFIo6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:01:f2:63:2a:1e:04:ae:9b:69:12:84:91:d6:8a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Validity
Not Before: May 12 01:00:29 2025 GMT
Not After : May 13 01:00:29 2025 GMT
Subject: CN=598d6bc8d94a649b0b46c7fc76ef1c5cd31077e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d1:2e:c4:a2:65:44:4d:2b:cf:9e:52:9e:8d:
8b:72:e5:00:02:aa:93:d5:9a:91:75:d3:73:f5:04:
80:75:54:b1:df:22:f3:44:ce:7e:1c:eb:fe:47:c1:
2f:d0:42:4e:01:b7:ee:1e:40:88:24:8f:d2:26:e3:
24:b6:ed:e2:3e:08:2c:27:99:f3:36:2a:0d:e1:f1:
4c:e5:71:21:38:6a:44:90:a9:1b:63:f6:5b:1a:e5:
ce:b8:57:3e:0c:63:12:c0:c8:76:f3:10:15:a3:07:
b1:77:e2:1e:90:d8:72:65:f0:71:f7:08:16:d6:d3:
76:45:7d:b3:97:17:bf:0d:d2:1d:61:51:1e:e1:ab:
e3:e3:e3:f7:8f:76:d9:a9:fd:54:d9:2b:55:b4:da:
78:45:67:25:cc:38:a0:86:e7:93:ff:a1:9e:5f:6b:
e1:88:25:58:0d:00:f5:e0:f6:aa:c6:5f:6f:68:b6:
22:24:45:8a:20:59:28:6f:98:2f:8a:99:b6:81:12:
ae:98:c8:75:bc:ec:dc:08:32:2b:e8:fb:25:05:26:
4f:6f:84:d0:6b:13:f7:50:5c:4c:ef:88:74:19:08:
bc:a3:7b:d9:26:a6:d7:f7:32:f0:c9:f2:85:8c:df:
5e:96:60:8f:2b:1d:bd:2b:10:88:59:4a:b9:97:a0:
d4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8D:6B:C8:D9:4A:64:9B:0B:46:C7:FC:76:EF:1C:5C:D3:10:77:E1
X509v3 Authority Key Identifier:
keyid:16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b6:ee:f4:35:fd:5e:f1:e8:b5:bb:02:04:d9:27:8f:fc:c8:
d0:c9:a0:50:32:32:d3:65:89:c7:a1:48:a4:8b:85:e0:91:8f:
51:06:4e:0a:7d:bd:7d:1a:2d:6e:3b:de:3f:63:ca:b4:b8:8a:
10:66:7d:cc:9c:eb:89:3e:bd:e9:8e:24:93:79:86:4e:18:47:
e3:6f:66:9b:be:a6:55:ec:d8:18:8b:27:87:8f:1f:61:4f:31:
3b:20:31:fd:42:92:e0:2b:1c:03:a6:0d:81:73:c3:ab:6a:3c:
3a:8c:6e:cd:f7:3b:97:d7:ce:ba:b7:59:97:52:5e:45:ab:2b:
4e:06:45:92:16:e9:34:41:cf:ed:9e:79:ad:96:a2:9f:97:de:
ae:14:3e:89:e6:26:d1:60:c5:b1:c2:ba:fd:fb:a6:89:55:8d:
f3:24:b4:04:a4:ba:8e:9d:f1:40:17:71:b5:88:10:af:11:4f:
f6:83:a4:8e:77:37:cb:4c:2a:1b:82:a3:a0:b0:b4:5a:1c:9c:
5c:e5:7d:6d:cb:41:67:45:af:e1:fc:b4:63:c4:75:b4:23:f7:
d9:4a:9e:44:fe:3c:7f:7a:2e:fc:37:3c:4f:98:12:49:d7:1f:
9c:5a:6f:6a:2d:73:b8:3a:60:e0:a4:64:2c:e7:ea:90:00:1f:
f7:8d:bb:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCAfJjKh4ErptpEoSR1or8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2M2QyNTcyMTgwZjRiNzg0ZmI0ZjJhNWVkNTBlOWZlNWU2
YmU2YTcwHhcNMjUwNTEyMDEwMDI5WhcNMjUwNTEzMDEwMDI5WjAzMTEwLwYDVQQD
Eyg1OThkNmJjOGQ5NGE2NDliMGI0NmM3ZmM3NmVmMWM1Y2QzMTA3N2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19EuxKJlRE0rz55Sno2LcuUAAqqT
1ZqRddNz9QSAdVSx3yLzRM5+HOv+R8Ev0EJOAbfuHkCIJI/SJuMktu3iPggsJ5nz
NioN4fFM5XEhOGpEkKkbY/ZbGuXOuFc+DGMSwMh28xAVowexd+IekNhyZfBx9wgW
1tN2RX2zlxe/DdIdYVEe4avj4+P3j3bZqf1U2StVtNp4RWclzDighueT/6GeX2vh
iCVYDQD14Paqxl9vaLYiJEWKIFkob5gvipm2gRKumMh1vOzcCDIr6PslBSZPb4TQ
axP3UFxM74h0GQi8o3vZJqbX9zLwyfKFjN9elmCPKx29KxCIWUq5l6DUwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmNa8jZSmSbC0bH/HbvHFzTEHfhMB8GA1UdIwQY
MBaAFBY9JXIYD0t4T7Type1Q6f5ea+anMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmowbGNoZ1BTM2hQdFBLbDdWRHBfbDVyNXFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9lOWEwYTEtMTEzNS00OTVjLTg2OWEt
NzBiYmM3YzBhOWE1LzEvRmowbGNoZ1BTM2hQdFBLbDdWRHBfbDVyNXFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9lOWEwYTEtMTEzNS00OTVjLTg2OWEtNzBiYmM3YzBhOWE1
LzEvRmowbGNoZ1BTM2hQdFBLbDdWRHBfbDVyNXFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLbu9DX9
XvHotbsCBNknj/zI0MmgUDIy02WJx6FIpIuF4JGPUQZOCn29fRotbjveP2PKtLiK
EGZ9zJzriT696Y4kk3mGThhH429mm76mVezYGIsnh48fYU8xOyAx/UKS4CscA6YN
gXPDq2o8Ooxuzfc7l9fOurdZl1JeRasrTgZFkhbpNEHP7Z55rZain5ferhQ+ieYm
0WDFscK6/fumiVWN8yS0BKS6jp3xQBdxtYgQrxFP9oOkjnc3y0wqG4KjoLC0Whyc
XOV9bctBZ0Wv4fy0Y8R1tCP32UqeRP48f3ou/Dc8T5gSSdcfnFpvai1zuDpg4KRk
LOfqkAAf94276A==
-----END CERTIFICATE-----
Generated at Mon May 12 08:53:49 2025 by rpki-client