Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
File: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json)
Hash identifier: Pn2Q2Ku/M0Vatd4F+JDK3QkT+dPF6Xqz5Dia6gRxSUE=
Subject key identifier: 4A:2B:5D:DE:CC:00:DB:DD:00:41:0D:DA:E0:BF:BF:6F:E5:BE:D9:DF
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial: 0196A3F76958885F4D50D52BC65C76BC5A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
Manifest number: 152A
Signing time: Tue 06 May 2025 05:00:22 +0000
Manifest this update: Tue 06 May 2025 05:00:22 +0000
Manifest next update: Wed 07 May 2025 05:00:22 +0000
Files and hashes: 1: 1-TdRJj4h2RmubOdxb9rkHHG6bhc.roa (hash: IbIK2UxlwKjCUY9QjIcWsizwAMtE57kEDfBifLf6mzQ=)
2: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: uddbqBOpEXeL0zqFn8MWGiCH8mc570TtiW3O7zpchfE=)
3: QR0Kgwt3HCwjc-xcqO7iblC-rKY.roa (hash: 0rkvAXImNg4dab81A4VmHvprnFlgPXRICVp6eT39HwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:f7:69:58:88:5f:4d:50:d5:2b:c6:5c:76:bc:5a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Validity
Not Before: May 6 05:00:22 2025 GMT
Not After : May 7 05:00:22 2025 GMT
Subject: CN=4a2b5ddecc00dbdd00410ddae0bfbf6fe5bed9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:94:8f:8a:7f:fc:74:c3:37:e9:24:ee:60:37:
26:c2:78:e1:17:23:1b:20:23:1c:bb:4c:5b:77:08:
32:41:c7:6e:14:3f:4c:38:5a:59:f1:df:71:28:1f:
35:3c:0e:01:7c:b1:a5:66:e0:2c:bf:33:e1:32:0d:
fe:7d:59:18:dd:5d:5a:36:b2:8c:6b:4c:fd:7c:34:
06:0a:17:9a:eb:fc:2f:58:a8:d5:70:86:93:db:52:
82:9d:74:be:ee:74:bb:6f:98:7b:4a:bc:e3:6d:bc:
9c:da:27:7f:ea:2b:2c:21:c3:13:18:fd:cd:9a:7b:
15:2d:a3:b9:ff:0a:e8:fc:23:95:82:92:6c:83:09:
4c:ea:27:66:8c:54:ff:3a:c9:2e:57:21:11:9c:62:
37:7f:25:db:33:b8:4a:00:d8:e3:67:5c:e1:53:3d:
7f:7a:02:ed:8d:de:0f:98:d6:ff:25:88:f6:56:0c:
21:cc:9a:46:28:6a:c0:9b:37:42:bf:01:ed:3c:5e:
be:26:eb:59:57:63:a7:21:c1:59:ba:ff:22:4f:8f:
37:75:87:57:48:b4:78:1d:53:a9:d0:85:1f:6e:54:
90:33:a8:e2:37:7f:70:f0:55:a1:92:bb:ed:36:ee:
7a:be:41:5b:f7:09:eb:34:6f:cf:2d:7a:43:33:09:
54:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2B:5D:DE:CC:00:DB:DD:00:41:0D:DA:E0:BF:BF:6F:E5:BE:D9:DF
X509v3 Authority Key Identifier:
keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2e:42:1a:63:f2:06:06:76:28:c9:bc:a0:c6:60:46:49:92:
cb:cc:0c:82:eb:f2:59:d2:1a:ae:14:ef:86:a7:00:e1:d3:97:
84:d5:b8:bf:0e:5c:c0:92:98:51:6b:f7:5b:64:e6:b2:38:18:
91:29:cf:f5:83:a4:23:ce:ed:cc:55:ad:0f:f0:43:21:2f:58:
83:ac:4c:56:c6:fb:b7:5c:45:87:5d:56:f5:cb:6e:3b:06:c9:
37:3c:82:e4:06:c5:83:75:8a:f0:c5:73:be:9e:6c:65:fd:52:
9d:68:82:75:47:a3:72:06:a8:ae:7c:7c:ad:d2:2c:fa:51:17:
4d:0e:84:d2:06:6f:ae:02:23:b5:7d:47:38:39:02:a6:b4:64:
cf:4c:02:e6:d7:8f:14:63:8e:5f:71:d8:bd:0e:e7:ef:33:3f:
c6:5b:cf:0c:99:75:3c:d5:72:06:af:43:2b:0a:88:85:74:18:
90:3c:16:1d:41:86:19:84:5f:1b:5b:d2:24:7a:24:71:60:bb:
b9:ad:dd:2a:58:e4:fc:34:ec:82:82:65:35:67:05:3d:b0:a2:
3b:55:12:5a:c8:90:cb:46:9e:51:fd:d6:c1:7e:e1:f6:a5:45:
02:86:42:18:a4:ce:8f:1e:75:9d:bc:04:32:67:fd:a5:db:6d:
39:09:56:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaj92lYiF9NUNUrxlx2vFpyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NDk3ZDg0NTNjNWVlM2ViYmIzODhlMWE0N2ExOTVmZjMw
ZmUwMDkwHhcNMjUwNTA2MDUwMDIyWhcNMjUwNTA3MDUwMDIyWjAzMTEwLwYDVQQD
Eyg0YTJiNWRkZWNjMDBkYmRkMDA0MTBkZGFlMGJmYmY2ZmU1YmVkOWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopSPin/8dMM36STuYDcmwnjhFyMb
ICMcu0xbdwgyQcduFD9MOFpZ8d9xKB81PA4BfLGlZuAsvzPhMg3+fVkY3V1aNrKM
a0z9fDQGChea6/wvWKjVcIaT21KCnXS+7nS7b5h7Srzjbbyc2id/6issIcMTGP3N
mnsVLaO5/wro/COVgpJsgwlM6idmjFT/OskuVyERnGI3fyXbM7hKANjjZ1zhUz1/
egLtjd4PmNb/JYj2VgwhzJpGKGrAmzdCvwHtPF6+JutZV2OnIcFZuv8iT483dYdX
SLR4HVOp0IUfblSQM6jiN39w8FWhkrvtNu56vkFb9wnrNG/PLXpDMwlUKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEorXd7MANvdAEEN2uC/v2/lvtnfMB8GA1UdIwQY
MBaAFBZJfYRTxe4+u7OI4aR6GV/zD+AJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEt
YjIzNGRkNmVkNjM3LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEtYjIzNGRkNmVkNjM3
LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFi5CGmPy
BgZ2KMm8oMZgRkmSy8wMguvyWdIarhTvhqcA4dOXhNW4vw5cwJKYUWv3W2TmsjgY
kSnP9YOkI87tzFWtD/BDIS9Yg6xMVsb7t1xFh11W9ctuOwbJNzyC5AbFg3WK8MVz
vp5sZf1SnWiCdUejcgaornx8rdIs+lEXTQ6E0gZvrgIjtX1HODkCprRkz0wC5teP
FGOOX3HYvQ7n7zM/xlvPDJl1PNVyBq9DKwqIhXQYkDwWHUGGGYRfG1vSJHokcWC7
ua3dKljk/DTsgoJlNWcFPbCiO1USWsiQy0aeUf3WwX7h9qVFAoZCGKTOjx51nbwE
Mmf9pdttOQlWFA==
-----END CERTIFICATE-----
Generated at Tue May 6 11:40:19 2025 by rpki-client