Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
File: fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft (raw, json)
Hash identifier: mGsWyEKu+JgrofEpW1Ia7b4FEQ5ejGNHsXZ9Z0bPfuQ=
Subject key identifier: 88:FA:40:3A:2E:3E:9F:B5:80:AD:CF:FD:C1:B6:8E:CD:54:0F:46:A5
Authority key identifier: 7C:C8:BA:CB:E7:3A:40:CE:81:8A:4B:AF:A3:93:A8:52:97:C1:9C:0D
Certificate issuer: /CN=7cc8bacbe73a40ce818a4bafa393a85297c19c0d
Certificate serial: 0197B70F3F161E9C4F022F1B0477CC641EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 15:01:59 +0000
Manifest this update: Sat 28 Jun 2025 15:01:59 +0000
Manifest next update: Sun 29 Jun 2025 15:01:59 +0000
Files and hashes: 1: fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl (hash: Ht/xV5bOuCqNrGOuPrhlhJaMlyc10IhPUYjlQfATObQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:3f:16:1e:9c:4f:02:2f:1b:04:77:cc:64:1e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cc8bacbe73a40ce818a4bafa393a85297c19c0d
Validity
Not Before: Jun 28 15:01:59 2025 GMT
Not After : Jun 29 15:01:59 2025 GMT
Subject: CN=88fa403a2e3e9fb580adcffdc1b68ecd540f46a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:05:f0:9d:32:98:26:fc:41:fe:ac:6f:31:eb:
22:2e:9d:e2:6d:e5:32:1f:e8:de:fb:42:64:6b:0e:
be:6e:07:14:8b:87:89:fb:cc:59:34:7b:40:4c:0b:
56:ed:7d:2b:5d:99:51:b3:38:2f:ba:11:a4:c2:a2:
5d:79:90:68:23:25:00:d1:61:8b:67:4a:e4:5f:85:
b3:1a:db:b9:a8:f1:9e:b8:c5:99:37:44:e2:dc:da:
ae:98:c9:25:e4:70:01:e6:c2:ec:fb:9c:d0:a6:e6:
cb:03:24:41:d0:6d:41:78:6a:fc:33:00:a7:48:4b:
89:97:a5:cb:3e:2d:df:d6:09:ce:6f:1a:f0:8b:f2:
f2:ec:4c:79:16:47:3b:a0:6e:ef:3d:12:9e:1b:df:
f4:ba:94:05:f4:4f:db:07:8b:61:f2:92:10:91:d2:
fd:05:b0:f5:da:4e:24:96:13:d2:15:0b:04:e6:3c:
ec:f1:83:b6:05:79:1a:dc:4f:ef:a3:0f:11:fd:89:
e7:b0:59:d7:72:0a:73:4e:eb:56:79:e7:0f:b1:b6:
fc:ee:ef:6f:ce:c9:03:52:d2:bf:74:01:5f:d1:b8:
7e:0d:53:21:e0:9a:d0:c0:5c:0c:58:56:50:4f:65:
47:53:a7:f8:70:b4:ed:e3:b6:1e:15:c0:2c:63:8e:
27:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FA:40:3A:2E:3E:9F:B5:80:AD:CF:FD:C1:B6:8E:CD:54:0F:46:A5
X509v3 Authority Key Identifier:
keyid:7C:C8:BA:CB:E7:3A:40:CE:81:8A:4B:AF:A3:93:A8:52:97:C1:9C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:5c:98:f1:c8:37:0e:28:24:29:9b:dc:3c:11:f9:8b:95:de:
bd:5a:dd:97:3f:04:d2:cc:6d:d9:6b:8f:d9:7c:96:7c:ff:f2:
f5:80:b4:35:4f:04:e8:45:17:f2:28:5c:10:38:62:3d:75:f2:
c7:7b:7c:11:49:0c:f6:4f:25:af:6e:c9:87:86:94:cf:c7:40:
d4:eb:99:65:81:33:fd:da:41:aa:69:3f:cb:14:a3:4c:a6:c3:
c0:96:b0:f4:e6:c2:7f:f5:a3:6f:4e:73:b7:6b:9c:2f:ad:70:
fd:09:02:3a:64:46:9f:b3:ae:a4:6c:f9:8a:34:30:a9:cb:b3:
be:3a:c9:a0:83:55:b3:8b:4d:4e:a7:96:f2:9b:57:17:21:21:
3a:34:e6:d3:38:fe:1d:06:fc:10:bb:60:4b:22:5c:a3:7d:08:
cc:c0:42:bb:5f:25:1d:57:16:24:2c:09:22:9b:cc:81:71:c6:
8c:55:b9:19:6c:39:33:bd:43:2b:82:cf:1a:d8:eb:33:b8:da:
8f:aa:44:0a:02:b2:1d:03:a6:e6:67:0f:64:0e:78:37:13:78:
c8:9e:2f:8b:d5:06:c0:a6:da:17:13:7a:72:e5:ea:e7:38:bd:
56:48:30:b8:15:33:b6:93:6d:fa:c7:4a:ba:96:db:d8:aa:6d:
96:84:ff:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dz8WHpxPAi8bBHfMZB7uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYzhiYWNiZTczYTQwY2U4MThhNGJhZmEzOTNhODUyOTdj
MTljMGQwHhcNMjUwNjI4MTUwMTU5WhcNMjUwNjI5MTUwMTU5WjAzMTEwLwYDVQQD
Eyg4OGZhNDAzYTJlM2U5ZmI1ODBhZGNmZmRjMWI2OGVjZDU0MGY0NmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogXwnTKYJvxB/qxvMesiLp3ibeUy
H+je+0Jkaw6+bgcUi4eJ+8xZNHtATAtW7X0rXZlRszgvuhGkwqJdeZBoIyUA0WGL
Z0rkX4WzGtu5qPGeuMWZN0Ti3NqumMkl5HAB5sLs+5zQpubLAyRB0G1BeGr8MwCn
SEuJl6XLPi3f1gnObxrwi/Ly7Ex5Fkc7oG7vPRKeG9/0upQF9E/bB4th8pIQkdL9
BbD12k4klhPSFQsE5jzs8YO2BXka3E/vow8R/YnnsFnXcgpzTutWeecPsbb87u9v
zskDUtK/dAFf0bh+DVMh4JrQwFwMWFZQT2VHU6f4cLTt47YeFcAsY44njwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIj6QDouPp+1gK3P/cG2js1UD0alMB8GA1UdIwQY
MBaAFHzIusvnOkDOgYpLr6OTqFKXwZwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk1pNnktYzZRTTZCaWt1dm81T29VcGZCbkEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8zMjJlYzctMjEzMS00ZGI0LTg3NTUt
OGI4YjJhYzU2YzliLzEvZk1pNnktYzZRTTZCaWt1dm81T29VcGZCbkEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8zMjJlYzctMjEzMS00ZGI0LTg3NTUtOGI4YjJhYzU2Yzli
LzEvZk1pNnktYzZRTTZCaWt1dm81T29VcGZCbkEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1yY8cg3
DigkKZvcPBH5i5XevVrdlz8E0sxt2WuP2XyWfP/y9YC0NU8E6EUX8ihcEDhiPXXy
x3t8EUkM9k8lr27Jh4aUz8dA1OuZZYEz/dpBqmk/yxSjTKbDwJaw9ObCf/Wjb05z
t2ucL61w/QkCOmRGn7OupGz5ijQwqcuzvjrJoINVs4tNTqeW8ptXFyEhOjTm0zj+
HQb8ELtgSyJco30IzMBCu18lHVcWJCwJIpvMgXHGjFW5GWw5M71DK4LPGtjrM7ja
j6pECgKyHQOm5mcPZA54NxN4yJ4vi9UGwKbaFxN6cuXq5zi9VkgwuBUztpNt+sdK
upbb2KptloT/Yw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:38:00 2025 by rpki-client