Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft
File: FctDavZPjQbSzBktBIAMslYoQnI.mft (raw, json)
Hash identifier: EaJ+khPS/0wzPnvP6PjMNY/k+LK23vC1GXYSAnhCNEc=
Subject key identifier: 72:F5:8D:74:0C:14:2C:2F:EB:AB:30:22:84:BE:F0:76:3A:7C:14:80
Authority key identifier: 15:CB:43:6A:F6:4F:8D:06:D2:CC:19:2D:04:80:0C:B2:56:28:42:72
Certificate issuer: /CN=15cb436af64f8d06d2cc192d04800cb256284272
Certificate serial: 0198D6CDB05FA5FD6FD3EEEF482B4654DE1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft
Manifest number: 0149
Signing time: Sat 23 Aug 2025 12:01:00 +0000
Manifest this update: Sat 23 Aug 2025 12:01:00 +0000
Manifest next update: Sun 24 Aug 2025 12:01:00 +0000
Files and hashes: 1: FctDavZPjQbSzBktBIAMslYoQnI.crl (hash: X/69zERs3K3esnH3yK8bPZXzyn0dhlBk3lw1iB+KyV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:b0:5f:a5:fd:6f:d3:ee:ef:48:2b:46:54:de:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cb436af64f8d06d2cc192d04800cb256284272
Validity
Not Before: Aug 23 12:01:00 2025 GMT
Not After : Aug 24 12:01:00 2025 GMT
Subject: CN=72f58d740c142c2febab302284bef0763a7c1480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4e:f5:cf:cc:ae:46:6d:67:f7:4d:b6:ae:d5:
b7:bf:f8:b5:82:27:3e:51:85:ec:28:a9:ce:5e:c1:
08:33:6e:96:6e:45:a1:a2:20:e8:3c:ac:07:85:19:
0d:2b:b0:c3:49:15:47:d7:34:6f:80:75:1b:d3:0c:
bf:f1:10:bb:4a:e3:5c:4b:97:5b:2b:9e:dd:ad:c6:
77:8d:ee:2f:ce:b1:61:93:1a:d9:fa:1d:2e:4e:3b:
75:c5:b2:bb:35:a0:18:29:52:ac:74:ff:2f:90:96:
f1:d3:97:9f:12:a2:ba:f6:c0:68:ef:06:66:bf:50:
65:71:4a:04:26:b5:58:57:1d:c9:f6:07:11:9b:0f:
61:08:d8:2b:f6:e4:0a:18:4a:57:77:4b:02:9d:56:
6c:f5:ac:89:fb:e0:60:74:24:62:6e:1b:cd:97:f2:
01:00:74:59:a7:25:70:82:91:54:92:f0:fa:08:6d:
cf:67:6f:bd:5e:21:9b:6b:19:a0:20:1e:91:27:0a:
0c:11:c0:64:e1:ec:66:33:96:d7:73:71:e5:31:2f:
cc:10:94:48:31:aa:5f:01:00:7d:c3:88:6c:2d:47:
bd:fa:6e:06:54:8a:2e:06:d5:2f:45:62:47:ab:33:
ba:0f:99:54:db:63:b2:15:8e:4f:b6:e9:da:96:2a:
55:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F5:8D:74:0C:14:2C:2F:EB:AB:30:22:84:BE:F0:76:3A:7C:14:80
X509v3 Authority Key Identifier:
keyid:15:CB:43:6A:F6:4F:8D:06:D2:CC:19:2D:04:80:0C:B2:56:28:42:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:30:e7:7a:ba:ad:df:ca:6c:ec:79:9a:63:04:07:de:0e:61:
18:ce:b2:6d:3f:10:52:99:ff:4e:19:39:f1:42:c7:2c:1a:58:
6a:f2:32:ac:3b:49:9c:f6:6d:43:fb:58:35:f5:7c:06:9c:c1:
08:44:e5:c8:a6:05:2d:8f:8f:58:20:97:3d:1b:9e:bb:24:55:
2c:cf:31:22:70:a5:4c:8f:81:e1:ca:eb:89:de:67:ba:51:86:
db:3c:56:a5:d6:51:c6:57:18:81:cf:88:d6:40:50:4d:a3:88:
ff:8d:37:61:57:7e:70:12:95:ba:84:de:a1:15:94:b6:a7:4e:
fb:44:61:46:f0:52:80:96:a9:ef:2b:42:12:b9:7e:64:78:51:
c4:6b:01:b3:17:48:26:49:36:32:e8:fb:9c:2a:8d:62:f7:41:
6d:1c:78:1c:45:ef:35:10:54:4d:3f:0e:22:34:d5:00:50:62:
1f:3a:36:a2:f2:87:15:54:68:d3:71:ed:cd:f6:84:1f:e1:91:
5c:b7:a0:39:82:94:16:aa:3c:2c:8c:aa:cd:b1:b7:ea:c0:94:
b1:80:9f:e0:d9:12:fd:db:6b:17:37:a7:01:ae:29:1d:39:0e:
a2:ab:0f:5a:39:66:c5:9d:cb:75:2d:56:42:45:1d:df:7b:d0:
2c:1d:dc:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzbBfpf1v0+7vSCtGVN4fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Y2I0MzZhZjY0ZjhkMDZkMmNjMTkyZDA0ODAwY2IyNTYy
ODQyNzIwHhcNMjUwODIzMTIwMTAwWhcNMjUwODI0MTIwMTAwWjAzMTEwLwYDVQQD
Eyg3MmY1OGQ3NDBjMTQyYzJmZWJhYjMwMjI4NGJlZjA3NjNhN2MxNDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU71z8yuRm1n9022rtW3v/i1gic+
UYXsKKnOXsEIM26WbkWhoiDoPKwHhRkNK7DDSRVH1zRvgHUb0wy/8RC7SuNcS5db
K57drcZ3je4vzrFhkxrZ+h0uTjt1xbK7NaAYKVKsdP8vkJbx05efEqK69sBo7wZm
v1BlcUoEJrVYVx3J9gcRmw9hCNgr9uQKGEpXd0sCnVZs9ayJ++BgdCRibhvNl/IB
AHRZpyVwgpFUkvD6CG3PZ2+9XiGbaxmgIB6RJwoMEcBk4exmM5bXc3HlMS/MEJRI
MapfAQB9w4hsLUe9+m4GVIouBtUvRWJHqzO6D5lU22OyFY5PtunalipVnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHL1jXQMFCwv66swIoS+8HY6fBSAMB8GA1UdIwQY
MBaAFBXLQ2r2T40G0swZLQSADLJWKEJyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmN0RGF2WlBqUWJTekJrdEJJQU1zbFlvUW5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zNTEzYTAtYTUyOC00Mzg2LTk1Mjct
MDljMmE2NjIwOGEzLzEvRmN0RGF2WlBqUWJTekJrdEJJQU1zbFlvUW5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8zNTEzYTAtYTUyOC00Mzg2LTk1MjctMDljMmE2NjIwOGEz
LzEvRmN0RGF2WlBqUWJTekJrdEJJQU1zbFlvUW5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjDnerqt
38ps7HmaYwQH3g5hGM6ybT8QUpn/Thk58ULHLBpYavIyrDtJnPZtQ/tYNfV8BpzB
CETlyKYFLY+PWCCXPRueuyRVLM8xInClTI+B4crrid5nulGG2zxWpdZRxlcYgc+I
1kBQTaOI/403YVd+cBKVuoTeoRWUtqdO+0RhRvBSgJap7ytCErl+ZHhRxGsBsxdI
Jkk2Muj7nCqNYvdBbRx4HEXvNRBUTT8OIjTVAFBiHzo2ovKHFVRo03HtzfaEH+GR
XLegOYKUFqo8LIyqzbG36sCUsYCf4NkS/dtrFzenAa4pHTkOoqsPWjlmxZ3LdS1W
QkUd33vQLB3c6w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:13:06 2025 by rpki-client