Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
File: FtQJAygYpijNKyg4OALXfnSUolI.mft (raw, json)
Hash identifier: fVagsMYKWedofHl57KvCTQUBJNJf7t5oYKZXRcVYBTE=
Subject key identifier: BE:EB:79:21:63:98:6C:C2:73:35:4F:88:35:8D:25:F9:CE:4E:FD:F1
Authority key identifier: 16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
Certificate issuer: /CN=16d409032818a628cd2b28383802d77e7494a252
Certificate serial: 0198D5BB78C2737449FC48B7A0A3C4FC2780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
Manifest number: 0B
Signing time: Sat 23 Aug 2025 07:01:29 +0000
Manifest this update: Sat 23 Aug 2025 07:01:29 +0000
Manifest next update: Sun 24 Aug 2025 07:01:29 +0000
Files and hashes: 1: FtQJAygYpijNKyg4OALXfnSUolI.crl (hash: ngnXJ5sjmJpmZL95K1U2WhfCCnf+1845wDQJl564w08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:78:c2:73:74:49:fc:48:b7:a0:a3:c4:fc:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d409032818a628cd2b28383802d77e7494a252
Validity
Not Before: Aug 23 07:01:29 2025 GMT
Not After : Aug 24 07:01:29 2025 GMT
Subject: CN=beeb792163986cc273354f88358d25f9ce4efdf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0f:91:3f:0b:5a:1c:15:bf:59:51:13:14:f0:
40:04:fc:ee:35:79:62:ec:23:06:51:ed:d4:ef:5e:
04:1f:b5:d7:e9:e7:57:de:ca:0a:5e:93:06:61:f8:
49:ee:73:7a:f7:1b:21:36:51:60:d5:0c:03:c8:5b:
eb:de:60:16:63:ef:a8:bf:4b:f1:de:8f:39:09:f7:
4f:80:0e:89:2b:f1:b9:65:20:3c:07:c3:6d:cd:d3:
72:f0:e4:99:1c:8e:32:cc:e1:9e:fe:cc:c8:0d:ed:
9f:49:b8:4a:f3:f8:a4:27:65:ed:ad:1f:e1:82:01:
fc:fb:83:47:44:d1:dd:04:3a:35:10:eb:49:7e:c9:
1e:ec:38:b0:d2:1d:eb:19:a1:f8:67:32:c9:ea:be:
35:2d:2f:26:c5:0f:ca:49:ae:85:c3:fb:51:8f:bd:
ff:32:0c:2b:96:d1:c4:19:3b:7e:d6:a7:48:cb:d0:
2b:b4:60:e8:bb:86:b9:f3:23:4b:ae:94:c6:75:df:
be:64:41:77:37:21:89:bb:ff:6e:ce:d7:c1:2a:04:
43:79:8d:5b:e5:bc:9f:6b:cd:dd:8a:53:ff:23:1a:
6b:8b:3e:b8:fd:6f:c7:bf:5d:0d:30:2b:3d:d5:13:
ba:2c:60:2d:b9:9f:d3:4e:22:bf:03:2b:61:0e:ea:
89:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EB:79:21:63:98:6C:C2:73:35:4F:88:35:8D:25:F9:CE:4E:FD:F1
X509v3 Authority Key Identifier:
keyid:16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:eb:b0:d1:42:b3:fe:f5:27:d1:f9:81:cb:52:aa:dd:d1:7c:
55:4e:60:5c:71:c4:4e:25:44:db:6c:c7:46:36:c2:e6:51:6e:
45:18:32:72:45:fc:37:db:13:19:2d:97:b2:06:49:0e:7c:1e:
3b:eb:c5:3a:fa:48:24:e9:6b:a7:46:40:48:7c:d5:27:f3:f4:
91:b7:aa:02:bf:5d:34:06:1e:f1:de:ad:c3:e5:1c:b8:74:87:
b8:56:53:c4:56:d2:b4:0e:fd:e5:d1:48:f2:c7:d4:2f:a4:dd:
08:81:37:fa:48:83:a8:53:3a:91:78:21:3f:47:e4:58:cb:24:
b4:0f:37:67:92:77:66:50:8d:1c:10:d0:c6:18:9b:90:a1:60:
17:f9:90:2c:c1:84:4d:e9:eb:fc:58:40:0f:f1:84:2b:ac:f0:
be:1a:be:9f:e1:00:ab:97:a7:7e:ba:a3:7d:bb:ef:55:55:35:
eb:c0:82:37:53:d6:43:1b:3e:99:d8:00:2f:db:ac:18:2e:ff:
c8:d6:2a:31:37:05:0f:f8:2d:29:62:78:df:8b:d0:4c:f2:d1:
c0:cd:85:49:a1:33:22:a3:19:79:12:eb:14:b1:bf:5c:31:1a:
b5:24:04:b5:1d:75:e3:ed:16:3b:65:76:ab:dc:6f:ce:4f:ef:
23:1f:6d:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu3jCc3RJ/Ei3oKPE/CeAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZDQwOTAzMjgxOGE2MjhjZDJiMjgzODM4MDJkNzdlNzQ5
NGEyNTIwHhcNMjUwODIzMDcwMTI5WhcNMjUwODI0MDcwMTI5WjAzMTEwLwYDVQQD
EyhiZWViNzkyMTYzOTg2Y2MyNzMzNTRmODgzNThkMjVmOWNlNGVmZGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1g+RPwtaHBW/WVETFPBABPzuNXli
7CMGUe3U714EH7XX6edX3soKXpMGYfhJ7nN69xshNlFg1QwDyFvr3mAWY++ov0vx
3o85CfdPgA6JK/G5ZSA8B8NtzdNy8OSZHI4yzOGe/szIDe2fSbhK8/ikJ2XtrR/h
ggH8+4NHRNHdBDo1EOtJfske7Diw0h3rGaH4ZzLJ6r41LS8mxQ/KSa6Fw/tRj73/
MgwrltHEGTt+1qdIy9ArtGDou4a58yNLrpTGdd++ZEF3NyGJu/9uztfBKgRDeY1b
5byfa83dilP/Ixpriz64/W/Hv10NMCs91RO6LGAtuZ/TTiK/AythDuqJ/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7reSFjmGzCczVPiDWNJfnOTv3xMB8GA1UdIwQY
MBaAFBbUCQMoGKYozSsoODgC1350lKJSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ODYzNzUtYmM4ZC00MDY1LTgzZGMt
MGFlYjlkMzc3ODdlLzEvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS81ODYzNzUtYmM4ZC00MDY1LTgzZGMtMGFlYjlkMzc3ODdl
LzEvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkuuw0UKz
/vUn0fmBy1Kq3dF8VU5gXHHETiVE22zHRjbC5lFuRRgyckX8N9sTGS2XsgZJDnwe
O+vFOvpIJOlrp0ZASHzVJ/P0kbeqAr9dNAYe8d6tw+UcuHSHuFZTxFbStA795dFI
8sfUL6TdCIE3+kiDqFM6kXghP0fkWMsktA83Z5J3ZlCNHBDQxhibkKFgF/mQLMGE
Tenr/FhAD/GEK6zwvhq+n+EAq5enfrqjfbvvVVU168CCN1PWQxs+mdgAL9usGC7/
yNYqMTcFD/gtKWJ434vQTPLRwM2FSaEzIqMZeRLrFLG/XDEatSQEtR114+0WO2V2
q9xvzk/vIx9tJw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:33 2025 by rpki-client