Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
File: ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft (raw, json)
Hash identifier: W05+RY7dhQhy68TOfmLPajgssgZ744FpntxKnaUzcOc=
Subject key identifier: 45:D2:04:E8:A3:6D:2C:E3:7C:5D:B5:79:1B:30:D1:D6:8E:A5:07:09
Authority key identifier: 7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6
Certificate issuer: /CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6
Certificate serial: 0198D6609DF8F00B1EB8383E6C5BAD701C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
Manifest number: 0DD7
Signing time: Sat 23 Aug 2025 10:01:52 +0000
Manifest this update: Sat 23 Aug 2025 10:01:52 +0000
Manifest next update: Sun 24 Aug 2025 10:01:52 +0000
Files and hashes: 1: ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl (hash: ggXh1H3ysuDrzD3oX/i7oYed6u89GApJ+fLreng61zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:9d:f8:f0:0b:1e:b8:38:3e:6c:5b:ad:70:1c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6
Validity
Not Before: Aug 23 10:01:52 2025 GMT
Not After : Aug 24 10:01:52 2025 GMT
Subject: CN=45d204e8a36d2ce37c5db5791b30d1d68ea50709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a9:f2:3c:03:52:e6:d6:b2:51:f9:cf:55:5b:
5c:32:fa:a3:04:02:f0:da:e9:4c:ea:12:21:98:db:
ac:56:b6:c2:c6:61:d3:23:90:db:52:df:8c:e3:07:
3a:da:53:e6:5f:8b:a3:1d:47:a7:e5:0c:ee:23:08:
96:71:6e:6d:53:54:ba:ac:f1:6b:9d:56:b0:3f:bb:
5b:d1:96:f2:f1:59:39:85:fd:c7:7b:99:8a:df:c8:
9d:66:5f:0e:78:6a:b4:27:cc:cf:d5:4e:7b:f4:02:
50:30:70:d4:40:e9:f8:12:6e:bf:33:e0:7e:ae:f7:
b2:97:3d:44:56:b8:39:91:d9:a9:ef:06:8b:a5:f5:
74:3d:8c:91:fc:e8:c9:24:aa:0b:5d:78:03:4d:95:
d0:9e:95:a0:6d:46:84:2b:5f:f3:af:b2:02:1e:51:
4c:fb:67:75:61:f0:a2:7c:d8:53:69:16:36:b7:f0:
49:fc:1d:ba:06:8d:67:18:66:f6:6c:a8:c4:da:da:
f3:c7:96:b6:51:40:8e:88:8d:e9:93:18:0a:ad:a0:
e4:18:09:0f:21:4c:63:e7:da:92:72:ee:93:05:a9:
9b:ca:9d:30:ec:3d:43:46:2b:9d:79:85:c0:cb:f8:
20:77:04:ad:8e:3f:f2:3a:a6:69:d5:60:f1:92:8d:
6e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D2:04:E8:A3:6D:2C:E3:7C:5D:B5:79:1B:30:D1:D6:8E:A5:07:09
X509v3 Authority Key Identifier:
keyid:7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a9:fa:f3:20:4d:1d:2e:56:80:ca:83:f3:10:3a:f8:5d:f1:
54:02:46:ab:bb:a9:67:08:d4:b9:69:7b:df:07:34:3c:5d:0f:
fa:60:2f:70:d4:64:fc:3c:d8:a3:21:88:10:56:38:1b:94:99:
4f:59:ca:02:09:4f:18:23:aa:40:28:e2:ee:8f:a7:1a:f4:5e:
1c:62:7b:b9:cd:11:9d:d5:5d:7d:dd:f0:e8:48:5c:64:97:56:
78:56:1f:38:c1:c4:4d:bb:b8:8e:51:d5:8f:3c:48:be:e9:c4:
3d:a0:ae:d6:0c:9c:c6:99:22:a9:cc:c9:2c:59:4d:1e:90:0b:
76:a9:fd:cf:56:00:af:c2:e5:90:ca:c4:62:1e:8a:56:03:7d:
55:30:5e:ed:0e:c0:b2:62:7d:bb:76:49:ab:0d:ef:d1:be:2c:
46:d9:22:4c:da:00:14:fc:0f:80:fd:68:dc:c6:c9:ac:83:4d:
e2:fc:f5:8f:0d:9d:4b:cb:ef:54:38:e1:2f:8d:b8:ae:e1:d4:
64:8d:42:a6:2e:14:49:cc:85:a1:c5:df:44:ea:db:0a:3a:ad:
cf:c9:70:e9:d6:98:c7:c1:90:51:20:b8:2c:37:16:b0:00:6b:
f9:e8:6e:ae:c1:d0:c3:f6:d6:e1:ba:f7:3d:22:29:14:93:8b:
65:ae:30:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYJ348AseuDg+bFutcBybMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZmJiNGZiZDkxZjBlYWUzY2MyMmY2YzRlYmI1MGNkODBh
ODhmZDYwHhcNMjUwODIzMTAwMTUyWhcNMjUwODI0MTAwMTUyWjAzMTEwLwYDVQQD
Eyg0NWQyMDRlOGEzNmQyY2UzN2M1ZGI1NzkxYjMwZDFkNjhlYTUwNzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qnyPANS5tayUfnPVVtcMvqjBALw
2ulM6hIhmNusVrbCxmHTI5DbUt+M4wc62lPmX4ujHUen5QzuIwiWcW5tU1S6rPFr
nVawP7tb0Zby8Vk5hf3He5mK38idZl8OeGq0J8zP1U579AJQMHDUQOn4Em6/M+B+
rveylz1EVrg5kdmp7waLpfV0PYyR/OjJJKoLXXgDTZXQnpWgbUaEK1/zr7ICHlFM
+2d1YfCifNhTaRY2t/BJ/B26Bo1nGGb2bKjE2trzx5a2UUCOiI3pkxgKraDkGAkP
IUxj59qScu6TBambyp0w7D1DRiudeYXAy/ggdwStjj/yOqZp1WDxko1uJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXSBOijbSzjfF21eRsw0daOpQcJMB8GA1UdIwQY
MBaAFH37tPvZHw6uPMIvbE67UM2AqI/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZ1MC05a2ZEcTQ4d2k5c1RydFF6WUNvajlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYmQ3ZTItOGY1Ni00OWQ1LWJiOGMt
MGQxN2RkYmZlM2I2LzEvZmZ1MC05a2ZEcTQ4d2k5c1RydFF6WUNvajlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wYmQ3ZTItOGY1Ni00OWQ1LWJiOGMtMGQxN2RkYmZlM2I2
LzEvZmZ1MC05a2ZEcTQ4d2k5c1RydFF6WUNvajlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPan68yBN
HS5WgMqD8xA6+F3xVAJGq7upZwjUuWl73wc0PF0P+mAvcNRk/DzYoyGIEFY4G5SZ
T1nKAglPGCOqQCji7o+nGvReHGJ7uc0RndVdfd3w6EhcZJdWeFYfOMHETbu4jlHV
jzxIvunEPaCu1gycxpkiqczJLFlNHpALdqn9z1YAr8LlkMrEYh6KVgN9VTBe7Q7A
smJ9u3ZJqw3v0b4sRtkiTNoAFPwPgP1o3MbJrINN4vz1jw2dS8vvVDjhL424ruHU
ZI1Cpi4UScyFocXfROrbCjqtz8lw6daYx8GQUSC4LDcWsABr+ehursHQw/bW4br3
PSIpFJOLZa4wJg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:17 2025 by rpki-client