Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
File: F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft (raw, json)
Hash identifier: HnKrmC8XBDA9+AUI57NqhF0NjUlu38U2PB09UOTLWOc=
Subject key identifier: 33:6B:8A:0B:C1:1E:CE:9F:9A:C5:CE:F2:52:94:5C:8B:C7:A5:15:8B
Authority key identifier: 17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5
Certificate issuer: /CN=17a16657a2497737ca03621cc668d20c762136d5
Certificate serial: 0198D73AEEF2053E2D089883EC11DACD5F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
Manifest number: 0DEC
Signing time: Sat 23 Aug 2025 14:00:20 +0000
Manifest this update: Sat 23 Aug 2025 14:00:20 +0000
Manifest next update: Sun 24 Aug 2025 14:00:20 +0000
Files and hashes: 1: F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl (hash: uQIRoWrLJRo/Criq3xXgy/8Vdk9f1roX4mKweZWByug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:ee:f2:05:3e:2d:08:98:83:ec:11:da:cd:5f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17a16657a2497737ca03621cc668d20c762136d5
Validity
Not Before: Aug 23 14:00:20 2025 GMT
Not After : Aug 24 14:00:20 2025 GMT
Subject: CN=336b8a0bc11ece9f9ac5cef252945c8bc7a5158b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:28:ed:0f:c7:d2:58:8e:8b:fa:22:be:12:
dc:ff:23:98:a7:1e:9f:73:a6:90:79:ac:1d:e0:6d:
d3:79:2f:4b:0c:0f:06:d2:a1:92:ab:40:17:7f:1e:
14:f5:95:54:b8:0e:4f:a6:7d:a9:7b:37:bd:1e:d4:
b8:8f:60:03:42:dc:4a:7c:a5:92:de:06:65:ed:f3:
7a:80:9b:f3:20:51:e0:38:f1:61:ef:1e:2b:70:98:
da:1e:50:78:cd:a3:44:0a:74:cb:87:5b:56:f9:01:
b0:f0:0e:e1:09:82:95:15:a1:f2:43:28:6f:67:12:
af:1a:e3:43:84:38:95:c3:e4:74:41:23:4c:88:da:
35:e2:10:9c:b3:a9:24:6b:0e:fc:46:33:62:b9:32:
d5:bb:79:72:f6:35:7e:07:6f:4a:3c:78:ac:86:3c:
a0:7b:10:e7:25:bb:b7:87:df:76:a2:e3:64:5d:2f:
95:a3:c0:e4:dc:7a:21:93:d0:f5:52:72:98:54:18:
00:6a:7c:dd:f1:bd:69:83:c1:1a:34:d7:61:e6:21:
85:40:45:88:fe:b8:87:75:86:33:95:a7:fe:2f:32:
d7:3d:9c:a0:fb:8f:de:6f:3b:96:96:c7:f5:4e:53:
48:75:9e:ad:40:a2:1b:d8:1a:ff:f4:4b:95:e7:69:
8a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6B:8A:0B:C1:1E:CE:9F:9A:C5:CE:F2:52:94:5C:8B:C7:A5:15:8B
X509v3 Authority Key Identifier:
keyid:17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:85:7e:94:7a:ac:e9:e2:2a:cb:47:cd:42:e8:af:8d:c9:81:
8c:0a:70:a9:97:ef:e6:f8:43:69:18:08:0e:93:ec:10:73:e9:
92:ab:6c:e5:90:44:30:49:e9:e5:c5:d0:b1:30:2b:96:66:8e:
3d:1f:94:03:c4:74:9a:80:19:c7:24:2c:d1:5f:8e:5a:36:fd:
b4:69:1f:cd:6c:02:a4:69:06:cf:c7:e2:84:4a:a4:ab:55:8d:
bc:c1:51:be:01:23:e3:1b:8c:b1:6a:1c:62:8b:36:ce:75:14:
09:c3:6d:b8:46:05:5f:42:51:37:61:75:de:68:b2:ef:2c:91:
63:36:db:ac:f5:55:f1:bc:20:5b:b2:a2:6a:b9:ec:63:c8:77:
65:9e:fb:50:7f:9a:15:42:c4:cd:40:dc:58:1d:3c:17:0d:23:
08:ed:1e:b1:70:01:01:5d:b6:e9:fe:cf:b7:14:d1:ed:4c:2e:
06:f2:9d:da:ab:b8:90:0b:e7:d4:c6:63:0a:4e:c0:f5:35:8e:
4d:46:51:ff:27:fa:93:78:50:19:0f:c4:2c:65:b1:72:22:7d:
c1:88:ba:e3:17:71:70:ac:11:cb:dc:d8:03:db:64:34:d3:56:
4a:f2:b3:e0:91:bc:a5:cb:b2:fc:21:95:15:bd:eb:60:72:63:
16:5a:0f:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXOu7yBT4tCJiD7BHazV8DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YTE2NjU3YTI0OTc3MzdjYTAzNjIxY2M2NjhkMjBjNzYy
MTM2ZDUwHhcNMjUwODIzMTQwMDIwWhcNMjUwODI0MTQwMDIwWjAzMTEwLwYDVQQD
EygzMzZiOGEwYmMxMWVjZTlmOWFjNWNlZjI1Mjk0NWM4YmM3YTUxNThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybco7Q/H0liOi/oivhLc/yOYpx6f
c6aQeawd4G3TeS9LDA8G0qGSq0AXfx4U9ZVUuA5Ppn2peze9HtS4j2ADQtxKfKWS
3gZl7fN6gJvzIFHgOPFh7x4rcJjaHlB4zaNECnTLh1tW+QGw8A7hCYKVFaHyQyhv
ZxKvGuNDhDiVw+R0QSNMiNo14hCcs6kkaw78RjNiuTLVu3ly9jV+B29KPHishjyg
exDnJbu3h992ouNkXS+Vo8Dk3Hohk9D1UnKYVBgAanzd8b1pg8EaNNdh5iGFQEWI
/riHdYYzlaf+LzLXPZyg+4/ebzuWlsf1TlNIdZ6tQKIb2Br/9EuV52mKywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNrigvBHs6fmsXO8lKUXIvHpRWLMB8GA1UdIwQY
MBaAFBehZleiSXc3ygNiHMZo0gx2ITbVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjZGbVY2SkpkemZLQTJJY3htalNESFloTnRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80YWM4NWYtZTNmZi00YjUyLWI4OTgt
OTZjOGY0MzlhYjgxLzEvRjZGbVY2SkpkemZLQTJJY3htalNESFloTnRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni80YWM4NWYtZTNmZi00YjUyLWI4OTgtOTZjOGY0MzlhYjgx
LzEvRjZGbVY2SkpkemZLQTJJY3htalNESFloTnRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4V+lHqs
6eIqy0fNQuivjcmBjApwqZfv5vhDaRgIDpPsEHPpkqts5ZBEMEnp5cXQsTArlmaO
PR+UA8R0moAZxyQs0V+OWjb9tGkfzWwCpGkGz8fihEqkq1WNvMFRvgEj4xuMsWoc
Yos2znUUCcNtuEYFX0JRN2F13miy7yyRYzbbrPVV8bwgW7KiarnsY8h3ZZ77UH+a
FULEzUDcWB08Fw0jCO0esXABAV226f7PtxTR7UwuBvKd2qu4kAvn1MZjCk7A9TWO
TUZR/yf6k3hQGQ/ELGWxciJ9wYi64xdxcKwRy9zYA9tkNNNWSvKz4JG8pcuy/CGV
Fb3rYHJjFloPCQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:54 2025 by rpki-client