Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
File: fM2Lj3l51soXEsHVCkDU5VXJThM.mft (raw, json)
Hash identifier: fADSqIdl8/+8VZV0t34JYAq2RBtbuvDLTezt71iJOmg=
Subject key identifier: C6:9D:C0:5C:CA:01:CF:8F:93:B3:F0:E2:31:17:4B:E9:FF:6C:DA:43
Authority key identifier: 7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
Certificate issuer: /CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Certificate serial: 0198D4E04D615B2D320CE3E6687B7A4D4E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
Manifest number: 09DC
Signing time: Sat 23 Aug 2025 03:02:06 +0000
Manifest this update: Sat 23 Aug 2025 03:02:06 +0000
Manifest next update: Sun 24 Aug 2025 03:02:06 +0000
Files and hashes: 1: fM2Lj3l51soXEsHVCkDU5VXJThM.crl (hash: fxmvPoTHFKOOiKiSyEUKctRSBhn2iNr8T+3RR/XGJgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:4d:61:5b:2d:32:0c:e3:e6:68:7b:7a:4d:4e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Validity
Not Before: Aug 23 03:02:06 2025 GMT
Not After : Aug 24 03:02:06 2025 GMT
Subject: CN=c69dc05cca01cf8f93b3f0e231174be9ff6cda43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:e8:43:a2:c9:c0:85:e2:be:eb:c3:74:6d:
ca:47:bb:4d:5a:40:90:ea:c7:e3:db:5d:e5:f4:02:
24:0b:53:95:be:d3:62:a6:fd:66:b0:48:d9:bd:79:
58:a7:a6:3f:c7:91:46:3a:dc:0e:5a:0f:64:f5:cf:
65:da:30:9b:86:cb:7e:57:c1:5b:63:6d:c4:b3:27:
fe:7d:b1:08:a1:e9:e0:6d:ab:ef:2f:90:23:bc:42:
68:40:2e:5f:69:e2:3e:d0:28:7b:a0:22:75:e8:3a:
eb:43:a6:40:8b:db:f4:5a:8f:7a:11:1e:ed:d6:a6:
cd:fb:f4:cc:f3:27:02:33:24:16:63:d6:c5:54:14:
72:58:4b:e0:86:c2:a0:52:79:ec:30:7e:1d:10:72:
9e:50:86:68:50:d0:09:61:cc:1a:67:35:56:a5:37:
7d:e0:27:2d:0c:a2:ca:28:7f:6d:af:ba:79:f0:44:
6a:c6:38:0b:e3:c4:92:fe:d3:fc:27:9f:5a:e4:e2:
a8:f1:d5:07:f4:e7:ea:1e:57:cd:06:0d:8b:26:8b:
ae:f8:24:a4:50:c7:9b:75:e8:50:00:35:9a:5a:82:
db:a6:c3:2d:43:88:1d:e8:1f:3a:76:af:dc:77:84:
c6:b5:fb:e3:dd:2b:9c:fc:bc:5d:63:68:b4:47:c2:
bc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9D:C0:5C:CA:01:CF:8F:93:B3:F0:E2:31:17:4B:E9:FF:6C:DA:43
X509v3 Authority Key Identifier:
keyid:7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:9b:fe:1c:aa:6d:69:0b:98:29:ab:56:60:55:9d:d4:7e:5a:
0a:7b:ae:8d:75:3a:47:13:4a:a7:ab:2d:36:75:b7:f5:46:eb:
35:8e:90:e7:c8:29:cb:a4:8d:e8:78:1b:1b:de:46:c4:57:e6:
37:55:17:4b:6f:8b:2b:3e:57:64:f7:f7:7b:4a:ee:4c:d0:07:
1b:6b:05:ef:f6:29:37:a1:2d:86:16:77:36:ca:ff:92:b2:69:
62:70:72:17:98:83:f6:c5:a6:ed:fa:c4:97:b9:ec:0b:77:0c:
08:a0:84:1a:66:fe:bb:af:1d:5e:a4:2d:53:1e:96:ad:56:c7:
fb:44:d5:13:8b:f2:bd:ea:8f:1c:1b:98:65:29:9b:22:57:e2:
f9:0a:2c:7e:90:67:ef:6e:18:54:de:e2:08:fc:6d:a6:fb:41:
ee:6c:c0:61:32:f0:0c:fc:3c:11:81:83:22:68:8c:f5:cd:8d:
e3:49:dd:55:ce:4b:59:f4:34:34:52:67:93:51:81:0c:ab:ae:
bf:74:71:ea:51:65:14:4e:30:51:03:50:e8:ec:2f:58:9a:c1:
61:f4:f1:88:56:80:a2:de:df:3b:54:d3:c5:ba:db:90:aa:db:
1d:38:77:b2:7c:9f:db:c0:21:cc:f0:17:fd:50:95:63:1a:1e:
1d:0c:aa:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4E1hWy0yDOPmaHt6TU5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjY2Q4YjhmNzk3OWQ2Y2ExNzEyYzFkNTBhNDBkNGU1NTVj
OTRlMTMwHhcNMjUwODIzMDMwMjA2WhcNMjUwODI0MDMwMjA2WjAzMTEwLwYDVQQD
EyhjNjlkYzA1Y2NhMDFjZjhmOTNiM2YwZTIzMTE3NGJlOWZmNmNkYTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqHoQ6LJwIXivuvDdG3KR7tNWkCQ
6sfj213l9AIkC1OVvtNipv1msEjZvXlYp6Y/x5FGOtwOWg9k9c9l2jCbhst+V8Fb
Y23Esyf+fbEIoengbavvL5AjvEJoQC5faeI+0Ch7oCJ16DrrQ6ZAi9v0Wo96ER7t
1qbN+/TM8ycCMyQWY9bFVBRyWEvghsKgUnnsMH4dEHKeUIZoUNAJYcwaZzVWpTd9
4CctDKLKKH9tr7p58ERqxjgL48SS/tP8J59a5OKo8dUH9OfqHlfNBg2LJouu+CSk
UMebdehQADWaWoLbpsMtQ4gd6B86dq/cd4TGtfvj3Suc/LxdY2i0R8K89wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMadwFzKAc+Pk7Pw4jEXS+n/bNpDMB8GA1UdIwQY
MBaAFHzNi495edbKFxLB1QpA1OVVyU4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS84MTE1NmMtYjgxNC00OGNmLWEwYzMt
Y2FiNzg2MDc3ZTgzLzEvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS84MTE1NmMtYjgxNC00OGNmLWEwYzMtY2FiNzg2MDc3ZTgz
LzEvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpv+HKpt
aQuYKatWYFWd1H5aCnuujXU6RxNKp6stNnW39UbrNY6Q58gpy6SN6HgbG95GxFfm
N1UXS2+LKz5XZPf3e0ruTNAHG2sF7/YpN6EthhZ3Nsr/krJpYnByF5iD9sWm7frE
l7nsC3cMCKCEGmb+u68dXqQtUx6WrVbH+0TVE4vyveqPHBuYZSmbIlfi+QosfpBn
724YVN7iCPxtpvtB7mzAYTLwDPw8EYGDImiM9c2N40ndVc5LWfQ0NFJnk1GBDKuu
v3Rx6lFlFE4wUQNQ6OwvWJrBYfTxiFaAot7fO1TTxbrbkKrbHTh3snyf28AhzPAX
/VCVYxoeHQyqNw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:47 2025 by rpki-client