Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
File: FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft (raw, json)
Hash identifier: Db3k4uumUHF2DNIsfKH/fj/FjdQBSkNZezTUtvUCJBw=
Subject key identifier: E4:F1:87:69:6D:66:1C:37:E4:35:54:EE:B5:CA:77:64:97:C4:18:0F
Authority key identifier: 15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C
Certificate issuer: /CN=15013024552942ceaf68c67e0128dff4b9ef749c
Certificate serial: 0197B7EA5DDD6D1169E9E7D75E63960D3FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
Manifest number: 0884
Signing time: Sat 28 Jun 2025 19:01:19 +0000
Manifest this update: Sat 28 Jun 2025 19:01:19 +0000
Manifest next update: Sun 29 Jun 2025 19:01:19 +0000
Files and hashes: 1: FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl (hash: bD+uG6l5M2HFtEYDLRS2IPf6q59ahOcS5MqX63fQ9eo=)
2: GscfecpegOFfpMoknfniRAYQkAM.roa (hash: 8hLbX2dDbgbmzy+G6jKdhfkk83QzDCU0+sWTTicGlYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:5d:dd:6d:11:69:e9:e7:d7:5e:63:96:0d:3f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15013024552942ceaf68c67e0128dff4b9ef749c
Validity
Not Before: Jun 28 19:01:19 2025 GMT
Not After : Jun 29 19:01:19 2025 GMT
Subject: CN=e4f187696d661c37e43554eeb5ca776497c4180f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2d:c2:ed:3a:86:55:3b:48:a9:62:15:d1:4c:
c8:a6:13:99:cf:27:0a:25:8b:24:c4:aa:6e:8b:f1:
3e:b2:2b:e9:66:a1:aa:45:8a:cb:a5:6a:ea:09:0b:
07:e8:40:20:07:95:15:29:39:7b:4f:44:0b:e1:f4:
c5:7e:87:0b:54:b8:d2:53:58:c2:ae:06:de:08:b6:
ee:c4:9d:83:5c:20:e5:49:dc:ea:93:6b:02:7e:bb:
ec:5a:05:b8:a2:f8:53:b0:af:51:d7:0f:3f:97:ba:
a3:31:0f:b4:cf:7c:e3:8e:8f:db:21:19:20:06:f5:
c1:7f:ae:0f:6a:5a:7f:d4:8a:de:aa:3a:f0:c5:0f:
64:15:43:79:d7:65:de:04:08:88:91:e2:ab:35:23:
c8:f0:86:80:cd:06:56:2f:28:54:d8:db:b2:09:59:
6a:de:1f:2f:f9:f8:af:68:60:1c:8f:b3:06:dd:1d:
f0:93:19:13:54:67:bf:39:b3:24:27:1e:c3:31:ab:
a3:3b:26:7b:a4:92:8f:b6:2e:35:bc:b8:3d:4e:08:
79:e6:be:3c:58:ab:74:ea:18:01:2e:b9:df:8a:3d:
cc:85:8a:7a:be:a3:de:67:7f:57:d5:75:6e:cd:b3:
c1:87:43:b1:a4:e7:15:f4:75:ab:4e:b5:64:ff:b3:
89:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F1:87:69:6D:66:1C:37:E4:35:54:EE:B5:CA:77:64:97:C4:18:0F
X509v3 Authority Key Identifier:
keyid:15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:26:b4:47:75:d0:bc:a0:12:5d:12:54:c6:b4:24:9e:08:65:
76:78:e7:c9:37:5d:0b:37:2e:79:60:9a:47:b8:0b:14:ee:be:
bc:8d:3e:7a:ab:14:44:49:7f:3a:4d:dd:0a:6c:0c:c1:bc:95:
84:36:fb:27:e7:37:c1:f0:a3:65:e2:21:cb:f1:15:66:7e:8e:
46:c7:13:cf:6a:40:b2:6f:d2:26:38:0f:48:2c:83:1b:75:b9:
17:e0:29:05:4a:f3:dc:87:6b:c1:58:a6:07:99:4b:0b:62:67:
88:b5:9d:31:01:bb:40:fb:b4:1f:16:6e:00:b5:b8:c5:87:aa:
1b:24:9c:39:30:a1:6b:10:36:02:8f:e0:01:e2:29:56:99:34:
8b:ba:2a:0b:94:2d:82:59:73:b1:e2:b0:3e:a6:77:e2:c7:e5:
73:e8:04:a8:61:97:04:ad:d7:85:1e:ff:f5:ae:7b:18:2c:38:
7e:3c:48:c3:da:72:4e:71:7d:25:4e:2e:52:0b:77:f2:e6:d3:
00:6b:96:65:f1:a0:25:ef:b8:01:b6:67:5c:39:27:de:32:23:
be:9c:e2:92:6b:56:a1:e7:cc:c3:de:2a:22:9c:17:ba:cf:39:
5d:a8:7d:b9:3a:77:e7:a5:8c:1c:94:93:76:3f:09:92:25:5b:
25:a7:20:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36l3dbRFp6efXXmOWDT+rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MDEzMDI0NTUyOTQyY2VhZjY4YzY3ZTAxMjhkZmY0Yjll
Zjc0OWMwHhcNMjUwNjI4MTkwMTE5WhcNMjUwNjI5MTkwMTE5WjAzMTEwLwYDVQQD
EyhlNGYxODc2OTZkNjYxYzM3ZTQzNTU0ZWViNWNhNzc2NDk3YzQxODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS3C7TqGVTtIqWIV0UzIphOZzycK
JYskxKpui/E+sivpZqGqRYrLpWrqCQsH6EAgB5UVKTl7T0QL4fTFfocLVLjSU1jC
rgbeCLbuxJ2DXCDlSdzqk2sCfrvsWgW4ovhTsK9R1w8/l7qjMQ+0z3zjjo/bIRkg
BvXBf64Palp/1IreqjrwxQ9kFUN512XeBAiIkeKrNSPI8IaAzQZWLyhU2NuyCVlq
3h8v+fivaGAcj7MG3R3wkxkTVGe/ObMkJx7DMaujOyZ7pJKPti41vLg9Tgh55r48
WKt06hgBLrnfij3MhYp6vqPeZ39X1XVuzbPBh0OxpOcV9HWrTrVk/7OJJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTxh2ltZhw35DVU7rXKd2SXxBgPMB8GA1UdIwQY
MBaAFBUBMCRVKULOr2jGfgEo3/S573ScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlFFd0pGVXBRczZ2YU1aLUFTamY5TG52ZEp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82NTg1MmItZmE3ZS00YWQ3LWIzZWIt
NzBmYzRiMDhmMDBiLzEvRlFFd0pGVXBRczZ2YU1aLUFTamY5TG52ZEp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS82NTg1MmItZmE3ZS00YWQ3LWIzZWItNzBmYzRiMDhmMDBi
LzEvRlFFd0pGVXBRczZ2YU1aLUFTamY5TG52ZEp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCa0R3XQ
vKASXRJUxrQknghldnjnyTddCzcueWCaR7gLFO6+vI0+eqsUREl/Ok3dCmwMwbyV
hDb7J+c3wfCjZeIhy/EVZn6ORscTz2pAsm/SJjgPSCyDG3W5F+ApBUrz3IdrwVim
B5lLC2JniLWdMQG7QPu0HxZuALW4xYeqGyScOTChaxA2Ao/gAeIpVpk0i7oqC5Qt
gllzseKwPqZ34sflc+gEqGGXBK3XhR7/9a57GCw4fjxIw9pyTnF9JU4uUgt38ubT
AGuWZfGgJe+4AbZnXDkn3jIjvpzikmtWoefMw94qIpwXus85Xah9uTp356WMHJST
dj8JkiVbJacgow==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:47:13 2025 by rpki-client