Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
File: FpNzegFGnJUBHWlzklZZFgRdOiA.mft (raw, json)
Hash identifier: HLbR871agLhMTJ1/gcV58g6P/vpEX+S6sgb8rv9DrwQ=
Subject key identifier: B9:B0:12:BA:ED:24:DD:11:37:D5:79:F2:61:93:86:30:6C:0E:C4:C5
Authority key identifier: 16:93:73:7A:01:46:9C:95:01:1D:69:73:92:56:59:16:04:5D:3A:20
Certificate issuer: /CN=1693737a01469c95011d697392565916045d3a20
Certificate serial: 0197B7B33E0E40AA4CAAE2585484AE070A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
Manifest number: 029B
Signing time: Sat 28 Jun 2025 18:01:06 +0000
Manifest this update: Sat 28 Jun 2025 18:01:06 +0000
Manifest next update: Sun 29 Jun 2025 18:01:06 +0000
Files and hashes: 1: FpNzegFGnJUBHWlzklZZFgRdOiA.crl (hash: 1ksSPXGkFcejMAtwaS5Gur6ludhauB9lzG4LiIO7Hdw=)
2: mgFhpVWpKKOAS9kS1Whb-f8EjPw.roa (hash: b1ojmUR/j/a0k5umyT93sSV7c2lVJTgs9RA7eYuyM+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:3e:0e:40:aa:4c:aa:e2:58:54:84:ae:07:0a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1693737a01469c95011d697392565916045d3a20
Validity
Not Before: Jun 28 18:01:06 2025 GMT
Not After : Jun 29 18:01:06 2025 GMT
Subject: CN=b9b012baed24dd1137d579f2619386306c0ec4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:54:95:0f:96:1b:46:8b:d4:39:ed:fe:29:58:
12:a2:1a:30:de:84:63:eb:7d:87:1d:42:5d:a2:00:
44:e7:51:ae:a7:e3:33:c2:56:d2:5a:b2:2d:f6:c4:
e8:c4:bb:4a:d1:fc:db:21:07:d8:90:31:4c:ec:46:
28:5e:cb:4c:79:0c:66:d4:d8:cf:48:8b:18:20:0c:
25:00:09:e1:61:01:0e:02:65:01:e5:7a:49:1c:19:
f9:3b:0f:1f:14:1b:a6:ad:75:35:d5:6a:1a:17:de:
ec:3b:09:6d:7c:07:a6:f2:2e:cb:e0:11:e0:8d:9d:
8f:57:d1:4d:34:3d:51:73:1f:9b:63:61:ec:e0:1a:
90:60:fb:37:95:8b:b0:fd:8e:b4:8f:d3:39:94:5b:
f8:7b:6b:b6:81:3e:18:1c:26:bb:d6:10:f3:9a:05:
58:c4:60:96:47:c3:5d:70:d3:8b:02:49:2f:94:a5:
78:64:51:7b:26:a8:e9:35:d8:34:b6:6d:b8:13:f4:
b4:5f:23:1b:1b:03:4f:d4:75:5e:d7:2d:9a:f8:8c:
66:41:63:cc:11:73:43:ac:c2:25:f9:d5:f4:ca:fe:
71:d7:12:09:d5:cd:1f:48:42:f7:26:65:d1:7f:34:
80:c7:b9:26:f3:07:f6:9d:74:8f:ac:1c:75:d4:de:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B0:12:BA:ED:24:DD:11:37:D5:79:F2:61:93:86:30:6C:0E:C4:C5
X509v3 Authority Key Identifier:
keyid:16:93:73:7A:01:46:9C:95:01:1D:69:73:92:56:59:16:04:5D:3A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:82:9a:98:ed:8e:76:30:64:55:f0:7e:2e:95:00:d5:95:25:
c3:66:12:dc:b3:75:7f:27:ee:59:38:3b:72:1e:d8:80:c9:40:
b7:0b:29:8f:89:c2:46:26:17:c5:30:08:80:0c:6b:dc:45:41:
e2:2e:2f:70:83:d6:d8:b5:52:a8:51:31:1f:f8:ec:8c:e8:8c:
68:86:09:da:a5:91:41:e6:ba:99:9d:66:3c:a4:84:6b:9d:2c:
14:a2:70:56:2f:c7:c4:09:c4:ca:c5:15:12:6a:83:2c:cc:2a:
6b:f5:ae:07:6b:35:c5:43:df:7e:ac:c4:22:11:5a:e1:b0:69:
a5:48:be:95:ce:8e:a8:78:5d:0f:90:3c:e7:0f:f2:54:a9:fa:
f5:66:32:f2:25:b4:4c:bb:af:fc:1b:e4:c3:d3:ab:39:48:2a:
bc:20:be:50:dc:25:ea:84:ab:cd:f2:79:58:f2:d5:2e:d3:25:
e9:51:2e:c1:d8:84:09:5b:ed:b8:c4:21:92:ba:f2:9d:0f:80:
d4:6b:5c:d0:ee:6e:dc:2b:60:45:96:d1:68:72:bc:87:8d:20:
90:d5:9a:9d:43:c2:93:6d:07:6d:64:56:69:c3:bf:1e:37:5a:
3f:a2:19:7e:e5:18:f4:5b:75:f1:3f:2e:b5:95:d3:4d:cd:bc:
b9:cb:1e:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3sz4OQKpMquJYVISuBwoQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OTM3MzdhMDE0NjljOTUwMTFkNjk3MzkyNTY1OTE2MDQ1
ZDNhMjAwHhcNMjUwNjI4MTgwMTA2WhcNMjUwNjI5MTgwMTA2WjAzMTEwLwYDVQQD
EyhiOWIwMTJiYWVkMjRkZDExMzdkNTc5ZjI2MTkzODYzMDZjMGVjNGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/VSVD5YbRovUOe3+KVgSohow3oRj
632HHUJdogBE51Gup+MzwlbSWrIt9sToxLtK0fzbIQfYkDFM7EYoXstMeQxm1NjP
SIsYIAwlAAnhYQEOAmUB5XpJHBn5Ow8fFBumrXU11WoaF97sOwltfAem8i7L4BHg
jZ2PV9FNND1Rcx+bY2Hs4BqQYPs3lYuw/Y60j9M5lFv4e2u2gT4YHCa71hDzmgVY
xGCWR8NdcNOLAkkvlKV4ZFF7JqjpNdg0tm24E/S0XyMbGwNP1HVe1y2a+IxmQWPM
EXNDrMIl+dX0yv5x1xIJ1c0fSEL3JmXRfzSAx7km8wf2nXSPrBx11N708QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmwErrtJN0RN9V58mGThjBsDsTFMB8GA1UdIwQY
MBaAFBaTc3oBRpyVAR1pc5JWWRYEXTogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBOemVnRkduSlVCSFdsemtsWlpGZ1JkT2lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9kMWI2YjEtMjIzYS00MTBiLTk1OTYt
NWFlMzA3MzA0YjBiLzEvRnBOemVnRkduSlVCSFdsemtsWlpGZ1JkT2lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9kMWI2YjEtMjIzYS00MTBiLTk1OTYtNWFlMzA3MzA0YjBi
LzEvRnBOemVnRkduSlVCSFdsemtsWlpGZ1JkT2lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4KamO2O
djBkVfB+LpUA1ZUlw2YS3LN1fyfuWTg7ch7YgMlAtwspj4nCRiYXxTAIgAxr3EVB
4i4vcIPW2LVSqFExH/jsjOiMaIYJ2qWRQea6mZ1mPKSEa50sFKJwVi/HxAnEysUV
EmqDLMwqa/WuB2s1xUPffqzEIhFa4bBppUi+lc6OqHhdD5A85w/yVKn69WYy8iW0
TLuv/Bvkw9OrOUgqvCC+UNwl6oSrzfJ5WPLVLtMl6VEuwdiECVvtuMQhkrrynQ+A
1Gtc0O5u3CtgRZbRaHK8h40gkNWanUPCk20HbWRWacO/HjdaP6IZfuUY9Ft18T8u
tZXTTc28ucseGg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:05 2025 by rpki-client