
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
File: fqQd0tUnX7allrJhoCfMjX-fNGw.mft (raw, json)
Hash identifier: 3Kz+tzqRbP8ItSvDAAS07MhYcjY10hJJ6/8NYqqPSjo=
Subject key identifier: D1:19:1C:E1:6E:E5:37:D0:10:E8:0E:CE:1A:9B:E9:A3:E2:CE:0D:03
Authority key identifier: 7E:A4:1D:D2:D5:27:5F:B6:A5:96:B2:61:A0:27:CC:8D:7F:9F:34:6C
Certificate issuer: /CN=7ea41dd2d5275fb6a596b261a027cc8d7f9f346c
Certificate serial: 0197BA7D96B60C3C570412EB005FDC303477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
Manifest number: 0C9F
Signing time: Sun 29 Jun 2025 07:01:22 +0000
Manifest this update: Sun 29 Jun 2025 07:01:22 +0000
Manifest next update: Mon 30 Jun 2025 07:01:22 +0000
Files and hashes: 1: fqQd0tUnX7allrJhoCfMjX-fNGw.crl (hash: HjwZIT/LAQem+7qccaWG/2v0Wa7f8TzVU7EDASIGLaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:96:b6:0c:3c:57:04:12:eb:00:5f:dc:30:34:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea41dd2d5275fb6a596b261a027cc8d7f9f346c
Validity
Not Before: Jun 29 07:01:22 2025 GMT
Not After : Jun 30 07:01:22 2025 GMT
Subject: CN=d1191ce16ee537d010e80ece1a9be9a3e2ce0d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:34:73:9a:c3:cb:20:0a:cf:0e:e4:3d:79:
1c:47:b5:89:74:95:e7:d2:30:ba:6f:32:47:68:e0:
5d:cf:52:6b:9e:40:09:21:c7:27:a2:25:b0:13:c9:
d1:ea:5b:ca:69:cc:95:b4:d6:72:4f:18:c0:8e:02:
83:1f:8d:6b:e9:f3:fd:8d:9f:86:c5:51:9a:c6:98:
e3:a0:64:2a:ee:94:42:16:9c:b3:5b:0b:ed:8a:38:
fc:65:23:8e:49:1d:57:ca:88:a5:e9:ae:4d:87:1a:
04:f8:a5:66:fb:3c:aa:3a:97:ea:3d:a4:6b:42:b8:
4b:2e:34:59:a8:69:a2:7a:8c:7c:61:cc:d0:01:52:
82:21:9c:07:e6:90:85:37:94:ae:d8:29:7b:d3:19:
78:c5:b5:c3:b2:c9:c0:dc:69:ad:48:16:d5:e2:a9:
6d:6d:f5:17:ca:a1:08:ac:49:aa:7e:7d:15:5c:67:
b6:1b:2a:03:4c:b1:5e:f4:2e:c4:f5:00:de:ba:28:
52:67:88:69:d4:b3:ff:ee:f6:3e:89:9b:9a:81:21:
66:52:ea:00:31:39:b4:7a:47:a1:84:44:15:5e:38:
f9:02:b1:bb:0a:90:02:bf:af:43:86:fc:62:3b:96:
96:d6:26:1c:70:b1:66:b0:9b:c1:7b:82:c4:ee:67:
77:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:19:1C:E1:6E:E5:37:D0:10:E8:0E:CE:1A:9B:E9:A3:E2:CE:0D:03
X509v3 Authority Key Identifier:
keyid:7E:A4:1D:D2:D5:27:5F:B6:A5:96:B2:61:A0:27:CC:8D:7F:9F:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fd:90:07:ae:5b:94:35:d7:16:7e:f3:0e:c5:e4:c7:0f:52:
bc:dd:c4:de:ee:c6:e0:df:2a:dc:c4:43:3d:54:8a:bc:fa:5d:
73:c0:44:00:12:b5:bf:0c:00:7c:85:42:81:e2:4a:89:51:c3:
65:b0:a0:cd:7e:82:70:c2:3d:03:dd:00:3c:78:ec:60:7e:ac:
e5:28:b1:56:57:2e:4d:ad:19:c3:31:52:a0:20:83:e4:a4:b5:
b9:77:50:ae:4d:6d:e7:36:d4:32:df:a4:df:14:58:11:4e:97:
43:3d:c6:b5:6a:e3:74:2e:a3:69:05:30:6a:ac:ad:41:b0:d3:
d2:06:6a:b0:77:65:51:05:3e:6c:01:71:9e:15:44:3f:39:81:
68:c0:aa:a0:57:2d:4d:2a:6c:34:52:7a:9b:e2:65:ee:e4:72:
e6:cf:c2:c1:8d:e5:19:4b:17:35:76:0f:48:a8:15:27:0d:dc:
76:18:20:7f:11:25:3b:16:20:90:f6:88:f6:8a:72:61:eb:a4:
5a:6f:6d:68:e6:63:0e:15:6c:31:b3:0f:0d:1f:7d:cd:54:60:
4f:6d:86:4f:3c:fd:2c:f0:c6:33:bb:5e:98:05:01:79:b4:48:
89:6a:f9:22:ae:2d:5c:d1:57:22:b2:3f:30:19:92:9e:4d:f8:
88:c6:49:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6fZa2DDxXBBLrAF/cMDR3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYTQxZGQyZDUyNzVmYjZhNTk2YjI2MWEwMjdjYzhkN2Y5
ZjM0NmMwHhcNMjUwNjI5MDcwMTIyWhcNMjUwNjMwMDcwMTIyWjAzMTEwLwYDVQQD
EyhkMTE5MWNlMTZlZTUzN2QwMTBlODBlY2UxYTliZTlhM2UyY2UwZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgE0c5rDyyAKzw7kPXkcR7WJdJXn
0jC6bzJHaOBdz1JrnkAJIccnoiWwE8nR6lvKacyVtNZyTxjAjgKDH41r6fP9jZ+G
xVGaxpjjoGQq7pRCFpyzWwvtijj8ZSOOSR1Xyoil6a5NhxoE+KVm+zyqOpfqPaRr
QrhLLjRZqGmieox8YczQAVKCIZwH5pCFN5Su2Cl70xl4xbXDssnA3GmtSBbV4qlt
bfUXyqEIrEmqfn0VXGe2GyoDTLFe9C7E9QDeuihSZ4hp1LP/7vY+iZuagSFmUuoA
MTm0ekehhEQVXjj5ArG7CpACv69DhvxiO5aW1iYccLFmsJvBe4LE7md3ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEZHOFu5TfQEOgOzhqb6aPizg0DMB8GA1UdIwQY
MBaAFH6kHdLVJ1+2pZayYaAnzI1/nzRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnFRZDB0VW5YN2FsbHJKaG9DZk1qWC1mTkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kY2Q0MDAtNmRiZi00ZjJlLThhOTYt
ZTBkOTkyOWI4ZDAxLzEvZnFRZDB0VW5YN2FsbHJKaG9DZk1qWC1mTkd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9kY2Q0MDAtNmRiZi00ZjJlLThhOTYtZTBkOTkyOWI4ZDAx
LzEvZnFRZDB0VW5YN2FsbHJKaG9DZk1qWC1mTkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADP2QB65b
lDXXFn7zDsXkxw9SvN3E3u7G4N8q3MRDPVSKvPpdc8BEABK1vwwAfIVCgeJKiVHD
ZbCgzX6CcMI9A90APHjsYH6s5SixVlcuTa0ZwzFSoCCD5KS1uXdQrk1t5zbUMt+k
3xRYEU6XQz3GtWrjdC6jaQUwaqytQbDT0gZqsHdlUQU+bAFxnhVEPzmBaMCqoFct
TSpsNFJ6m+Jl7uRy5s/CwY3lGUsXNXYPSKgVJw3cdhggfxElOxYgkPaI9opyYeuk
Wm9taOZjDhVsMbMPDR99zVRgT22GTzz9LPDGM7temAUBebRIiWr5Iq4tXNFXIrI/
MBmSnk34iMZJUQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:49:35 2025 by rpki-client