Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
File: FQmDQfJrtURkBQe9iAqZp-eiNdA.mft (raw, json)
Hash identifier: 0Sdx3PEMBeEkJ1CkZQr3BrvFLfZTpN6oWI6HQHT8FJ4=
Subject key identifier: 2B:5F:35:E8:4A:F9:A6:AA:35:78:C5:BA:ED:7A:EB:07:DC:9B:72:68
Authority key identifier: 15:09:83:41:F2:6B:B5:44:64:05:07:BD:88:0A:99:A7:E7:A2:35:D0
Certificate issuer: /CN=15098341f26bb544640507bd880a99a7e7a235d0
Certificate serial: 0197B70E9BDFDD387623754BAB8308993680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
Manifest number: 1544
Signing time: Sat 28 Jun 2025 15:01:17 +0000
Manifest this update: Sat 28 Jun 2025 15:01:17 +0000
Manifest next update: Sun 29 Jun 2025 15:01:17 +0000
Files and hashes: 1: FQmDQfJrtURkBQe9iAqZp-eiNdA.crl (hash: VYWTZA22UbbgMTMKfwzTVn1HsiSe9nQ4CpijuUTOD1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9b:df:dd:38:76:23:75:4b:ab:83:08:99:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15098341f26bb544640507bd880a99a7e7a235d0
Validity
Not Before: Jun 28 15:01:17 2025 GMT
Not After : Jun 29 15:01:17 2025 GMT
Subject: CN=2b5f35e84af9a6aa3578c5baed7aeb07dc9b7268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:2f:b6:37:66:8e:e5:b5:3a:40:7f:ef:d5:
be:b1:08:64:a1:13:6a:04:5d:89:b0:80:ef:bc:dc:
54:07:1e:8e:7c:21:36:37:d6:70:77:df:20:c1:b3:
f2:0c:b1:a8:19:d4:27:78:36:92:22:24:d2:86:25:
2c:ea:bb:a0:9c:1f:9c:65:60:5a:ad:0b:f3:46:f0:
e7:e5:8d:48:88:8a:53:2b:43:65:6a:3b:47:69:a6:
03:43:68:e9:e7:e3:79:a9:a0:b6:2a:1b:73:d6:c5:
7b:04:4a:36:0f:6f:78:fe:5f:8a:ea:5f:e7:c4:c7:
d8:16:7b:4d:33:2a:1f:1a:9d:bc:b0:27:b5:f5:54:
a1:3b:25:55:77:f8:bd:ed:de:80:66:0f:ca:6c:7f:
22:50:b1:ac:df:3f:d8:75:92:d4:5c:7d:ae:c9:4c:
da:66:64:7d:7d:ee:07:0b:df:94:89:de:4e:10:2a:
6f:cc:e1:58:c0:c5:e1:41:6e:84:5a:4d:0e:7b:65:
b0:93:ad:e9:82:01:7b:98:ff:07:f2:95:f9:2a:01:
76:ab:0e:5a:7d:07:8b:a9:5a:59:a9:87:b3:c4:0e:
82:d7:6b:5f:f9:76:c5:18:43:96:db:25:24:0b:29:
55:cf:4c:ed:48:11:23:b3:d5:49:36:5c:f0:0c:c7:
95:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5F:35:E8:4A:F9:A6:AA:35:78:C5:BA:ED:7A:EB:07:DC:9B:72:68
X509v3 Authority Key Identifier:
keyid:15:09:83:41:F2:6B:B5:44:64:05:07:BD:88:0A:99:A7:E7:A2:35:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:04:9e:3f:c2:9e:42:ed:dd:d9:77:d0:33:b5:02:9b:1c:d6:
61:10:54:55:c9:f4:66:2c:19:6b:f2:12:29:9b:1c:8f:c6:ab:
f3:d4:26:7a:8b:73:7f:7b:b9:dc:a5:b1:c6:b7:a0:f3:2d:77:
a3:13:1e:4d:f6:f6:c6:33:0d:de:cd:11:75:53:3a:4d:3f:a9:
46:d2:33:b9:24:5d:43:8e:7d:34:f1:87:eb:19:bd:9e:26:9d:
dc:6c:6f:fe:35:52:e3:dd:47:0d:67:ae:17:7e:0d:64:1c:c4:
bd:c7:b4:d4:33:e8:32:13:1c:89:3f:40:a3:df:3b:7a:31:0d:
65:02:19:08:6d:71:15:5c:13:c4:98:bc:9b:49:d7:96:a2:1b:
81:6f:47:28:b1:63:eb:90:9e:fc:05:69:0f:b0:15:03:3e:43:
21:d2:d7:b3:8e:4f:c1:7a:b1:42:fa:e2:c1:2d:32:83:91:58:
da:96:76:98:55:db:1c:04:6d:ac:cf:d7:e3:69:74:da:00:b5:
0d:81:3b:b1:21:cd:96:16:ef:b7:04:a6:aa:ad:99:02:28:53:
58:99:ba:22:3c:73:cc:24:37:2a:a9:d1:12:bc:55:85:f8:4b:
ff:da:e6:f2:57:c6:8e:d7:0c:37:43:c9:7c:3a:ab:4d:9c:e1:
4d:8f:3b:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dpvf3Th2I3VLq4MImTaAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MDk4MzQxZjI2YmI1NDQ2NDA1MDdiZDg4MGE5OWE3ZTdh
MjM1ZDAwHhcNMjUwNjI4MTUwMTE3WhcNMjUwNjI5MTUwMTE3WjAzMTEwLwYDVQQD
EygyYjVmMzVlODRhZjlhNmFhMzU3OGM1YmFlZDdhZWIwN2RjOWI3MjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNkvtjdmjuW1OkB/79W+sQhkoRNq
BF2JsIDvvNxUBx6OfCE2N9Zwd98gwbPyDLGoGdQneDaSIiTShiUs6rugnB+cZWBa
rQvzRvDn5Y1IiIpTK0NlajtHaaYDQ2jp5+N5qaC2Khtz1sV7BEo2D294/l+K6l/n
xMfYFntNMyofGp28sCe19VShOyVVd/i97d6AZg/KbH8iULGs3z/YdZLUXH2uyUza
ZmR9fe4HC9+Uid5OECpvzOFYwMXhQW6EWk0Oe2Wwk63pggF7mP8H8pX5KgF2qw5a
fQeLqVpZqYezxA6C12tf+XbFGEOW2yUkCylVz0ztSBEjs9VJNlzwDMeV6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtfNehK+aaqNXjFuu166wfcm3JoMB8GA1UdIwQY
MBaAFBUJg0Hya7VEZAUHvYgKmafnojXQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlFtRFFmSnJ0VVJrQlFlOWlBcVpwLWVpTmRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8xZjJlYTEtYTAxNy00Mzg1LTgzOTQt
OWVkOWE5OTNmNTA4LzEvRlFtRFFmSnJ0VVJrQlFlOWlBcVpwLWVpTmRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8xZjJlYTEtYTAxNy00Mzg1LTgzOTQtOWVkOWE5OTNmNTA4
LzEvRlFtRFFmSnJ0VVJrQlFlOWlBcVpwLWVpTmRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZASeP8Ke
Qu3d2XfQM7UCmxzWYRBUVcn0ZiwZa/ISKZscj8ar89Qmeotzf3u53KWxxreg8y13
oxMeTfb2xjMN3s0RdVM6TT+pRtIzuSRdQ459NPGH6xm9niad3Gxv/jVS491HDWeu
F34NZBzEvce01DPoMhMciT9Ao987ejENZQIZCG1xFVwTxJi8m0nXlqIbgW9HKLFj
65Ce/AVpD7AVAz5DIdLXs45PwXqxQvriwS0yg5FY2pZ2mFXbHARtrM/X42l02gC1
DYE7sSHNlhbvtwSmqq2ZAihTWJm6IjxzzCQ3KqnRErxVhfhL/9rm8lfGjtcMN0PJ
fDqrTZzhTY87Zg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:18 2025 by rpki-client