Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
File: FQmDQfJrtURkBQe9iAqZp-eiNdA.mft (raw, json)
Hash identifier: nQ3mlyFbzl2FOl6PYxowMPflnpcADpn9+MCMQFhubT0=
Subject key identifier: 8C:55:77:F3:43:61:F8:EC:D6:43:9A:46:4D:A2:A7:D5:8A:2F:66:35
Authority key identifier: 15:09:83:41:F2:6B:B5:44:64:05:07:BD:88:0A:99:A7:E7:A2:35:D0
Certificate issuer: /CN=15098341f26bb544640507bd880a99a7e7a235d0
Certificate serial: 0198D4E07AC3FA60093529769BD7BBB2888C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
Manifest number: 15D8
Signing time: Sat 23 Aug 2025 03:02:17 +0000
Manifest this update: Sat 23 Aug 2025 03:02:17 +0000
Manifest next update: Sun 24 Aug 2025 03:02:17 +0000
Files and hashes: 1: FQmDQfJrtURkBQe9iAqZp-eiNdA.crl (hash: d0a+X2iSb8ofF1jtOHsrYYz7BhDv/njdE8BYwXGm5sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:7a:c3:fa:60:09:35:29:76:9b:d7:bb:b2:88:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15098341f26bb544640507bd880a99a7e7a235d0
Validity
Not Before: Aug 23 03:02:17 2025 GMT
Not After : Aug 24 03:02:17 2025 GMT
Subject: CN=8c5577f34361f8ecd6439a464da2a7d58a2f6635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9c:ad:93:23:bd:27:57:fd:70:f5:e7:67:54:
d7:60:6a:d9:61:75:6d:c5:43:d1:66:55:bc:4b:91:
ff:bf:49:89:64:69:b5:2b:40:90:fb:64:43:7f:0f:
52:d6:65:67:e9:f5:a3:64:b5:3b:a4:a9:3c:4d:46:
31:ac:96:56:3e:c4:66:fb:c8:61:27:cc:6f:c9:c6:
a0:6f:cc:8d:90:b2:b6:d1:1c:b2:8d:c9:29:db:dc:
fa:64:63:9d:25:1e:64:32:3e:cc:ba:ac:28:a1:55:
77:47:51:ca:41:e1:3e:dc:35:16:f9:81:4b:25:65:
f3:4b:23:ad:7d:ba:d9:f3:c8:53:15:4a:0b:2d:9c:
17:52:e7:b0:07:d2:21:14:94:8b:2a:a3:27:6b:b6:
50:8f:8f:76:1b:18:56:c3:42:12:b8:95:55:ad:9a:
4d:8c:da:aa:b7:da:26:c0:94:59:5b:55:d6:a0:3d:
c5:0e:8a:c1:d6:b8:a5:84:5d:42:26:48:6f:d2:1b:
04:a4:31:bc:d4:a7:72:f0:30:fa:92:ae:49:46:2b:
4a:53:1c:82:db:7b:a3:79:d2:71:3e:d9:20:1f:89:
a0:d7:12:84:b0:f7:1b:bb:ef:5b:c8:62:6b:b6:d4:
c6:90:d2:56:5b:3d:eb:62:fa:bb:f8:32:52:50:0a:
f0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:55:77:F3:43:61:F8:EC:D6:43:9A:46:4D:A2:A7:D5:8A:2F:66:35
X509v3 Authority Key Identifier:
keyid:15:09:83:41:F2:6B:B5:44:64:05:07:BD:88:0A:99:A7:E7:A2:35:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:cc:97:84:98:f0:22:d8:6c:79:20:19:47:53:c8:17:9c:4a:
17:fb:1f:86:e7:53:32:4f:e4:26:43:ef:75:45:06:c1:b7:70:
24:6a:95:54:fb:7d:a6:2b:10:81:6e:53:ef:97:55:8a:38:0e:
d1:cb:88:04:20:23:cd:8f:c9:c3:0b:b4:8f:1e:86:15:8a:a7:
98:90:d8:60:67:0f:a5:62:65:2a:0a:5d:ea:06:8f:ef:3c:3c:
f9:87:ae:c7:34:6b:ee:b4:09:f4:e2:52:9d:f3:d2:c6:38:68:
66:5f:01:b0:a4:47:00:6e:e6:4d:44:06:36:36:f5:35:fa:dd:
5b:16:52:12:72:68:93:b5:5d:1c:5f:82:df:08:41:86:4c:a1:
80:c9:ca:31:d4:cc:fb:6c:c3:7d:0a:b1:93:86:79:35:1c:e5:
31:9b:a1:bf:0b:6d:7c:fe:ce:ed:f3:1b:59:2a:75:2d:58:5a:
75:0e:72:43:72:94:01:8b:63:d4:c7:86:75:9b:9c:3a:cd:75:
31:8b:1a:57:6d:dc:78:ec:16:79:6e:c6:a1:03:2e:c5:e7:33:
b0:45:08:09:70:19:01:62:db:8b:f3:35:60:ed:b6:cf:60:2f:
09:15:3a:74:a4:d8:a6:9a:37:f7:07:10:b0:5d:65:b2:9f:ee:
3f:c3:d8:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4HrD+mAJNSl2m9e7soiMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MDk4MzQxZjI2YmI1NDQ2NDA1MDdiZDg4MGE5OWE3ZTdh
MjM1ZDAwHhcNMjUwODIzMDMwMjE3WhcNMjUwODI0MDMwMjE3WjAzMTEwLwYDVQQD
Eyg4YzU1NzdmMzQzNjFmOGVjZDY0MzlhNDY0ZGEyYTdkNThhMmY2NjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5ytkyO9J1f9cPXnZ1TXYGrZYXVt
xUPRZlW8S5H/v0mJZGm1K0CQ+2RDfw9S1mVn6fWjZLU7pKk8TUYxrJZWPsRm+8hh
J8xvycagb8yNkLK20Ryyjckp29z6ZGOdJR5kMj7MuqwooVV3R1HKQeE+3DUW+YFL
JWXzSyOtfbrZ88hTFUoLLZwXUuewB9IhFJSLKqMna7ZQj492GxhWw0ISuJVVrZpN
jNqqt9omwJRZW1XWoD3FDorB1rilhF1CJkhv0hsEpDG81Kdy8DD6kq5JRitKUxyC
23ujedJxPtkgH4mg1xKEsPcbu+9byGJrttTGkNJWWz3rYvq7+DJSUArwMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxVd/NDYfjs1kOaRk2ip9WKL2Y1MB8GA1UdIwQY
MBaAFBUJg0Hya7VEZAUHvYgKmafnojXQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlFtRFFmSnJ0VVJrQlFlOWlBcVpwLWVpTmRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8xZjJlYTEtYTAxNy00Mzg1LTgzOTQt
OWVkOWE5OTNmNTA4LzEvRlFtRFFmSnJ0VVJrQlFlOWlBcVpwLWVpTmRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8xZjJlYTEtYTAxNy00Mzg1LTgzOTQtOWVkOWE5OTNmNTA4
LzEvRlFtRFFmSnJ0VVJrQlFlOWlBcVpwLWVpTmRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMyXhJjw
IthseSAZR1PIF5xKF/sfhudTMk/kJkPvdUUGwbdwJGqVVPt9pisQgW5T75dVijgO
0cuIBCAjzY/Jwwu0jx6GFYqnmJDYYGcPpWJlKgpd6gaP7zw8+YeuxzRr7rQJ9OJS
nfPSxjhoZl8BsKRHAG7mTUQGNjb1NfrdWxZSEnJok7VdHF+C3whBhkyhgMnKMdTM
+2zDfQqxk4Z5NRzlMZuhvwttfP7O7fMbWSp1LVhadQ5yQ3KUAYtj1MeGdZucOs11
MYsaV23ceOwWeW7GoQMuxeczsEUICXAZAWLbi/M1YO22z2AvCRU6dKTYppo39wcQ
sF1lsp/uP8PY3g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:46 2025 by rpki-client