Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.mft
File: FHVOhj0RfOYhDylUYajGqgQ8bIA.mft (raw, json)
Hash identifier: /DC0Q6MnItNXH33xSJgCl+SKccxTpbF3TWbTS6lI2t0=
Subject key identifier: 3B:55:76:E6:86:62:9B:46:56:40:F4:3B:C5:9F:D8:68:72:6B:34:FF
Authority key identifier: 14:75:4E:86:3D:11:7C:E6:21:0F:29:54:61:A8:C6:AA:04:3C:6C:80
Certificate issuer: /CN=14754e863d117ce6210f295461a8c6aa043c6c80
Certificate serial: 0198D8BD8E4989D0757A6B8D9E4D775C85C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHVOhj0RfOYhDylUYajGqgQ8bIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 21:02:37 +0000
Manifest this update: Sat 23 Aug 2025 21:02:37 +0000
Manifest next update: Sun 24 Aug 2025 21:02:37 +0000
Files and hashes: 1: FHVOhj0RfOYhDylUYajGqgQ8bIA.crl (hash: PNRhMHCflh+Z89vJhukjyb02I4tXYCj3sCFwY7cRvV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHVOhj0RfOYhDylUYajGqgQ8bIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:8e:49:89:d0:75:7a:6b:8d:9e:4d:77:5c:85:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14754e863d117ce6210f295461a8c6aa043c6c80
Validity
Not Before: Aug 23 21:02:37 2025 GMT
Not After : Aug 24 21:02:37 2025 GMT
Subject: CN=3b5576e686629b465640f43bc59fd868726b34ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:75:bc:13:9b:4c:c5:28:c8:c2:af:f8:60:e1:
ea:33:19:49:cb:d8:87:20:f1:aa:de:e2:d1:db:e2:
3a:3b:75:f2:2e:83:e2:29:e7:48:5e:8e:46:e5:35:
39:a2:5e:55:49:54:be:22:bd:5b:73:d3:f2:b8:fb:
27:f9:8a:88:1b:17:d7:e1:b7:0d:7b:06:ef:28:d5:
20:f3:34:f3:9e:06:56:dd:49:d5:61:bf:46:ad:c1:
7d:31:67:ba:c7:84:90:28:05:34:85:f9:0f:e8:19:
86:b3:09:b6:37:bb:60:35:5b:22:58:af:ca:64:5e:
e1:db:7e:88:91:df:d0:3f:f9:00:16:ce:5a:1f:7a:
5f:4f:a9:53:4a:43:7e:e8:9b:d7:86:9a:95:af:54:
92:49:1b:2d:16:ea:e6:8c:0f:58:a2:32:8a:14:54:
1e:7e:e7:a2:a2:59:d8:00:13:d6:51:02:86:d5:5c:
f7:01:90:cf:47:80:ca:03:7e:76:2e:92:ce:cc:ef:
e0:12:c8:72:56:cb:21:3a:95:7f:5d:be:4c:1e:28:
7b:6e:29:ac:99:6c:d9:65:d1:a6:08:94:49:d2:55:
d3:8a:33:bd:1c:31:6c:7d:3b:16:b9:32:a2:99:c6:
ec:ec:7d:2b:1a:0a:9e:65:36:6f:68:eb:be:a7:82:
ae:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:55:76:E6:86:62:9B:46:56:40:F4:3B:C5:9F:D8:68:72:6B:34:FF
X509v3 Authority Key Identifier:
keyid:14:75:4E:86:3D:11:7C:E6:21:0F:29:54:61:A8:C6:AA:04:3C:6C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHVOhj0RfOYhDylUYajGqgQ8bIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e0:d7:1e:64:a9:9e:48:bc:35:ca:b8:bc:65:5c:20:2a:53:
70:a0:6d:8d:ff:87:8a:0d:cf:b6:41:82:00:85:78:ed:17:59:
a2:59:e0:df:a2:41:e2:d7:ed:14:fd:9c:dc:17:57:fc:3d:6a:
1e:91:1f:e4:17:72:79:d1:5b:c0:b4:3e:80:a9:78:6c:51:1f:
04:21:86:b0:a3:0d:98:3e:78:d3:a0:35:2c:4c:07:ec:5d:4c:
75:c5:61:ae:55:84:ca:27:ba:0e:29:a6:d6:94:82:60:6e:d0:
aa:84:83:ad:b5:6e:a2:20:13:42:d0:e6:78:60:59:32:9d:ff:
31:f6:23:e0:ab:21:6a:55:ee:fc:f4:3d:ca:85:42:09:18:91:
2d:5a:93:73:80:62:70:71:61:93:72:e0:04:91:f3:c9:62:38:
e1:a7:27:c9:99:87:9f:39:60:ef:c4:15:9b:87:2f:39:e4:ae:
d6:2c:35:a7:7e:cf:5a:13:52:2d:6b:f4:0b:37:f9:1e:43:b6:
fe:29:a6:b3:f0:91:f9:7a:7e:11:db:1b:9c:04:73:6b:a4:7f:
e4:33:a9:43:8d:cd:0f:76:ad:2b:28:e5:19:d3:df:f0:da:3b:
7e:6e:af:ed:96:28:69:c2:b3:24:a2:88:85:01:1f:35:98:f4:
5a:28:2a:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYvY5JidB1emuNnk13XIXFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NzU0ZTg2M2QxMTdjZTYyMTBmMjk1NDYxYThjNmFhMDQz
YzZjODAwHhcNMjUwODIzMjEwMjM3WhcNMjUwODI0MjEwMjM3WjAzMTEwLwYDVQQD
EygzYjU1NzZlNjg2NjI5YjQ2NTY0MGY0M2JjNTlmZDg2ODcyNmIzNGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnW8E5tMxSjIwq/4YOHqMxlJy9iH
IPGq3uLR2+I6O3XyLoPiKedIXo5G5TU5ol5VSVS+Ir1bc9PyuPsn+YqIGxfX4bcN
ewbvKNUg8zTzngZW3UnVYb9GrcF9MWe6x4SQKAU0hfkP6BmGswm2N7tgNVsiWK/K
ZF7h236Ikd/QP/kAFs5aH3pfT6lTSkN+6JvXhpqVr1SSSRstFurmjA9YojKKFFQe
fueiolnYABPWUQKG1Vz3AZDPR4DKA352LpLOzO/gEshyVsshOpV/Xb5MHih7bims
mWzZZdGmCJRJ0lXTijO9HDFsfTsWuTKimcbs7H0rGgqeZTZvaOu+p4KuBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtVduaGYptGVkD0O8Wf2GhyazT/MB8GA1UdIwQY
MBaAFBR1ToY9EXzmIQ8pVGGoxqoEPGyAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkhWT2hqMFJmT1loRHlsVVlhakdxZ1E4YklBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kOWMzYzAtMmVhZi00MzI2LThlZTIt
YTdkODBlNjAwODQ0LzEvRkhWT2hqMFJmT1loRHlsVVlhakdxZ1E4YklBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9kOWMzYzAtMmVhZi00MzI2LThlZTItYTdkODBlNjAwODQ0
LzEvRkhWT2hqMFJmT1loRHlsVVlhakdxZ1E4YklBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJODXHmSp
nki8Ncq4vGVcICpTcKBtjf+Hig3PtkGCAIV47RdZolng36JB4tftFP2c3BdX/D1q
HpEf5BdyedFbwLQ+gKl4bFEfBCGGsKMNmD5406A1LEwH7F1MdcVhrlWEyie6Dimm
1pSCYG7QqoSDrbVuoiATQtDmeGBZMp3/MfYj4KshalXu/PQ9yoVCCRiRLVqTc4Bi
cHFhk3LgBJHzyWI44acnyZmHnzlg78QVm4cvOeSu1iw1p37PWhNSLWv0Czf5HkO2
/imms/CR+Xp+EdsbnARza6R/5DOpQ43ND3atKyjlGdPf8No7fm6v7ZYoacKzJKKI
hQEfNZj0WigqGA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:03:54 2025 by rpki-client