Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
File: F0ATLlBfeLrQES-RtVmGh5U1ysA.mft (raw, json)
Hash identifier: HSBpf5BnkTYQDx0hKY683qQnnzXNFJlVhAUNrZa8fkw=
Subject key identifier: 3C:AC:67:C0:7A:08:98:03:3F:0B:00:E4:ED:2D:9D:51:49:A4:A8:87
Authority key identifier: 17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
Certificate issuer: /CN=1740132e505f78bad0112f91b55986879535cac0
Certificate serial: 0197B70EC24D587757C209FFA4D7E5973FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
Manifest number: 0A63
Signing time: Sat 28 Jun 2025 15:01:27 +0000
Manifest this update: Sat 28 Jun 2025 15:01:27 +0000
Manifest next update: Sun 29 Jun 2025 15:01:27 +0000
Files and hashes: 1: F0ATLlBfeLrQES-RtVmGh5U1ysA.crl (hash: os9872K9WvBqUyLPkSfw/Q2QpEFJoN3FNILKFkpWcas=)
2: oxrkuug8AeqnDXiePFRxFStRfUU.roa (hash: 162L3/TFgaGzm3cQaHpx46n6luZunWT9NHyefRNQMS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c2:4d:58:77:57:c2:09:ff:a4:d7:e5:97:3f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1740132e505f78bad0112f91b55986879535cac0
Validity
Not Before: Jun 28 15:01:27 2025 GMT
Not After : Jun 29 15:01:27 2025 GMT
Subject: CN=3cac67c07a0898033f0b00e4ed2d9d5149a4a887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cf:db:10:39:74:24:ff:22:1c:8c:9a:fa:03:
04:8d:f9:e7:84:5b:8e:1a:51:c7:a3:94:3e:ab:31:
5c:a8:75:27:4c:36:71:5a:34:d7:68:bc:5b:1a:27:
94:0d:89:12:1e:13:54:35:37:ad:70:94:7d:34:73:
b7:e9:41:c1:e2:ec:7f:32:73:2c:e0:22:f1:1e:4f:
5b:00:09:e8:60:a8:01:b7:92:9f:a8:53:5b:93:b3:
85:8c:d7:a7:17:9d:d1:d5:f3:68:dd:b6:9b:38:6d:
d0:dd:ab:c2:ed:49:3d:41:a9:84:ce:6f:bb:dc:fa:
f4:0a:8d:56:aa:3c:28:a1:f9:31:ad:22:93:0b:aa:
39:b6:af:ca:19:ec:53:56:a1:ea:71:c8:f4:2b:31:
6f:3a:3c:a3:da:47:6d:6d:06:9b:ec:8e:90:8a:db:
71:5f:bb:39:90:fc:4b:7a:cf:f9:89:eb:dc:ab:fa:
99:bd:81:86:6d:a4:7b:55:0d:e7:e9:26:fd:76:fd:
f7:51:d1:40:8d:88:35:76:93:35:ad:a8:45:d3:57:
15:fc:8e:b8:65:99:8b:8f:31:04:fd:c8:4d:69:35:
74:fc:39:5f:28:47:61:63:88:98:f5:87:5a:53:15:
e5:60:c2:73:c7:b9:08:cb:91:69:23:2f:a3:b5:f4:
79:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AC:67:C0:7A:08:98:03:3F:0B:00:E4:ED:2D:9D:51:49:A4:A8:87
X509v3 Authority Key Identifier:
keyid:17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:14:c8:b1:ee:92:c8:8a:a0:9c:3b:c5:1e:87:e7:cc:e0:21:
88:7e:18:ce:f5:28:5d:46:3b:14:8e:28:2f:44:b2:f7:44:ac:
9b:c1:0f:93:45:de:ed:4e:09:f5:40:aa:89:04:e3:b8:f2:ee:
ea:0b:c4:87:95:66:3c:d0:c7:97:f5:12:6e:6b:39:77:76:b6:
5d:c0:37:a2:b8:26:e1:42:5a:a9:f7:b8:91:b2:d7:1e:9b:fc:
01:6a:71:c3:7f:12:6b:f4:c9:73:8c:69:15:84:1f:23:66:e8:
35:5f:af:dc:e3:f5:a5:0b:d8:c8:ae:b1:e0:86:87:98:59:28:
53:20:8b:89:e2:86:4e:bb:e1:af:09:d6:bd:a6:88:3d:49:73:
36:95:f6:64:51:9a:0d:8c:e4:d6:e5:fd:71:e4:6f:6f:f5:b4:
a4:4e:1b:99:5a:2e:be:c6:3e:36:2c:c7:ea:f3:b2:09:c0:54:
50:c1:66:8d:da:a4:a3:b9:33:11:e5:d6:8a:e3:e6:1e:9a:df:
26:49:82:74:99:b0:4a:17:1a:2b:d5:3e:41:f1:6d:76:67:fb:
70:34:2f:73:06:9a:8b:f0:8b:c7:42:11:2e:f6:13:e3:38:4c:
69:25:21:41:14:5b:26:85:f0:52:c8:6f:57:ad:f0:bc:21:36:
6b:01:26:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DsJNWHdXwgn/pNfllz+vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NDAxMzJlNTA1Zjc4YmFkMDExMmY5MWI1NTk4Njg3OTUz
NWNhYzAwHhcNMjUwNjI4MTUwMTI3WhcNMjUwNjI5MTUwMTI3WjAzMTEwLwYDVQQD
EygzY2FjNjdjMDdhMDg5ODAzM2YwYjAwZTRlZDJkOWQ1MTQ5YTRhODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8M/bEDl0JP8iHIya+gMEjfnnhFuO
GlHHo5Q+qzFcqHUnTDZxWjTXaLxbGieUDYkSHhNUNTetcJR9NHO36UHB4ux/MnMs
4CLxHk9bAAnoYKgBt5KfqFNbk7OFjNenF53R1fNo3babOG3Q3avC7Uk9QamEzm+7
3Pr0Co1WqjwoofkxrSKTC6o5tq/KGexTVqHqccj0KzFvOjyj2kdtbQab7I6Qittx
X7s5kPxLes/5ievcq/qZvYGGbaR7VQ3n6Sb9dv33UdFAjYg1dpM1rahF01cV/I64
ZZmLjzEE/chNaTV0/DlfKEdhY4iY9YdaUxXlYMJzx7kIy5FpIy+jtfR52QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDysZ8B6CJgDPwsA5O0tnVFJpKiHMB8GA1UdIwQY
MBaAFBdAEy5QX3i60BEvkbVZhoeVNcrAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjBBVExsQmZlTHJRRVMtUnRWbUdoNVUxeXNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9mYmJkZmEtZGNmYS00ZGVkLTk3YTEt
NGUzODA3YTM4MTU4LzEvRjBBVExsQmZlTHJRRVMtUnRWbUdoNVUxeXNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9mYmJkZmEtZGNmYS00ZGVkLTk3YTEtNGUzODA3YTM4MTU4
LzEvRjBBVExsQmZlTHJRRVMtUnRWbUdoNVUxeXNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsBTIse6S
yIqgnDvFHofnzOAhiH4YzvUoXUY7FI4oL0Sy90Ssm8EPk0Xe7U4J9UCqiQTjuPLu
6gvEh5VmPNDHl/USbms5d3a2XcA3orgm4UJaqfe4kbLXHpv8AWpxw38Sa/TJc4xp
FYQfI2boNV+v3OP1pQvYyK6x4IaHmFkoUyCLieKGTrvhrwnWvaaIPUlzNpX2ZFGa
DYzk1uX9ceRvb/W0pE4bmVouvsY+NizH6vOyCcBUUMFmjdqko7kzEeXWiuPmHprf
JkmCdJmwShcaK9U+QfFtdmf7cDQvcwaai/CLx0IRLvYT4zhMaSUhQRRbJoXwUshv
V63wvCE2awEmsQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:59:22 2025 by rpki-client