Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
File: FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft (raw, json)
Hash identifier: VShVccB7atniYezGKQsDyRDimjY+/lCs7TxL9mkmHO0=
Subject key identifier: 35:5D:D8:69:1C:87:8A:2D:9E:2B:7C:63:C8:06:C0:11:FE:D9:AA:6B
Authority key identifier: 15:15:E2:FE:F4:D3:12:45:DC:67:01:8B:EF:C3:37:4D:C0:F1:EC:68
Certificate issuer: /CN=1515e2fef4d31245dc67018befc3374dc0f1ec68
Certificate serial: 0198D4E02E825FF394D0D81346DB6789DBFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 03:01:58 +0000
Manifest this update: Sat 23 Aug 2025 03:01:58 +0000
Manifest next update: Sun 24 Aug 2025 03:01:58 +0000
Files and hashes: 1: FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl (hash: LIxHliqImKdgeenT9W41w/1nIF9GG23X8PYD7RlPhL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:2e:82:5f:f3:94:d0:d8:13:46:db:67:89:db:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1515e2fef4d31245dc67018befc3374dc0f1ec68
Validity
Not Before: Aug 23 03:01:58 2025 GMT
Not After : Aug 24 03:01:58 2025 GMT
Subject: CN=355dd8691c878a2d9e2b7c63c806c011fed9aa6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:25:2b:8c:ec:36:d5:12:07:7d:de:47:76:b6:
4c:03:51:9c:4a:59:e3:32:84:57:80:23:b9:a5:68:
68:21:ac:de:5b:93:23:23:b4:e3:c5:a0:69:7f:38:
70:ca:b7:c4:4a:80:6c:04:85:52:57:77:f4:98:4d:
29:63:5f:69:c3:c1:82:6c:73:83:9f:c9:8d:c7:6e:
56:ba:7e:ba:ad:76:4b:77:a6:75:dd:85:c4:60:28:
e6:da:81:39:58:46:d6:04:5b:eb:29:77:84:e9:4d:
e0:47:6c:0b:fb:2d:dc:15:dc:5c:1a:68:a3:ef:96:
08:39:70:b9:17:93:a6:d6:be:fb:22:1a:b0:79:8f:
2b:2b:d1:4e:05:89:fb:bb:31:55:04:cf:1c:e1:28:
36:4d:63:b0:b1:04:e7:09:cf:7d:35:ff:09:51:0b:
bb:7a:8c:8b:c0:62:57:12:70:36:9b:8e:67:54:79:
75:cc:7b:ec:82:2d:34:b5:51:56:20:dc:99:a6:ae:
42:e1:ab:3f:84:66:ad:89:cb:c9:db:39:f8:ab:6c:
d3:39:d5:ad:ab:b8:5c:9e:18:dc:5e:bd:94:38:49:
76:d4:bf:6c:58:b9:7a:69:8a:e8:64:bb:45:99:ee:
6f:b2:34:00:f5:f8:70:e8:dc:85:12:bc:11:7d:3c:
bc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5D:D8:69:1C:87:8A:2D:9E:2B:7C:63:C8:06:C0:11:FE:D9:AA:6B
X509v3 Authority Key Identifier:
keyid:15:15:E2:FE:F4:D3:12:45:DC:67:01:8B:EF:C3:37:4D:C0:F1:EC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:51:da:08:79:d6:a0:6e:95:af:8f:7c:f5:c8:3a:a0:e8:51:
13:5e:bc:15:18:2d:c6:a2:90:9e:94:6e:c3:70:d7:9d:c1:df:
28:8b:34:e2:4e:7c:45:6b:47:58:c2:ca:06:36:b8:8d:c5:72:
81:5a:82:fc:a8:e4:01:47:11:ac:4e:01:0a:d3:db:84:10:df:
b7:fa:88:aa:82:20:4e:fc:28:32:93:55:8f:29:1d:e4:29:e1:
17:4e:24:65:1c:4f:2b:d1:b7:b6:cf:b2:0f:45:b9:8a:75:73:
2d:c0:66:9f:8a:7d:07:e6:ac:af:b3:33:5e:11:ef:6d:f5:08:
e8:4f:f6:87:d1:5c:f5:96:3d:3d:34:d1:28:89:b0:2e:f4:27:
68:5e:aa:10:90:e3:09:56:d8:2a:42:a9:a1:0d:c2:dc:b0:a1:
ec:8e:f2:11:52:c5:fd:10:91:36:df:b1:a9:09:a5:43:3a:35:
4e:ec:43:b4:54:ae:03:06:18:c8:fc:60:c8:68:cc:e9:b7:2b:
d1:0c:7b:d8:7b:6b:39:fa:de:99:1d:a1:79:d9:d9:3f:6d:c2:
04:40:d9:53:b6:14:b6:11:94:f2:26:22:2c:1e:77:ab:c0:ec:
02:e3:c4:78:c9:f5:3c:8d:73:5e:13:98:28:b0:04:33:cd:b5:
91:79:59:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4C6CX/OU0NgTRttnidv+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MTVlMmZlZjRkMzEyNDVkYzY3MDE4YmVmYzMzNzRkYzBm
MWVjNjgwHhcNMjUwODIzMDMwMTU4WhcNMjUwODI0MDMwMTU4WjAzMTEwLwYDVQQD
EygzNTVkZDg2OTFjODc4YTJkOWUyYjdjNjNjODA2YzAxMWZlZDlhYTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyUrjOw21RIHfd5HdrZMA1GcSlnj
MoRXgCO5pWhoIazeW5MjI7TjxaBpfzhwyrfESoBsBIVSV3f0mE0pY19pw8GCbHOD
n8mNx25Wun66rXZLd6Z13YXEYCjm2oE5WEbWBFvrKXeE6U3gR2wL+y3cFdxcGmij
75YIOXC5F5Om1r77IhqweY8rK9FOBYn7uzFVBM8c4Sg2TWOwsQTnCc99Nf8JUQu7
eoyLwGJXEnA2m45nVHl1zHvsgi00tVFWINyZpq5C4as/hGaticvJ2zn4q2zTOdWt
q7hcnhjcXr2UOEl21L9sWLl6aYroZLtFme5vsjQA9fhw6NyFErwRfTy8cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVd2Gkch4otnit8Y8gGwBH+2aprMB8GA1UdIwQY
MBaAFBUV4v700xJF3GcBi+/DN03A8exoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlJYaV92VFRFa1hjWndHTDc4TTNUY0R4N0dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iMGM5MzYtOTgzZC00MzkwLTg5NmEt
N2QxM2RkMjgzZTgwLzEvRlJYaV92VFRFa1hjWndHTDc4TTNUY0R4N0dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iMGM5MzYtOTgzZC00MzkwLTg5NmEtN2QxM2RkMjgzZTgw
LzEvRlJYaV92VFRFa1hjWndHTDc4TTNUY0R4N0dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1HaCHnW
oG6Vr4989cg6oOhRE168FRgtxqKQnpRuw3DXncHfKIs04k58RWtHWMLKBja4jcVy
gVqC/KjkAUcRrE4BCtPbhBDft/qIqoIgTvwoMpNVjykd5CnhF04kZRxPK9G3ts+y
D0W5inVzLcBmn4p9B+asr7MzXhHvbfUI6E/2h9Fc9ZY9PTTRKImwLvQnaF6qEJDj
CVbYKkKpoQ3C3LCh7I7yEVLF/RCRNt+xqQmlQzo1TuxDtFSuAwYYyPxgyGjM6bcr
0Qx72HtrOfremR2hednZP23CBEDZU7YUthGU8iYiLB53q8DsAuPEeMn1PI1zXhOY
KLAEM821kXlZlw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:35 2025 by rpki-client