Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
File: 1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft (raw, json)
Hash identifier: m9l49o3JSlW041R2yQ1ZWBTtDiOUKZ/PYLvtpor8vXc=
Subject key identifier: FD:2B:5C:AD:13:F3:BB:09:DC:41:55:35:29:87:A4:CB:30:A7:7A:8D
Authority key identifier: F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C
Certificate issuer: /CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c
Certificate serial: 0197B745450CE2861F5B539538BC4985591F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
Manifest number: 0687
Signing time: Sat 28 Jun 2025 16:00:59 +0000
Manifest this update: Sat 28 Jun 2025 16:00:59 +0000
Manifest next update: Sun 29 Jun 2025 16:00:59 +0000
Files and hashes: 1: 1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl (hash: sB4bwrAhboA9PGtlbJYhLa8PjwHrtuWllDOpP90xIu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:45:0c:e2:86:1f:5b:53:95:38:bc:49:85:59:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c
Validity
Not Before: Jun 28 16:00:59 2025 GMT
Not After : Jun 29 16:00:59 2025 GMT
Subject: CN=fd2b5cad13f3bb09dc4155352987a4cb30a77a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f5:1b:0e:68:25:87:df:76:5d:dd:85:4c:6f:
21:aa:90:76:ec:21:79:e0:73:4e:1c:48:21:58:d3:
b1:08:6d:48:15:a8:fa:67:3d:9c:5a:14:a1:17:cf:
53:9b:94:4f:e5:3b:c6:be:46:6f:ef:8b:de:4e:05:
9f:af:28:c2:50:0d:91:69:23:4e:e1:e2:1d:70:4c:
5b:95:8e:be:24:94:51:e8:5f:d6:a5:d7:5c:50:91:
45:37:97:46:ef:ae:f4:ea:f6:46:41:d9:4f:e1:1d:
59:cd:19:68:5d:ae:ec:d0:1d:67:1d:02:5f:22:c6:
a6:30:c1:7b:9b:34:ec:51:5e:a0:66:79:d7:db:15:
0a:23:34:27:06:a0:35:ea:ca:d1:a7:32:4e:8e:bd:
05:6d:80:40:4a:56:17:b1:4b:a7:a8:ca:8f:c4:8e:
08:24:7e:9f:09:55:a8:42:91:4b:0c:55:51:b5:62:
80:b6:24:cd:2e:25:cf:e8:91:ef:9f:97:1c:14:0e:
f6:e7:90:44:9e:f8:cd:4a:fb:3b:e6:28:8f:a0:0d:
87:2a:05:84:a6:49:c9:18:b1:2c:dd:ab:4f:06:01:
01:b0:80:cc:0d:f1:41:67:49:b5:74:ce:a5:5a:17:
c9:7e:ee:41:c2:4c:5d:d1:b0:9f:13:b6:c9:bc:0f:
62:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2B:5C:AD:13:F3:BB:09:DC:41:55:35:29:87:A4:CB:30:A7:7A:8D
X509v3 Authority Key Identifier:
keyid:F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:82:fa:9e:ae:57:02:5d:46:df:74:0d:e3:d4:ab:e7:05:13:
3c:88:81:98:e6:63:40:9e:d2:bc:64:c6:44:54:40:7b:07:f8:
74:7c:24:a4:d6:08:b5:f0:85:06:48:c5:f4:7d:b6:6b:be:bf:
9a:e6:92:99:c9:57:17:3e:1c:b2:6e:40:05:cc:f3:be:ef:1b:
1b:83:ad:43:bd:d5:fa:60:84:fe:94:bd:59:66:bb:5f:ef:52:
17:8d:19:b9:f9:e1:b2:51:2c:96:d0:b0:fc:80:a4:5f:89:34:
61:bb:dd:97:9f:ca:03:be:3d:d2:76:c1:b1:ef:fe:6d:be:1d:
61:f9:5d:75:fa:76:fb:ef:a7:b9:c3:32:37:5d:63:68:30:8c:
ea:52:a5:93:09:12:22:ee:ac:0e:ba:55:3d:47:7a:98:00:6e:
49:a8:0d:90:af:00:23:61:0e:c8:9f:4a:86:29:15:74:c9:6c:
19:51:63:9d:a8:11:a9:2c:2a:be:64:d4:85:77:cf:ed:93:de:
aa:8c:65:b2:85:d3:86:20:bc:7e:32:53:9f:29:95:da:df:d9:
6a:4f:5a:71:b0:e6:5b:9e:e4:f5:05:23:64:7b:5e:57:96:50:
f6:3a:03:1b:1c:9e:80:c3:a4:ef:c8:fa:b5:41:21:c1:b3:88:
ef:aa:5c:ea
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZe3RUUM4oYfW1OVOLxJhVkfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NWNkZDUyY2M5ZmEwOGFjYjJhOWExNjY5YTEzNjFkNWE4
MWM0M2MwHhcNMjUwNjI4MTYwMDU5WhcNMjUwNjI5MTYwMDU5WjAzMTEwLwYDVQQD
EyhmZDJiNWNhZDEzZjNiYjA5ZGM0MTU1MzUyOTg3YTRjYjMwYTc3YThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfUbDmglh992Xd2FTG8hqpB27CF5
4HNOHEghWNOxCG1IFaj6Zz2cWhShF89Tm5RP5TvGvkZv74veTgWfryjCUA2RaSNO
4eIdcExblY6+JJRR6F/WpddcUJFFN5dG76706vZGQdlP4R1ZzRloXa7s0B1nHQJf
IsamMMF7mzTsUV6gZnnX2xUKIzQnBqA16srRpzJOjr0FbYBASlYXsUunqMqPxI4I
JH6fCVWoQpFLDFVRtWKAtiTNLiXP6JHvn5ccFA7255BEnvjNSvs75iiPoA2HKgWE
pknJGLEs3atPBgEBsIDMDfFBZ0m1dM6lWhfJfu5Bwkxd0bCfE7bJvA9i+QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFP0rXK0T87sJ3EFVNSmHpMswp3qNMB8GA1UdIwQY
MBaAFPhc3VLMn6CKyyqaFmmhNh1agcQ8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1GemRVc3lmb0lyTEtwb1dhYUUySFZxQnhEdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvZWI4ODcwLTQ3OWYtNGU2MS05MGVh
LWM1MmFiYzIxYTBhYi8xLzEtRnpkVXN5Zm9JckxLcG9XYWFFMkhWcUJ4RHcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzlhL2ViODg3MC00NzlmLTRlNjEtOTBlYS1jNTJhYmMyMWEw
YWIvMS8xLUZ6ZFVzeWZvSXJMS3BvV2FhRTJIVnFCeER3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIL6
nq5XAl1G33QN49Sr5wUTPIiBmOZjQJ7SvGTGRFRAewf4dHwkpNYItfCFBkjF9H22
a76/muaSmclXFz4csm5ABczzvu8bG4OtQ73V+mCE/pS9WWa7X+9SF40ZufnhslEs
ltCw/ICkX4k0Ybvdl5/KA7490nbBse/+bb4dYflddfp2+++nucMyN11jaDCM6lKl
kwkSIu6sDrpVPUd6mABuSagNkK8AI2EOyJ9KhikVdMlsGVFjnagRqSwqvmTUhXfP
7ZPeqoxlsoXThiC8fjJTnymV2t/Zak9acbDmW57k9QUjZHteV5ZQ9joDGxyegMOk
78j6tUEhwbOI76pc6g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:43 2025 by rpki-client