Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
File: 1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json)
Hash identifier: 6Inj35UYdLgZY3KuokglQlzTMJVzdVM7bI1ghpTzBZs=
Subject key identifier: 8D:F6:E6:F2:26:15:3F:21:2B:9A:FA:B9:1D:7A:44:0A:6B:F7:07:41
Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055
Certificate serial: 0197B6A2452E50D2838EA9F10059C76FDDC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
Manifest number: 1220
Signing time: Sat 28 Jun 2025 13:02:57 +0000
Manifest this update: Sat 28 Jun 2025 13:02:57 +0000
Manifest next update: Sun 29 Jun 2025 13:02:57 +0000
Files and hashes: 1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: 9LG/1cktGvNi+vZiNSY2R8o5aExMctFBISVcv9xyiCE=)
2: MwEJqReLtYJIDzQC3nxs7sP0tvA.roa (hash: WyxWLsA6emUiFQU/YyUOL864IemIj/7UtRIviv8JcEw=)
3: iAzdsnC_l6rdd2kZ6hvA3HRXqCU.roa (hash: sMPWtnAj59EVmsTaMYwCg3wIrLPxpEslb0ZjPRwWR6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:45:2e:50:d2:83:8e:a9:f1:00:59:c7:6f:dd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bab208653d4261ebf202f6036334119846055
Validity
Not Before: Jun 28 13:02:57 2025 GMT
Not After : Jun 29 13:02:57 2025 GMT
Subject: CN=8df6e6f226153f212b9afab91d7a440a6bf70741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:cf:f5:b1:46:fa:57:9c:d2:2a:a8:63:0a:
12:c6:2f:7b:18:78:5d:5b:75:43:be:1b:8e:9b:32:
a6:e2:04:c1:a0:18:9c:03:08:03:d7:74:5c:43:dd:
20:d1:0b:38:55:5f:87:3e:1f:c9:87:58:55:2f:9a:
d5:4e:48:dc:a9:90:52:b4:80:d9:95:d1:bb:c3:95:
bf:f3:c7:0c:81:d6:22:92:f4:49:1b:0a:ab:e0:17:
31:28:e1:22:fb:9a:e3:1b:d4:1b:4b:e8:62:69:ca:
6b:7a:a3:ae:af:97:86:84:10:51:c1:20:4f:77:31:
76:22:c1:38:ba:89:44:b2:1b:0b:e2:37:cf:ae:71:
4c:8b:fc:24:85:02:6b:c1:9a:28:91:d2:03:27:e8:
9e:04:90:c7:9c:df:d6:74:5a:d7:32:3d:94:3a:1e:
f2:2a:5e:c4:5b:a3:d1:ef:0c:9b:25:31:b2:70:88:
13:4f:a9:1f:96:f2:ad:85:0a:7c:7b:b2:63:06:f4:
6d:d0:92:66:68:77:2e:95:d6:a1:f3:74:0b:78:1c:
c3:34:2b:cb:ac:84:5f:b9:5f:58:35:f1:79:65:98:
15:0e:d0:0f:9a:44:a3:e9:13:82:59:5f:97:18:d0:
25:18:37:a2:58:9c:d7:4b:f9:d8:9a:ad:d0:af:03:
3c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F6:E6:F2:26:15:3F:21:2B:9A:FA:B9:1D:7A:44:0A:6B:F7:07:41
X509v3 Authority Key Identifier:
keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ce:4b:af:10:2f:78:18:c7:f7:df:d8:11:06:a7:bb:e2:8f:
9d:23:08:f7:37:51:d8:64:59:5c:60:23:4f:42:36:08:9a:6a:
11:cb:81:d1:cb:49:18:5f:d8:cf:b2:a5:fb:a2:68:82:e5:59:
19:cc:79:c9:c1:f2:71:3c:08:a0:43:bb:74:7c:c2:4b:7d:11:
37:72:bc:f2:e0:f3:71:e8:85:95:1f:94:c9:74:ed:c9:6d:40:
c5:78:e0:4f:c1:29:0e:6c:70:3f:ab:5e:88:4d:0e:c4:e0:51:
2c:2e:2d:d0:03:61:16:84:07:62:ec:bc:aa:7a:e8:7a:e5:a7:
f5:0c:3b:ac:c8:e7:5d:3e:30:53:72:14:df:76:e8:da:5e:4c:
11:d9:ca:40:df:1d:c9:ce:a7:ee:ae:be:9b:e8:df:d3:d6:f4:
ff:fb:fb:07:20:ed:50:f2:6e:83:53:8b:17:b9:d4:6d:8e:bc:
6c:00:37:4f:b3:f0:67:8c:0f:1e:57:c8:b1:3c:40:c2:e4:d6:
f5:e2:81:77:18:bc:4e:38:e4:64:44:47:43:75:b5:f9:e3:c4:
dc:e8:3b:af:ed:cd:46:35:f4:6c:36:d0:a1:60:9f:83:64:4c:
81:e4:d7:12:38:a5:2d:df:f2:17:d8:2a:2c:6f:3f:9e:35:28:
29:8a:ae:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2okUuUNKDjqnxAFnHb93AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NWJhYjIwODY1M2Q0MjYxZWJmMjAyZjYwMzYzMzQxMTk4
NDYwNTUwHhcNMjUwNjI4MTMwMjU3WhcNMjUwNjI5MTMwMjU3WjAzMTEwLwYDVQQD
Eyg4ZGY2ZTZmMjI2MTUzZjIxMmI5YWZhYjkxZDdhNDQwYTZiZjcwNzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkjP9bFG+lec0iqoYwoSxi97GHhd
W3VDvhuOmzKm4gTBoBicAwgD13RcQ90g0Qs4VV+HPh/Jh1hVL5rVTkjcqZBStIDZ
ldG7w5W/88cMgdYikvRJGwqr4BcxKOEi+5rjG9QbS+hiacpreqOur5eGhBBRwSBP
dzF2IsE4uolEshsL4jfPrnFMi/wkhQJrwZookdIDJ+ieBJDHnN/WdFrXMj2UOh7y
Kl7EW6PR7wybJTGycIgTT6kflvKthQp8e7JjBvRt0JJmaHculdah83QLeBzDNCvL
rIRfuV9YNfF5ZZgVDtAPmkSj6ROCWV+XGNAlGDeiWJzXS/nYmq3QrwM8pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI325vImFT8hK5r6uR16RApr9wdBMB8GA1UdIwQY
MBaAFNRbqyCGU9QmHr8gL2A2M0EZhGBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wYWVjMWYtNjA2NS00ZDg4LTg0NTQt
MTI0ZDNmYjM5MDZhLzEvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wYWVjMWYtNjA2NS00ZDg4LTg0NTQtMTI0ZDNmYjM5MDZh
LzEvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADs5LrxAv
eBjH99/YEQanu+KPnSMI9zdR2GRZXGAjT0I2CJpqEcuB0ctJGF/Yz7Kl+6JoguVZ
Gcx5ycHycTwIoEO7dHzCS30RN3K88uDzceiFlR+UyXTtyW1AxXjgT8EpDmxwP6te
iE0OxOBRLC4t0ANhFoQHYuy8qnroeuWn9Qw7rMjnXT4wU3IU33bo2l5MEdnKQN8d
yc6n7q6+m+jf09b0//v7ByDtUPJug1OLF7nUbY68bAA3T7PwZ4wPHlfIsTxAwuTW
9eKBdxi8TjjkZERHQ3W1+ePE3Og7r+3NRjX0bDbQoWCfg2RMgeTXEjilLd/yF9gq
LG8/njUoKYquGQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:30 2025 by rpki-client