Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
File: F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft (raw, json)
Hash identifier: CID0lrWK/DyvCaPWUchhhGo1wVcaTiSgwCyFSRmHMQI=
Subject key identifier: 89:1E:38:A2:50:F8:A2:AD:85:FB:A0:F1:EC:A3:8A:39:D2:8A:A2:05
Authority key identifier: 17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
Certificate issuer: /CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Certificate serial: 0197B7B30DF9AED0683A7D1B86DD8AB14149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
Manifest number: 032D
Signing time: Sat 28 Jun 2025 18:00:54 +0000
Manifest this update: Sat 28 Jun 2025 18:00:54 +0000
Manifest next update: Sun 29 Jun 2025 18:00:54 +0000
Files and hashes: 1: F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl (hash: rrVQbCiItgdWrljoCWcI/tozSqjuLdnSLZ/hC+PZjrM=)
2: zVisEWOE63cgJitrBEvJgl69e3s.roa (hash: XbX4/gD81xbjCKcZpF0h9K2QmjSBOOrAtln50jZvE7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:0d:f9:ae:d0:68:3a:7d:1b:86:dd:8a:b1:41:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Validity
Not Before: Jun 28 18:00:54 2025 GMT
Not After : Jun 29 18:00:54 2025 GMT
Subject: CN=891e38a250f8a2ad85fba0f1eca38a39d28aa205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:8f:b4:2d:63:de:d5:67:d3:dc:e3:5b:01:
9d:2c:42:90:69:00:07:74:bd:06:88:1c:ef:fd:d9:
09:b9:5c:82:17:f4:1a:ba:27:b7:e9:8b:9d:6f:03:
dd:ca:89:b2:78:c8:48:e5:4e:67:17:16:07:8d:24:
2a:0f:05:b4:30:de:27:ba:f1:ce:d2:de:0b:4d:2c:
2b:2b:ee:cc:b8:92:46:c0:5e:3c:fa:6e:fd:be:ca:
68:89:7b:c2:01:20:cd:13:3e:81:e7:3e:bd:a1:09:
b8:73:e7:e1:2c:6e:1a:21:1b:20:e0:c9:32:4c:45:
4b:03:61:50:a9:59:9c:73:d4:52:d9:de:1a:9e:a2:
a6:62:77:78:73:88:6a:d3:c0:f4:6d:df:7c:14:f6:
69:92:1d:cb:7f:5d:e6:a4:2d:8b:48:03:c2:be:cb:
38:9c:8b:ab:82:91:04:67:03:8d:5e:25:8f:19:64:
3a:a4:c1:df:5b:ac:57:f0:99:fa:a9:37:48:e3:1f:
d1:45:ba:e4:63:c5:e6:9f:c8:bd:b1:99:52:21:c7:
4b:d3:cc:3f:6e:4c:99:be:1b:1f:69:37:3e:1e:ed:
f6:3f:55:20:a2:5a:93:08:12:6d:4a:dc:72:f4:cd:
eb:45:21:3b:fb:66:b3:11:45:0d:a1:0b:1f:09:f1:
a4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1E:38:A2:50:F8:A2:AD:85:FB:A0:F1:EC:A3:8A:39:D2:8A:A2:05
X509v3 Authority Key Identifier:
keyid:17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d3:48:d8:7c:d5:b2:ca:be:bf:4d:e9:bf:60:61:6d:0b:c2:
cd:8f:71:d8:d8:81:e6:6b:02:d4:f3:72:5c:17:7f:89:fc:4e:
9c:80:02:ec:31:e7:d6:d3:8b:5f:60:9c:0a:49:ed:44:74:24:
d7:ac:43:6f:0c:2c:8d:34:73:93:ad:53:9c:4b:18:ea:e9:fc:
e7:b5:e2:cb:6e:42:6d:e0:8b:61:9e:06:ea:f0:98:6c:e8:0a:
52:72:96:f2:62:5b:9e:ed:8c:4e:03:aa:d0:93:3b:30:8b:a2:
2c:8b:47:08:8a:07:d7:c2:c2:b4:a9:6d:d9:62:db:6e:2c:38:
75:71:cf:e6:ea:75:4b:e4:b5:62:ba:94:f5:c8:01:65:af:03:
02:ec:48:3a:87:28:d1:cc:88:d9:69:e5:aa:68:ed:ff:71:b2:
a2:48:96:60:cd:53:de:cd:c9:ec:0c:c1:b0:05:6e:16:88:16:
c5:c4:97:4a:33:38:85:c5:d2:40:f0:a2:20:c1:4b:49:87:c8:
36:b0:83:51:5f:fb:ff:c1:50:c8:11:2c:f4:fc:93:74:b5:79:
e9:65:33:35:4f:17:c9:71:2f:69:58:45:84:bf:dd:4b:f9:86:
2f:64:99:b3:45:dc:af:16:ff:e4:10:62:62:68:e5:b1:99:e0:
13:7f:82:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3sw35rtBoOn0bht2KsUFJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NTUwMWQ5M2U5YjJiMWE0ZmVkMzA4ZTJhZTQzMWNjMjc3
ZTY5ZTAwHhcNMjUwNjI4MTgwMDU0WhcNMjUwNjI5MTgwMDU0WjAzMTEwLwYDVQQD
Eyg4OTFlMzhhMjUwZjhhMmFkODVmYmEwZjFlY2EzOGEzOWQyOGFhMjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCSPtC1j3tVn09zjWwGdLEKQaQAH
dL0GiBzv/dkJuVyCF/Qauie36YudbwPdyomyeMhI5U5nFxYHjSQqDwW0MN4nuvHO
0t4LTSwrK+7MuJJGwF48+m79vspoiXvCASDNEz6B5z69oQm4c+fhLG4aIRsg4Mky
TEVLA2FQqVmcc9RS2d4anqKmYnd4c4hq08D0bd98FPZpkh3Lf13mpC2LSAPCvss4
nIurgpEEZwONXiWPGWQ6pMHfW6xX8Jn6qTdI4x/RRbrkY8Xmn8i9sZlSIcdL08w/
bkyZvhsfaTc+Hu32P1UgolqTCBJtStxy9M3rRSE7+2azEUUNoQsfCfGkAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkeOKJQ+KKthfug8eyjijnSiqIFMB8GA1UdIwQY
MBaAFBdVAdk+mysaT+0wjirkMcwnfmngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFVQjJUNmJLeHBQN1RDT0t1UXh6Q2QtYWVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wNjgxOTEtODc4ZC00MjVjLTg5OTMt
MDliOTkwNWQ0MWRiLzEvRjFVQjJUNmJLeHBQN1RDT0t1UXh6Q2QtYWVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8wNjgxOTEtODc4ZC00MjVjLTg5OTMtMDliOTkwNWQ0MWRi
LzEvRjFVQjJUNmJLeHBQN1RDT0t1UXh6Q2QtYWVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9NI2HzV
ssq+v03pv2BhbQvCzY9x2NiB5msC1PNyXBd/ifxOnIAC7DHn1tOLX2CcCkntRHQk
16xDbwwsjTRzk61TnEsY6un857Xiy25CbeCLYZ4G6vCYbOgKUnKW8mJbnu2MTgOq
0JM7MIuiLItHCIoH18LCtKlt2WLbbiw4dXHP5up1S+S1YrqU9cgBZa8DAuxIOoco
0cyI2Wnlqmjt/3GyokiWYM1T3s3J7AzBsAVuFogWxcSXSjM4hcXSQPCiIMFLSYfI
NrCDUV/7/8FQyBEs9PyTdLV56WUzNU8XyXEvaVhFhL/dS/mGL2SZs0Xcrxb/5BBi
YmjlsZngE3+CUw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:41 2025 by rpki-client