Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
File: F__uJQUsCqv2yzcePy4Hb0T8HDw.mft (raw, json)
Hash identifier: DspaPvdq2yzOr072Jeapc8V+MSyUghp00PR36wx9HqI=
Subject key identifier: D0:AA:61:89:82:E6:B1:52:AC:CA:47:6C:D8:44:2D:08:7C:53:34:7E
Authority key identifier: 17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C
Certificate issuer: /CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
Certificate serial: 0197B70E7489314C242AB30A8D1CC251DE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
Manifest number: 1546
Signing time: Sat 28 Jun 2025 15:01:07 +0000
Manifest this update: Sat 28 Jun 2025 15:01:07 +0000
Manifest next update: Sun 29 Jun 2025 15:01:07 +0000
Files and hashes: 1: F__uJQUsCqv2yzcePy4Hb0T8HDw.crl (hash: mUzyLSo9qATTneIlA85XXQid0V5k/73HiH+OaHwSctw=)
2: ZPoCpq3pmnhAPIwck7l7sD56f3g.roa (hash: zMHDyTabQ6MFQ9QbuOgdVnq/gWPOmwSEqWlxMKx33/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:74:89:31:4c:24:2a:b3:0a:8d:1c:c2:51:de:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
Validity
Not Before: Jun 28 15:01:07 2025 GMT
Not After : Jun 29 15:01:07 2025 GMT
Subject: CN=d0aa618982e6b152acca476cd8442d087c53347e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:37:94:a7:49:51:19:81:02:98:29:80:ff:
8d:24:e5:94:d5:7d:b1:0c:fc:4a:dc:c9:42:9d:08:
d3:5d:6f:7f:ed:32:6a:94:e0:16:25:42:12:f7:64:
27:a8:7f:19:60:e2:24:32:5d:a7:63:f8:2c:66:19:
ac:a3:03:cb:59:33:af:4a:17:5a:8a:f0:c5:84:f2:
af:93:43:cf:7e:11:68:d9:3b:f5:67:7f:f5:a4:cd:
8b:ef:ed:e6:c1:ae:a1:94:57:6f:1d:dc:87:85:a2:
ae:37:bf:ed:73:1c:88:f3:12:42:8c:f6:2b:cf:ff:
07:3a:5d:a8:f9:99:16:15:c8:d9:d8:39:9c:a0:9f:
40:ef:07:2c:bd:4a:1c:b3:63:fe:d1:e0:f1:1b:f2:
71:20:08:a3:82:6e:22:b9:bc:c2:3e:b2:f7:aa:87:
82:67:7b:e1:2e:b1:a2:e5:95:79:fa:e7:72:f9:3d:
75:55:ca:f8:ee:0c:6c:6b:85:e4:19:e0:1e:d9:77:
1f:91:de:7d:db:e1:a1:86:ce:e7:bd:ba:03:cb:d6:
f7:72:43:18:0c:51:be:97:35:fc:8f:1a:43:e9:e2:
ac:ae:2f:d8:91:c9:e8:97:b1:83:8a:f7:9e:ab:07:
c0:23:35:75:a5:8b:6d:51:72:23:17:fa:79:44:18:
1c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AA:61:89:82:E6:B1:52:AC:CA:47:6C:D8:44:2D:08:7C:53:34:7E
X509v3 Authority Key Identifier:
keyid:17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f9:1c:8b:b8:86:c1:c3:75:61:a0:da:82:88:6f:b8:a6:55:
00:91:5a:4d:d0:50:ff:ef:00:ea:4d:4f:b9:dd:a5:55:e6:9b:
38:2c:20:a3:47:63:82:63:70:57:94:86:ef:ce:0e:fd:cd:19:
45:35:13:54:fb:c7:4a:86:15:e5:de:a3:b4:7f:f9:db:84:bc:
36:51:dc:75:6e:64:a1:c3:f4:41:91:d1:c7:5c:d9:ef:3a:10:
99:5d:9c:a2:03:51:0b:87:ca:91:f6:a0:94:e5:be:d3:18:73:
e5:2b:64:32:2a:95:e0:ac:78:0d:bb:40:aa:fb:ab:e5:09:50:
a5:14:39:07:d8:98:75:65:be:4b:e0:e8:e9:e7:5b:b6:93:14:
08:8e:e2:8b:fb:24:39:b7:7f:eb:48:9c:34:5e:10:72:9f:42:
e2:5b:dc:45:0d:00:d4:96:98:b1:b5:27:ec:7b:d3:19:e6:51:
55:4c:fb:b1:e1:ad:a2:95:43:b0:d2:4e:e9:57:27:52:27:a6:
86:bd:00:a7:37:53:2d:2e:c5:6c:6a:da:55:16:95:56:bc:36:
b2:40:50:fc:54:12:f2:80:b8:ff:a9:62:4f:32:39:50:dd:23:
ca:87:fb:32:50:0d:a0:8a:f3:52:6b:28:e5:c0:2b:0f:39:cd:
b9:0f:7a:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DnSJMUwkKrMKjRzCUd6aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZmZlZTI1MDUyYzBhYWJmNmNiMzcxZTNmMmUwNzZmNDRm
YzFjM2MwHhcNMjUwNjI4MTUwMTA3WhcNMjUwNjI5MTUwMTA3WjAzMTEwLwYDVQQD
EyhkMGFhNjE4OTgyZTZiMTUyYWNjYTQ3NmNkODQ0MmQwODdjNTMzNDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR43lKdJURmBApgpgP+NJOWU1X2x
DPxK3MlCnQjTXW9/7TJqlOAWJUIS92QnqH8ZYOIkMl2nY/gsZhmsowPLWTOvShda
ivDFhPKvk0PPfhFo2Tv1Z3/1pM2L7+3mwa6hlFdvHdyHhaKuN7/tcxyI8xJCjPYr
z/8HOl2o+ZkWFcjZ2DmcoJ9A7wcsvUocs2P+0eDxG/JxIAijgm4iubzCPrL3qoeC
Z3vhLrGi5ZV5+udy+T11Vcr47gxsa4XkGeAe2Xcfkd592+Ghhs7nvboDy9b3ckMY
DFG+lzX8jxpD6eKsri/Ykcnol7GDiveeqwfAIzV1pYttUXIjF/p5RBgccQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCqYYmC5rFSrMpHbNhELQh8UzR+MB8GA1UdIwQY
MBaAFBf/7iUFLAqr9ss3Hj8uB29E/Bw8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRl9fdUpRVXNDcXYyeXpjZVB5NEhiMFQ4SER3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8wNDUyMjItNWFjZS00ZTdlLTk1YjIt
YTJlODgwZmQ1ODUwLzEvRl9fdUpRVXNDcXYyeXpjZVB5NEhiMFQ4SER3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8wNDUyMjItNWFjZS00ZTdlLTk1YjItYTJlODgwZmQ1ODUw
LzEvRl9fdUpRVXNDcXYyeXpjZVB5NEhiMFQ4SER3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/kci7iG
wcN1YaDagohvuKZVAJFaTdBQ/+8A6k1Pud2lVeabOCwgo0djgmNwV5SG784O/c0Z
RTUTVPvHSoYV5d6jtH/524S8NlHcdW5kocP0QZHRx1zZ7zoQmV2cogNRC4fKkfag
lOW+0xhz5StkMiqV4Kx4DbtAqvur5QlQpRQ5B9iYdWW+S+Do6edbtpMUCI7ii/sk
Obd/60icNF4Qcp9C4lvcRQ0A1JaYsbUn7HvTGeZRVUz7seGtopVDsNJO6VcnUiem
hr0ApzdTLS7FbGraVRaVVrw2skBQ/FQS8oC4/6liTzI5UN0jyof7MlANoIrzUmso
5cArDznNuQ969g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:04 2025 by rpki-client