Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
File: f8lWpStzUEpPH_NFRxmSl6f13p0.mft (raw, json)
Hash identifier: mCr/HDX2Fr32TVYxLid373uExfLI9GowLs8CvqAMpuQ=
Subject key identifier: 83:D2:15:74:22:82:05:D4:68:3A:9D:DE:03:F3:44:B1:49:8C:55:50
Authority key identifier: 7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D
Certificate issuer: /CN=7fc956a52b73504a4f1ff34547199297a7f5de9d
Certificate serial: 0197B8C5DEC752F8C044AABB9078F0497910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
Manifest number: 0969
Signing time: Sat 28 Jun 2025 23:01:04 +0000
Manifest this update: Sat 28 Jun 2025 23:01:04 +0000
Manifest next update: Sun 29 Jun 2025 23:01:04 +0000
Files and hashes: 1: f8lWpStzUEpPH_NFRxmSl6f13p0.crl (hash: fIzN6xxTb0odUDiP0dLeYKBF+rzVZTsuY9OZpMLmDo0=)
2: oABxc2AhceHbFWdSMSjl8hsmwIU.roa (hash: TEY8sctZHera/7HF2OtPuy78+8vJU3t66DtmPXEJjBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:de:c7:52:f8:c0:44:aa:bb:90:78:f0:49:79:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fc956a52b73504a4f1ff34547199297a7f5de9d
Validity
Not Before: Jun 28 23:01:04 2025 GMT
Not After : Jun 29 23:01:04 2025 GMT
Subject: CN=83d21574228205d4683a9dde03f344b1498c5550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:1f:84:a2:ca:93:5f:4b:96:b0:36:d4:b2:
4b:44:0e:7d:88:27:d3:44:06:7a:6e:dd:ff:d6:f6:
ab:a3:69:91:3a:51:03:6a:f5:d7:aa:39:d7:f8:84:
3e:0d:42:b4:7a:57:c4:01:81:69:17:b6:f1:24:61:
a7:5e:b6:63:c6:dd:84:25:d5:79:1c:b2:ba:eb:34:
25:67:81:78:0d:42:45:b1:f2:86:b9:f3:73:8c:2a:
77:ed:c6:46:ca:62:f0:f3:b5:00:8b:df:b0:21:07:
25:63:95:9c:80:32:d3:eb:6f:c2:4a:8e:dd:7f:9f:
68:c7:cf:10:28:2f:25:5c:f0:7f:15:35:51:12:b2:
21:f4:04:a6:a2:43:c2:4b:66:e4:10:24:ca:c1:bd:
57:14:cc:64:fb:38:3e:c9:9d:85:68:f6:0d:09:90:
92:48:60:f3:ce:d2:72:c2:07:56:17:09:ab:a5:d1:
49:61:16:49:92:3d:47:fc:92:10:ee:25:5a:43:d0:
0f:86:4a:aa:ff:78:db:81:31:12:ce:35:40:fd:aa:
ef:35:c7:31:cb:06:2b:02:8b:16:79:da:ae:93:b7:
e8:a8:5c:4f:7f:48:b0:90:31:a1:f7:64:d0:43:4c:
d7:1b:e1:37:c2:f1:85:b3:dd:4b:84:43:e0:4e:fe:
2d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D2:15:74:22:82:05:D4:68:3A:9D:DE:03:F3:44:B1:49:8C:55:50
X509v3 Authority Key Identifier:
keyid:7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:34:7d:7d:b7:ba:56:44:fb:59:e6:5b:e1:a7:41:ed:a0:79:
82:03:e7:51:b0:de:03:e4:c4:ee:ea:91:d5:46:22:41:30:95:
cf:45:4e:8e:ce:93:a9:37:e3:5e:09:6b:a9:c7:d9:5b:36:61:
f6:92:c0:43:e3:ed:ea:86:7a:47:59:fd:93:6c:2c:0e:79:af:
57:1c:b2:e1:43:2a:ae:86:8c:00:87:9e:73:a6:d3:ce:7f:4f:
1d:37:20:1d:c3:30:d4:62:d8:dc:60:45:41:56:dd:31:8f:cc:
02:6f:5d:4d:b4:d0:60:c0:98:2c:4b:fd:04:df:c6:8d:de:23:
e8:11:e1:b7:93:a6:e6:dd:e1:1e:13:a6:d4:af:06:7f:3d:f7:
49:40:31:9a:39:b8:cf:5d:ae:0a:6b:c1:8a:fa:10:dc:4d:50:
d9:cb:e1:80:42:17:d7:a4:c7:81:ae:ef:b2:4f:b7:ba:7a:4f:
63:4f:56:3f:a4:b3:a5:e0:30:f1:2d:88:18:2a:e9:72:98:0d:
a0:03:2e:9c:79:4b:fb:ef:4d:6d:6f:75:4e:21:b1:92:4f:96:
2d:72:e5:2d:26:f8:41:c0:3c:f3:a1:ce:6c:66:b1:ab:71:0f:
91:9e:0c:2a:da:b1:06:e8:a1:57:ff:65:91:9e:6d:d3:91:a4:
e5:24:2c:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4xd7HUvjARKq7kHjwSXkQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmYzk1NmE1MmI3MzUwNGE0ZjFmZjM0NTQ3MTk5Mjk3YTdm
NWRlOWQwHhcNMjUwNjI4MjMwMTA0WhcNMjUwNjI5MjMwMTA0WjAzMTEwLwYDVQQD
Eyg4M2QyMTU3NDIyODIwNWQ0NjgzYTlkZGUwM2YzNDRiMTQ5OGM1NTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbcfhKLKk19LlrA21LJLRA59iCfT
RAZ6bt3/1varo2mROlEDavXXqjnX+IQ+DUK0elfEAYFpF7bxJGGnXrZjxt2EJdV5
HLK66zQlZ4F4DUJFsfKGufNzjCp37cZGymLw87UAi9+wIQclY5WcgDLT62/CSo7d
f59ox88QKC8lXPB/FTVRErIh9ASmokPCS2bkECTKwb1XFMxk+zg+yZ2FaPYNCZCS
SGDzztJywgdWFwmrpdFJYRZJkj1H/JIQ7iVaQ9APhkqq/3jbgTESzjVA/arvNccx
ywYrAosWedquk7foqFxPf0iwkDGh92TQQ0zXG+E3wvGFs91LhEPgTv4tWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPSFXQiggXUaDqd3gPzRLFJjFVQMB8GA1UdIwQY
MBaAFH/JVqUrc1BKTx/zRUcZkpen9d6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83MWFiNjktNjk2NS00YjcwLTk2OGQt
YmI1N2E0ZWY3MTUzLzEvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS83MWFiNjktNjk2NS00YjcwLTk2OGQtYmI1N2E0ZWY3MTUz
LzEvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjR9fbe6
VkT7WeZb4adB7aB5ggPnUbDeA+TE7uqR1UYiQTCVz0VOjs6TqTfjXglrqcfZWzZh
9pLAQ+Pt6oZ6R1n9k2wsDnmvVxyy4UMqroaMAIeec6bTzn9PHTcgHcMw1GLY3GBF
QVbdMY/MAm9dTbTQYMCYLEv9BN/Gjd4j6BHht5Om5t3hHhOm1K8Gfz33SUAxmjm4
z12uCmvBivoQ3E1Q2cvhgEIX16THga7vsk+3unpPY09WP6SzpeAw8S2IGCrpcpgN
oAMunHlL++9NbW91TiGxkk+WLXLlLSb4QcA886HObGaxq3EPkZ4MKtqxBuihV/9l
kZ5t05Gk5SQsLQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:50:11 2025 by rpki-client