Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft
File: FW-pMchet5jGgtwy5CkJ1xySOyM.mft (raw, json)
Hash identifier: YeMwUzUtl3G05dihz67pMG0dv5Bw2yju5qo89tUd7MQ=
Subject key identifier: 70:3B:C9:B3:B9:C9:93:E7:D5:B7:1F:F3:A2:6F:C1:1E:A6:4C:73:BA
Authority key identifier: 15:6F:A9:31:C8:5E:B7:98:C6:82:DC:32:E4:29:09:D7:1C:92:3B:23
Certificate issuer: /CN=156fa931c85eb798c682dc32e42909d71c923b23
Certificate serial: 0198D58352315DB77033B699905C4DEE3659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FW-pMchet5jGgtwy5CkJ1xySOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft
Manifest number: 0533
Signing time: Sat 23 Aug 2025 06:00:09 +0000
Manifest this update: Sat 23 Aug 2025 06:00:09 +0000
Manifest next update: Sun 24 Aug 2025 06:00:09 +0000
Files and hashes: 1: FW-pMchet5jGgtwy5CkJ1xySOyM.crl (hash: n7ynsrtr3J1ySeX3fEaKISOYFwoLA+DNrGtxPHSq/4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FW-pMchet5jGgtwy5CkJ1xySOyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:52:31:5d:b7:70:33:b6:99:90:5c:4d:ee:36:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156fa931c85eb798c682dc32e42909d71c923b23
Validity
Not Before: Aug 23 06:00:09 2025 GMT
Not After : Aug 24 06:00:09 2025 GMT
Subject: CN=703bc9b3b9c993e7d5b71ff3a26fc11ea64c73ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:02:67:ef:c6:f6:fa:52:da:58:1c:bb:91:56:
ff:a6:b8:ed:3c:f0:db:30:f5:ae:db:2a:e4:32:33:
3e:01:33:70:dc:69:fd:2e:3c:a5:19:7e:9f:68:6f:
cd:cc:e5:df:88:87:da:ca:9e:9e:14:e3:05:e2:ed:
a0:21:eb:29:18:20:4c:82:19:00:16:8c:90:c0:51:
70:ad:b7:04:28:f6:7b:0e:69:31:e0:8b:4b:c2:51:
ce:3b:2b:58:fe:c6:5b:1c:a4:49:29:92:42:8c:62:
54:14:17:9f:9e:c3:65:1b:70:9a:7d:d9:aa:ca:da:
4d:5d:9d:ce:a2:47:e9:f2:fb:49:96:eb:5f:4f:25:
fd:5b:73:a0:d5:f6:ca:b7:4e:57:3a:ae:12:83:5d:
81:eb:8e:a6:93:1c:7b:4d:2b:25:90:52:e5:ac:0f:
bc:93:06:9f:7e:5f:50:85:79:e5:8c:06:b7:3a:25:
3a:ea:85:ce:3e:c6:0d:d4:2c:7b:c1:fc:01:8a:7a:
7f:4e:1e:a9:ae:f9:87:b1:f6:dc:63:fa:5f:df:52:
63:fa:f0:f8:cf:f4:3e:c7:9f:ca:5a:59:a6:3c:1f:
20:51:38:5e:cd:97:a4:e8:36:00:97:51:d2:aa:a0:
12:df:38:48:17:69:2c:f9:ce:05:df:e6:e4:80:e7:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3B:C9:B3:B9:C9:93:E7:D5:B7:1F:F3:A2:6F:C1:1E:A6:4C:73:BA
X509v3 Authority Key Identifier:
keyid:15:6F:A9:31:C8:5E:B7:98:C6:82:DC:32:E4:29:09:D7:1C:92:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW-pMchet5jGgtwy5CkJ1xySOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c6:03:5b:08:86:6d:4c:e2:66:a8:d8:ce:ba:32:85:b9:9c:
01:ac:64:56:a5:c2:65:e7:31:cf:0f:01:73:fa:e2:6a:3b:92:
44:70:5e:fc:31:dd:d9:ef:66:81:f0:24:54:b1:6a:ea:1b:33:
14:77:e7:ce:5f:62:17:a3:81:7d:33:fb:4c:6c:c5:8a:db:59:
a1:62:98:32:83:5b:40:d5:0b:57:cd:f5:07:5e:47:ad:01:63:
5e:2b:74:24:59:24:33:79:76:49:f6:d0:54:fd:1a:9c:1e:05:
e7:b1:9f:97:ae:43:d3:6a:e5:47:70:f4:48:4e:7c:dd:7a:23:
c5:da:19:88:01:d0:78:e0:d9:c9:8c:0e:bd:47:cb:bd:70:ed:
4a:f9:56:1b:a1:7d:c2:dd:db:1f:95:38:a0:12:2f:22:bd:cf:
ee:56:1a:61:91:6e:78:2d:41:ae:32:57:00:1b:61:f5:bb:66:
56:78:1d:e3:ae:12:a4:d1:10:c9:2b:aa:a5:f1:71:2a:c9:dc:
2c:f9:48:b4:c6:be:a5:5d:aa:ec:ef:67:db:19:91:bd:f1:83:
21:04:d0:28:aa:43:a0:e6:38:54:e3:7c:f5:3d:c3:fc:87:03:
ef:d9:ec:c2:6c:c8:d6:f2:44:d6:68:85:57:bd:91:f2:c1:92:
af:46:5c:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg1IxXbdwM7aZkFxN7jZZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NmZhOTMxYzg1ZWI3OThjNjgyZGMzMmU0MjkwOWQ3MWM5
MjNiMjMwHhcNMjUwODIzMDYwMDA5WhcNMjUwODI0MDYwMDA5WjAzMTEwLwYDVQQD
Eyg3MDNiYzliM2I5Yzk5M2U3ZDViNzFmZjNhMjZmYzExZWE2NGM3M2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QJn78b2+lLaWBy7kVb/prjtPPDb
MPWu2yrkMjM+ATNw3Gn9LjylGX6faG/NzOXfiIfayp6eFOMF4u2gIespGCBMghkA
FoyQwFFwrbcEKPZ7Dmkx4ItLwlHOOytY/sZbHKRJKZJCjGJUFBefnsNlG3Cafdmq
ytpNXZ3Ookfp8vtJlutfTyX9W3Og1fbKt05XOq4Sg12B646mkxx7TSslkFLlrA+8
kwaffl9QhXnljAa3OiU66oXOPsYN1Cx7wfwBinp/Th6prvmHsfbcY/pf31Jj+vD4
z/Q+x5/KWlmmPB8gUThezZek6DYAl1HSqqAS3zhIF2ks+c4F3+bkgOc44wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHA7ybO5yZPn1bcf86JvwR6mTHO6MB8GA1UdIwQY
MBaAFBVvqTHIXreYxoLcMuQpCdcckjsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlctcE1jaGV0NWpHZ3R3eTVDa0oxeHlTT3lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lYzZhODMtYmJhNi00NWNiLTkwZWMt
NGVhODA2ZmYyOGNkLzEvRlctcE1jaGV0NWpHZ3R3eTVDa0oxeHlTT3lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9lYzZhODMtYmJhNi00NWNiLTkwZWMtNGVhODA2ZmYyOGNk
LzEvRlctcE1jaGV0NWpHZ3R3eTVDa0oxeHlTT3lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMYDWwiG
bUziZqjYzroyhbmcAaxkVqXCZecxzw8Bc/riajuSRHBe/DHd2e9mgfAkVLFq6hsz
FHfnzl9iF6OBfTP7TGzFittZoWKYMoNbQNULV831B15HrQFjXit0JFkkM3l2SfbQ
VP0anB4F57Gfl65D02rlR3D0SE583XojxdoZiAHQeODZyYwOvUfLvXDtSvlWG6F9
wt3bH5U4oBIvIr3P7lYaYZFueC1BrjJXABth9btmVngd464SpNEQySuqpfFxKsnc
LPlItMa+pV2q7O9n2xmRvfGDIQTQKKpDoOY4VON89T3D/IcD79nswmzI1vJE1miF
V72R8sGSr0Zc6A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:46 2025 by rpki-client