Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
File: FVKrj2cfUIF_SRxB0fHqG13kbms.mft (raw, json)
Hash identifier: vltDyWFDIPU+cP4z8hrmkb1URS2iM0r5YcOV32ifrR4=
Subject key identifier: DC:7A:A6:8E:A7:D9:AE:4E:00:61:46:9F:15:17:42:63:0A:DB:E7:7A
Authority key identifier: 15:52:AB:8F:67:1F:50:81:7F:49:1C:41:D1:F1:EA:1B:5D:E4:6E:6B
Certificate issuer: /CN=1552ab8f671f50817f491c41d1f1ea1b5de46e6b
Certificate serial: 0197B6A1090FCAA43D11699A25BA4E833A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:01:36 +0000
Manifest this update: Sat 28 Jun 2025 13:01:36 +0000
Manifest next update: Sun 29 Jun 2025 13:01:36 +0000
Files and hashes: 1: FVKrj2cfUIF_SRxB0fHqG13kbms.crl (hash: JOP/XZszds6fCI9qXvnA+tinYUxNf2IQ3Xe9BEASR+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:09:0f:ca:a4:3d:11:69:9a:25:ba:4e:83:3a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1552ab8f671f50817f491c41d1f1ea1b5de46e6b
Validity
Not Before: Jun 28 13:01:36 2025 GMT
Not After : Jun 29 13:01:36 2025 GMT
Subject: CN=dc7aa68ea7d9ae4e0061469f151742630adbe77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c1:44:15:4f:cf:ad:2b:e2:8a:cc:6c:5d:20:
06:26:6b:06:0e:8c:eb:25:06:b6:09:b1:61:f2:fc:
ca:e3:ef:df:80:81:08:61:7a:9c:73:75:48:91:ac:
06:91:71:60:81:1f:ab:f2:aa:60:8f:ca:47:b7:d5:
a2:47:77:4a:90:86:e2:13:b1:08:0e:8f:3a:70:3e:
04:5e:56:c1:fe:a4:80:c8:3d:25:c1:71:29:9c:a7:
86:3b:e6:34:65:18:fa:59:5c:03:59:83:a0:0e:47:
cb:9d:3c:bb:6e:3b:82:fa:27:e8:87:4e:23:57:ae:
e4:5c:55:52:2a:e8:c8:a9:81:07:de:6b:7f:08:3c:
45:23:60:e1:bd:b9:f8:57:14:6c:63:2a:54:0b:86:
cb:c8:17:2d:40:2e:70:a6:76:ca:f0:e2:03:f4:be:
8c:20:dc:1a:c4:8f:b6:dd:ff:f9:6d:28:6b:97:85:
d9:db:1b:41:78:d4:4b:2c:3d:45:26:b2:f2:52:3c:
89:9c:af:10:17:06:63:5f:f2:df:13:aa:f6:3e:32:
0e:a0:96:fa:f3:d0:99:a5:b6:7e:14:c7:fe:7e:f1:
03:19:e3:24:20:f0:38:37:ed:30:cc:6f:7c:7d:cf:
8e:bb:8b:b9:6f:44:2c:e1:1b:d1:6c:0b:60:21:12:
1e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7A:A6:8E:A7:D9:AE:4E:00:61:46:9F:15:17:42:63:0A:DB:E7:7A
X509v3 Authority Key Identifier:
keyid:15:52:AB:8F:67:1F:50:81:7F:49:1C:41:D1:F1:EA:1B:5D:E4:6E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9b:ed:20:8f:4a:06:13:ef:5e:21:31:59:e6:9e:60:3b:17:
9a:87:0d:bc:93:0e:22:fa:50:99:4a:9c:d0:ff:f2:05:62:e7:
f1:e1:cf:b4:15:5c:f3:58:5d:f9:33:ec:ed:3d:29:ed:cf:b1:
50:a2:b4:3e:c4:75:a7:b3:24:55:fa:12:bd:68:85:93:a9:8b:
ab:ad:41:1b:b7:b1:27:87:70:9a:eb:00:53:c6:b6:fe:6d:01:
74:98:9a:7d:19:50:8e:c1:7e:ee:9c:60:ce:dd:5a:5a:ea:df:
f1:c0:2d:4f:9e:e6:a7:fc:06:92:ed:dc:32:d2:97:3c:dd:77:
a2:df:e5:b5:40:c4:e0:5e:21:95:6b:2a:fd:71:44:4f:db:92:
f8:26:b4:df:82:8f:ac:b8:38:11:63:a0:d4:83:a5:ed:77:d4:
33:03:12:d3:ea:fd:2a:fd:e2:a2:62:85:c0:da:45:e3:d4:fc:
4d:18:87:1c:f4:37:d9:5b:e5:36:17:93:c2:d2:1e:0f:0c:b0:
57:df:db:a5:fc:e8:aa:32:31:a7:fc:4a:9f:18:ff:73:fd:c0:
0c:f6:f4:5b:16:11:0d:3a:22:e9:6b:71:8b:ed:e7:da:b3:d4:
2c:b1:43:4b:c1:56:0c:90:9d:ce:fd:5b:b3:21:43:ab:f3:70:
98:2a:cb:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oQkPyqQ9EWmaJbpOgzqYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NTJhYjhmNjcxZjUwODE3ZjQ5MWM0MWQxZjFlYTFiNWRl
NDZlNmIwHhcNMjUwNjI4MTMwMTM2WhcNMjUwNjI5MTMwMTM2WjAzMTEwLwYDVQQD
EyhkYzdhYTY4ZWE3ZDlhZTRlMDA2MTQ2OWYxNTE3NDI2MzBhZGJlNzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcFEFU/PrSviisxsXSAGJmsGDozr
JQa2CbFh8vzK4+/fgIEIYXqcc3VIkawGkXFggR+r8qpgj8pHt9WiR3dKkIbiE7EI
Do86cD4EXlbB/qSAyD0lwXEpnKeGO+Y0ZRj6WVwDWYOgDkfLnTy7bjuC+ifoh04j
V67kXFVSKujIqYEH3mt/CDxFI2Dhvbn4VxRsYypUC4bLyBctQC5wpnbK8OID9L6M
INwaxI+23f/5bShrl4XZ2xtBeNRLLD1FJrLyUjyJnK8QFwZjX/LfE6r2PjIOoJb6
89CZpbZ+FMf+fvEDGeMkIPA4N+0wzG98fc+Ou4u5b0Qs4RvRbAtgIRIexQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNx6po6n2a5OAGFGnxUXQmMK2+d6MB8GA1UdIwQY
MBaAFBVSq49nH1CBf0kcQdHx6htd5G5rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlZLcmoyY2ZVSUZfU1J4QjBmSHFHMTNrYm1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83ZDhlM2ItZWVkYS00Y2IyLWEzYmUt
YzlmOWRkYWQ2MWQ5LzEvRlZLcmoyY2ZVSUZfU1J4QjBmSHFHMTNrYm1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83ZDhlM2ItZWVkYS00Y2IyLWEzYmUtYzlmOWRkYWQ2MWQ5
LzEvRlZLcmoyY2ZVSUZfU1J4QjBmSHFHMTNrYm1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZvtII9K
BhPvXiExWeaeYDsXmocNvJMOIvpQmUqc0P/yBWLn8eHPtBVc81hd+TPs7T0p7c+x
UKK0PsR1p7MkVfoSvWiFk6mLq61BG7exJ4dwmusAU8a2/m0BdJiafRlQjsF+7pxg
zt1aWurf8cAtT57mp/wGku3cMtKXPN13ot/ltUDE4F4hlWsq/XFET9uS+Ca034KP
rLg4EWOg1IOl7XfUMwMS0+r9Kv3iomKFwNpF49T8TRiHHPQ32VvlNheTwtIeDwyw
V9/bpfzoqjIxp/xKnxj/c/3ADPb0WxYRDToi6Wtxi+3n2rPULLFDS8FWDJCdzv1b
syFDq/NwmCrLeg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:27 2025 by rpki-client