Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/F-6GQi--PqSClo1Du-gwphS8MFg.mft
File: F-6GQi--PqSClo1Du-gwphS8MFg.mft (raw, json)
Hash identifier: 4PiFZKmKhW5KewQlGHF3puyiMzCybX/kbUl0asJM8O0=
Subject key identifier: 3B:6B:51:7E:84:25:6E:7F:F1:4E:39:65:6E:04:E2:6A:EC:44:CA:7D
Authority key identifier: 17:EE:86:42:2F:BE:3E:A4:82:96:8D:43:BB:E8:30:A6:14:BC:30:58
Certificate issuer: /CN=17ee86422fbe3ea482968d43bbe830a614bc3058
Certificate serial: 0198D439A590918B020883FC3FF92BF8F2EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-6GQi--PqSClo1Du-gwphS8MFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/F-6GQi--PqSClo1Du-gwphS8MFg.mft
Manifest number: 0A
Signing time: Sat 23 Aug 2025 00:00:04 +0000
Manifest this update: Sat 23 Aug 2025 00:00:04 +0000
Manifest next update: Sun 24 Aug 2025 00:00:04 +0000
Files and hashes: 1: F-6GQi--PqSClo1Du-gwphS8MFg.crl (hash: cVgQ/zJtM/24jKR3z71iYozuhTlphr6CQPbOkn/GPlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/F-6GQi--PqSClo1Du-gwphS8MFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/F-6GQi--PqSClo1Du-gwphS8MFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F-6GQi--PqSClo1Du-gwphS8MFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:39:a5:90:91:8b:02:08:83:fc:3f:f9:2b:f8:f2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ee86422fbe3ea482968d43bbe830a614bc3058
Validity
Not Before: Aug 23 00:00:04 2025 GMT
Not After : Aug 24 00:00:04 2025 GMT
Subject: CN=3b6b517e84256e7ff14e39656e04e26aec44ca7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f9:48:92:87:ed:7b:ec:76:bc:64:23:0e:59:
e4:b7:46:bc:72:9a:db:0b:35:4b:b1:fb:58:8d:c3:
78:c7:39:b3:15:e5:b3:25:3f:5c:9e:c4:7d:d1:5a:
98:83:7e:a6:4d:ac:8b:3b:fa:e7:04:2d:97:02:7f:
d4:19:e5:f0:e8:be:cb:21:7b:04:be:33:8a:dd:4f:
6d:cb:df:cb:ba:7b:52:e0:30:b9:68:6b:13:8a:97:
20:49:e6:86:f5:1a:d2:df:ff:12:7c:f2:8d:53:1e:
3d:7c:89:2d:1c:ce:e6:9f:92:af:6c:9e:9d:0c:fb:
75:7f:9d:a4:54:c4:32:9d:e1:01:72:4e:86:2f:d5:
1c:ac:ec:a3:7e:ae:22:4d:92:f3:f8:51:fa:3f:3e:
67:64:2c:ec:a4:00:76:dd:1e:dd:80:b6:12:a9:84:
ed:e5:51:c0:9a:01:6a:49:c6:62:5b:8a:8d:da:97:
2f:bb:1c:f3:31:63:16:b1:2c:31:90:0e:35:42:a9:
62:67:4a:e7:d3:c2:f7:d7:8b:08:ff:6c:82:5e:b3:
c6:79:5a:51:d3:d4:dd:fe:35:75:52:33:92:ac:7b:
b5:4e:84:4f:97:00:68:9e:1c:4f:b8:f4:95:4d:29:
74:b0:ef:f2:b9:05:98:a5:07:4f:07:0a:1a:ee:ad:
1f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6B:51:7E:84:25:6E:7F:F1:4E:39:65:6E:04:E2:6A:EC:44:CA:7D
X509v3 Authority Key Identifier:
keyid:17:EE:86:42:2F:BE:3E:A4:82:96:8D:43:BB:E8:30:A6:14:BC:30:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-6GQi--PqSClo1Du-gwphS8MFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/F-6GQi--PqSClo1Du-gwphS8MFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/F-6GQi--PqSClo1Du-gwphS8MFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3d:27:53:06:51:44:26:a2:19:6c:39:a5:ef:43:3a:71:64:
ac:79:28:1f:39:66:d5:6f:0a:09:64:b8:4b:48:76:a0:8f:f4:
9b:4b:66:97:99:a2:59:ff:3e:50:1d:da:83:05:23:2e:65:1a:
0c:51:37:90:ba:e2:64:0e:c0:52:ab:9b:31:01:51:5d:86:0d:
ef:6d:f6:c8:e0:0d:94:5e:bf:d1:b7:62:8f:ed:1f:f5:df:04:
d2:8d:5c:0e:35:9f:07:67:1c:78:ad:f0:14:33:47:09:39:aa:
1f:a9:d8:e6:da:fe:61:fd:1a:6d:80:94:c6:24:26:b7:04:ee:
2e:9a:ad:bd:04:f1:15:6f:a5:58:a3:c5:ec:ed:c6:d8:a8:5f:
b9:a7:df:c0:16:35:49:39:ce:50:9d:19:a1:7f:39:0c:a1:d9:
ec:86:26:47:49:f5:d7:15:c6:78:7a:26:05:99:68:82:48:4b:
81:38:38:fa:00:6d:70:dc:19:c2:7d:a3:e7:75:bf:4a:7e:fb:
60:4f:67:c0:45:d8:fc:67:90:58:f6:33:6f:b3:8d:29:5f:3f:
fe:84:bc:66:c7:ae:2d:39:8a:9e:fc:da:b7:64:22:70:14:14:
6b:08:dd:e9:2c:57:3e:27:e2:01:4b:98:39:a4:a3:00:81:48:
7f:79:13:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUOaWQkYsCCIP8P/kr+PLrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZWU4NjQyMmZiZTNlYTQ4Mjk2OGQ0M2JiZTgzMGE2MTRi
YzMwNTgwHhcNMjUwODIzMDAwMDA0WhcNMjUwODI0MDAwMDA0WjAzMTEwLwYDVQQD
EygzYjZiNTE3ZTg0MjU2ZTdmZjE0ZTM5NjU2ZTA0ZTI2YWVjNDRjYTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlflIkofte+x2vGQjDlnkt0a8cprb
CzVLsftYjcN4xzmzFeWzJT9cnsR90VqYg36mTayLO/rnBC2XAn/UGeXw6L7LIXsE
vjOK3U9ty9/LuntS4DC5aGsTipcgSeaG9RrS3/8SfPKNUx49fIktHM7mn5KvbJ6d
DPt1f52kVMQyneEBck6GL9UcrOyjfq4iTZLz+FH6Pz5nZCzspAB23R7dgLYSqYTt
5VHAmgFqScZiW4qN2pcvuxzzMWMWsSwxkA41QqliZ0rn08L314sI/2yCXrPGeVpR
09Td/jV1UjOSrHu1ToRPlwBonhxPuPSVTSl0sO/yuQWYpQdPBwoa7q0f+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtrUX6EJW5/8U45ZW4E4mrsRMp9MB8GA1UdIwQY
MBaAFBfuhkIvvj6kgpaNQ7voMKYUvDBYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRi02R1FpLS1QcVNDbG8xRHUtZ3dwaFM4TUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wNDU4ZWUtZmE1NS00N2E2LTk0NjQt
MjBlMzM3NDM2YWJlLzEvRi02R1FpLS1QcVNDbG8xRHUtZ3dwaFM4TUZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wNDU4ZWUtZmE1NS00N2E2LTk0NjQtMjBlMzM3NDM2YWJl
LzEvRi02R1FpLS1QcVNDbG8xRHUtZ3dwaFM4TUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGz0nUwZR
RCaiGWw5pe9DOnFkrHkoHzlm1W8KCWS4S0h2oI/0m0tml5miWf8+UB3agwUjLmUa
DFE3kLriZA7AUqubMQFRXYYN7232yOANlF6/0bdij+0f9d8E0o1cDjWfB2cceK3w
FDNHCTmqH6nY5tr+Yf0abYCUxiQmtwTuLpqtvQTxFW+lWKPF7O3G2KhfuaffwBY1
STnOUJ0ZoX85DKHZ7IYmR0n11xXGeHomBZlogkhLgTg4+gBtcNwZwn2j53W/Sn77
YE9nwEXY/GeQWPYzb7ONKV8//oS8ZseuLTmKnvzat2QicBQUawjd6SxXPifiAUuY
OaSjAIFIf3kTzA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:42 2025 by rpki-client