Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
File: fsS92Wu94fVcNATX7Ga-BH6xfZw.mft (raw, json)
Hash identifier: 61ovtHdjb93p1MZ9Rzzr3c1zuwgutX5cRoRFyVGFG3M=
Subject key identifier: 20:5A:D0:28:CB:B4:C1:32:52:76:00:68:FC:1E:6F:51:35:45:C9:41
Authority key identifier: 7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
Certificate issuer: /CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c
Certificate serial: 0198D54EA116988FA2A2F5B3FAE4F2AA0EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
Manifest number: 0ABF
Signing time: Sat 23 Aug 2025 05:02:36 +0000
Manifest this update: Sat 23 Aug 2025 05:02:36 +0000
Manifest next update: Sun 24 Aug 2025 05:02:36 +0000
Files and hashes: 1: fsS92Wu94fVcNATX7Ga-BH6xfZw.crl (hash: FexAMBVORoZIpeyImAAatdzuDezk31pTU7CqT1vd5vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a1:16:98:8f:a2:a2:f5:b3:fa:e4:f2:aa:0e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c
Validity
Not Before: Aug 23 05:02:36 2025 GMT
Not After : Aug 24 05:02:36 2025 GMT
Subject: CN=205ad028cbb4c13252760068fc1e6f513545c941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:36:43:44:a8:b0:b1:07:cd:91:fa:e0:9f:2a:
9b:78:e7:e5:97:b7:53:81:2c:fd:ef:e2:0d:e0:54:
e8:8c:e6:f1:f4:37:79:e1:3b:9f:4e:a3:a3:b6:ca:
4e:fd:e8:cd:51:67:5c:ba:6c:f1:4f:0f:59:9f:8c:
df:e0:69:f4:b5:c4:29:c2:51:2b:51:f6:df:b8:36:
3a:13:71:f9:d5:4a:5e:4e:5f:99:fa:0a:9a:d4:ea:
8c:0d:ed:ca:1d:53:e2:5b:f3:c5:20:21:32:ef:9d:
1d:7b:c6:ff:7e:ff:31:0e:92:9e:69:36:ef:f8:19:
33:95:9a:d4:49:79:c5:d5:f1:bb:ed:d6:5b:b0:39:
94:f4:15:32:01:72:5f:d0:22:5d:9e:b0:8b:d4:ba:
c6:7f:cf:57:3f:54:a9:f5:6d:a5:71:41:24:60:86:
08:13:78:41:7e:93:b4:8c:3b:f8:0c:b1:8d:96:76:
a9:79:3c:d7:61:fc:35:15:e5:8e:b6:ce:c7:98:92:
e4:e6:e4:e5:76:37:42:44:9f:f1:29:37:cc:d8:9a:
7e:3e:ee:40:f2:12:d3:7f:8e:3d:42:1c:7d:1c:7c:
c0:9a:48:7b:66:eb:09:3d:14:b8:80:9e:a8:62:c3:
83:8a:6f:a1:73:a6:b2:2f:14:9f:a5:b5:dd:4d:19:
74:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5A:D0:28:CB:B4:C1:32:52:76:00:68:FC:1E:6F:51:35:45:C9:41
X509v3 Authority Key Identifier:
keyid:7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ca:c3:07:59:e4:3f:93:20:2e:b6:6a:ef:da:53:cc:5e:f6:
20:ac:01:46:86:83:4f:59:f2:54:3f:d2:3f:af:c8:b5:3d:50:
b9:52:96:13:75:3f:68:87:d5:cc:ac:c8:78:d4:52:21:db:e7:
9a:7f:9b:03:ef:a2:9a:7f:6b:78:f4:b2:fd:80:96:9c:2b:3f:
e2:d9:ee:60:18:71:3a:de:ed:17:fb:70:73:eb:a1:a0:8a:c0:
ff:17:2c:07:d7:a2:16:cf:cc:30:16:db:94:70:25:db:e0:67:
56:84:37:df:df:aa:17:0e:7c:45:62:82:84:dc:e7:83:f2:c4:
30:43:62:5c:89:17:e7:ad:e3:e0:79:4c:4a:40:7a:d9:04:60:
51:1b:80:6a:4a:c4:9d:9a:03:95:67:97:dd:ae:33:ac:1b:52:
0e:4e:5a:b7:72:a5:3f:0f:a1:77:62:47:bd:ea:b6:eb:6d:dc:
d2:da:9a:30:36:e1:20:00:56:bd:a3:33:06:01:23:97:d7:f4:
f4:b9:f8:57:e3:e7:85:c6:04:97:02:cd:b2:55:53:ec:83:61:
ce:98:5f:d2:84:2f:33:71:d1:6e:f6:16:ce:87:de:07:31:a5:
50:8d:57:cc:95:b0:9f:87:4c:29:42:1a:7f:32:4c:71:d5:50:
97:f0:44:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTqEWmI+iovWz+uTyqg7kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzRiZGQ5NmJiZGUxZjU1YzM0MDRkN2VjNjZiZTA0N2Vi
MTdkOWMwHhcNMjUwODIzMDUwMjM2WhcNMjUwODI0MDUwMjM2WjAzMTEwLwYDVQQD
EygyMDVhZDAyOGNiYjRjMTMyNTI3NjAwNjhmYzFlNmY1MTM1NDVjOTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjZDRKiwsQfNkfrgnyqbeOfll7dT
gSz97+IN4FTojObx9Dd54TufTqOjtspO/ejNUWdcumzxTw9Zn4zf4Gn0tcQpwlEr
UfbfuDY6E3H51UpeTl+Z+gqa1OqMDe3KHVPiW/PFICEy750de8b/fv8xDpKeaTbv
+BkzlZrUSXnF1fG77dZbsDmU9BUyAXJf0CJdnrCL1LrGf89XP1Sp9W2lcUEkYIYI
E3hBfpO0jDv4DLGNlnapeTzXYfw1FeWOts7HmJLk5uTldjdCRJ/xKTfM2Jp+Pu5A
8hLTf449Qhx9HHzAmkh7ZusJPRS4gJ6oYsODim+hc6ayLxSfpbXdTRl0vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBa0CjLtMEyUnYAaPweb1E1RclBMB8GA1UdIwQY
MBaAFH7EvdlrveH1XDQE1+xmvgR+sX2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNTOTJXdTk0ZlZjTkFUWDdHYS1CSDZ4Zlp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iOTY3YTItY2UyNi00Nzg3LTgwMTUt
YTMzMTkxZDhhMmUxLzEvZnNTOTJXdTk0ZlZjTkFUWDdHYS1CSDZ4Zlp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iOTY3YTItY2UyNi00Nzg3LTgwMTUtYTMzMTkxZDhhMmUx
LzEvZnNTOTJXdTk0ZlZjTkFUWDdHYS1CSDZ4Zlp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMrDB1nk
P5MgLrZq79pTzF72IKwBRoaDT1nyVD/SP6/ItT1QuVKWE3U/aIfVzKzIeNRSIdvn
mn+bA++imn9rePSy/YCWnCs/4tnuYBhxOt7tF/twc+uhoIrA/xcsB9eiFs/MMBbb
lHAl2+BnVoQ339+qFw58RWKChNzng/LEMENiXIkX563j4HlMSkB62QRgURuAakrE
nZoDlWeX3a4zrBtSDk5at3KlPw+hd2JHveq2623c0tqaMDbhIABWvaMzBgEjl9f0
9Ln4V+PnhcYElwLNslVT7INhzphf0oQvM3HRbvYWzofeBzGlUI1XzJWwn4dMKUIa
fzJMcdVQl/BEAQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:27 2025 by rpki-client