Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft
File: _lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft (raw, json)
Hash identifier: 7+gMHquakFhWv+8h881NzS7Uj3cYLaKKvRGxiNZVxmA=
Subject key identifier: F3:34:0E:CD:2D:A9:FB:B6:F7:78:BD:98:7C:06:E0:F6:FB:EF:4F:0F
Authority key identifier: FE:51:BD:A6:CD:C8:98:F6:74:44:1F:CE:5C:74:21:B4:6F:61:1D:59
Certificate issuer: /CN=fe51bda6cdc898f674441fce5c7421b46f611d59
Certificate serial: 0197B6A04DC4499DAE79F56AA8EC092E014D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft
Manifest number: 69
Signing time: Sat 28 Jun 2025 13:00:48 +0000
Manifest this update: Sat 28 Jun 2025 13:00:48 +0000
Manifest next update: Sun 29 Jun 2025 13:00:48 +0000
Files and hashes: 1: _lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl (hash: wLFEtq5WQynpDurnI7c2A1R1u80IdRfPMupNS/CtlWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:4d:c4:49:9d:ae:79:f5:6a:a8:ec:09:2e:01:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe51bda6cdc898f674441fce5c7421b46f611d59
Validity
Not Before: Jun 28 13:00:48 2025 GMT
Not After : Jun 29 13:00:48 2025 GMT
Subject: CN=f3340ecd2da9fbb6f778bd987c06e0f6fbef4f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:59:09:5b:cf:4c:64:e0:00:e8:e0:43:c2:5f:
d3:5d:85:ea:4c:59:96:1e:32:5b:1f:34:0b:55:bc:
1e:1a:1d:b4:c2:47:21:5e:43:3c:72:c0:13:13:ba:
aa:f2:25:2a:c1:2e:0f:d9:2e:b8:49:7d:fb:6c:34:
4f:ad:32:e3:8d:40:f5:93:a3:a4:21:9b:6a:b8:ec:
4f:b8:37:72:fa:94:f0:f6:02:83:e1:ea:48:0a:f4:
05:20:c1:9b:d1:09:60:9f:98:d8:2a:d1:0f:a8:99:
2f:a2:42:3f:0b:e1:c9:b3:48:b2:32:7d:cf:bc:bd:
bb:48:9e:b7:30:40:58:98:18:bc:a0:24:cd:8f:a0:
d2:10:37:13:9b:35:f5:97:a1:c7:a6:e2:b9:96:4d:
92:06:c0:83:e9:ca:e1:03:18:97:85:7d:a0:ea:18:
c8:96:6b:43:fb:81:d3:53:e3:c3:41:48:6b:1d:25:
9a:79:d0:6a:c8:c1:19:56:c1:e0:56:09:f0:36:f0:
87:99:9a:76:9b:3e:46:f3:d5:5a:a1:94:ad:7c:66:
a9:6d:a3:73:f3:e4:5d:32:40:8d:a4:9f:11:92:dc:
83:cb:9d:9f:18:14:5d:87:84:15:30:5e:16:bc:8c:
e2:d6:3d:1b:d5:04:8b:d3:c6:5f:2f:65:dc:00:f8:
c3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:34:0E:CD:2D:A9:FB:B6:F7:78:BD:98:7C:06:E0:F6:FB:EF:4F:0F
X509v3 Authority Key Identifier:
keyid:FE:51:BD:A6:CD:C8:98:F6:74:44:1F:CE:5C:74:21:B4:6F:61:1D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:92:11:70:0e:3a:5b:74:74:a3:a1:b6:38:5e:3a:4a:49:e6:
c8:a6:fd:68:84:d9:6a:39:65:d6:f4:f8:47:22:c0:94:5f:0c:
32:38:27:c3:32:21:22:45:75:23:54:86:f2:8a:ba:15:94:06:
2e:27:08:d8:d9:6a:0b:89:04:fb:a7:50:d8:44:fc:33:34:30:
f7:32:6b:a4:1f:f2:ea:b6:22:33:d6:e3:4f:51:61:d0:b4:a8:
2f:00:3d:af:1e:e2:79:31:78:47:8d:2c:39:29:8f:7b:b2:58:
62:4a:00:4a:94:4a:24:2a:13:f7:75:4f:ed:51:b3:c9:c0:fc:
c0:97:20:a5:c1:ef:7e:ec:2e:bd:d3:3d:64:90:97:92:e7:1e:
33:7a:b7:ff:00:a1:c8:17:0a:4c:fd:3c:b1:8f:99:24:c3:d8:
37:8b:5b:0d:30:4a:c7:a3:24:ec:14:83:32:9b:0a:16:5d:9a:
a9:1c:06:18:8f:d7:c1:aa:e6:c7:ec:97:27:f0:2b:8c:7b:f8:
5e:5e:89:fd:d0:7d:d7:82:f1:ad:a3:5b:f0:d7:a3:45:e4:72:
aa:16:fd:2d:cb:6c:83:55:e4:7c:59:c5:79:b2:2a:3a:3e:85:
51:57:35:54:39:15:18:81:38:66:45:57:af:55:e5:25:ea:6f:
eb:0b:c7:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oE3ESZ2uefVqqOwJLgFNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTFiZGE2Y2RjODk4ZjY3NDQ0MWZjZTVjNzQyMWI0NmY2
MTFkNTkwHhcNMjUwNjI4MTMwMDQ4WhcNMjUwNjI5MTMwMDQ4WjAzMTEwLwYDVQQD
EyhmMzM0MGVjZDJkYTlmYmI2Zjc3OGJkOTg3YzA2ZTBmNmZiZWY0ZjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilkJW89MZOAA6OBDwl/TXYXqTFmW
HjJbHzQLVbweGh20wkchXkM8csATE7qq8iUqwS4P2S64SX37bDRPrTLjjUD1k6Ok
IZtquOxPuDdy+pTw9gKD4epICvQFIMGb0Qlgn5jYKtEPqJkvokI/C+HJs0iyMn3P
vL27SJ63MEBYmBi8oCTNj6DSEDcTmzX1l6HHpuK5lk2SBsCD6crhAxiXhX2g6hjI
lmtD+4HTU+PDQUhrHSWaedBqyMEZVsHgVgnwNvCHmZp2mz5G89VaoZStfGapbaNz
8+RdMkCNpJ8RktyDy52fGBRdh4QVMF4WvIzi1j0b1QSL08ZfL2XcAPjDuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPM0Ds0tqfu293i9mHwG4Pb7708PMB8GA1UdIwQY
MBaAFP5RvabNyJj2dEQfzlx0IbRvYR1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xHOXBzM0ltUFowUkJfT1hIUWh0RzloSFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wNDA5YWQtZjU2OC00OTE5LWFkYTct
ZDRjMGM4OGMwNWRmLzEvX2xHOXBzM0ltUFowUkJfT1hIUWh0RzloSFZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8wNDA5YWQtZjU2OC00OTE5LWFkYTctZDRjMGM4OGMwNWRm
LzEvX2xHOXBzM0ltUFowUkJfT1hIUWh0RzloSFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZIRcA46
W3R0o6G2OF46SknmyKb9aITZajll1vT4RyLAlF8MMjgnwzIhIkV1I1SG8oq6FZQG
LicI2NlqC4kE+6dQ2ET8MzQw9zJrpB/y6rYiM9bjT1Fh0LSoLwA9rx7ieTF4R40s
OSmPe7JYYkoASpRKJCoT93VP7VGzycD8wJcgpcHvfuwuvdM9ZJCXkuceM3q3/wCh
yBcKTP08sY+ZJMPYN4tbDTBKx6Mk7BSDMpsKFl2aqRwGGI/Xwarmx+yXJ/ArjHv4
Xl6J/dB914LxraNb8NejReRyqhb9Lctsg1XkfFnFebIqOj6FUVc1VDkVGIE4ZkVX
r1XlJepv6wvHRA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:29 2025 by rpki-client