Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
File: n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft (raw, json)
Hash identifier: XLvsUY/9zLz8xiUeehTPgYCht/hN5Zh8I5KRsWur1wM=
Subject key identifier: A1:4E:E3:14:AB:27:D9:3A:18:22:6F:11:35:1E:12:52:45:2A:FB:1B
Authority key identifier: 9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9
Certificate issuer: /CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
Certificate serial: 0198D8514B65E4D4DC25A1CAD3460B17C0AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
Manifest number: 05CA
Signing time: Sat 23 Aug 2025 19:04:23 +0000
Manifest this update: Sat 23 Aug 2025 19:04:23 +0000
Manifest next update: Sun 24 Aug 2025 19:04:23 +0000
Files and hashes: 1: n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl (hash: bRJz/D2o4Crce2N3KqowRFmo0WoFSWWQkzjWt2M1hXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:51:4b:65:e4:d4:dc:25:a1:ca:d3:46:0b:17:c0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
Validity
Not Before: Aug 23 19:04:23 2025 GMT
Not After : Aug 24 19:04:23 2025 GMT
Subject: CN=a14ee314ab27d93a18226f11351e1252452afb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:2b:eb:92:4a:91:c1:85:e7:18:44:79:0a:
02:64:ac:83:c3:f7:33:60:2f:ee:1c:ec:4d:7b:fe:
17:2b:31:75:37:0d:5d:5b:bd:2c:8d:ae:75:22:25:
15:d7:59:7a:31:8c:40:ed:0e:da:3b:d7:64:1f:f6:
9c:78:5d:4f:66:7f:4e:9b:1a:4d:a5:da:7b:db:d5:
a7:88:08:f3:a9:0f:9b:f9:23:44:34:82:0e:4a:ba:
40:ac:c6:ad:39:d0:91:cb:dd:a6:99:6f:ff:dc:73:
65:1b:7c:4f:6c:73:5c:19:62:30:65:91:c7:c1:bb:
bf:14:fb:34:d6:5b:7d:5f:93:d3:19:04:22:92:9b:
7d:48:1d:05:93:f0:d5:bb:a2:85:da:47:39:20:24:
d3:c5:28:18:5e:e1:59:57:7d:96:5e:7b:fc:ca:2b:
e3:1e:6e:6f:e6:a8:8c:cb:a3:5e:ab:a4:67:12:a0:
2b:ea:1a:3f:f0:82:86:96:9e:6b:47:68:d5:42:aa:
86:fc:ad:d9:e4:fb:5e:f5:42:79:18:25:e9:ee:aa:
b2:23:98:58:81:f4:ea:b4:c6:49:c8:f1:85:ba:a9:
f4:f9:05:5c:68:b5:e4:25:cd:e3:be:8e:4b:d2:d4:
66:f7:71:18:be:2f:6a:ea:d8:dd:65:b9:36:01:11:
7c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4E:E3:14:AB:27:D9:3A:18:22:6F:11:35:1E:12:52:45:2A:FB:1B
X509v3 Authority Key Identifier:
keyid:9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:4e:47:94:2d:32:02:97:46:2f:7b:ef:b5:6c:05:28:98:36:
ef:60:e4:69:91:25:a2:07:43:55:e5:a9:a9:ae:cb:17:6d:51:
e0:0e:5b:e1:82:76:db:41:e9:52:f9:e3:f0:e6:f5:ee:3c:f8:
fd:56:c5:0a:4f:e8:c3:d6:a1:73:bf:00:72:53:76:14:a1:23:
21:b3:61:67:35:6e:2e:e0:cb:cf:99:16:52:18:66:95:37:05:
4e:01:69:ee:84:30:ee:c6:0a:eb:ed:64:35:68:e7:e4:3a:ce:
f7:1f:c9:72:3c:76:30:32:70:fa:27:22:bf:fe:0e:78:f3:f7:
13:e4:26:d3:b3:65:c3:c7:61:8e:86:62:c2:d0:8a:49:e0:ff:
5f:4e:a6:ae:d8:2e:e8:b2:a1:c0:f3:01:71:12:76:91:cb:12:
b0:e1:9d:75:e9:3b:b3:b5:3d:f9:34:0e:63:b9:71:9e:bb:99:
ee:51:69:57:5c:44:1f:3b:4f:48:97:b6:43:fd:19:f0:b6:77:
45:8b:76:45:55:32:ca:8e:4c:2f:09:c8:32:d4:2f:78:f7:02:
ce:31:5b:e4:4e:dc:6f:c5:35:b5:80:3d:a0:42:f2:39:af:bc:
6e:6c:10:00:50:b2:d2:1f:e4:4a:2d:96:2d:e1:da:9c:2e:2b:
11:78:4e:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYUUtl5NTcJaHK00YLF8CsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZTE2MTAxZTQyMWQyMWNkYjVlNWIwNWEyZTI4OWRmYjc3
M2Y0YzkwHhcNMjUwODIzMTkwNDIzWhcNMjUwODI0MTkwNDIzWjAzMTEwLwYDVQQD
EyhhMTRlZTMxNGFiMjdkOTNhMTgyMjZmMTEzNTFlMTI1MjQ1MmFmYjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs10r65JKkcGF5xhEeQoCZKyDw/cz
YC/uHOxNe/4XKzF1Nw1dW70sja51IiUV11l6MYxA7Q7aO9dkH/aceF1PZn9OmxpN
pdp729WniAjzqQ+b+SNENIIOSrpArMatOdCRy92mmW//3HNlG3xPbHNcGWIwZZHH
wbu/FPs01lt9X5PTGQQikpt9SB0Fk/DVu6KF2kc5ICTTxSgYXuFZV32WXnv8yivj
Hm5v5qiMy6Neq6RnEqAr6ho/8IKGlp5rR2jVQqqG/K3Z5Pte9UJ5GCXp7qqyI5hY
gfTqtMZJyPGFuqn0+QVcaLXkJc3jvo5L0tRm93EYvi9q6tjdZbk2ARF8GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFO4xSrJ9k6GCJvETUeElJFKvsbMB8GA1UdIwQY
MBaAFJ/hYQHkIdIc215bBaLiid+3c/TJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbi1GaEFlUWgwaHpiWGxzRm91S0ozN2R6OU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xNTZlZWItODAxOS00ZDYwLThlYWQt
ZTk3MTFmNTc2YjRlLzEvbi1GaEFlUWgwaHpiWGxzRm91S0ozN2R6OU1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8xNTZlZWItODAxOS00ZDYwLThlYWQtZTk3MTFmNTc2YjRl
LzEvbi1GaEFlUWgwaHpiWGxzRm91S0ozN2R6OU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL05HlC0y
ApdGL3vvtWwFKJg272DkaZElogdDVeWpqa7LF21R4A5b4YJ220HpUvnj8Ob17jz4
/VbFCk/ow9ahc78AclN2FKEjIbNhZzVuLuDLz5kWUhhmlTcFTgFp7oQw7sYK6+1k
NWjn5DrO9x/Jcjx2MDJw+iciv/4OePP3E+Qm07Nlw8dhjoZiwtCKSeD/X06mrtgu
6LKhwPMBcRJ2kcsSsOGddek7s7U9+TQOY7lxnruZ7lFpV1xEHztPSJe2Q/0Z8LZ3
RYt2RVUyyo5MLwnIMtQvePcCzjFb5E7cb8U1tYA9oELyOa+8bmwQAFCy0h/kSi2W
LeHanC4rEXhOdA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:33:53 2025 by rpki-client