Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
File: FzUV9MhBcBT4hBX20EqfcAP8CyI.mft (raw, json)
Hash identifier: MeMqE1/LOpU6n7WpffXOg8zbcrJpTYJs8q3oKVvjTBA=
Subject key identifier: F7:17:72:D8:0D:8E:C4:8D:4A:71:F8:C4:C4:B6:17:78:62:50:6B:F9
Authority key identifier: 17:35:15:F4:C8:41:70:14:F8:84:15:F6:D0:4A:9F:70:03:FC:0B:22
Certificate issuer: /CN=173515f4c8417014f88415f6d04a9f7003fc0b22
Certificate serial: 0197B6A04CE600261035A030538093DBFA78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
Manifest number: 86
Signing time: Sat 28 Jun 2025 13:00:48 +0000
Manifest this update: Sat 28 Jun 2025 13:00:48 +0000
Manifest next update: Sun 29 Jun 2025 13:00:48 +0000
Files and hashes: 1: FzUV9MhBcBT4hBX20EqfcAP8CyI.crl (hash: zw13oIMt0M+m1R3ZGpBKPVHAK2r6kXCR+aTyyBycffc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:4c:e6:00:26:10:35:a0:30:53:80:93:db:fa:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=173515f4c8417014f88415f6d04a9f7003fc0b22
Validity
Not Before: Jun 28 13:00:48 2025 GMT
Not After : Jun 29 13:00:48 2025 GMT
Subject: CN=f71772d80d8ec48d4a71f8c4c4b6177862506bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2b:6d:eb:1a:bd:b9:bb:ba:88:38:90:24:3c:
17:af:3d:cd:36:e2:d8:fc:7c:17:e6:fc:d9:07:f7:
75:7a:37:bf:58:f7:fb:66:30:95:d0:13:15:d2:30:
03:a7:7a:ca:ce:23:b6:78:69:7a:a5:20:24:a1:c2:
14:c5:d7:31:cc:d5:b7:14:4b:a7:8e:7d:a4:fc:64:
de:85:a8:8e:77:a3:9a:fc:0d:82:5d:01:57:3a:45:
c4:88:5a:13:ad:8d:82:b8:7b:dd:5b:8d:b4:83:26:
1e:f7:89:cf:0a:90:a2:1b:e7:17:18:bc:64:c5:7c:
bf:c6:ee:a4:0c:56:1b:53:26:91:19:0c:d4:f0:b3:
58:23:8b:85:66:7b:b6:98:50:7c:c8:65:65:9f:c6:
fd:96:33:58:7f:69:4c:7a:1e:6a:84:dd:b2:de:b6:
58:65:10:16:f9:08:06:89:90:06:7d:1e:e7:25:29:
49:2f:3a:47:86:bc:65:29:60:89:28:8e:07:af:69:
03:c9:a9:38:ba:45:4f:cd:a2:09:8d:e6:f1:53:10:
9d:9b:43:dc:7c:06:42:ce:93:a6:75:4f:07:fb:15:
ae:91:f7:2a:18:4a:6c:e8:60:93:d6:bc:9e:09:ab:
31:82:4c:cd:2f:c3:c3:f4:46:ff:c9:8c:6a:e1:21:
14:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:17:72:D8:0D:8E:C4:8D:4A:71:F8:C4:C4:B6:17:78:62:50:6B:F9
X509v3 Authority Key Identifier:
keyid:17:35:15:F4:C8:41:70:14:F8:84:15:F6:D0:4A:9F:70:03:FC:0B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a0:05:f4:1b:31:fa:8d:9d:8e:e2:81:0a:49:29:74:bb:1d:
19:b8:86:fa:85:77:a0:63:84:97:81:ae:02:89:6d:dd:a3:f9:
17:83:c4:c5:37:43:04:ae:3a:ca:bf:58:7f:08:6d:e0:a6:ef:
60:c7:e8:18:35:2f:43:a6:48:14:05:db:34:86:6d:86:4b:47:
1d:3f:17:df:5d:86:9f:35:5b:0b:dd:4a:48:4b:cd:e6:31:46:
dc:a1:03:d2:c3:3e:ba:66:70:e8:62:1c:82:53:21:61:eb:64:
6f:90:07:d2:1f:73:ba:8a:9a:17:50:53:8f:56:f9:fa:fe:5a:
3b:a9:8f:5b:2a:6e:de:57:a7:88:a7:7d:e7:78:08:78:f1:35:
95:af:c4:0a:dd:f4:32:1a:14:d8:04:73:e5:d1:4a:ee:b8:34:
be:94:dc:90:04:2e:6b:d2:c0:c8:dd:d2:d1:d8:4e:3b:59:18:
de:2f:c2:d5:be:5c:15:e7:f4:00:96:15:c2:53:71:ef:de:3a:
a9:19:77:27:fe:cc:71:a9:97:14:ea:73:cf:b5:14:71:f2:b7:
80:b5:06:a0:10:12:88:9b:f3:03:ca:69:e2:83:1a:40:e6:77:
f2:20:c4:73:97:30:4e:53:af:52:cd:55:32:a6:fa:90:d7:19:
8e:34:74:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oEzmACYQNaAwU4CT2/p4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MzUxNWY0Yzg0MTcwMTRmODg0MTVmNmQwNGE5ZjcwMDNm
YzBiMjIwHhcNMjUwNjI4MTMwMDQ4WhcNMjUwNjI5MTMwMDQ4WjAzMTEwLwYDVQQD
EyhmNzE3NzJkODBkOGVjNDhkNGE3MWY4YzRjNGI2MTc3ODYyNTA2YmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmitt6xq9ubu6iDiQJDwXrz3NNuLY
/HwX5vzZB/d1eje/WPf7ZjCV0BMV0jADp3rKziO2eGl6pSAkocIUxdcxzNW3FEun
jn2k/GTehaiOd6Oa/A2CXQFXOkXEiFoTrY2CuHvdW420gyYe94nPCpCiG+cXGLxk
xXy/xu6kDFYbUyaRGQzU8LNYI4uFZnu2mFB8yGVln8b9ljNYf2lMeh5qhN2y3rZY
ZRAW+QgGiZAGfR7nJSlJLzpHhrxlKWCJKI4Hr2kDyak4ukVPzaIJjebxUxCdm0Pc
fAZCzpOmdU8H+xWukfcqGEps6GCT1ryeCasxgkzNL8PD9Eb/yYxq4SEU3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcXctgNjsSNSnH4xMS2F3hiUGv5MB8GA1UdIwQY
MBaAFBc1FfTIQXAU+IQV9tBKn3AD/AsiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnpVVjlNaEJjQlQ0aEJYMjBFcWZjQVA4Q3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kNGQ0MzktYjY1OS00ZDdlLWI5Zjct
MTgyNjRjYjc4YjRjLzEvRnpVVjlNaEJjQlQ0aEJYMjBFcWZjQVA4Q3lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9kNGQ0MzktYjY1OS00ZDdlLWI5ZjctMTgyNjRjYjc4YjRj
LzEvRnpVVjlNaEJjQlQ0aEJYMjBFcWZjQVA4Q3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWaAF9Bsx
+o2djuKBCkkpdLsdGbiG+oV3oGOEl4GuAolt3aP5F4PExTdDBK46yr9Yfwht4Kbv
YMfoGDUvQ6ZIFAXbNIZthktHHT8X312GnzVbC91KSEvN5jFG3KED0sM+umZw6GIc
glMhYetkb5AH0h9zuoqaF1BTj1b5+v5aO6mPWypu3leniKd953gIePE1la/ECt30
MhoU2ARz5dFK7rg0vpTckAQua9LAyN3S0dhOO1kY3i/C1b5cFef0AJYVwlNx7946
qRl3J/7McamXFOpzz7UUcfK3gLUGoBASiJvzA8pp4oMaQOZ38iDEc5cwTlOvUs1V
Mqb6kNcZjjR0Vg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:24 2025 by rpki-client