Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
File: CRRy5SBHtfd1PvFSbdo47UKL_kc.mft (raw, json)
Hash identifier: hZPES5QhYw9E/FCdqQQhY7SiaN3TgCEHzTWDOw7ux0k=
Subject key identifier: 49:82:4D:4C:49:E8:71:8A:0A:62:13:B4:97:D1:78:EF:42:3E:34:6F
Authority key identifier: 09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
Certificate issuer: /CN=091472e52047b5f7753ef1526dda38ed428bfe47
Certificate serial: 0198D698679FF6B4334FC9404FEE8BCED91E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
Manifest number: 0D1C
Signing time: Sat 23 Aug 2025 11:02:48 +0000
Manifest this update: Sat 23 Aug 2025 11:02:48 +0000
Manifest next update: Sun 24 Aug 2025 11:02:48 +0000
Files and hashes: 1: CRRy5SBHtfd1PvFSbdo47UKL_kc.crl (hash: an+WeURnVy4hiR1PHgubkkCjJm5YsumGhZfIn6GcBhs=)
2: YFKVeEBJZW1VH1lMf1z8k2XR2dw.roa (hash: ktDo2PZ71KEenNsxjiVRbbwqRhzDhrH0f5p3Dle1h/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:67:9f:f6:b4:33:4f:c9:40:4f:ee:8b:ce:d9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091472e52047b5f7753ef1526dda38ed428bfe47
Validity
Not Before: Aug 23 11:02:48 2025 GMT
Not After : Aug 24 11:02:48 2025 GMT
Subject: CN=49824d4c49e8718a0a6213b497d178ef423e346f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:58:c3:3e:75:74:5d:cb:73:63:a1:40:ef:c7:
07:64:75:fb:b8:8b:14:ca:30:7f:6c:ff:f9:2b:00:
5f:37:65:e7:79:26:73:11:28:6e:6c:f8:16:0f:8e:
4a:e9:2c:8c:62:da:f2:41:16:aa:ed:1e:53:d4:e1:
e7:01:cb:5d:bd:87:11:c5:52:68:91:dd:5a:70:6f:
b3:8b:09:7c:c2:b7:fb:be:ad:55:9f:21:d1:a7:e9:
8a:73:5e:54:25:88:48:87:af:8e:1e:f1:4a:62:57:
11:0d:63:21:83:10:69:1e:06:00:22:88:7b:19:70:
bc:8d:db:a9:f9:0c:3c:6d:80:e9:99:d8:16:25:76:
84:e0:b7:fd:1b:9e:a8:88:dd:49:9a:a9:d4:4f:c1:
42:52:b3:6b:63:3a:60:f8:75:8a:94:8f:29:8e:52:
e5:56:8a:02:21:41:73:ae:07:ed:d7:5e:fe:d9:40:
f6:d1:a0:36:31:69:b0:ae:40:39:66:48:fb:ba:fa:
7a:83:18:f3:19:9b:79:28:c8:8b:31:4a:60:aa:c6:
d1:32:4f:31:22:22:5c:3b:c0:8e:42:cd:07:83:58:
c2:e0:c4:72:c6:c8:62:cb:73:82:a8:dd:db:b5:2d:
8c:ca:6a:c2:d0:e9:ec:60:37:30:2c:0c:dd:f3:c8:
fb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:82:4D:4C:49:E8:71:8A:0A:62:13:B4:97:D1:78:EF:42:3E:34:6F
X509v3 Authority Key Identifier:
keyid:09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:fc:38:cc:f1:b8:49:e6:f7:1c:2e:ec:d6:5b:eb:1a:b3:97:
bd:7b:74:83:24:07:2b:2f:35:03:46:f4:20:51:0e:f9:e6:b6:
f0:5d:e3:ec:ba:19:c6:56:50:19:a6:64:f8:52:90:f9:8b:c5:
e8:fe:7a:e0:d8:b9:24:86:28:f4:be:7b:66:46:61:56:2e:ad:
0b:5d:7e:c6:a8:c2:49:4c:11:5a:6c:c3:2b:b4:6b:9e:13:53:
54:bf:25:96:49:2e:70:a1:e0:ff:d9:a2:5a:78:e7:89:80:64:
70:b9:15:82:bb:ee:91:08:40:70:03:35:1f:4f:6c:96:d6:27:
30:58:3c:4c:fd:81:13:d4:bf:d9:12:15:18:18:2b:b4:9f:74:
c5:a8:d0:2e:2e:f9:00:39:72:1f:fd:60:c4:e0:90:81:49:56:
28:e5:df:d9:ac:11:db:ec:92:d4:ba:73:33:ed:92:54:3c:f0:
7c:c8:3c:4f:8e:c9:96:1f:76:70:73:94:72:31:3e:b9:2a:31:
58:ee:3b:e6:f2:e1:2d:6f:ab:59:a8:65:96:c5:86:18:7f:ea:
e5:28:f0:17:78:29:9c:77:9f:54:3c:4e:3b:b6:0f:77:f0:35:
28:14:9d:28:6b:36:29:f4:84:1f:a2:86:7c:15:48:03:6b:74:
33:30:79:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmGef9rQzT8lAT+6LztkeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MTQ3MmU1MjA0N2I1Zjc3NTNlZjE1MjZkZGEzOGVkNDI4
YmZlNDcwHhcNMjUwODIzMTEwMjQ4WhcNMjUwODI0MTEwMjQ4WjAzMTEwLwYDVQQD
Eyg0OTgyNGQ0YzQ5ZTg3MThhMGE2MjEzYjQ5N2QxNzhlZjQyM2UzNDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjljDPnV0XctzY6FA78cHZHX7uIsU
yjB/bP/5KwBfN2XneSZzEShubPgWD45K6SyMYtryQRaq7R5T1OHnActdvYcRxVJo
kd1acG+ziwl8wrf7vq1VnyHRp+mKc15UJYhIh6+OHvFKYlcRDWMhgxBpHgYAIoh7
GXC8jdup+Qw8bYDpmdgWJXaE4Lf9G56oiN1JmqnUT8FCUrNrYzpg+HWKlI8pjlLl
VooCIUFzrgft117+2UD20aA2MWmwrkA5Zkj7uvp6gxjzGZt5KMiLMUpgqsbRMk8x
IiJcO8COQs0Hg1jC4MRyxshiy3OCqN3btS2MymrC0OnsYDcwLAzd88j7VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmCTUxJ6HGKCmITtJfReO9CPjRvMB8GA1UdIwQY
MBaAFAkUcuUgR7X3dT7xUm3aOO1Ci/5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1JSeTVTQkh0ZmQxUHZGU2JkbzQ3VUtMX2tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mYzM1OTEtM2Q3OC00ZDliLTk0ZWEt
YTY1YjlmNjA3ZTNlLzEvQ1JSeTVTQkh0ZmQxUHZGU2JkbzQ3VUtMX2tjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mYzM1OTEtM2Q3OC00ZDliLTk0ZWEtYTY1YjlmNjA3ZTNl
LzEvQ1JSeTVTQkh0ZmQxUHZGU2JkbzQ3VUtMX2tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfw4zPG4
Seb3HC7s1lvrGrOXvXt0gyQHKy81A0b0IFEO+ea28F3j7LoZxlZQGaZk+FKQ+YvF
6P564Ni5JIYo9L57ZkZhVi6tC11+xqjCSUwRWmzDK7RrnhNTVL8llkkucKHg/9mi
WnjniYBkcLkVgrvukQhAcAM1H09sltYnMFg8TP2BE9S/2RIVGBgrtJ90xajQLi75
ADlyH/1gxOCQgUlWKOXf2awR2+yS1LpzM+2SVDzwfMg8T47Jlh92cHOUcjE+uSox
WO475vLhLW+rWahllsWGGH/q5SjwF3gpnHefVDxOO7YPd/A1KBSdKGs2KfSEH6KG
fBVIA2t0MzB5Dw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:04 2025 by rpki-client