Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
File: fQ9TBOHZKWjpheNo6E833TZw71w.mft (raw, json)
Hash identifier: qGJrxFNzBAtalrsJmArF7lM0u1LrX2fh4aXxbbA0Ey4=
Subject key identifier: CD:DF:7B:3A:17:3A:43:53:7E:6A:20:73:39:CC:6B:06:4A:4E:6D:C1
Authority key identifier: 7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C
Certificate issuer: /CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c
Certificate serial: 0198D660EBEDE38E42FC111D11B45C8254C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
Manifest number: 0D8E
Signing time: Sat 23 Aug 2025 10:02:12 +0000
Manifest this update: Sat 23 Aug 2025 10:02:12 +0000
Manifest next update: Sun 24 Aug 2025 10:02:12 +0000
Files and hashes: 1: fQ9TBOHZKWjpheNo6E833TZw71w.crl (hash: g+K6ouR/HlQUuLP9ldY1ydudpvi9l03Fjfh6iAYzOzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:eb:ed:e3:8e:42:fc:11:1d:11:b4:5c:82:54:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c
Validity
Not Before: Aug 23 10:02:12 2025 GMT
Not After : Aug 24 10:02:12 2025 GMT
Subject: CN=cddf7b3a173a43537e6a207339cc6b064a4e6dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ba:5a:ca:63:d9:c4:28:64:b2:4f:35:72:6d:
a7:4d:d9:19:fe:45:a5:e7:03:64:18:9e:f4:bc:71:
4c:72:9f:b5:94:f2:76:8f:13:8e:1f:9d:e4:44:47:
a1:62:c7:be:85:5c:e0:e8:f7:a9:6e:ca:f7:0f:38:
a9:e0:3c:bb:f4:bf:32:ca:4f:79:07:c3:96:aa:d1:
8d:95:5e:2a:8f:49:ba:00:e3:7e:23:af:47:9d:b5:
7f:a9:bf:27:4a:b3:16:ad:99:66:c3:4e:fd:73:8b:
da:68:05:0c:5a:f0:bc:59:82:da:4c:fa:83:38:43:
52:b0:83:6c:69:76:e2:a7:7c:b4:ea:cb:31:82:f2:
d9:75:31:89:1b:6c:5d:b6:d4:0c:fc:ba:ae:8c:13:
5b:f6:c2:71:12:67:3b:23:a9:05:ad:6c:03:5c:cd:
10:6c:04:52:5a:bc:ac:cf:e6:7b:f3:d0:b1:07:f5:
87:5e:7a:d9:0b:c6:7e:2d:30:78:49:51:db:f3:61:
d3:83:0b:35:e9:2f:a8:58:60:ff:b5:37:0d:c6:48:
c7:90:00:03:20:48:b8:03:ce:e1:7f:39:3e:14:ba:
a0:a2:c6:83:04:71:88:30:de:70:68:20:f0:36:5a:
67:51:10:da:d7:1e:1f:c0:da:aa:d2:da:69:c9:15:
0b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DF:7B:3A:17:3A:43:53:7E:6A:20:73:39:CC:6B:06:4A:4E:6D:C1
X509v3 Authority Key Identifier:
keyid:7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:76:e7:2b:dc:1f:e4:2b:d8:5f:17:fb:9c:da:29:7e:8d:1d:
7f:ae:0f:d7:ce:40:c7:8e:0d:5f:ab:0f:24:71:6e:19:ce:48:
24:91:aa:00:81:3b:00:22:66:0a:fc:56:78:7b:b7:fd:11:a6:
60:4e:f2:cf:ef:31:b5:45:9c:d5:e7:bf:77:bd:8c:16:6f:6c:
3c:f2:2a:c0:18:2d:d6:a9:a8:4c:10:44:a8:76:c1:db:65:4d:
83:00:68:74:47:41:2f:af:4d:bf:1e:a8:96:c7:5b:ae:31:0e:
62:a4:21:cf:88:f7:fa:2e:fa:5e:ac:4d:b2:a3:e6:ea:8d:cf:
2d:17:e4:3e:6b:dd:28:d4:16:17:be:0e:6e:ec:d7:10:ba:3d:
1a:39:97:06:b5:ad:60:b9:7a:6d:72:e5:a6:98:ed:aa:e8:14:
12:d1:cf:69:52:83:65:fb:81:cc:bc:fe:36:9d:4f:93:ea:6a:
24:9e:2a:77:98:c9:4a:eb:c4:4a:b7:c1:ca:76:c7:60:cc:fb:
f9:f4:47:41:2b:4d:48:51:4b:c0:c1:ba:5b:da:b0:7f:5d:86:
c5:47:b1:cb:f9:d4:c6:52:6f:c4:7b:70:89:b5:63:32:b8:bb:
1f:21:4e:e2:aa:cd:f1:9a:95:04:bb:3f:e2:9a:25:ba:7b:40:
1b:1e:a3:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYOvt445C/BEdEbRcglTIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMGY1MzA0ZTFkOTI5NjhlOTg1ZTM2OGU4NGYzN2RkMzY3
MGVmNWMwHhcNMjUwODIzMTAwMjEyWhcNMjUwODI0MTAwMjEyWjAzMTEwLwYDVQQD
EyhjZGRmN2IzYTE3M2E0MzUzN2U2YTIwNzMzOWNjNmIwNjRhNGU2ZGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rpaymPZxChksk81cm2nTdkZ/kWl
5wNkGJ70vHFMcp+1lPJ2jxOOH53kREehYse+hVzg6Pepbsr3Dzip4Dy79L8yyk95
B8OWqtGNlV4qj0m6AON+I69HnbV/qb8nSrMWrZlmw079c4vaaAUMWvC8WYLaTPqD
OENSsINsaXbip3y06ssxgvLZdTGJG2xdttQM/LqujBNb9sJxEmc7I6kFrWwDXM0Q
bARSWrysz+Z789CxB/WHXnrZC8Z+LTB4SVHb82HTgws16S+oWGD/tTcNxkjHkAAD
IEi4A87hfzk+FLqgosaDBHGIMN5waCDwNlpnURDa1x4fwNqq0tppyRULAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3fezoXOkNTfmogcznMawZKTm3BMB8GA1UdIwQY
MBaAFH0PUwTh2Slo6YXjaOhPN902cO9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlE5VEJPSFpLV2pwaGVObzZFODMzVFp3NzF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNDYyZTctMjAwNC00NDI4LWJiMzUt
MGU4MTBiN2RkZWJjLzEvZlE5VEJPSFpLV2pwaGVObzZFODMzVFp3NzF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lNDYyZTctMjAwNC00NDI4LWJiMzUtMGU4MTBiN2RkZWJj
LzEvZlE5VEJPSFpLV2pwaGVObzZFODMzVFp3NzF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXbnK9wf
5CvYXxf7nNopfo0df64P185Ax44NX6sPJHFuGc5IJJGqAIE7ACJmCvxWeHu3/RGm
YE7yz+8xtUWc1ee/d72MFm9sPPIqwBgt1qmoTBBEqHbB22VNgwBodEdBL69Nvx6o
lsdbrjEOYqQhz4j3+i76XqxNsqPm6o3PLRfkPmvdKNQWF74ObuzXELo9GjmXBrWt
YLl6bXLlppjtqugUEtHPaVKDZfuBzLz+Np1Pk+pqJJ4qd5jJSuvESrfBynbHYMz7
+fRHQStNSFFLwMG6W9qwf12GxUexy/nUxlJvxHtwibVjMri7HyFO4qrN8ZqVBLs/
4poluntAGx6jGA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:42:42 2025 by rpki-client