Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
File: _Nq63VYraOxeFY4easdvfalucyM.mft (raw, json)
Hash identifier: 6kEuShV4t7ohp+ePyYsYZvFe7HXXDI6tsUMLyMemsUU=
Subject key identifier: A7:CB:BC:40:78:FE:A6:7B:05:58:93:69:AC:F2:02:ED:57:94:CA:5C
Authority key identifier: FC:DA:BA:DD:56:2B:68:EC:5E:15:8E:1E:6A:C7:6F:7D:A9:6E:73:23
Certificate issuer: /CN=fcdabadd562b68ec5e158e1e6ac76f7da96e7323
Certificate serial: 019849D384F3EFE110C09E6E6C423B5B412B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 03:00:55 +0000
Manifest this update: Sun 27 Jul 2025 03:00:55 +0000
Manifest next update: Mon 28 Jul 2025 03:00:55 +0000
Files and hashes: 1: _Nq63VYraOxeFY4easdvfalucyM.crl (hash: +1R4vMnA4fTZE3VU0eP3WJE3f4kpSkh6yEwfJumXYQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:84:f3:ef:e1:10:c0:9e:6e:6c:42:3b:5b:41:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcdabadd562b68ec5e158e1e6ac76f7da96e7323
Validity
Not Before: Jul 27 03:00:55 2025 GMT
Not After : Jul 28 03:00:55 2025 GMT
Subject: CN=a7cbbc4078fea67b05589369acf202ed5794ca5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e9:4f:b9:54:66:ab:01:2b:fa:5f:9e:8a:ab:
e2:26:a1:ec:48:24:89:f9:e8:1b:49:de:6d:64:ff:
4c:24:fc:6f:2a:9a:fd:2b:fc:27:66:1a:87:50:75:
56:2a:36:a8:1a:67:75:8f:e5:a9:90:9f:11:f9:db:
d3:c9:8d:cd:6e:6a:dc:55:aa:9a:90:88:45:3e:52:
84:35:bd:2b:f9:91:00:88:af:7f:91:4a:3a:0f:8e:
85:e8:fd:5d:1a:f9:24:32:52:ef:e3:d0:a9:2f:77:
27:34:36:13:11:2f:28:66:e7:1e:26:ef:c1:64:20:
59:27:22:a2:fe:39:f0:e4:48:b9:23:00:21:52:77:
0b:de:01:d9:4a:42:38:eb:1e:4d:54:09:36:1b:54:
54:3b:8e:33:33:32:51:60:22:a4:fe:8c:20:f5:fa:
19:8a:b0:ff:21:8d:76:b7:bc:5a:0b:2e:25:9b:0f:
d0:eb:ba:dd:12:c1:40:09:72:ea:c3:c6:21:c6:18:
23:ad:97:cb:ec:fe:38:1a:09:f9:6b:fd:90:98:58:
56:7e:ed:4a:cd:37:0b:b5:c3:39:50:d5:d9:d6:32:
0c:d5:ce:b1:94:91:82:26:82:f1:0c:6b:d2:5c:28:
9f:b8:8f:8b:92:2f:15:48:fa:e3:6d:a2:5c:b6:1c:
9b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CB:BC:40:78:FE:A6:7B:05:58:93:69:AC:F2:02:ED:57:94:CA:5C
X509v3 Authority Key Identifier:
keyid:FC:DA:BA:DD:56:2B:68:EC:5E:15:8E:1E:6A:C7:6F:7D:A9:6E:73:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:43:d8:db:96:50:e6:6d:0d:f5:9a:d3:94:67:29:76:95:d5:
92:58:c4:0e:17:e9:44:dc:05:81:7f:3a:81:f7:a6:af:3e:16:
f0:1e:e2:03:64:2c:bf:f9:37:58:e2:ef:7b:c8:86:5e:1c:e5:
5b:90:fa:51:63:3e:a5:0e:34:52:fe:dd:f9:66:ba:73:92:b8:
ff:33:d8:89:0f:c2:92:84:e4:be:2d:8c:66:2b:30:6d:73:58:
8f:14:48:ab:9b:94:7d:1e:96:4a:96:2d:24:09:ba:22:3e:be:
f7:b4:8b:5b:4f:de:59:d1:b6:8f:a9:ff:d7:4f:fd:08:85:2a:
30:81:44:02:08:38:ec:42:7e:22:d4:5c:c0:63:f7:1b:63:d0:
41:ff:0f:90:8d:69:55:5a:05:9e:81:65:d8:db:72:2e:11:81:
ba:4d:c6:75:e4:a2:f6:82:d8:56:7b:09:f6:bb:d5:cb:36:b9:
34:54:55:9b:93:c5:2b:05:a5:5b:ae:54:dc:d0:d4:28:89:45:
19:6b:92:4e:9d:2d:68:30:0e:9a:97:8b:02:43:04:c0:a9:f1:
ae:97:90:a5:84:53:d0:0c:71:e9:08:7c:de:0e:e1:62:87:5e:
ae:ee:45:b2:94:ee:81:83:3f:c4:ee:ab:38:49:2b:a7:2c:4c:
dd:e5:62:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ04Tz7+EQwJ5ubEI7W0ErMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZGFiYWRkNTYyYjY4ZWM1ZTE1OGUxZTZhYzc2ZjdkYTk2
ZTczMjMwHhcNMjUwNzI3MDMwMDU1WhcNMjUwNzI4MDMwMDU1WjAzMTEwLwYDVQQD
EyhhN2NiYmM0MDc4ZmVhNjdiMDU1ODkzNjlhY2YyMDJlZDU3OTRjYTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3elPuVRmqwEr+l+eiqviJqHsSCSJ
+egbSd5tZP9MJPxvKpr9K/wnZhqHUHVWKjaoGmd1j+WpkJ8R+dvTyY3NbmrcVaqa
kIhFPlKENb0r+ZEAiK9/kUo6D46F6P1dGvkkMlLv49CpL3cnNDYTES8oZuceJu/B
ZCBZJyKi/jnw5Ei5IwAhUncL3gHZSkI46x5NVAk2G1RUO44zMzJRYCKk/owg9foZ
irD/IY12t7xaCy4lmw/Q67rdEsFACXLqw8YhxhgjrZfL7P44Ggn5a/2QmFhWfu1K
zTcLtcM5UNXZ1jIM1c6xlJGCJoLxDGvSXCifuI+Lki8VSPrjbaJcthyb2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfLvEB4/qZ7BViTaazyAu1XlMpcMB8GA1UdIwQY
MBaAFPzaut1WK2jsXhWOHmrHb32pbnMjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX05xNjNWWXJhT3hlRlk0ZWFzZHZmYWx1Y3lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lOGJiMTMtOWY4OS00MGNhLThhNmIt
YTM5NGU4NjZiMzdjLzEvX05xNjNWWXJhT3hlRlk0ZWFzZHZmYWx1Y3lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9lOGJiMTMtOWY4OS00MGNhLThhNmItYTM5NGU4NjZiMzdj
LzEvX05xNjNWWXJhT3hlRlk0ZWFzZHZmYWx1Y3lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0PY25ZQ
5m0N9ZrTlGcpdpXVkljEDhfpRNwFgX86gfemrz4W8B7iA2Qsv/k3WOLve8iGXhzl
W5D6UWM+pQ40Uv7d+Wa6c5K4/zPYiQ/CkoTkvi2MZiswbXNYjxRIq5uUfR6WSpYt
JAm6Ij6+97SLW0/eWdG2j6n/10/9CIUqMIFEAgg47EJ+ItRcwGP3G2PQQf8PkI1p
VVoFnoFl2NtyLhGBuk3GdeSi9oLYVnsJ9rvVyza5NFRVm5PFKwWlW65U3NDUKIlF
GWuSTp0taDAOmpeLAkMEwKnxrpeQpYRT0Axx6Qh83g7hYoderu5FspTugYM/xO6r
OEkrpyxM3eViXw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:40:35 2025 by rpki-client