Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
File: F1lDaGkInNnH5tAgKPJKL-SbhtU.mft (raw, json)
Hash identifier: 8AoOoR3domvCRWPobY808pArAghVwDmca3eyVBT/rTE=
Subject key identifier: DE:10:60:72:66:14:2C:13:29:80:BA:2A:AB:F9:BC:0F:3F:B9:D2:0E
Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
Certificate issuer: /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Certificate serial: 01983EAAAF174B8190555CB9E34AD473FEF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
Manifest number: 1609
Signing time: Thu 24 Jul 2025 23:00:30 +0000
Manifest this update: Thu 24 Jul 2025 23:00:30 +0000
Manifest next update: Fri 25 Jul 2025 23:00:30 +0000
Files and hashes: 1: F1lDaGkInNnH5tAgKPJKL-SbhtU.crl (hash: 6swUNedirbkeu+zvtC6OYvQ9aF7UmckjD6JU3tBkcA0=)
2: x_rxqF-JJR6RocSDql__H0qmhrc.roa (hash: 4JF9dz0rvoh3uEdMTV+Of1B1JpkW2SA5c3PR2yvS+Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:aa:af:17:4b:81:90:55:5c:b9:e3:4a:d4:73:fe:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Validity
Not Before: Jul 24 23:00:30 2025 GMT
Not After : Jul 25 23:00:30 2025 GMT
Subject: CN=de10607266142c132980ba2aabf9bc0f3fb9d20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:86:99:11:c1:f0:94:98:a0:a6:2b:53:fb:53:
be:1f:35:0c:1a:10:3b:38:2e:d5:68:e5:e7:c5:a4:
b5:0d:d5:cd:5c:44:5a:aa:c4:ef:05:f1:cf:dc:2b:
32:58:fb:54:11:25:f6:e3:4f:6e:d9:3f:6c:d0:ca:
e4:0d:19:3d:f2:81:76:04:2a:05:68:b1:37:65:fc:
39:ac:dd:f0:52:3e:42:59:f6:4e:c7:d7:e2:4c:23:
6f:21:69:67:8f:60:02:38:c4:78:fa:2f:ef:71:0d:
80:cf:05:e5:9e:e9:9f:6b:a9:48:9a:a8:a1:fa:89:
9c:7a:9e:a0:20:de:12:6a:ca:9b:6e:56:ac:40:11:
a2:40:06:6c:81:45:c3:a1:d3:fc:41:8c:45:3e:fd:
69:47:89:1e:b5:0e:48:81:5e:6e:45:d3:34:ee:cb:
71:8a:09:3a:48:65:00:1c:c1:10:50:39:8a:aa:3c:
6c:62:d6:56:d7:56:c1:48:76:98:60:6f:5a:64:1f:
df:0a:a1:c9:05:c9:a0:3c:41:10:66:12:15:01:ca:
7e:7e:f5:bf:04:6b:41:e0:81:3f:04:89:74:5f:26:
26:31:e3:25:07:ff:de:a9:68:91:91:5a:56:b0:5c:
4a:7d:23:dc:2b:87:f1:ea:a9:67:40:46:50:3c:36:
4a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:10:60:72:66:14:2C:13:29:80:BA:2A:AB:F9:BC:0F:3F:B9:D2:0E
X509v3 Authority Key Identifier:
keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:93:27:1a:e9:7d:7f:36:21:9b:4b:b5:44:4c:62:41:46:60:
a5:f6:dd:a7:b7:f0:ac:03:4e:a5:6f:f4:ef:8d:97:41:55:67:
25:c4:99:49:f2:13:78:3c:1a:fb:3d:10:7b:a7:b5:c4:80:76:
4f:2c:21:29:85:cf:cb:81:14:ee:19:67:36:6b:a3:51:85:f0:
2a:30:4d:3a:b3:03:8d:b9:df:af:2a:32:16:0a:a5:6b:3b:85:
9d:94:61:59:59:f3:0e:b6:c8:bd:b7:5e:90:d1:29:26:03:28:
63:8d:2f:0c:1d:cb:bf:41:69:5a:99:ff:3e:e6:cf:07:b8:42:
8c:a4:14:66:67:b7:cb:47:95:7e:4f:ea:ba:39:a8:0d:43:b1:
c7:8f:ef:e8:36:22:24:e5:55:09:ef:9a:29:0b:d3:ce:c2:d2:
7c:28:d7:d3:21:11:7a:22:0c:ef:76:87:60:c7:fb:fd:e4:15:
75:ec:60:82:da:72:a5:6b:80:3a:1d:19:2e:51:54:e4:eb:9a:
eb:f5:7e:37:a9:b9:da:5f:9e:44:05:01:9f:c2:25:83:db:8a:
af:f9:e9:98:42:90:7f:9a:51:75:5b:fe:5f:64:8c:97:bd:0e:
91:37:53:4c:41:e0:46:4d:d4:4e:7b:79:c2:82:88:33:c9:2b:
cc:a4:07:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg+qq8XS4GQVVy540rUc/7zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NTk0MzY4NjkwODljZDljN2U2ZDAyMDI4ZjI0YTJmZTQ5
Yjg2ZDUwHhcNMjUwNzI0MjMwMDMwWhcNMjUwNzI1MjMwMDMwWjAzMTEwLwYDVQQD
EyhkZTEwNjA3MjY2MTQyYzEzMjk4MGJhMmFhYmY5YmMwZjNmYjlkMjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoaZEcHwlJigpitT+1O+HzUMGhA7
OC7VaOXnxaS1DdXNXERaqsTvBfHP3CsyWPtUESX2409u2T9s0MrkDRk98oF2BCoF
aLE3Zfw5rN3wUj5CWfZOx9fiTCNvIWlnj2ACOMR4+i/vcQ2AzwXlnumfa6lImqih
+omcep6gIN4SasqbblasQBGiQAZsgUXDodP8QYxFPv1pR4ketQ5IgV5uRdM07stx
igk6SGUAHMEQUDmKqjxsYtZW11bBSHaYYG9aZB/fCqHJBcmgPEEQZhIVAcp+fvW/
BGtB4IE/BIl0XyYmMeMlB//eqWiRkVpWsFxKfSPcK4fx6qlnQEZQPDZKEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4QYHJmFCwTKYC6Kqv5vA8/udIOMB8GA1UdIwQY
MBaAFBdZQ2hpCJzZx+bQICjySi/km4bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFsRGFHa0luTm5INXRBZ0tQSktMLVNiaHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83MjQ3ZDItMGEyOC00ZTRhLWFhMGMt
ZmVmNDFkZDg3NmMwLzEvRjFsRGFHa0luTm5INXRBZ0tQSktMLVNiaHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS83MjQ3ZDItMGEyOC00ZTRhLWFhMGMtZmVmNDFkZDg3NmMw
LzEvRjFsRGFHa0luTm5INXRBZ0tQSktMLVNiaHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpMnGul9
fzYhm0u1RExiQUZgpfbdp7fwrANOpW/0742XQVVnJcSZSfITeDwa+z0Qe6e1xIB2
TywhKYXPy4EU7hlnNmujUYXwKjBNOrMDjbnfryoyFgqlazuFnZRhWVnzDrbIvbde
kNEpJgMoY40vDB3Lv0FpWpn/PubPB7hCjKQUZme3y0eVfk/qujmoDUOxx4/v6DYi
JOVVCe+aKQvTzsLSfCjX0yEReiIM73aHYMf7/eQVdexggtpypWuAOh0ZLlFU5Oua
6/V+N6m52l+eRAUBn8Ilg9uKr/npmEKQf5pRdVv+X2SMl70OkTdTTEHgRk3UTnt5
woKIM8krzKQHAw==
-----END CERTIFICATE-----
Generated at Fri Jul 25 00:52:40 2025 by rpki-client