Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
File: F88SpliemYyb7BOa-PznCsR1rXI.mft (raw, json)
Hash identifier: Jrx3eS1dcEu87nOqOkyi/e4LCMyUAXemHLzjVqHWA4E=
Subject key identifier: 6E:55:95:E6:C8:7F:8C:83:4A:21:80:45:78:F1:02:6D:4C:5D:77:43
Authority key identifier: 17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
Certificate issuer: /CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Certificate serial: 019853B25992D6C186ABC17EDFFE7B7BA212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 01:00:53 +0000
Manifest this update: Tue 29 Jul 2025 01:00:53 +0000
Manifest next update: Wed 30 Jul 2025 01:00:53 +0000
Files and hashes: 1: F88SpliemYyb7BOa-PznCsR1rXI.crl (hash: rLh/IWQDsS2ISnxdZKjWOzXYLfbij9tOPqdWtGjbExo=)
2: dAIhcdZ8fwYvVo-M_emgqHoK7ZU.roa (hash: SjeXAqHoVFgHw2EHHXptMICe3kneOtC1TL1zW8otQdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b2:59:92:d6:c1:86:ab:c1:7e:df:fe:7b:7b:a2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Validity
Not Before: Jul 29 01:00:53 2025 GMT
Not After : Jul 30 01:00:53 2025 GMT
Subject: CN=6e5595e6c87f8c834a21804578f1026d4c5d7743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:ab:8e:62:17:7d:a1:83:a1:9e:8b:04:b2:
a0:a2:d0:a9:62:0f:9d:d8:84:d1:be:21:31:6e:1f:
9d:b1:4f:9c:89:45:0f:a8:3c:0f:4e:d2:49:15:10:
e2:25:e8:f2:87:e4:76:9e:b8:aa:8f:62:1c:05:7d:
35:89:2d:8d:8c:4b:cf:62:c9:c6:74:1c:77:fc:b9:
3e:88:18:a3:4c:d4:8f:93:e5:10:95:bd:a0:57:32:
16:5c:38:90:39:60:90:e2:85:7e:d4:72:3d:f2:76:
b3:04:3d:94:b3:5c:de:12:31:0b:fe:d2:81:47:e4:
3e:59:2a:2a:60:58:7b:79:f9:ad:a2:e4:01:6e:fa:
5c:29:77:30:fa:4b:cc:46:2e:b0:79:6f:9a:d0:d6:
d3:53:50:8e:0f:f2:3a:18:a7:5a:60:34:9c:9e:7e:
75:4a:c9:0f:d8:ac:43:b2:0a:9a:05:f5:6b:b1:26:
a7:f6:09:19:90:3b:88:e8:8a:a6:e6:52:65:f2:64:
37:4f:be:dd:b5:de:2d:19:8e:6c:25:61:41:34:2b:
e0:dd:9f:be:c2:d5:c0:d4:44:9d:08:8d:76:50:24:
17:1e:d5:14:9a:fc:30:6c:e8:58:21:a8:8c:4d:10:
7f:50:86:6e:78:68:ca:3e:25:26:da:9c:57:9f:a8:
8c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:55:95:E6:C8:7F:8C:83:4A:21:80:45:78:F1:02:6D:4C:5D:77:43
X509v3 Authority Key Identifier:
keyid:17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:15:43:5c:a5:8a:d3:96:a2:84:a0:a6:1c:73:18:1f:d6:0a:
01:83:5e:1b:bb:8c:bb:a9:65:cf:71:5d:2a:ae:40:ef:0a:57:
82:c5:31:57:1e:7e:fc:21:72:26:fa:75:68:fe:2c:40:a0:96:
c8:fa:c5:bb:13:ec:4d:c5:be:2d:ef:33:a4:0f:92:d5:f9:33:
af:d4:cf:7d:06:eb:d2:d6:ad:5a:33:cf:d2:60:d9:4a:a4:60:
83:56:7e:62:84:65:bc:f7:22:1e:cb:b5:84:2c:20:1f:cb:89:
1c:b7:1d:9c:29:ec:4e:f6:02:7d:af:f4:9c:73:2d:93:8f:ac:
8e:92:0e:d8:83:16:1f:78:a5:08:16:b1:82:23:44:2a:0a:c8:
56:7d:c1:d0:8b:bd:57:7a:19:96:fe:fb:92:a3:90:7a:53:bc:
66:6f:59:a6:54:d9:f5:27:8a:26:3c:5a:66:01:89:b7:05:c7:
24:1b:c7:f5:88:6c:d7:04:06:c0:cc:75:b3:1e:96:39:00:bf:
ff:74:89:83:8d:76:7d:04:22:08:5b:15:d1:33:47:3a:26:b4:
46:cd:20:01:08:d5:78:44:f6:14:95:2d:36:67:7a:9b:dc:17:
7a:98:33:c8:a8:af:0f:de:09:66:83:4e:a2:63:6b:83:d2:da:
a4:32:72:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTslmS1sGGq8F+3/57e6ISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3Y2YxMmE2NTg5ZTk5OGM5YmVjMTM5YWY4ZmNlNzBhYzQ3
NWFkNzIwHhcNMjUwNzI5MDEwMDUzWhcNMjUwNzMwMDEwMDUzWjAzMTEwLwYDVQQD
Eyg2ZTU1OTVlNmM4N2Y4YzgzNGEyMTgwNDU3OGYxMDI2ZDRjNWQ3NzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMarjmIXfaGDoZ6LBLKgotCpYg+d
2ITRviExbh+dsU+ciUUPqDwPTtJJFRDiJejyh+R2nriqj2IcBX01iS2NjEvPYsnG
dBx3/Lk+iBijTNSPk+UQlb2gVzIWXDiQOWCQ4oV+1HI98nazBD2Us1zeEjEL/tKB
R+Q+WSoqYFh7efmtouQBbvpcKXcw+kvMRi6weW+a0NbTU1COD/I6GKdaYDScnn51
SskP2KxDsgqaBfVrsSan9gkZkDuI6Iqm5lJl8mQ3T77dtd4tGY5sJWFBNCvg3Z++
wtXA1ESdCI12UCQXHtUUmvwwbOhYIaiMTRB/UIZueGjKPiUm2pxXn6iMVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5VlebIf4yDSiGARXjxAm1MXXdDMB8GA1UdIwQY
MBaAFBfPEqZYnpmMm+wTmvj85wrEda1yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjg4U3BsaWVtWXliN0JPYS1Qem5Dc1IxclhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85YmRmMzQtNzI5ZC00YmUwLWIxNWYt
NWRlMDg3MTE4MmJhLzEvRjg4U3BsaWVtWXliN0JPYS1Qem5Dc1IxclhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS85YmRmMzQtNzI5ZC00YmUwLWIxNWYtNWRlMDg3MTE4MmJh
LzEvRjg4U3BsaWVtWXliN0JPYS1Qem5Dc1IxclhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwBVDXKWK
05aihKCmHHMYH9YKAYNeG7uMu6llz3FdKq5A7wpXgsUxVx5+/CFyJvp1aP4sQKCW
yPrFuxPsTcW+Le8zpA+S1fkzr9TPfQbr0tatWjPP0mDZSqRgg1Z+YoRlvPciHsu1
hCwgH8uJHLcdnCnsTvYCfa/0nHMtk4+sjpIO2IMWH3ilCBaxgiNEKgrIVn3B0Iu9
V3oZlv77kqOQelO8Zm9ZplTZ9SeKJjxaZgGJtwXHJBvH9Yhs1wQGwMx1sx6WOQC/
/3SJg412fQQiCFsV0TNHOia0Rs0gAQjVeET2FJUtNmd6m9wXepgzyKivD94JZoNO
omNrg9LapDJyUw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:38:12 2025 by rpki-client