Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft
File: f4shg1iYOn16JTip2puh80lNcas.mft (raw, json)
Hash identifier: YGeB8XlF4bzxvfa1G+hxQECrAmpYpD5cGNNshCnkQ+U=
Subject key identifier: 2C:C5:FF:A9:CF:67:D0:18:B5:DD:0C:0D:06:EF:77:50:A9:38:8F:CB
Authority key identifier: 7F:8B:21:83:58:98:3A:7D:7A:25:38:A9:DA:9B:A1:F3:49:4D:71:AB
Certificate issuer: /CN=7f8b218358983a7d7a2538a9da9ba1f3494d71ab
Certificate serial: 019827ECBC53C22415A9BCFF7AEEF5813D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4shg1iYOn16JTip2puh80lNcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft
Manifest number: 15
Signing time: Sun 20 Jul 2025 13:01:22 +0000
Manifest this update: Sun 20 Jul 2025 13:01:22 +0000
Manifest next update: Mon 21 Jul 2025 13:01:22 +0000
Files and hashes: 1: f4shg1iYOn16JTip2puh80lNcas.crl (hash: NvFzYn6H7I2R4ATR8TlC9qffSU7go+GQd5ihWdZTBVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4shg1iYOn16JTip2puh80lNcas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:ec:bc:53:c2:24:15:a9:bc:ff:7a:ee:f5:81:3d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f8b218358983a7d7a2538a9da9ba1f3494d71ab
Validity
Not Before: Jul 20 13:01:22 2025 GMT
Not After : Jul 21 13:01:22 2025 GMT
Subject: CN=2cc5ffa9cf67d018b5dd0c0d06ef7750a9388fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c5:3b:b6:0c:5d:30:e4:d5:5b:6b:8f:c9:44:
4b:ce:dd:ef:15:1a:8f:9b:fe:53:d4:40:0f:7e:f6:
4b:ef:a5:62:32:92:17:e3:be:d4:63:69:9c:3e:56:
ea:18:b3:b8:3a:4c:e5:d8:2c:fd:69:2c:fc:7b:41:
56:45:9f:07:92:77:86:54:86:32:c1:bc:9d:ec:9e:
71:d8:87:3f:08:3a:28:c5:dc:14:05:8b:d4:49:29:
77:ee:b6:64:47:72:1f:68:4a:08:a1:62:b7:8a:db:
ae:58:f2:21:46:b7:c6:97:7b:f7:37:6f:35:d0:fe:
23:7f:0a:2b:66:9f:82:0d:7f:77:d1:73:64:75:77:
df:75:97:f5:64:50:0b:df:2c:0f:73:f3:d5:40:61:
bb:40:17:14:90:4b:ac:86:e0:e3:e1:8f:43:e8:66:
ca:03:d7:f3:db:2b:09:79:12:6d:ac:6d:54:fa:d7:
07:16:ab:62:8f:ec:06:b8:68:5b:87:e0:bc:51:b0:
a1:d6:94:a0:22:b8:f0:e5:5d:ee:ef:6b:1f:3f:b9:
ee:f0:17:9f:44:69:fb:cf:a6:48:70:ec:2f:01:ae:
c9:34:6f:5b:11:2c:48:ca:f5:b6:02:5a:99:2e:00:
a5:a6:ef:d0:2e:0d:15:43:88:a8:99:00:bf:c8:b2:
95:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C5:FF:A9:CF:67:D0:18:B5:DD:0C:0D:06:EF:77:50:A9:38:8F:CB
X509v3 Authority Key Identifier:
keyid:7F:8B:21:83:58:98:3A:7D:7A:25:38:A9:DA:9B:A1:F3:49:4D:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4shg1iYOn16JTip2puh80lNcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:7b:bf:40:73:e8:c7:7d:af:f7:85:ac:16:76:c9:58:2a:24:
75:36:2c:37:89:29:db:03:d4:ef:fe:56:36:4d:e6:41:48:a4:
0e:12:6f:e7:ae:8d:14:90:b1:5b:2a:1c:77:2d:e9:91:2f:38:
ec:b8:33:8b:03:dd:62:9e:d4:04:39:34:39:2a:98:9c:11:45:
86:14:8c:a0:6a:5f:e5:bc:86:23:8d:eb:fd:24:3d:f6:6b:19:
9c:af:20:d8:b9:e8:6f:ec:ec:c7:bb:b5:fc:fc:8e:fc:5b:d6:
75:ed:20:8a:5a:f3:b2:2b:98:71:2d:ac:72:ae:13:86:39:e0:
b7:2c:dc:ca:14:58:29:6f:e7:33:c3:45:0b:4d:9a:ab:8c:28:
a2:b4:24:85:8b:ce:aa:4b:11:c2:46:10:79:51:98:eb:2c:a2:
a1:a4:80:78:bf:04:51:58:c8:c7:99:1b:b9:16:dc:d6:24:ef:
7c:49:94:c1:e5:cb:d1:b2:6d:58:52:fb:4c:f8:97:b9:f9:67:
fe:a4:e1:34:57:12:93:f2:4d:87:86:eb:39:87:88:42:78:93:
5f:7e:6e:07:1e:be:53:85:70:79:68:c6:01:12:1c:fe:b4:d7:
9f:b7:70:a5:cf:14:a8:ae:f4:40:93:e3:cf:38:56:d0:23:87:
68:51:c3:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgn7LxTwiQVqbz/eu71gT2OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmOGIyMTgzNTg5ODNhN2Q3YTI1MzhhOWRhOWJhMWYzNDk0
ZDcxYWIwHhcNMjUwNzIwMTMwMTIyWhcNMjUwNzIxMTMwMTIyWjAzMTEwLwYDVQQD
EygyY2M1ZmZhOWNmNjdkMDE4YjVkZDBjMGQwNmVmNzc1MGE5Mzg4ZmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sU7tgxdMOTVW2uPyURLzt3vFRqP
m/5T1EAPfvZL76ViMpIX477UY2mcPlbqGLO4Okzl2Cz9aSz8e0FWRZ8HkneGVIYy
wbyd7J5x2Ic/CDooxdwUBYvUSSl37rZkR3IfaEoIoWK3ituuWPIhRrfGl3v3N281
0P4jfworZp+CDX930XNkdXffdZf1ZFAL3ywPc/PVQGG7QBcUkEushuDj4Y9D6GbK
A9fz2ysJeRJtrG1U+tcHFqtij+wGuGhbh+C8UbCh1pSgIrjw5V3u72sfP7nu8Bef
RGn7z6ZIcOwvAa7JNG9bESxIyvW2AlqZLgClpu/QLg0VQ4iomQC/yLKV1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzF/6nPZ9AYtd0MDQbvd1CpOI/LMB8GA1UdIwQY
MBaAFH+LIYNYmDp9eiU4qdqbofNJTXGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjRzaGcxaVlPbjE2SlRpcDJwdWg4MGxOY2FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83NmNkMDMtZWFhMi00OTY1LTk0ZWYt
OThkYmI2NDAyY2RkLzEvZjRzaGcxaVlPbjE2SlRpcDJwdWg4MGxOY2FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS83NmNkMDMtZWFhMi00OTY1LTk0ZWYtOThkYmI2NDAyY2Rk
LzEvZjRzaGcxaVlPbjE2SlRpcDJwdWg4MGxOY2FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp3u/QHPo
x32v94WsFnbJWCokdTYsN4kp2wPU7/5WNk3mQUikDhJv566NFJCxWyocdy3pkS84
7LgziwPdYp7UBDk0OSqYnBFFhhSMoGpf5byGI43r/SQ99msZnK8g2Lnob+zsx7u1
/PyO/FvWde0gilrzsiuYcS2scq4ThjngtyzcyhRYKW/nM8NFC02aq4woorQkhYvO
qksRwkYQeVGY6yyioaSAeL8EUVjIx5kbuRbc1iTvfEmUweXL0bJtWFL7TPiXufln
/qThNFcSk/JNh4brOYeIQniTX35uBx6+U4VweWjGARIc/rTXn7dwpc8UqK70QJPj
zzhW0COHaFHDbA==
-----END CERTIFICATE-----
Generated at Sun Jul 20 20:22:47 2025 by rpki-client