Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
File: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft (raw, json)
Hash identifier: F+9eswoSp7V8xyjQckgpU9T7mCvkx7MzJ9Rk7IR5pec=
Subject key identifier: EA:F3:2B:36:AC:77:61:E2:A7:7D:F0:00:44:FC:11:50:7E:33:1C:86
Authority key identifier: 7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24
Certificate issuer: /CN=7eaf5714c5056cbe269d12fa3099378a95728424
Certificate serial: 019749D5A072F120265FED6B552351BA0053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
Manifest number: 12D2
Signing time: Sat 07 Jun 2025 10:00:26 +0000
Manifest this update: Sat 07 Jun 2025 10:00:26 +0000
Manifest next update: Sun 08 Jun 2025 10:00:26 +0000
Files and hashes: 1: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl (hash: NDKbjR8bcqUQH0JyCYuks71EyAp8EmnG5bO7wtCK+7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:a0:72:f1:20:26:5f:ed:6b:55:23:51:ba:00:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eaf5714c5056cbe269d12fa3099378a95728424
Validity
Not Before: Jun 7 10:00:26 2025 GMT
Not After : Jun 8 10:00:26 2025 GMT
Subject: CN=eaf32b36ac7761e2a77df00044fc11507e331c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a5:9c:49:46:9d:6c:88:51:38:8a:3a:a9:bc:
c6:1c:7b:25:77:e3:f7:12:80:6e:25:e0:87:6b:70:
14:b7:61:d2:34:d8:1c:9d:cd:de:b9:e4:39:67:12:
db:fc:96:fb:b2:62:b0:f4:b2:72:f7:6b:87:bf:eb:
f9:a6:ef:32:ac:7a:e1:9d:de:4d:4f:39:b3:f8:e2:
12:38:a4:53:b0:5f:b5:4d:3e:01:f2:f4:b0:4e:f0:
aa:ab:db:e7:74:57:df:e8:63:21:5e:aa:81:9d:39:
83:cd:57:6c:de:d7:d6:b1:e2:1a:fc:85:14:0f:b9:
b7:92:ea:ba:c6:4d:24:b0:59:32:1a:35:c1:de:f7:
55:92:9a:6a:6b:6e:61:2f:76:b0:65:57:91:d9:6f:
37:20:b4:a0:5a:d8:c4:3a:a2:70:63:51:31:0b:68:
6d:3c:27:4e:b1:94:c4:c2:13:3d:6b:f2:cf:2c:ae:
49:f8:e9:b2:2f:49:1f:cd:f2:80:76:55:68:95:8d:
64:f2:4c:b6:cc:71:3e:96:93:66:ac:20:40:33:75:
3e:77:4f:19:95:83:44:1e:ef:29:59:47:c0:5c:80:
a0:b5:20:c9:b6:1b:d2:42:94:e9:39:dd:06:5f:90:
eb:2c:60:a4:4a:c1:5e:31:df:1d:c5:64:5f:5a:c8:
76:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F3:2B:36:AC:77:61:E2:A7:7D:F0:00:44:FC:11:50:7E:33:1C:86
X509v3 Authority Key Identifier:
keyid:7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:08:98:10:5b:2c:be:cc:85:74:bb:ae:e7:de:33:8c:58:84:
b2:21:c7:17:14:96:5e:39:e5:22:f0:2b:0a:49:d0:5e:5e:30:
87:e5:36:77:0d:09:0f:fe:5c:ed:dc:65:fe:fd:78:fc:4e:e3:
d4:dd:44:c8:09:3b:79:d6:80:bd:d1:3d:12:db:33:5a:38:ce:
fb:45:8d:5e:78:47:43:23:a7:62:3c:8d:f4:9a:36:3e:ca:be:
19:4d:6d:25:1a:77:c2:09:af:de:41:57:31:1f:62:1f:cc:ca:
63:8f:0e:0b:b0:29:16:8e:03:c2:d7:bb:7a:5d:67:d2:a8:f4:
b8:96:39:f4:57:15:10:6b:72:84:a8:57:e9:c1:4d:d5:4c:52:
d9:21:9e:83:0a:ae:66:31:ce:e4:2c:5d:50:ef:a7:09:0a:39:
b7:2b:cc:8f:d6:73:4f:fd:b9:5c:a9:f4:b8:25:de:c2:c2:bb:
65:f7:6f:3d:36:3b:64:7b:5e:8f:df:bc:3b:89:7b:23:af:a3:
b2:74:88:24:be:c3:44:64:e1:40:62:eb:ae:7e:f2:0e:76:c1:
bf:09:92:3d:5b:a7:60:97:89:47:78:b9:8f:73:c2:55:c9:be:
72:92:80:c8:90:89:10:03:bd:47:eb:56:71:57:58:e6:9c:84:
90:92:4c:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1aBy8SAmX+1rVSNRugBTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYWY1NzE0YzUwNTZjYmUyNjlkMTJmYTMwOTkzNzhhOTU3
Mjg0MjQwHhcNMjUwNjA3MTAwMDI2WhcNMjUwNjA4MTAwMDI2WjAzMTEwLwYDVQQD
EyhlYWYzMmIzNmFjNzc2MWUyYTc3ZGYwMDA0NGZjMTE1MDdlMzMxYzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06WcSUadbIhROIo6qbzGHHsld+P3
EoBuJeCHa3AUt2HSNNgcnc3eueQ5ZxLb/Jb7smKw9LJy92uHv+v5pu8yrHrhnd5N
Tzmz+OISOKRTsF+1TT4B8vSwTvCqq9vndFff6GMhXqqBnTmDzVds3tfWseIa/IUU
D7m3kuq6xk0ksFkyGjXB3vdVkppqa25hL3awZVeR2W83ILSgWtjEOqJwY1ExC2ht
PCdOsZTEwhM9a/LPLK5J+OmyL0kfzfKAdlVolY1k8ky2zHE+lpNmrCBAM3U+d08Z
lYNEHu8pWUfAXICgtSDJthvSQpTpOd0GX5DrLGCkSsFeMd8dxWRfWsh2ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrzKzasd2Hip33wAET8EVB+MxyGMB8GA1UdIwQY
MBaAFH6vVxTFBWy+Jp0S+jCZN4qVcoQkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnE5WEZNVUZiTDRtblJMNk1KazNpcFZ5aENRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lODdhYTgtNmU1YS00YzRjLWJjYzkt
ZjIwZDRlODY4MDNiLzEvZnE5WEZNVUZiTDRtblJMNk1KazNpcFZ5aENRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9lODdhYTgtNmU1YS00YzRjLWJjYzktZjIwZDRlODY4MDNi
LzEvZnE5WEZNVUZiTDRtblJMNk1KazNpcFZ5aENRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQiYEFss
vsyFdLuu594zjFiEsiHHFxSWXjnlIvArCknQXl4wh+U2dw0JD/5c7dxl/v14/E7j
1N1EyAk7edaAvdE9EtszWjjO+0WNXnhHQyOnYjyN9Jo2Psq+GU1tJRp3wgmv3kFX
MR9iH8zKY48OC7ApFo4Dwte7el1n0qj0uJY59FcVEGtyhKhX6cFN1UxS2SGegwqu
ZjHO5CxdUO+nCQo5tyvMj9ZzT/25XKn0uCXewsK7ZfdvPTY7ZHtej9+8O4l7I6+j
snSIJL7DRGThQGLrrn7yDnbBvwmSPVunYJeJR3i5j3PCVcm+cpKAyJCJEAO9R+tW
cVdY5pyEkJJMnQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:44:56 2025 by rpki-client