Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
File: FzLzNNirto74IlRtj2-OgVY8b9k.mft (raw, json)
Hash identifier: KIGEjWqSfxbWU96nyaSVeY/TmfDkwpry2p7Maui9k+o=
Subject key identifier: 3A:98:CC:C3:C6:94:88:9D:BE:0E:F4:9F:56:20:41:18:2B:B0:FE:3A
Authority key identifier: 17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
Certificate issuer: /CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Certificate serial: 01974A7B5D6393EDE65040A0FCB4B7107F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
Manifest number: 08A2
Signing time: Sat 07 Jun 2025 13:01:28 +0000
Manifest this update: Sat 07 Jun 2025 13:01:28 +0000
Manifest next update: Sun 08 Jun 2025 13:01:28 +0000
Files and hashes: 1: FzLzNNirto74IlRtj2-OgVY8b9k.crl (hash: kXvHvFdTpsHQzn8MdISya9oCJ2ezLqxlWVT7in72bt0=)
2: bi5ZDVAxCgXHP4ptHVBQTkUpE6s.roa (hash: bndk3fWWVAXFwXPZNDDoiBYejq5Lux0P2PBtRDEnol8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:5d:63:93:ed:e6:50:40:a0:fc:b4:b7:10:7f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Validity
Not Before: Jun 7 13:01:28 2025 GMT
Not After : Jun 8 13:01:28 2025 GMT
Subject: CN=3a98ccc3c694889dbe0ef49f562041182bb0fe3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d5:37:e3:9d:1c:4f:c6:28:62:14:ec:0f:96:
39:eb:7f:53:e6:41:da:4c:3f:70:b8:fc:fb:ee:32:
6d:af:d2:bc:00:31:90:11:52:60:d2:f8:fd:89:88:
cd:3a:11:7f:76:62:43:d5:0e:5b:b6:55:d4:df:53:
af:4b:a0:f3:1f:8c:f0:f0:f0:ae:61:c7:31:5e:e8:
63:eb:fd:ad:1b:8e:55:8c:65:de:64:ff:bb:ac:bf:
b5:6b:62:49:a1:84:f8:f0:04:3d:47:88:d3:5f:1f:
e2:a1:48:2d:ed:41:a7:04:f6:fa:8c:e6:ad:22:79:
05:92:c3:5d:9a:da:58:e2:29:78:17:c2:41:22:93:
48:d9:f5:09:4e:8a:8f:c3:57:56:80:1d:5c:15:b7:
8c:8a:a0:d7:c3:2a:fe:12:97:50:c2:11:1c:f5:4d:
78:0b:1a:75:59:c2:ef:fb:ab:19:62:e6:1f:ce:63:
4e:e1:c4:7a:13:56:d5:47:3f:7e:c3:92:b7:4e:5a:
51:6d:96:72:b5:df:ed:b1:82:69:3b:60:a6:ac:ba:
dd:72:c2:51:1c:d4:7b:72:64:bb:65:74:a1:19:0c:
c5:5d:cf:d0:1f:c3:bb:dc:32:48:a8:b4:5b:56:77:
26:bd:e6:a9:d7:8d:7f:50:89:a0:5b:b3:53:a6:50:
16:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:98:CC:C3:C6:94:88:9D:BE:0E:F4:9F:56:20:41:18:2B:B0:FE:3A
X509v3 Authority Key Identifier:
keyid:17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3a:ca:a7:90:81:f5:b3:87:66:6f:8e:0c:19:c4:69:e9:d8:
de:b1:bb:e1:24:9e:8b:89:1a:13:d0:15:2d:91:e1:29:01:72:
46:65:e7:b5:94:09:4c:4b:78:74:25:7a:69:fc:62:6b:83:f9:
32:f0:0c:6d:74:43:92:86:b0:b9:86:53:c7:4f:ca:61:c0:e3:
e2:6c:37:17:b9:fb:a2:15:e3:e3:07:62:72:6b:ec:65:6c:90:
ac:fa:d2:f4:43:2a:12:22:47:1d:21:38:d1:5a:ab:12:5e:ae:
7c:10:f7:15:50:61:ed:20:30:14:da:96:73:03:f8:26:97:3f:
3d:24:45:0a:3d:24:97:9c:2f:52:06:60:48:60:53:e7:07:84:
3c:e2:71:e5:f4:0b:ac:8f:37:8b:27:11:7e:46:5b:e3:cb:51:
d2:6a:36:fd:07:1a:4b:7f:b7:8f:d7:63:f1:4e:73:1f:31:42:
95:01:c0:3c:86:cb:4b:74:f6:06:66:b2:6b:13:78:e2:e0:1a:
09:aa:2c:68:25:81:08:b4:1a:14:4a:5f:42:dc:b6:9d:bb:19:
10:e3:3b:5f:41:a1:6c:bd:24:10:79:55:f1:80:b6:a4:03:8a:
6a:b2:4c:73:5d:b1:c5:82:a0:68:b6:c2:c9:8e:62:47:d0:fc:
90:a9:b1:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKe11jk+3mUECg/LS3EH9FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MzJmMzM0ZDhhYmI2OGVmODIyNTQ2ZDhmNmY4ZTgxNTYz
YzZmZDkwHhcNMjUwNjA3MTMwMTI4WhcNMjUwNjA4MTMwMTI4WjAzMTEwLwYDVQQD
EygzYTk4Y2NjM2M2OTQ4ODlkYmUwZWY0OWY1NjIwNDExODJiYjBmZTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dU3450cT8YoYhTsD5Y5639T5kHa
TD9wuPz77jJtr9K8ADGQEVJg0vj9iYjNOhF/dmJD1Q5btlXU31OvS6DzH4zw8PCu
YccxXuhj6/2tG45VjGXeZP+7rL+1a2JJoYT48AQ9R4jTXx/ioUgt7UGnBPb6jOat
InkFksNdmtpY4il4F8JBIpNI2fUJToqPw1dWgB1cFbeMiqDXwyr+EpdQwhEc9U14
Cxp1WcLv+6sZYuYfzmNO4cR6E1bVRz9+w5K3TlpRbZZytd/tsYJpO2CmrLrdcsJR
HNR7cmS7ZXShGQzFXc/QH8O73DJIqLRbVncmveap141/UImgW7NTplAWNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqYzMPGlIidvg70n1YgQRgrsP46MB8GA1UdIwQY
MBaAFBcy8zTYq7aO+CJUbY9vjoFWPG/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnpMek5OaXJ0bzc0SWxSdGoyLU9nVlk4YjlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83YmM4ZGEtY2I4Mi00YWJjLWIyZjAt
MTNiNGI4MGM1NGJhLzEvRnpMek5OaXJ0bzc0SWxSdGoyLU9nVlk4YjlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC83YmM4ZGEtY2I4Mi00YWJjLWIyZjAtMTNiNGI4MGM1NGJh
LzEvRnpMek5OaXJ0bzc0SWxSdGoyLU9nVlk4YjlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcjrKp5CB
9bOHZm+ODBnEaenY3rG74SSei4kaE9AVLZHhKQFyRmXntZQJTEt4dCV6afxia4P5
MvAMbXRDkoawuYZTx0/KYcDj4mw3F7n7ohXj4wdicmvsZWyQrPrS9EMqEiJHHSE4
0VqrEl6ufBD3FVBh7SAwFNqWcwP4Jpc/PSRFCj0kl5wvUgZgSGBT5weEPOJx5fQL
rI83iycRfkZb48tR0mo2/QcaS3+3j9dj8U5zHzFClQHAPIbLS3T2BmayaxN44uAa
CaosaCWBCLQaFEpfQty2nbsZEOM7X0GhbL0kEHlV8YC2pAOKarJMc12xxYKgaLbC
yY5iR9D8kKmxzg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:28:33 2025 by rpki-client