Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
File: FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft (raw, json)
Hash identifier: vUYcqWJigL54ZetSpXZk4Fl6ruGDqK84NQNHLZ2Ud0A=
Subject key identifier: BF:A6:A5:BB:63:41:46:B3:93:3C:DA:17:6A:7A:3A:45:AD:F7:17:16
Authority key identifier: 15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
Certificate issuer: /CN=154e2f85361ff5d06309c25684b908d7b702439b
Certificate serial: 019916F5C0C3E2E0FD8AA1E815D386F303A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
Manifest number: 044A
Signing time: Thu 04 Sep 2025 23:00:28 +0000
Manifest this update: Thu 04 Sep 2025 23:00:28 +0000
Manifest next update: Fri 05 Sep 2025 23:00:28 +0000
Files and hashes: 1: FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl (hash: 35+9f/xcvQWlGgonA2yGM+xxQrf5QsnizzXt7NMonAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f5:c0:c3:e2:e0:fd:8a:a1:e8:15:d3:86:f3:03:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154e2f85361ff5d06309c25684b908d7b702439b
Validity
Not Before: Sep 4 23:00:28 2025 GMT
Not After : Sep 5 23:00:28 2025 GMT
Subject: CN=bfa6a5bb634146b3933cda176a7a3a45adf71716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6a:11:d7:51:0c:80:90:6a:df:a1:5c:76:4d:
0c:3f:80:a4:95:e3:03:82:d7:33:8b:c3:1c:a2:8f:
18:24:c3:9e:12:10:83:02:84:20:73:9d:39:d6:69:
47:3c:86:01:8e:ab:50:59:d3:16:f3:ba:04:9b:13:
63:32:61:75:e5:6f:de:2c:ff:95:99:e6:49:ec:45:
b7:82:9c:f1:16:34:b2:3b:52:ef:ce:3e:46:5b:04:
ae:82:73:a4:db:11:18:ab:42:f5:1f:52:56:be:84:
f3:ef:89:06:9b:49:ee:d5:3e:41:63:be:28:e5:81:
81:6a:9c:f9:08:f0:53:b4:a3:79:30:3c:08:f1:25:
6b:37:8c:45:6b:80:89:3c:b1:1d:5d:6a:bc:f9:03:
3d:53:11:2a:ca:95:94:09:e1:81:50:37:67:71:1e:
1f:48:4f:91:9b:c5:ee:fd:e3:26:01:b3:ba:ea:43:
6e:6e:1a:af:c9:26:9a:92:5f:bb:05:fa:52:9f:79:
6c:00:ae:0f:d9:cf:64:7f:6f:78:ea:2f:63:4d:f8:
a0:11:a8:fc:7b:d8:49:86:93:99:0e:4e:23:c6:0b:
72:07:d1:20:0b:16:49:c2:65:98:0f:a5:52:32:ce:
d7:f9:80:01:34:ce:17:08:d5:51:d2:e7:87:aa:0c:
61:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A6:A5:BB:63:41:46:B3:93:3C:DA:17:6A:7A:3A:45:AD:F7:17:16
X509v3 Authority Key Identifier:
keyid:15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a0:67:03:8d:88:50:0e:0b:0a:19:62:5f:d5:59:87:2c:b3:
91:a7:ec:5c:3a:56:18:a0:40:67:3d:21:81:e3:83:73:b8:32:
5f:fb:33:1b:3e:23:44:40:e3:be:f2:60:61:39:fd:8b:2d:5b:
67:2a:6c:e6:cf:78:af:31:ee:f2:4e:d8:d2:02:c8:14:11:4c:
1d:7f:88:95:ba:b3:e4:f0:16:c7:45:1e:7e:c2:d1:b7:8a:3d:
21:57:51:1a:b1:5e:94:c8:75:d8:9b:7b:ab:fc:50:14:ca:4f:
7e:9c:63:03:e7:2f:fd:ab:70:a0:71:bc:ed:8f:b2:27:65:17:
3f:c1:86:f8:63:a0:88:61:ad:98:8a:65:fc:7b:f6:33:8a:55:
2d:25:82:7b:71:f6:78:7b:f9:d3:2d:05:91:8f:6b:1c:ba:3e:
cc:48:d3:16:5f:6a:30:12:72:6e:fe:2a:d6:d1:b1:3d:7f:b8:
de:16:58:d7:94:5c:63:99:40:62:17:d7:65:f7:92:29:d3:2d:
34:5a:03:92:a2:29:37:8c:40:eb:64:cd:33:a7:63:86:9b:0d:
01:02:0c:24:91:f1:1b:e8:75:77:7b:ab:54:8b:3a:12:5a:c8:
1f:8d:0e:de:42:b6:c9:34:2f:62:9c:5b:74:36:e2:27:a7:a4:
75:0f:15:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkW9cDD4uD9iqHoFdOG8wOmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NGUyZjg1MzYxZmY1ZDA2MzA5YzI1Njg0YjkwOGQ3Yjcw
MjQzOWIwHhcNMjUwOTA0MjMwMDI4WhcNMjUwOTA1MjMwMDI4WjAzMTEwLwYDVQQD
EyhiZmE2YTViYjYzNDE0NmIzOTMzY2RhMTc2YTdhM2E0NWFkZjcxNzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGoR11EMgJBq36Fcdk0MP4CkleMD
gtczi8Mcoo8YJMOeEhCDAoQgc5051mlHPIYBjqtQWdMW87oEmxNjMmF15W/eLP+V
meZJ7EW3gpzxFjSyO1Lvzj5GWwSugnOk2xEYq0L1H1JWvoTz74kGm0nu1T5BY74o
5YGBapz5CPBTtKN5MDwI8SVrN4xFa4CJPLEdXWq8+QM9UxEqypWUCeGBUDdncR4f
SE+Rm8Xu/eMmAbO66kNubhqvySaakl+7BfpSn3lsAK4P2c9kf2946i9jTfigEaj8
e9hJhpOZDk4jxgtyB9EgCxZJwmWYD6VSMs7X+YABNM4XCNVR0ueHqgxhgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+mpbtjQUazkzzaF2p6OkWt9xcWMB8GA1UdIwQY
MBaAFBVOL4U2H/XQYwnCVoS5CNe3AkObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlU0dmhUWWY5ZEJqQ2NKV2hMa0kxN2NDUTVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yNzViOGMtZjNiOC00ZGNhLTg5NGEt
NTUyODg5MGY5ZGIzLzEvRlU0dmhUWWY5ZEJqQ2NKV2hMa0kxN2NDUTVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yNzViOGMtZjNiOC00ZGNhLTg5NGEtNTUyODg5MGY5ZGIz
LzEvRlU0dmhUWWY5ZEJqQ2NKV2hMa0kxN2NDUTVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6BnA42I
UA4LChliX9VZhyyzkafsXDpWGKBAZz0hgeODc7gyX/szGz4jREDjvvJgYTn9iy1b
Zyps5s94rzHu8k7Y0gLIFBFMHX+Ilbqz5PAWx0UefsLRt4o9IVdRGrFelMh12Jt7
q/xQFMpPfpxjA+cv/atwoHG87Y+yJ2UXP8GG+GOgiGGtmIpl/Hv2M4pVLSWCe3H2
eHv50y0FkY9rHLo+zEjTFl9qMBJybv4q1tGxPX+43hZY15RcY5lAYhfXZfeSKdMt
NFoDkqIpN4xA62TNM6djhpsNAQIMJJHxG+h1d3urVIs6ElrIH40O3kK2yTQvYpxb
dDbiJ6ekdQ8VqQ==
-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:14 2025 by rpki-client