Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
File: FdaRyV0UuLzeZpKgMgzA4odWsFk.mft (raw, json)
Hash identifier: YFV56CEmzu+K88/DRw8752IC4hdfqsv+G12r8MaQub8=
Subject key identifier: 17:EF:9C:FE:4A:F5:7A:45:AC:1F:03:37:7A:8C:B8:AB:19:82:F8:EA
Authority key identifier: 15:D6:91:C9:5D:14:B8:BC:DE:66:92:A0:32:0C:C0:E2:87:56:B0:59
Certificate issuer: /CN=15d691c95d14b8bcde6692a0320cc0e28756b059
Certificate serial: 0197499F4CA204FB10B4EA36C9DB9FD2355C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
Manifest number: 03AA
Signing time: Sat 07 Jun 2025 09:01:05 +0000
Manifest this update: Sat 07 Jun 2025 09:01:05 +0000
Manifest next update: Sun 08 Jun 2025 09:01:05 +0000
Files and hashes: 1: FdaRyV0UuLzeZpKgMgzA4odWsFk.crl (hash: anp/Np0Bo5FFcBXdhdzAYMGACe4iIIi8OUcij6jyRIg=)
2: l3kIS-H41zLKlD417TNejtnJFY4.roa (hash: FXoM//hoNobYIufdMl7hBHWJsSDmxoPmDOYAZonvSC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:4c:a2:04:fb:10:b4:ea:36:c9:db:9f:d2:35:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15d691c95d14b8bcde6692a0320cc0e28756b059
Validity
Not Before: Jun 7 09:01:05 2025 GMT
Not After : Jun 8 09:01:05 2025 GMT
Subject: CN=17ef9cfe4af57a45ac1f03377a8cb8ab1982f8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:7f:4f:31:08:20:8a:f5:a6:08:40:8e:c3:
a0:2b:69:80:48:d2:3f:d4:5b:76:fd:63:d6:de:8f:
f6:21:2a:b2:f3:97:b6:1b:7e:3a:38:65:79:3c:c7:
76:33:9d:4c:13:0f:eb:92:56:84:49:87:fe:53:9c:
ec:9e:7b:07:13:04:c1:d8:06:c8:96:38:ba:f5:10:
39:00:f9:1a:cc:75:09:1a:b8:8e:43:44:8f:57:37:
09:c4:5c:7f:e6:0f:b9:11:54:a4:91:db:be:b2:a3:
c2:79:7e:9a:23:a5:c4:21:85:be:3f:f3:39:2a:c3:
33:04:60:35:48:66:99:03:f3:86:97:5b:b1:3b:f9:
8f:f7:74:74:d7:56:e1:40:1a:63:2b:1b:d7:bf:2f:
b1:bd:35:34:c4:57:b0:6f:1e:3c:10:51:0b:a1:cc:
0c:c6:39:15:fb:08:a9:25:c8:3e:95:09:27:82:71:
41:22:c4:33:8e:ed:64:fb:7e:4e:1c:91:e7:0b:d4:
45:d1:9a:a9:42:7b:06:3d:b3:34:02:12:d8:67:ba:
d6:72:d2:87:5e:97:66:e1:16:7b:06:c1:c4:ae:31:
e6:34:1a:86:3b:b1:fd:4b:ed:80:2e:9c:9f:7e:c6:
5a:d5:61:5b:15:63:f5:b4:86:ba:91:25:33:fc:8a:
6f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EF:9C:FE:4A:F5:7A:45:AC:1F:03:37:7A:8C:B8:AB:19:82:F8:EA
X509v3 Authority Key Identifier:
keyid:15:D6:91:C9:5D:14:B8:BC:DE:66:92:A0:32:0C:C0:E2:87:56:B0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c8:6c:2b:bd:51:5b:9c:b1:18:9a:e7:31:09:7f:2b:0f:8c:
8f:ba:f6:a6:aa:96:70:01:b1:65:c4:ce:43:a3:b5:a0:3f:75:
e8:e6:a6:cd:d5:33:12:93:3e:ab:ed:f9:2c:7c:c5:85:97:d9:
af:18:3d:b1:35:7a:09:fa:3e:64:0c:ac:db:cb:68:da:9b:13:
21:f4:67:ef:f6:a9:56:c4:2c:65:cb:15:94:0e:1b:50:79:51:
6a:8b:1e:ab:cd:3b:5f:1c:e9:62:70:b8:88:24:64:18:0e:8b:
83:af:f9:fe:a3:0b:59:1f:a1:36:a8:05:e6:25:7e:a4:34:57:
76:4e:bb:1f:f5:bc:22:64:ae:ff:44:02:f9:6c:17:c0:87:10:
91:7c:35:c2:fb:28:60:05:b3:1a:91:64:e4:76:f2:33:ab:0b:
28:b4:68:df:97:dc:6d:42:de:b4:b6:8a:ec:57:45:58:c7:cd:
c0:b1:1c:cb:d8:57:41:ee:5e:c6:81:bc:54:a1:c6:71:d2:75:
ca:ee:0a:5d:83:64:7f:0e:4e:88:81:f3:bd:9b:d5:51:94:a0:
33:f8:29:0c:78:66:f5:31:20:6f:d9:0d:e3:ac:9c:ee:cf:a1:
c5:75:d2:9b:c8:4d:34:f3:ce:b4:9f:69:b5:b6:b0:1a:ca:17:
ba:77:89:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJn0yiBPsQtOo2yduf0jVcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZDY5MWM5NWQxNGI4YmNkZTY2OTJhMDMyMGNjMGUyODc1
NmIwNTkwHhcNMjUwNjA3MDkwMTA1WhcNMjUwNjA4MDkwMTA1WjAzMTEwLwYDVQQD
EygxN2VmOWNmZTRhZjU3YTQ1YWMxZjAzMzc3YThjYjhhYjE5ODJmOGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzp/TzEIIIr1pghAjsOgK2mASNI/
1Ft2/WPW3o/2ISqy85e2G346OGV5PMd2M51MEw/rklaESYf+U5zsnnsHEwTB2AbI
lji69RA5APkazHUJGriOQ0SPVzcJxFx/5g+5EVSkkdu+sqPCeX6aI6XEIYW+P/M5
KsMzBGA1SGaZA/OGl1uxO/mP93R011bhQBpjKxvXvy+xvTU0xFewbx48EFELocwM
xjkV+wipJcg+lQkngnFBIsQzju1k+35OHJHnC9RF0ZqpQnsGPbM0AhLYZ7rWctKH
Xpdm4RZ7BsHErjHmNBqGO7H9S+2ALpyffsZa1WFbFWP1tIa6kSUz/IpvfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfvnP5K9XpFrB8DN3qMuKsZgvjqMB8GA1UdIwQY
MBaAFBXWkcldFLi83maSoDIMwOKHVrBZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmRhUnlWMFV1THplWnBLZ01nekE0b2RXc0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81ZDZlMjktOTQyZi00Y2FmLTk4YTgt
ZmQ1ZDU1YjYxZWM0LzEvRmRhUnlWMFV1THplWnBLZ01nekE0b2RXc0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81ZDZlMjktOTQyZi00Y2FmLTk4YTgtZmQ1ZDU1YjYxZWM0
LzEvRmRhUnlWMFV1THplWnBLZ01nekE0b2RXc0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlshsK71R
W5yxGJrnMQl/Kw+Mj7r2pqqWcAGxZcTOQ6O1oD916OamzdUzEpM+q+35LHzFhZfZ
rxg9sTV6Cfo+ZAys28to2psTIfRn7/apVsQsZcsVlA4bUHlRaoseq807XxzpYnC4
iCRkGA6Lg6/5/qMLWR+hNqgF5iV+pDRXdk67H/W8ImSu/0QC+WwXwIcQkXw1wvso
YAWzGpFk5HbyM6sLKLRo35fcbULetLaK7FdFWMfNwLEcy9hXQe5exoG8VKHGcdJ1
yu4KXYNkfw5OiIHzvZvVUZSgM/gpDHhm9TEgb9kN46yc7s+hxXXSm8hNNPPOtJ9p
tbawGsoXuneJZA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:59:29 2025 by rpki-client