Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
File: fiR7mB00T2vEwetCMx0jKDgWE3w.mft (raw, json)
Hash identifier: 8MUxehXJYKBqdOmhm3fbpWKQkrNChHazBMqOMQ07zcM=
Subject key identifier: A0:BE:1D:B2:EC:78:5B:72:C3:B0:F8:61:35:87:F1:95:B9:FF:42:4C
Authority key identifier: 7E:24:7B:98:1D:34:4F:6B:C4:C1:EB:42:33:1D:23:28:38:16:13:7C
Certificate issuer: /CN=7e247b981d344f6bc4c1eb42331d23283816137c
Certificate serial: 019770075A816F6E1C4A1D46A205648C79CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
Manifest number: 12A7
Signing time: Sat 14 Jun 2025 20:00:19 +0000
Manifest this update: Sat 14 Jun 2025 20:00:19 +0000
Manifest next update: Sun 15 Jun 2025 20:00:19 +0000
Files and hashes: 1: fiR7mB00T2vEwetCMx0jKDgWE3w.crl (hash: fw97pIkMjBR/zocZpdjaVmYNOU7ujs6/sgE98dr4MGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:5a:81:6f:6e:1c:4a:1d:46:a2:05:64:8c:79:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e247b981d344f6bc4c1eb42331d23283816137c
Validity
Not Before: Jun 14 20:00:19 2025 GMT
Not After : Jun 15 20:00:19 2025 GMT
Subject: CN=a0be1db2ec785b72c3b0f8613587f195b9ff424c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:38:0e:48:c4:1f:ff:37:3d:69:dc:6c:fe:fd:
4b:bb:20:38:be:4f:ab:ad:de:b8:31:45:7e:ab:01:
b2:33:d1:3b:45:39:8f:d7:68:fa:ae:b6:83:94:15:
54:b4:d7:cf:21:1f:29:36:3d:6a:95:3d:86:d1:6c:
54:cd:c0:76:13:c3:d5:07:e2:34:c9:a7:65:d3:08:
9c:02:5d:9f:76:4f:ee:14:4e:5e:63:37:df:08:11:
e4:07:5c:67:24:27:59:0c:19:ca:64:e4:f8:fc:da:
76:a8:31:a4:c1:f3:0c:c0:56:9c:55:42:7e:8b:bc:
5a:29:5b:b5:e8:db:7c:10:a1:1e:51:a6:ca:fc:46:
52:2c:25:39:ec:6d:81:57:9f:58:6d:f9:36:ed:db:
59:c8:38:e0:70:d2:f5:97:94:ee:df:7a:05:31:71:
64:c1:70:40:f0:53:db:2e:c3:a2:59:0a:81:fb:f6:
27:28:71:15:74:28:cd:f9:db:ba:04:a1:eb:e5:41:
df:dd:92:b3:df:83:ba:a6:3d:12:a0:79:9c:7f:33:
07:0c:3f:d6:1c:9d:3e:32:5a:ba:d6:e7:0d:26:62:
75:f7:eb:f2:88:4f:3a:a0:9f:b8:91:99:27:e1:30:
c6:23:6d:26:5f:2d:eb:e3:59:0e:34:be:83:30:85:
0f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BE:1D:B2:EC:78:5B:72:C3:B0:F8:61:35:87:F1:95:B9:FF:42:4C
X509v3 Authority Key Identifier:
keyid:7E:24:7B:98:1D:34:4F:6B:C4:C1:EB:42:33:1D:23:28:38:16:13:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0d:e1:61:f8:c3:91:b8:84:d2:3f:9b:b5:ea:21:61:5a:f4:
87:43:82:fd:5d:86:21:31:93:cd:28:8c:7f:ae:eb:c9:35:82:
36:f7:b2:89:1e:c9:87:46:f7:a0:0b:c8:6b:20:8b:9b:ad:dc:
e0:9e:46:65:39:5b:69:31:24:1f:95:ce:14:b3:c0:01:6f:e5:
71:59:f5:11:96:c7:4a:4b:2a:50:c3:ba:46:3a:9f:5e:bc:0f:
45:b6:cc:a2:72:d1:d9:a2:ef:c0:67:90:90:98:63:39:87:cd:
09:ef:f8:0f:c2:43:b8:a0:69:18:24:c9:a1:53:31:87:49:24:
d7:9f:c3:1a:64:f4:4e:e5:5f:98:a0:a4:17:7a:c2:ab:d6:0c:
b0:b3:cc:24:ca:c5:2e:83:6c:12:21:d5:5a:5c:ce:8f:d3:0a:
3b:58:44:36:af:18:a4:be:01:b9:70:d4:9b:41:22:76:1d:4f:
3d:24:d5:de:18:b8:88:5b:f2:5c:ec:6a:3d:b1:4d:82:70:fb:
9f:f8:e7:55:cb:0c:af:5f:cd:dd:ca:30:e2:13:2f:24:82:a6:
ac:cf:59:5b:e1:6f:46:eb:08:b6:d4:31:0d:7e:b1:4b:0c:e7:
be:ad:0a:f2:77:95:1b:31:22:cb:26:6e:bb:3c:71:16:7e:5a:
d4:ff:a8:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwB1qBb24cSh1GogVkjHnLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjQ3Yjk4MWQzNDRmNmJjNGMxZWI0MjMzMWQyMzI4Mzgx
NjEzN2MwHhcNMjUwNjE0MjAwMDE5WhcNMjUwNjE1MjAwMDE5WjAzMTEwLwYDVQQD
EyhhMGJlMWRiMmVjNzg1YjcyYzNiMGY4NjEzNTg3ZjE5NWI5ZmY0MjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDgOSMQf/zc9adxs/v1LuyA4vk+r
rd64MUV+qwGyM9E7RTmP12j6rraDlBVUtNfPIR8pNj1qlT2G0WxUzcB2E8PVB+I0
yadl0wicAl2fdk/uFE5eYzffCBHkB1xnJCdZDBnKZOT4/Np2qDGkwfMMwFacVUJ+
i7xaKVu16Nt8EKEeUabK/EZSLCU57G2BV59Ybfk27dtZyDjgcNL1l5Tu33oFMXFk
wXBA8FPbLsOiWQqB+/YnKHEVdCjN+du6BKHr5UHf3ZKz34O6pj0SoHmcfzMHDD/W
HJ0+Mlq61ucNJmJ19+vyiE86oJ+4kZkn4TDGI20mXy3r41kONL6DMIUPtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKC+HbLseFtyw7D4YTWH8ZW5/0JMMB8GA1UdIwQY
MBaAFH4ke5gdNE9rxMHrQjMdIyg4FhN8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlSN21CMDBUMnZFd2V0Q014MGpLRGdXRTN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny84M2ZlMDktYjUwZi00MmUwLTk5NWQt
NGRhZmY0MzUwMDAxLzEvZmlSN21CMDBUMnZFd2V0Q014MGpLRGdXRTN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny84M2ZlMDktYjUwZi00MmUwLTk5NWQtNGRhZmY0MzUwMDAx
LzEvZmlSN21CMDBUMnZFd2V0Q014MGpLRGdXRTN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdw3hYfjD
kbiE0j+bteohYVr0h0OC/V2GITGTzSiMf67ryTWCNveyiR7Jh0b3oAvIayCLm63c
4J5GZTlbaTEkH5XOFLPAAW/lcVn1EZbHSksqUMO6RjqfXrwPRbbMonLR2aLvwGeQ
kJhjOYfNCe/4D8JDuKBpGCTJoVMxh0kk15/DGmT0TuVfmKCkF3rCq9YMsLPMJMrF
LoNsEiHVWlzOj9MKO1hENq8YpL4BuXDUm0Eidh1PPSTV3hi4iFvyXOxqPbFNgnD7
n/jnVcsMr1/N3cow4hMvJIKmrM9ZW+FvRusIttQxDX6xSwznvq0K8neVGzEiyyZu
uzxxFn5a1P+oHA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:33:14 2025 by rpki-client