Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
File: Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft (raw, json)
Hash identifier: AEnNKQ8z0QAjoP+tlkNlyCqSSoDk+kIxZNSimvtlp54=
Subject key identifier: B7:AA:33:DA:EF:98:06:9E:AF:4F:51:73:E4:6E:50:5D:BE:56:4B:1C
Authority key identifier: 16:ED:CF:EC:9F:6E:32:5B:C2:C3:9D:24:19:3F:83:0F:43:18:31:35
Certificate issuer: /CN=16edcfec9f6e325bc2c39d24193f830f43183135
Certificate serial: 01976C620B3876EB8E9A2A23A6DF2E234211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
Manifest number: 07DF
Signing time: Sat 14 Jun 2025 03:00:54 +0000
Manifest this update: Sat 14 Jun 2025 03:00:54 +0000
Manifest next update: Sun 15 Jun 2025 03:00:54 +0000
Files and hashes: 1: Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl (hash: 5cKgXMhbyGkoNw4si55k+sPQlSEiIhKOo7+nAtPXz4g=)
2: a6yjRQPaEVSmn2Af_50hlyGwo-8.roa (hash: f+GvZNBih0mNs6EfHvNm1HRb2NXRxOiIU+W+BUZl09g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:0b:38:76:eb:8e:9a:2a:23:a6:df:2e:23:42:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16edcfec9f6e325bc2c39d24193f830f43183135
Validity
Not Before: Jun 14 03:00:54 2025 GMT
Not After : Jun 15 03:00:54 2025 GMT
Subject: CN=b7aa33daef98069eaf4f5173e46e505dbe564b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:80:a1:68:bc:5c:62:7a:c4:f6:73:5f:9b:
22:90:96:d7:1e:82:e2:94:6b:b4:3c:ad:d9:1c:a7:
dd:59:f7:d5:f7:e4:58:19:6d:bc:2b:be:89:e3:c6:
12:91:25:40:96:21:19:c1:80:5f:5a:44:0a:4c:88:
51:84:61:ca:29:20:d4:8c:41:8d:53:3d:20:c6:a7:
16:b1:e1:b2:1b:72:86:e1:fd:ee:b9:3f:63:50:1a:
95:4f:f3:2e:b2:1c:7a:85:16:5d:d9:1c:a0:e7:05:
57:43:fb:3d:0a:5d:93:96:f8:ab:33:27:88:ed:c7:
d0:39:1d:da:5b:7c:15:dd:4a:bc:9f:76:3f:b4:a2:
1e:6f:49:fa:f6:24:15:da:22:67:2d:89:4d:06:13:
49:a4:ff:1d:67:06:36:bb:e1:6e:9f:dd:7e:dc:87:
5c:e7:bc:ac:7d:ed:69:9e:7b:68:63:81:87:1a:d1:
cf:6b:ce:33:d2:6e:0e:43:4e:03:24:b3:73:85:d9:
bd:6d:06:ba:d8:5b:dd:62:3a:e7:3c:b3:a7:7e:28:
4f:ef:98:ac:8a:c5:e4:36:b8:93:47:b7:85:b5:8c:
70:56:9f:a8:2b:77:10:72:6b:9a:c8:c3:ba:82:16:
bb:8e:f3:ef:0a:ea:51:30:bf:58:39:c9:48:bb:d1:
c5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AA:33:DA:EF:98:06:9E:AF:4F:51:73:E4:6E:50:5D:BE:56:4B:1C
X509v3 Authority Key Identifier:
keyid:16:ED:CF:EC:9F:6E:32:5B:C2:C3:9D:24:19:3F:83:0F:43:18:31:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b1:0f:f6:06:34:c8:67:ce:09:94:55:a6:a4:75:a2:53:54:
17:dc:f5:95:f7:63:98:9b:a6:ff:2f:c4:cc:96:7a:05:78:7d:
e7:07:cc:38:d4:05:4f:6b:40:f8:33:e5:cf:2e:c0:bc:5b:56:
4a:07:d1:1c:44:09:a0:1a:a8:6e:8b:7f:ef:92:0f:ea:e0:ce:
59:07:bc:49:89:af:1a:b8:4b:c1:2e:c7:ac:4e:24:57:b8:b7:
53:15:41:b4:41:f4:af:36:ad:3b:fc:f6:dd:52:45:ec:6c:c6:
d8:70:21:d6:37:48:a9:b8:77:68:52:de:6c:92:1a:75:12:69:
ac:31:1d:ba:20:ca:98:70:cd:d0:e2:0a:58:3e:30:74:81:fe:
24:75:c3:88:1a:54:36:53:aa:40:ea:7e:fb:86:2a:78:95:ed:
8b:7f:93:93:8d:57:8f:19:d6:d4:ee:f0:15:3a:18:a8:d5:04:
29:83:5a:be:81:ef:d1:95:0d:8f:08:a2:29:fb:e6:63:b6:6b:
e8:86:4b:a2:f2:cf:df:ce:a1:f0:e9:13:dd:4b:b4:3d:76:9c:
b1:e5:5e:f8:da:27:dc:78:ea:55:a8:10:47:43:bf:69:b5:77:
bd:45:07:f5:c8:88:ff:c9:7a:ab:5a:24:9c:2a:1e:3f:f5:cb:
ed:b2:da:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYgs4duuOmiojpt8uI0IRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZWRjZmVjOWY2ZTMyNWJjMmMzOWQyNDE5M2Y4MzBmNDMx
ODMxMzUwHhcNMjUwNjE0MDMwMDU0WhcNMjUwNjE1MDMwMDU0WjAzMTEwLwYDVQQD
EyhiN2FhMzNkYWVmOTgwNjllYWY0ZjUxNzNlNDZlNTA1ZGJlNTY0YjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf+AoWi8XGJ6xPZzX5sikJbXHoLi
lGu0PK3ZHKfdWffV9+RYGW28K76J48YSkSVAliEZwYBfWkQKTIhRhGHKKSDUjEGN
Uz0gxqcWseGyG3KG4f3uuT9jUBqVT/Mushx6hRZd2Ryg5wVXQ/s9Cl2TlvirMyeI
7cfQOR3aW3wV3Uq8n3Y/tKIeb0n69iQV2iJnLYlNBhNJpP8dZwY2u+Fun91+3Idc
57ysfe1pnntoY4GHGtHPa84z0m4OQ04DJLNzhdm9bQa62FvdYjrnPLOnfihP75is
isXkNriTR7eFtYxwVp+oK3cQcmuayMO6gha7jvPvCupRML9YOclIu9HFuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLeqM9rvmAaer09Rc+RuUF2+VkscMB8GA1UdIwQY
MBaAFBbtz+yfbjJbwsOdJBk/gw9DGDE1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnUzUDdKOXVNbHZDdzUwa0dULUREME1ZTVRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC81OTExZDUtMTYwZS00NjM1LTkyOTct
NWU1YjA0NjkzYWRjLzEvRnUzUDdKOXVNbHZDdzUwa0dULUREME1ZTVRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC81OTExZDUtMTYwZS00NjM1LTkyOTctNWU1YjA0NjkzYWRj
LzEvRnUzUDdKOXVNbHZDdzUwa0dULUREME1ZTVRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAorEP9gY0
yGfOCZRVpqR1olNUF9z1lfdjmJum/y/EzJZ6BXh95wfMONQFT2tA+DPlzy7AvFtW
SgfRHEQJoBqobot/75IP6uDOWQe8SYmvGrhLwS7HrE4kV7i3UxVBtEH0rzatO/z2
3VJF7GzG2HAh1jdIqbh3aFLebJIadRJprDEduiDKmHDN0OIKWD4wdIH+JHXDiBpU
NlOqQOp++4YqeJXti3+Tk41XjxnW1O7wFToYqNUEKYNavoHv0ZUNjwiiKfvmY7Zr
6IZLovLP386h8OkT3Uu0PXacseVe+Non3HjqVagQR0O/abV3vUUH9ciI/8l6q1ok
nCoeP/XL7bLakg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:50:41 2025 by rpki-client