Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
File: F34R9SM-kzmZoqDGiQP8J1rkWeY.mft (raw, json)
Hash identifier: Jz9mEecLUKtEX9KvXUPlvur6CDblVkmEKV7pPv9+LZA=
Subject key identifier: 83:77:72:6A:A4:CF:5C:3A:01:D8:09:52:50:A7:41:F8:02:E1:5B:CF
Authority key identifier: 17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
Certificate issuer: /CN=177e11f5233e933999a2a0c68903fc275ae459e6
Certificate serial: 0197CC4CC7D45555BD7E94E6512C56BE5A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
Manifest number: 0BF1
Signing time: Wed 02 Jul 2025 18:01:13 +0000
Manifest this update: Wed 02 Jul 2025 18:01:13 +0000
Manifest next update: Thu 03 Jul 2025 18:01:13 +0000
Files and hashes: 1: F34R9SM-kzmZoqDGiQP8J1rkWeY.crl (hash: 5bpRkyYvjcGBe+DkUkwnbwEJvc5G/W7ubh3MYxpV/lo=)
2: V-SPBonH-GE9ewbFSO5NODHxd8U.roa (hash: pNam+wwq47C4Qg+Kyg4fIGCIT+ztn7vo1w+K7kvIl84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4c:c7:d4:55:55:bd:7e:94:e6:51:2c:56:be:5a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177e11f5233e933999a2a0c68903fc275ae459e6
Validity
Not Before: Jul 2 18:01:13 2025 GMT
Not After : Jul 3 18:01:13 2025 GMT
Subject: CN=8377726aa4cf5c3a01d8095250a741f802e15bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c7:e9:27:23:c2:3f:05:75:01:89:fe:7b:29:
65:79:b5:9f:62:e7:97:a3:dd:d0:8e:e9:50:6e:9a:
70:d3:a0:d5:f3:ce:b1:f1:87:98:b4:64:64:46:45:
03:b1:2e:e1:e2:e4:6c:d3:91:60:e1:33:92:83:bc:
a6:16:7e:00:86:0f:ec:20:77:1f:23:b5:1f:b2:d5:
52:31:77:a5:25:25:05:10:de:76:2c:b2:bd:06:34:
0f:dc:3a:3b:3d:53:e3:b4:4f:d9:5f:87:8e:dd:9b:
06:26:29:59:bd:cd:ba:89:1e:8e:3c:7f:27:d1:3e:
a9:47:e2:61:25:0c:81:63:74:c2:d4:6c:1f:b8:fc:
27:84:d2:01:bc:c6:68:d3:31:d8:1f:df:b4:53:80:
df:c6:fc:92:49:35:dc:9a:ab:79:ab:da:db:cb:1b:
1c:b5:d0:de:b1:ea:44:00:62:a8:e9:d3:22:cf:7d:
18:45:52:b0:27:13:f4:68:67:ff:52:de:eb:c8:12:
3e:23:2a:ac:fd:31:51:a3:36:60:4b:05:1e:e1:56:
e4:33:55:cc:69:e8:a0:11:1c:a4:00:cc:74:70:41:
10:84:29:e3:b0:5e:a8:9a:35:89:8b:45:c1:66:06:
f3:66:fd:28:13:0a:ac:c2:3f:d2:d0:f2:02:95:c2:
f0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:77:72:6A:A4:CF:5C:3A:01:D8:09:52:50:A7:41:F8:02:E1:5B:CF
X509v3 Authority Key Identifier:
keyid:17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:06:fd:9f:d5:f4:04:07:e2:65:3a:31:58:ce:56:0f:f3:5d:
fb:6e:70:5d:56:4f:0c:2d:3c:3d:6e:25:de:d7:65:46:f4:a4:
bd:b6:60:08:00:11:94:c5:dc:6d:04:f9:07:5c:4d:bd:da:51:
8d:ce:89:1c:c5:fe:5e:29:db:d7:15:fe:02:d3:b0:c5:90:68:
e9:60:ae:37:4f:32:c8:c1:9e:45:0b:78:20:5f:93:53:e8:00:
2c:29:ba:6d:91:01:24:26:fa:d9:55:06:3f:b7:a2:64:70:29:
27:e3:f9:c7:70:4f:6c:89:a4:b1:61:2b:fc:58:39:dd:d2:b8:
50:66:38:c7:5e:3a:28:34:a9:29:f0:aa:dd:91:17:71:a4:5f:
a3:3b:13:be:a1:b7:1f:2b:8b:2c:c7:47:66:37:bc:2a:4b:79:
3d:d8:18:e7:26:f3:d4:05:63:fa:78:ce:82:74:15:65:4b:20:
91:39:08:26:1d:65:80:2c:cd:50:72:12:8c:06:6f:53:cc:83:
06:06:7e:50:e4:ec:b9:45:20:3d:87:91:28:0a:ab:f8:ca:83:
e5:9b:4f:bb:ef:77:7a:30:07:9c:ba:a6:4b:59:e4:a5:c2:d3:
75:b8:60:16:f4:9c:aa:4b:7e:68:5f:9e:f7:4a:d8:2e:82:54:
27:86:a5:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfMTMfUVVW9fpTmUSxWvlorMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3N2UxMWY1MjMzZTkzMzk5OWEyYTBjNjg5MDNmYzI3NWFl
NDU5ZTYwHhcNMjUwNzAyMTgwMTEzWhcNMjUwNzAzMTgwMTEzWjAzMTEwLwYDVQQD
Eyg4Mzc3NzI2YWE0Y2Y1YzNhMDFkODA5NTI1MGE3NDFmODAyZTE1YmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcfpJyPCPwV1AYn+eyllebWfYueX
o93QjulQbppw06DV886x8YeYtGRkRkUDsS7h4uRs05Fg4TOSg7ymFn4Ahg/sIHcf
I7UfstVSMXelJSUFEN52LLK9BjQP3Do7PVPjtE/ZX4eO3ZsGJilZvc26iR6OPH8n
0T6pR+JhJQyBY3TC1GwfuPwnhNIBvMZo0zHYH9+0U4DfxvySSTXcmqt5q9rbyxsc
tdDesepEAGKo6dMiz30YRVKwJxP0aGf/Ut7ryBI+Iyqs/TFRozZgSwUe4VbkM1XM
aeigERykAMx0cEEQhCnjsF6omjWJi0XBZgbzZv0oEwqswj/S0PIClcLwrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIN3cmqkz1w6AdgJUlCnQfgC4VvPMB8GA1UdIwQY
MBaAFBd+EfUjPpM5maKgxokD/Cda5FnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjM0UjlTTS1rem1ab3FER2lRUDhKMXJrV2VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xMTlkY2QtODRlMS00OGQ1LWEyODAt
YWEwOWQ2ZTFmZmVlLzEvRjM0UjlTTS1rem1ab3FER2lRUDhKMXJrV2VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8xMTlkY2QtODRlMS00OGQ1LWEyODAtYWEwOWQ2ZTFmZmVl
LzEvRjM0UjlTTS1rem1ab3FER2lRUDhKMXJrV2VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAngb9n9X0
BAfiZToxWM5WD/Nd+25wXVZPDC08PW4l3tdlRvSkvbZgCAARlMXcbQT5B1xNvdpR
jc6JHMX+Xinb1xX+AtOwxZBo6WCuN08yyMGeRQt4IF+TU+gALCm6bZEBJCb62VUG
P7eiZHApJ+P5x3BPbImksWEr/Fg53dK4UGY4x146KDSpKfCq3ZEXcaRfozsTvqG3
HyuLLMdHZje8Kkt5PdgY5ybz1AVj+njOgnQVZUsgkTkIJh1lgCzNUHISjAZvU8yD
BgZ+UOTsuUUgPYeRKAqr+MqD5ZtPu+93ejAHnLqmS1nkpcLTdbhgFvScqkt+aF+e
90rYLoJUJ4al9Q==
-----END CERTIFICATE-----
Generated at Wed Jul 2 20:04:11 2025 by rpki-client