Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
File: F0ATLlBfeLrQES-RtVmGh5U1ysA.mft (raw, json)
Hash identifier: ODXBHH+XhZSbK6Vt/9lBVMAWzs2FJ4Od13mzyOkvC/M=
Subject key identifier: 31:9F:A4:85:A7:7F:A0:6B:27:FF:58:C1:9F:D5:8D:36:C9:0C:09:54
Authority key identifier: 17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
Certificate issuer: /CN=1740132e505f78bad0112f91b55986879535cac0
Certificate serial: 01974AE83AACC70AE3A225AB1AB9A1BA3A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
Manifest number: 0A2B
Signing time: Sat 07 Jun 2025 15:00:22 +0000
Manifest this update: Sat 07 Jun 2025 15:00:22 +0000
Manifest next update: Sun 08 Jun 2025 15:00:22 +0000
Files and hashes: 1: F0ATLlBfeLrQES-RtVmGh5U1ysA.crl (hash: xnjEM3jfR0Fq5Z0sZ7+VsZJIEaLZCcvSPA8KrSmDXkY=)
2: oxrkuug8AeqnDXiePFRxFStRfUU.roa (hash: 162L3/TFgaGzm3cQaHpx46n6luZunWT9NHyefRNQMS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:3a:ac:c7:0a:e3:a2:25:ab:1a:b9:a1:ba:3a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1740132e505f78bad0112f91b55986879535cac0
Validity
Not Before: Jun 7 15:00:22 2025 GMT
Not After : Jun 8 15:00:22 2025 GMT
Subject: CN=319fa485a77fa06b27ff58c19fd58d36c90c0954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:41:2d:f7:35:23:56:de:e7:91:38:ba:ea:
1e:3d:67:30:bd:bf:41:6d:f1:52:ec:d8:31:6c:8d:
9b:34:2a:d2:3e:35:29:6a:b1:34:80:e2:5a:98:41:
9e:27:ac:dd:a4:ec:11:14:0e:ab:4b:d6:5d:fc:f4:
ac:8f:e7:40:9a:11:00:7d:f3:db:0a:e4:46:40:b0:
82:f2:9a:99:0b:ad:c5:23:81:44:01:25:cd:57:df:
8c:e2:a8:0e:2b:1d:af:0e:2f:71:3c:e1:fe:b3:55:
96:21:39:df:6e:99:08:3f:60:2e:8f:25:e1:8a:0b:
6d:82:e7:e2:38:4c:93:6c:e2:53:9a:3e:36:e5:99:
4b:0e:3a:01:5e:74:60:d8:fd:bd:3f:94:f9:2a:38:
c6:47:11:4a:6a:c4:f0:77:90:10:d9:0f:53:08:06:
31:ce:ab:f3:e1:5a:95:f0:71:59:5b:64:6c:f1:3e:
57:01:7d:ec:fd:51:b0:45:04:ec:ea:58:7a:6f:ce:
c3:c9:b2:8c:5f:fa:d0:e7:cb:c1:08:d8:1d:9a:9a:
c4:00:3a:ce:cf:96:c5:d0:c1:9e:b9:1a:0b:0f:db:
bc:d1:fb:8d:0f:76:8d:a0:6f:54:13:f0:81:cb:7f:
b2:60:bf:36:2e:20:6c:53:77:8a:3c:4c:64:9f:a1:
ff:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9F:A4:85:A7:7F:A0:6B:27:FF:58:C1:9F:D5:8D:36:C9:0C:09:54
X509v3 Authority Key Identifier:
keyid:17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:8b:5d:ce:fa:37:b9:60:67:cd:32:3c:5b:5e:03:d1:36:26:
85:bd:96:4c:a3:06:d1:47:95:4b:1b:85:23:4e:ff:ae:84:45:
2e:7c:ed:10:27:8d:a1:23:b8:0e:97:65:a0:7c:d4:72:61:e3:
17:77:79:9b:3e:71:4e:33:74:fd:08:1c:19:1f:38:08:b1:cf:
fd:1d:35:46:a7:5f:94:47:8f:b6:6d:c2:f4:ba:0b:50:42:b1:
3e:ab:2e:b0:7e:a8:d5:27:c7:e9:34:1e:96:a0:b2:89:75:bd:
16:5c:0f:7b:b0:a1:53:63:08:ce:36:ac:5e:af:c0:6c:61:f2:
58:3a:dd:cb:54:b1:79:2d:c7:b6:80:3c:8f:38:20:a3:72:40:
24:c6:76:e6:dd:fa:5f:45:c7:5b:ed:b6:84:18:2d:df:11:21:
24:c0:1c:f6:55:38:16:50:12:a2:fe:fd:85:62:8a:45:76:a8:
dd:08:2f:c4:6b:d6:2a:8c:0f:32:4d:e2:aa:2a:52:ea:ec:cb:
22:55:3f:2a:d1:a8:45:54:b9:c9:15:dc:05:27:4a:75:2e:56:
03:0d:0d:0d:50:2c:87:e5:cd:f9:89:34:0a:bd:d5:28:02:1e:
95:95:56:6c:4b:e8:cd:10:d0:d8:59:80:81:e2:fd:c7:27:b9:
31:7a:85:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6DqsxwrjoiWrGrmhujp5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NDAxMzJlNTA1Zjc4YmFkMDExMmY5MWI1NTk4Njg3OTUz
NWNhYzAwHhcNMjUwNjA3MTUwMDIyWhcNMjUwNjA4MTUwMDIyWjAzMTEwLwYDVQQD
EygzMTlmYTQ4NWE3N2ZhMDZiMjdmZjU4YzE5ZmQ1OGQzNmM5MGMwOTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVdBLfc1I1be55E4uuoePWcwvb9B
bfFS7NgxbI2bNCrSPjUparE0gOJamEGeJ6zdpOwRFA6rS9Zd/PSsj+dAmhEAffPb
CuRGQLCC8pqZC63FI4FEASXNV9+M4qgOKx2vDi9xPOH+s1WWITnfbpkIP2AujyXh
igttgufiOEyTbOJTmj425ZlLDjoBXnRg2P29P5T5KjjGRxFKasTwd5AQ2Q9TCAYx
zqvz4VqV8HFZW2Rs8T5XAX3s/VGwRQTs6lh6b87DybKMX/rQ58vBCNgdmprEADrO
z5bF0MGeuRoLD9u80fuND3aNoG9UE/CBy3+yYL82LiBsU3eKPExkn6H/WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGfpIWnf6BrJ/9YwZ/VjTbJDAlUMB8GA1UdIwQY
MBaAFBdAEy5QX3i60BEvkbVZhoeVNcrAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjBBVExsQmZlTHJRRVMtUnRWbUdoNVUxeXNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9mYmJkZmEtZGNmYS00ZGVkLTk3YTEt
NGUzODA3YTM4MTU4LzEvRjBBVExsQmZlTHJRRVMtUnRWbUdoNVUxeXNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9mYmJkZmEtZGNmYS00ZGVkLTk3YTEtNGUzODA3YTM4MTU4
LzEvRjBBVExsQmZlTHJRRVMtUnRWbUdoNVUxeXNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr4tdzvo3
uWBnzTI8W14D0TYmhb2WTKMG0UeVSxuFI07/roRFLnztECeNoSO4DpdloHzUcmHj
F3d5mz5xTjN0/QgcGR84CLHP/R01RqdflEePtm3C9LoLUEKxPqsusH6o1SfH6TQe
lqCyiXW9FlwPe7ChU2MIzjasXq/AbGHyWDrdy1SxeS3HtoA8jzggo3JAJMZ25t36
X0XHW+22hBgt3xEhJMAc9lU4FlASov79hWKKRXao3QgvxGvWKowPMk3iqipS6uzL
IlU/KtGoRVS5yRXcBSdKdS5WAw0NDVAsh+XN+Yk0Cr3VKAIelZVWbEvozRDQ2FmA
geL9xye5MXqFFg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:53:53 2025 by rpki-client