Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
File: FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft (raw, json)
Hash identifier: o5HISXELr/7CVQMM1N/Nxiq/p8UQY1paJXGloI06wAo=
Subject key identifier: F8:01:06:F0:D5:D5:69:1D:6C:59:C8:22:22:20:73:3D:DD:10:5D:EE
Authority key identifier: 15:15:E2:FE:F4:D3:12:45:DC:67:01:8B:EF:C3:37:4D:C0:F1:EC:68
Certificate issuer: /CN=1515e2fef4d31245dc67018befc3374dc0f1ec68
Certificate serial: 019748FA427EB74888825569EC36EB32F4B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 06:00:49 +0000
Manifest this update: Sat 07 Jun 2025 06:00:49 +0000
Manifest next update: Sun 08 Jun 2025 06:00:49 +0000
Files and hashes: 1: FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl (hash: BlwAclpFEsaowkHqD+R5i+jqQSmvLcueppVBgIpDsf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:42:7e:b7:48:88:82:55:69:ec:36:eb:32:f4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1515e2fef4d31245dc67018befc3374dc0f1ec68
Validity
Not Before: Jun 7 06:00:49 2025 GMT
Not After : Jun 8 06:00:49 2025 GMT
Subject: CN=f80106f0d5d5691d6c59c8222220733ddd105dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:40:66:f1:20:b3:a2:ca:80:2c:d4:fa:00:18:
71:07:ad:e3:1a:69:77:7f:e5:ae:83:9d:7d:b0:67:
44:84:ee:6c:b3:11:32:a1:f9:54:a3:94:06:b3:22:
1c:b1:c8:bf:34:56:f2:ea:23:fc:c1:cb:06:8b:1e:
88:1a:85:84:fa:5c:94:bc:aa:90:52:1f:56:71:88:
a4:dc:7a:ff:29:64:7b:53:6e:cb:7b:21:76:1c:c2:
c1:ad:fb:74:71:f6:15:b4:ad:79:7e:bc:f6:fe:14:
be:b1:3a:2b:a4:6a:f9:9a:d5:66:f0:03:b1:a4:39:
40:69:cf:04:21:83:3d:f0:2e:d4:77:0f:74:c6:c8:
7e:fb:be:4f:d3:ee:e8:9d:66:44:34:01:3e:97:91:
ec:f7:e3:58:a2:09:97:80:d2:41:b4:03:07:f8:9c:
65:13:62:2a:f9:f0:c9:a0:0f:6c:e9:bc:8b:73:70:
49:55:e8:65:20:84:71:26:b2:1b:8a:8d:70:e0:a4:
5c:f8:08:7a:10:c7:7f:61:c7:87:c1:2e:00:73:30:
77:f6:d5:e2:c4:4e:ca:b2:17:ff:58:e7:fe:bf:7b:
6c:1a:1e:ae:38:78:bf:ef:e9:6d:76:dc:fe:46:cd:
15:6d:a9:16:b7:82:8a:27:8d:e0:ce:87:13:3c:9a:
7e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:01:06:F0:D5:D5:69:1D:6C:59:C8:22:22:20:73:3D:DD:10:5D:EE
X509v3 Authority Key Identifier:
keyid:15:15:E2:FE:F4:D3:12:45:DC:67:01:8B:EF:C3:37:4D:C0:F1:EC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:34:c1:9b:7c:81:ec:ef:51:cd:a6:7c:39:99:c4:87:df:83:
85:f8:55:7b:7a:51:19:bf:b6:a1:03:ef:98:47:74:83:2e:fd:
c9:ba:04:1b:f5:47:d6:43:4e:c9:eb:38:02:d4:49:b1:19:7c:
d8:ea:77:63:52:53:ed:31:50:40:ba:df:4d:08:13:5b:4c:a1:
cd:75:6d:b1:4c:47:b7:01:f9:35:41:21:dd:7c:31:8d:53:1d:
2e:e0:80:9c:b8:51:15:98:5f:a3:c0:8b:99:d6:7a:4d:1c:4c:
47:65:07:2b:24:7e:c1:a4:fe:d2:64:cd:17:7d:b8:c2:2b:ee:
cb:9d:10:46:ce:8c:19:7e:53:e2:be:36:09:4d:3a:f7:16:de:
b9:6d:de:fb:86:f7:29:69:ac:41:d5:78:5d:58:da:a6:89:c3:
0c:e7:23:fd:2a:5d:cf:a8:40:cf:d5:3a:f4:82:03:f3:15:d5:
66:7d:fb:e6:c0:04:9e:b7:64:11:8a:c8:58:b5:3f:4c:a7:95:
ba:01:d8:a4:24:bb:d8:84:d7:9e:2c:d8:b7:64:27:7e:1c:63:
53:f2:d8:d5:cd:1d:45:c0:dd:59:82:b3:26:ae:ec:d6:34:3c:
05:85:78:c6:fb:f5:98:d3:a1:ca:38:7a:28:6d:8a:90:66:13:
b5:03:f0:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+kJ+t0iIglVp7DbrMvSxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MTVlMmZlZjRkMzEyNDVkYzY3MDE4YmVmYzMzNzRkYzBm
MWVjNjgwHhcNMjUwNjA3MDYwMDQ5WhcNMjUwNjA4MDYwMDQ5WjAzMTEwLwYDVQQD
EyhmODAxMDZmMGQ1ZDU2OTFkNmM1OWM4MjIyMjIwNzMzZGRkMTA1ZGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkBm8SCzosqALNT6ABhxB63jGml3
f+Wug519sGdEhO5ssxEyoflUo5QGsyIcsci/NFby6iP8wcsGix6IGoWE+lyUvKqQ
Uh9WcYik3Hr/KWR7U27LeyF2HMLBrft0cfYVtK15frz2/hS+sTorpGr5mtVm8AOx
pDlAac8EIYM98C7Udw90xsh++75P0+7onWZENAE+l5Hs9+NYogmXgNJBtAMH+Jxl
E2Iq+fDJoA9s6byLc3BJVehlIIRxJrIbio1w4KRc+Ah6EMd/YceHwS4AczB39tXi
xE7Kshf/WOf+v3tsGh6uOHi/7+ltdtz+Rs0VbakWt4KKJ43gzocTPJp+cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgBBvDV1WkdbFnIIiIgcz3dEF3uMB8GA1UdIwQY
MBaAFBUV4v700xJF3GcBi+/DN03A8exoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlJYaV92VFRFa1hjWndHTDc4TTNUY0R4N0dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iMGM5MzYtOTgzZC00MzkwLTg5NmEt
N2QxM2RkMjgzZTgwLzEvRlJYaV92VFRFa1hjWndHTDc4TTNUY0R4N0dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iMGM5MzYtOTgzZC00MzkwLTg5NmEtN2QxM2RkMjgzZTgw
LzEvRlJYaV92VFRFa1hjWndHTDc4TTNUY0R4N0dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzTBm3yB
7O9RzaZ8OZnEh9+DhfhVe3pRGb+2oQPvmEd0gy79yboEG/VH1kNOyes4AtRJsRl8
2Op3Y1JT7TFQQLrfTQgTW0yhzXVtsUxHtwH5NUEh3XwxjVMdLuCAnLhRFZhfo8CL
mdZ6TRxMR2UHKyR+waT+0mTNF324wivuy50QRs6MGX5T4r42CU069xbeuW3e+4b3
KWmsQdV4XVjaponDDOcj/Spdz6hAz9U69IID8xXVZn375sAEnrdkEYrIWLU/TKeV
ugHYpCS72ITXnizYt2QnfhxjU/LY1c0dRcDdWYKzJq7s1jQ8BYV4xvv1mNOhyjh6
KG2KkGYTtQPwcQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:31:47 2025 by rpki-client