Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
File: 1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json)
Hash identifier: xg5ZxQbfHobcyVuVWnFuHY+8ad2Nvq9q13PVUTDwa3o=
Subject key identifier: 3B:EE:7B:99:DE:AB:0F:7B:98:80:1D:54:9A:C6:18:90:0C:64:4B:DB
Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055
Certificate serial: 0199239EF7B086F7E83AFF95607A18EE26FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
Manifest number: 12DD
Signing time: Sun 07 Sep 2025 10:00:44 +0000
Manifest this update: Sun 07 Sep 2025 10:00:44 +0000
Manifest next update: Mon 08 Sep 2025 10:00:44 +0000
Files and hashes: 1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: IL1MJVSs9ZAoSkslcPPlTuUBBT4w0PVuh+0Z1NVAOng=)
2: MwEJqReLtYJIDzQC3nxs7sP0tvA.roa (hash: WyxWLsA6emUiFQU/YyUOL864IemIj/7UtRIviv8JcEw=)
3: iAzdsnC_l6rdd2kZ6hvA3HRXqCU.roa (hash: sMPWtnAj59EVmsTaMYwCg3wIrLPxpEslb0ZjPRwWR6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:f7:b0:86:f7:e8:3a:ff:95:60:7a:18:ee:26:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bab208653d4261ebf202f6036334119846055
Validity
Not Before: Sep 7 10:00:44 2025 GMT
Not After : Sep 8 10:00:44 2025 GMT
Subject: CN=3bee7b99deab0f7b98801d549ac618900c644bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7f:9d:ef:a4:fa:f5:bc:84:69:15:1f:c0:c1:
58:81:90:83:e4:a5:14:d4:1c:16:b5:3b:a8:29:5f:
ca:2b:cc:e4:e4:49:86:1e:51:ad:03:2b:61:d8:f7:
c8:9b:e8:f2:3b:10:d5:3a:c7:98:a4:e3:32:df:b1:
1d:c6:df:aa:45:e0:9f:ac:70:45:09:26:98:f5:6b:
94:ae:d7:6a:80:a9:4b:b8:4f:7f:c0:64:b4:1e:f3:
af:6a:1f:f8:93:83:73:77:4d:7d:00:0e:aa:3d:45:
cf:c2:aa:22:f5:38:24:40:18:08:ea:5f:bd:15:e4:
f4:f6:92:5c:ee:20:16:6b:60:ab:2e:c6:3b:bf:d8:
a9:9a:9b:94:66:04:28:7e:58:07:74:a1:9a:66:2b:
06:20:b7:bb:fb:1d:cd:ce:c3:16:4c:dd:54:3c:23:
e2:12:49:5f:8f:50:66:18:bf:24:da:8c:6d:a9:e7:
51:9a:25:c7:78:6e:b7:45:e8:67:93:d7:b0:9e:94:
4c:b3:cf:43:33:83:41:45:c3:80:c3:b0:0c:c4:47:
ad:fb:fe:56:48:e0:b6:e6:bd:94:1d:91:5b:fd:0d:
85:3d:47:0c:68:24:9e:cf:71:29:ce:9e:b6:aa:63:
9c:0b:3c:cf:08:30:81:1a:a6:9d:79:bb:fd:60:d5:
c3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EE:7B:99:DE:AB:0F:7B:98:80:1D:54:9A:C6:18:90:0C:64:4B:DB
X509v3 Authority Key Identifier:
keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:cc:2b:f6:1b:82:ba:bf:b1:89:50:87:ab:9b:81:11:e7:a1:
e1:d0:ea:9a:0e:cc:f2:38:a4:6d:e5:32:43:84:0c:bf:b9:2e:
02:86:d3:aa:c0:57:9c:75:8e:ee:ac:13:ae:42:a8:18:0f:2f:
37:0e:b5:9d:7e:be:3c:0a:e2:fd:bb:50:ce:30:03:53:f2:5b:
34:d7:1d:78:1c:c2:8d:5c:00:25:f9:d4:24:f5:fa:4a:5c:82:
eb:76:6d:43:cb:cd:5c:6b:dd:53:28:8a:3a:e6:4b:1a:9c:18:
59:d8:ef:21:f2:51:2f:9b:65:53:95:ef:ba:ea:77:43:ff:6d:
da:0b:12:cf:06:a6:d5:01:eb:bc:0f:c9:9b:8a:5b:24:6d:86:
2f:96:5b:2a:ba:6a:c6:79:b2:b0:41:63:0e:0b:43:03:36:0d:
6d:ef:56:6a:22:03:2b:2b:fe:00:3b:25:18:85:c3:bb:50:83:
7c:64:da:1a:28:91:81:0e:4b:93:c9:28:24:7b:01:0d:7d:8f:
62:0f:a7:ae:6d:a1:ac:bf:19:bf:91:3d:16:e0:71:39:c7:4a:
73:ed:86:5e:59:4f:48:58:80:57:fd:90:8b:2c:5d:38:40:a6:
e9:0b:54:58:73:ae:d4:27:0b:75:39:51:83:85:b8:43:41:3c:
3e:5e:8f:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnvewhvfoOv+VYHoY7ib6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NWJhYjIwODY1M2Q0MjYxZWJmMjAyZjYwMzYzMzQxMTk4
NDYwNTUwHhcNMjUwOTA3MTAwMDQ0WhcNMjUwOTA4MTAwMDQ0WjAzMTEwLwYDVQQD
EygzYmVlN2I5OWRlYWIwZjdiOTg4MDFkNTQ5YWM2MTg5MDBjNjQ0YmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH+d76T69byEaRUfwMFYgZCD5KUU
1BwWtTuoKV/KK8zk5EmGHlGtAyth2PfIm+jyOxDVOseYpOMy37Edxt+qReCfrHBF
CSaY9WuUrtdqgKlLuE9/wGS0HvOvah/4k4Nzd019AA6qPUXPwqoi9TgkQBgI6l+9
FeT09pJc7iAWa2CrLsY7v9ipmpuUZgQoflgHdKGaZisGILe7+x3NzsMWTN1UPCPi
Eklfj1BmGL8k2oxtqedRmiXHeG63Rehnk9ewnpRMs89DM4NBRcOAw7AMxEet+/5W
SOC25r2UHZFb/Q2FPUcMaCSez3Epzp62qmOcCzzPCDCBGqadebv9YNXDIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvue5neqw97mIAdVJrGGJAMZEvbMB8GA1UdIwQY
MBaAFNRbqyCGU9QmHr8gL2A2M0EZhGBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wYWVjMWYtNjA2NS00ZDg4LTg0NTQt
MTI0ZDNmYjM5MDZhLzEvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wYWVjMWYtNjA2NS00ZDg4LTg0NTQtMTI0ZDNmYjM5MDZh
LzEvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMwr9huC
ur+xiVCHq5uBEeeh4dDqmg7M8jikbeUyQ4QMv7kuAobTqsBXnHWO7qwTrkKoGA8v
Nw61nX6+PAri/btQzjADU/JbNNcdeBzCjVwAJfnUJPX6SlyC63ZtQ8vNXGvdUyiK
OuZLGpwYWdjvIfJRL5tlU5Xvuup3Q/9t2gsSzwam1QHrvA/Jm4pbJG2GL5ZbKrpq
xnmysEFjDgtDAzYNbe9WaiIDKyv+ADslGIXDu1CDfGTaGiiRgQ5Lk8koJHsBDX2P
Yg+nrm2hrL8Zv5E9FuBxOcdKc+2GXllPSFiAV/2QiyxdOECm6QtUWHOu1CcLdTlR
g4W4Q0E8Pl6P5g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:38:10 2025 by rpki-client