Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
File: 1-FJeQSxq4rFsrDns8ojC4uanXeI.mft (raw, json)
Hash identifier: qbFa8FaA2c4T/Bi00ONrkEfYyOVrAfkUV9iXHhoaIiQ=
Subject key identifier: DA:83:F9:DF:70:47:F7:15:B7:16:BF:B4:46:5F:E3:22:24:42:4D:D3
Authority key identifier: F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
Certificate issuer: /CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Certificate serial: 019748FA02213160DA082F4DA4153D4630FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
Manifest number: 017C
Signing time: Sat 07 Jun 2025 06:00:33 +0000
Manifest this update: Sat 07 Jun 2025 06:00:33 +0000
Manifest next update: Sun 08 Jun 2025 06:00:33 +0000
Files and hashes: 1: 1-FJeQSxq4rFsrDns8ojC4uanXeI.crl (hash: ScTKGx8gY5Ps/cyWnXZRZm5YKMibq1ZRJXyDNP7f5YQ=)
2: 8gZ8h62hKDQ0ROHOpNkfYzgqb4M.roa (hash: dXBSN3fOQjIFRZdnOkkO5RCbLu9iQTdXwdnJOOh0Gjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:02:21:31:60:da:08:2f:4d:a4:15:3d:46:30:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Validity
Not Before: Jun 7 06:00:33 2025 GMT
Not After : Jun 8 06:00:33 2025 GMT
Subject: CN=da83f9df7047f715b716bfb4465fe32224424dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ae:f2:93:cb:9d:ee:64:ad:28:4f:5e:66:0f:
4e:d2:7d:38:a0:04:92:c4:95:5d:e3:dd:b8:84:7c:
56:ac:c7:ca:23:82:9f:3e:1f:05:ad:b0:b6:24:a0:
31:bc:92:34:82:8b:8c:8d:4e:6d:69:0c:e4:a8:a2:
97:28:9c:a5:4d:6a:a8:39:d9:85:37:1a:ca:d0:31:
84:c6:1f:c9:a3:a7:9d:3e:d6:3d:33:a3:55:85:c7:
99:64:cb:4d:4e:d5:fd:87:f6:6e:b8:21:63:f5:5e:
9a:4b:2d:58:ae:f9:8f:c4:2a:16:a2:33:cd:b4:d5:
c8:5e:8d:76:e4:1f:63:ca:8a:65:c0:d5:78:7d:b8:
fe:9f:08:48:0b:53:a8:23:6b:ae:8a:8f:65:cc:19:
18:d6:6d:6f:b6:7b:4c:12:ea:63:97:53:4f:a3:a6:
18:c5:e4:a7:c3:f2:e8:44:38:52:4c:93:82:92:a1:
fd:30:0f:fa:fd:c7:cd:50:5c:cf:3c:b5:57:c4:05:
75:e0:e0:3f:83:cd:fb:cc:15:48:74:dd:09:a7:31:
24:ff:4d:d3:86:f2:d3:e3:b6:f2:94:1f:62:4c:e6:
eb:f9:89:f6:1f:3b:63:62:c9:ec:bc:4c:a8:1e:2a:
8f:aa:35:df:d5:c9:8f:06:d3:ad:8d:ce:b4:77:dd:
9e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:83:F9:DF:70:47:F7:15:B7:16:BF:B4:46:5F:E3:22:24:42:4D:D3
X509v3 Authority Key Identifier:
keyid:F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:64:92:dd:89:47:60:70:2e:67:d3:8e:74:f5:71:9e:45:f6:
8c:c2:3f:1c:4c:be:ec:e6:43:45:cd:10:cc:6b:36:42:66:43:
e6:e1:18:83:7b:37:58:c0:8f:11:45:30:f5:7c:9c:4a:39:d2:
f2:fb:7c:a2:ff:0d:87:f3:b9:46:c5:00:7c:49:43:fe:8e:79:
2b:dd:87:73:f7:20:0c:1d:40:03:fb:6f:fb:f9:97:30:41:5c:
4e:a2:85:69:2d:a1:66:47:46:1c:08:4c:47:29:02:2c:4b:97:
56:48:c7:4f:d1:fc:1a:c4:ac:00:c5:91:46:af:d0:33:02:61:
62:bc:19:5d:ba:a8:52:44:18:e8:79:f5:e7:a2:dc:8c:90:aa:
5f:94:3c:8e:df:8b:2c:56:f1:bf:1c:c7:d4:de:57:c5:98:86:
80:6d:67:75:59:ac:17:64:f9:5c:54:dc:bd:38:d3:e5:cf:3a:
93:5e:c5:e1:cc:f2:5e:9e:09:1d:79:29:d6:b5:cc:0f:c2:c6:
77:09:e7:42:07:15:44:12:ea:25:78:37:8a:61:a3:fa:ad:a1:
86:31:10:be:86:4d:8b:52:a7:16:04:df:40:cc:d4:9a:4e:f4:
76:c6:f8:5b:29:2c:c6:e5:c5:77:55:b6:db:23:5c:10:cb:e6:
82:2d:f9:dd
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdI+gIhMWDaCC9NpBU9RjD8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NTI1ZTQxMmM2YWUyYjE2Y2FjMzllY2YyODhjMmUyZTZh
NzVkZTIwHhcNMjUwNjA3MDYwMDMzWhcNMjUwNjA4MDYwMDMzWjAzMTEwLwYDVQQD
EyhkYTgzZjlkZjcwNDdmNzE1YjcxNmJmYjQ0NjVmZTMyMjI0NDI0ZGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq7yk8ud7mStKE9eZg9O0n04oASS
xJVd4924hHxWrMfKI4KfPh8FrbC2JKAxvJI0gouMjU5taQzkqKKXKJylTWqoOdmF
NxrK0DGExh/Jo6edPtY9M6NVhceZZMtNTtX9h/ZuuCFj9V6aSy1YrvmPxCoWojPN
tNXIXo125B9jyoplwNV4fbj+nwhIC1OoI2uuio9lzBkY1m1vtntMEupjl1NPo6YY
xeSnw/LoRDhSTJOCkqH9MA/6/cfNUFzPPLVXxAV14OA/g837zBVIdN0JpzEk/03T
hvLT47bylB9iTObr+Yn2HztjYsnsvEyoHiqPqjXf1cmPBtOtjc60d92eaQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNqD+d9wR/cVtxa/tEZf4yIkQk3TMB8GA1UdIwQY
MBaAFPhSXkEsauKxbKw57PKIwuLmp13iMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1GSmVRU3hxNHJGc3JEbnM4b2pDNHVhblhlSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvYTNmZDhiLTY4NmItNGU2Yy04Yjdi
LTQzMTBjMzliMWY0NC8xLzEtRkplUVN4cTRyRnNyRG5zOG9qQzR1YW5YZUkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2EzL2EzZmQ4Yi02ODZiLTRlNmMtOGI3Yi00MzEwYzM5YjFm
NDQvMS8xLUZKZVFTeHE0ckZzckRuczhvakM0dWFuWGVJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWSS
3YlHYHAuZ9OOdPVxnkX2jMI/HEy+7OZDRc0QzGs2QmZD5uEYg3s3WMCPEUUw9Xyc
SjnS8vt8ov8Nh/O5RsUAfElD/o55K92Hc/cgDB1AA/tv+/mXMEFcTqKFaS2hZkdG
HAhMRykCLEuXVkjHT9H8GsSsAMWRRq/QMwJhYrwZXbqoUkQY6Hn156LcjJCqX5Q8
jt+LLFbxvxzH1N5XxZiGgG1ndVmsF2T5XFTcvTjT5c86k17F4czyXp4JHXkp1rXM
D8LGdwnnQgcVRBLqJXg3imGj+q2hhjEQvoZNi1KnFgTfQMzUmk70dsb4WyksxuXF
d1W22yNcEMvmgi353Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:46:32 2025 by rpki-client