Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
File: fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft (raw, json)
Hash identifier: btAZsR+FSZlvbDmeyWvDwuzh8pwnBiOfB/J7Mv6CPnw=
Subject key identifier: CB:5D:43:EA:CC:77:57:30:5F:06:C1:FB:0C:C5:9B:EB:1F:2C:02:A5
Authority key identifier: 7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F
Certificate issuer: /CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
Certificate serial: 01974A7A57301FD53B7C1E5DC8C8288BE43A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
Manifest number: 0E39
Signing time: Sat 07 Jun 2025 13:00:21 +0000
Manifest this update: Sat 07 Jun 2025 13:00:21 +0000
Manifest next update: Sun 08 Jun 2025 13:00:21 +0000
Files and hashes: 1: fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl (hash: t9TxnzndZGTrJcZx2LeUSNsIw+n2RWnhiQLQeVXbMA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:57:30:1f:d5:3b:7c:1e:5d:c8:c8:28:8b:e4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
Validity
Not Before: Jun 7 13:00:21 2025 GMT
Not After : Jun 8 13:00:21 2025 GMT
Subject: CN=cb5d43eacc7757305f06c1fb0cc59beb1f2c02a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:98:2b:a5:12:18:4c:9c:84:c4:2e:7e:17:20:
30:d1:6b:5a:15:76:dd:5a:ab:89:6a:96:fb:38:cc:
6c:52:4c:9e:0b:0d:2d:ff:02:12:bc:b7:2a:13:b8:
e5:55:55:7e:b3:33:ff:e1:ea:6c:12:56:c7:aa:94:
08:2e:09:7f:f7:d4:a9:c4:23:2a:7e:9c:f3:3e:e4:
ff:b7:62:38:b3:dc:8a:ab:0d:aa:c5:e0:cf:e8:93:
61:a5:b4:ca:ab:76:9b:56:4f:f1:63:69:94:2a:35:
69:3a:bd:02:73:89:0f:06:11:1d:3b:71:3c:64:cd:
25:0a:98:15:20:2a:fd:b1:59:70:b8:50:19:45:5c:
53:d1:b0:86:d9:d1:d8:e8:5b:ea:5b:c0:32:12:31:
2d:04:74:41:4f:ef:9f:2e:50:a3:c0:1c:49:33:da:
c1:31:3e:c7:cf:0c:27:c1:a7:e4:c7:d9:02:4f:d2:
20:a5:b5:d3:09:54:72:ad:78:ad:7a:39:a7:e5:14:
e2:97:0d:52:6c:cc:d2:44:8a:d0:32:23:d9:a9:28:
51:d1:44:18:0a:22:56:d0:b3:68:ce:79:fd:56:b7:
48:2e:1f:8c:20:f4:10:f1:04:d4:9a:72:e2:98:04:
88:47:15:e4:e3:63:f3:ae:b9:64:cd:4a:e9:6f:59:
b8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5D:43:EA:CC:77:57:30:5F:06:C1:FB:0C:C5:9B:EB:1F:2C:02:A5
X509v3 Authority Key Identifier:
keyid:7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:9b:c5:c9:88:f5:30:30:57:41:3c:bd:65:26:41:1f:f1:cb:
55:61:f4:96:84:21:e7:6b:0f:5f:bd:81:f7:bf:6a:d3:73:17:
c2:c3:eb:96:5b:cb:ab:be:c0:5c:a4:92:a9:e7:01:a6:27:58:
20:46:0d:d3:ad:1a:ee:07:d5:e0:78:de:47:75:82:64:56:56:
5f:9f:94:e2:d5:5f:75:d3:8c:e0:6a:15:bc:91:f9:3a:c5:2c:
e3:d6:76:fa:6a:e8:68:b8:0c:18:32:59:39:d1:75:26:99:a7:
fa:a0:be:7d:49:37:c5:23:e5:a4:5f:ea:89:bf:4f:d0:10:f9:
7a:b8:48:02:6b:b7:38:67:5b:b1:f4:fb:a4:76:08:30:a2:09:
c9:63:78:17:67:c2:d6:95:c2:fb:94:9f:75:45:2b:c9:9b:be:
18:72:12:40:66:fb:fb:95:a1:9d:04:48:fb:36:54:6c:ea:34:
3d:cd:45:85:6b:1f:d5:e6:c4:29:29:00:3c:76:ae:50:01:60:
9f:1b:e7:56:dd:df:5c:e8:68:cd:4e:ed:43:b4:93:36:1e:8c:
58:77:41:56:af:a7:2b:f0:d1:08:1c:41:43:63:69:bf:f3:cc:
1c:c6:db:0e:56:7f:bf:43:39:f0:1f:91:69:99:f3:01:2d:1d:
4c:23:15:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKelcwH9U7fB5dyMgoi+Q6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMTRjZTgxMDNiNzg1ZjM1MDRiYzRiMzJmMWY0YzliNzBj
ZTNmN2YwHhcNMjUwNjA3MTMwMDIxWhcNMjUwNjA4MTMwMDIxWjAzMTEwLwYDVQQD
EyhjYjVkNDNlYWNjNzc1NzMwNWYwNmMxZmIwY2M1OWJlYjFmMmMwMmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pgrpRIYTJyExC5+FyAw0WtaFXbd
WquJapb7OMxsUkyeCw0t/wISvLcqE7jlVVV+szP/4epsElbHqpQILgl/99SpxCMq
fpzzPuT/t2I4s9yKqw2qxeDP6JNhpbTKq3abVk/xY2mUKjVpOr0Cc4kPBhEdO3E8
ZM0lCpgVICr9sVlwuFAZRVxT0bCG2dHY6FvqW8AyEjEtBHRBT++fLlCjwBxJM9rB
MT7Hzwwnwafkx9kCT9IgpbXTCVRyrXitejmn5RTilw1SbMzSRIrQMiPZqShR0UQY
CiJW0LNoznn9VrdILh+MIPQQ8QTUmnLimASIRxXk42PzrrlkzUrpb1m4IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtdQ+rMd1cwXwbB+wzFm+sfLAKlMB8GA1UdIwQY
MBaAFH8UzoEDt4XzUEvEsy8fTJtwzj9/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnhUT2dRTzNoZk5RUzhTekx4OU1tM0RPUDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mNjlkYmUtZTA3NS00NDM4LWI1M2It
ZjYxNjBmYTFmYjAyLzEvZnhUT2dRTzNoZk5RUzhTekx4OU1tM0RPUDM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9mNjlkYmUtZTA3NS00NDM4LWI1M2ItZjYxNjBmYTFmYjAy
LzEvZnhUT2dRTzNoZk5RUzhTekx4OU1tM0RPUDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZvFyYj1
MDBXQTy9ZSZBH/HLVWH0loQh52sPX72B979q03MXwsPrllvLq77AXKSSqecBpidY
IEYN060a7gfV4HjeR3WCZFZWX5+U4tVfddOM4GoVvJH5OsUs49Z2+mroaLgMGDJZ
OdF1Jpmn+qC+fUk3xSPlpF/qib9P0BD5erhIAmu3OGdbsfT7pHYIMKIJyWN4F2fC
1pXC+5SfdUUryZu+GHISQGb7+5WhnQRI+zZUbOo0Pc1FhWsf1ebEKSkAPHauUAFg
nxvnVt3fXOhozU7tQ7STNh6MWHdBVq+nK/DRCBxBQ2Npv/PMHMbbDlZ/v0M58B+R
aZnzAS0dTCMVkA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:32:05 2025 by rpki-client