Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
File: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft (raw, json)
Hash identifier: 5VWf6TnVxtNRcH4to8aqfF6a1xD2Ha4AHWmx4ryskq8=
Subject key identifier: BD:C0:2D:5A:42:BA:8E:A0:F5:C7:2D:5B:58:B3:82:7B:DE:63:84:D9
Authority key identifier: 16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
Certificate issuer: /CN=1683805319d8485584dc39cf5381583fb6431d7a
Certificate serial: 0197794234BDCBA3818EF62834A0375EB96A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
Manifest number: 076E
Signing time: Mon 16 Jun 2025 15:01:11 +0000
Manifest this update: Mon 16 Jun 2025 15:01:11 +0000
Manifest next update: Tue 17 Jun 2025 15:01:11 +0000
Files and hashes: 1: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl (hash: sxjDyanGNX3gfznEMtjcoItgyXrhrj4ufoy9sAIEyXk=)
2: TF7nAj58d6ltPhTUNcDwpZ4Ncic.roa (hash: bLmXSoYJumVpK9YJA9L+Jf2+aVCyzGG5sj4lmj+Mw7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:42:34:bd:cb:a3:81:8e:f6:28:34:a0:37:5e:b9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1683805319d8485584dc39cf5381583fb6431d7a
Validity
Not Before: Jun 16 15:01:11 2025 GMT
Not After : Jun 17 15:01:11 2025 GMT
Subject: CN=bdc02d5a42ba8ea0f5c72d5b58b3827bde6384d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0a:98:b0:50:43:39:ee:a9:6a:70:e0:c5:d0:
73:de:80:97:2f:41:b4:87:44:f9:d3:eb:a3:69:6c:
1a:bf:fb:5b:7d:91:34:7a:f6:eb:f8:ab:11:8d:fb:
73:f1:21:cc:92:04:cc:34:72:90:2b:27:c6:c6:22:
60:7b:de:0b:2e:32:06:fd:66:e8:0f:bc:18:30:94:
83:f9:f1:cc:c3:90:9d:d5:1b:ee:04:16:43:6d:3b:
1e:0d:22:03:95:59:27:60:8b:4f:31:bf:07:2c:65:
63:28:76:95:c4:62:70:15:8c:6c:d4:89:52:14:e9:
43:88:b1:02:5e:1d:42:78:85:1f:97:7f:5a:65:54:
dd:47:e9:d9:6a:8a:1d:c4:8c:91:4e:b9:58:95:fc:
4b:2d:32:b0:08:df:5d:95:f8:30:dc:a8:03:3e:d6:
37:ce:b8:1f:38:5a:30:0f:60:11:21:27:36:5d:fd:
5a:58:41:0f:15:88:44:64:d1:f5:11:84:00:65:ac:
62:16:7f:c3:fa:ff:a3:14:dc:bd:41:06:93:64:81:
2a:f5:e7:2a:ca:d6:19:08:c3:cd:72:76:78:a3:5a:
34:83:b1:e5:90:f5:17:f3:d9:b5:00:f2:8d:2a:cf:
6b:0b:a9:8c:89:fe:c5:4a:20:2c:bd:2f:dc:5c:8b:
0d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C0:2D:5A:42:BA:8E:A0:F5:C7:2D:5B:58:B3:82:7B:DE:63:84:D9
X509v3 Authority Key Identifier:
keyid:16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:91:ad:18:d3:78:17:0c:b5:4c:04:85:60:43:b3:f1:bc:76:
10:c9:a7:54:d3:c8:c9:ad:05:5c:89:4d:1d:d4:9a:de:1b:63:
1b:f6:3c:57:6d:e5:7c:e3:ff:1b:24:41:3f:d8:d6:b9:51:96:
4a:9e:e2:67:64:4a:a9:26:f2:5f:b7:9c:c7:60:dd:a9:84:8c:
20:4d:5e:60:f6:e9:9b:0a:a8:8d:29:ef:2e:09:f0:04:2b:c8:
94:ee:e6:46:c6:51:77:c1:fc:13:19:a4:b4:c3:0c:86:71:6a:
5b:3f:d3:ea:55:10:e9:96:5d:ec:5b:7e:b4:02:2e:63:d1:a6:
ec:47:8d:87:4a:57:e0:61:6a:c4:15:35:84:8f:3c:c6:b0:17:
d7:31:22:7f:24:5c:86:9d:6d:e0:69:34:ab:f9:a2:57:ee:46:
8a:39:80:4a:0e:1d:b9:c8:ec:7f:8d:6e:8a:8c:2a:74:27:a6:
8c:20:1c:fe:95:71:07:a4:3d:2c:7f:ce:60:65:db:3e:51:c6:
29:a3:92:de:4f:a1:d5:e4:75:d3:44:37:91:f6:b9:fc:77:4d:
4e:22:11:a5:5c:98:20:80:8d:27:47:0a:bd:0b:c3:ef:3e:66:
73:a7:ca:fa:ba:3c:11:a8:d9:5f:1d:fd:01:91:63:88:cc:44:
42:53:02:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5QjS9y6OBjvYoNKA3XrlqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ODM4MDUzMTlkODQ4NTU4NGRjMzljZjUzODE1ODNmYjY0
MzFkN2EwHhcNMjUwNjE2MTUwMTExWhcNMjUwNjE3MTUwMTExWjAzMTEwLwYDVQQD
EyhiZGMwMmQ1YTQyYmE4ZWEwZjVjNzJkNWI1OGIzODI3YmRlNjM4NGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgqYsFBDOe6panDgxdBz3oCXL0G0
h0T50+ujaWwav/tbfZE0evbr+KsRjftz8SHMkgTMNHKQKyfGxiJge94LLjIG/Wbo
D7wYMJSD+fHMw5Cd1RvuBBZDbTseDSIDlVknYItPMb8HLGVjKHaVxGJwFYxs1IlS
FOlDiLECXh1CeIUfl39aZVTdR+nZaoodxIyRTrlYlfxLLTKwCN9dlfgw3KgDPtY3
zrgfOFowD2ARISc2Xf1aWEEPFYhEZNH1EYQAZaxiFn/D+v+jFNy9QQaTZIEq9ecq
ytYZCMPNcnZ4o1o0g7HlkPUX89m1APKNKs9rC6mMif7FSiAsvS/cXIsNfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3ALVpCuo6g9cctW1izgnveY4TZMB8GA1UdIwQY
MBaAFBaDgFMZ2EhVhNw5z1OBWD+2Qx16MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm9PQVV4bllTRldFM0RuUFU0RllQN1pESFhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iMjVjZjQtMGEzNS00YmRiLTlkY2Qt
ZWUxNjA4NmNmYzcyLzEvRm9PQVV4bllTRldFM0RuUFU0RllQN1pESFhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iMjVjZjQtMGEzNS00YmRiLTlkY2QtZWUxNjA4NmNmYzcy
LzEvRm9PQVV4bllTRldFM0RuUFU0RllQN1pESFhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJGtGNN4
Fwy1TASFYEOz8bx2EMmnVNPIya0FXIlNHdSa3htjG/Y8V23lfOP/GyRBP9jWuVGW
Sp7iZ2RKqSbyX7ecx2DdqYSMIE1eYPbpmwqojSnvLgnwBCvIlO7mRsZRd8H8Exmk
tMMMhnFqWz/T6lUQ6ZZd7Ft+tAIuY9Gm7EeNh0pX4GFqxBU1hI88xrAX1zEifyRc
hp1t4Gk0q/miV+5GijmASg4ducjsf41uiowqdCemjCAc/pVxB6Q9LH/OYGXbPlHG
KaOS3k+h1eR100Q3kfa5/HdNTiIRpVyYIICNJ0cKvQvD7z5mc6fK+ro8EajZXx39
AZFjiMxEQlMCEQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:54:06 2025 by rpki-client