Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
File: fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft (raw, json)
Hash identifier: pHAPcnkhvQCjAt+IX5mgQPxumtA0gEASL35DsymeOV8=
Subject key identifier: 1F:40:B6:DD:AF:5C:0F:16:ED:39:7D:76:4F:67:9D:80:7E:D7:5D:5C
Authority key identifier: 7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
Certificate issuer: /CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Certificate serial: 0198A04EAC5BBC4BFBA9C814CA233C616861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
Manifest number: 0960
Signing time: Tue 12 Aug 2025 22:02:47 +0000
Manifest this update: Tue 12 Aug 2025 22:02:47 +0000
Manifest next update: Wed 13 Aug 2025 22:02:47 +0000
Files and hashes: 1: fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl (hash: 3095KSLFTgAS+VeqvXawY4RKHEehyqAb6QtD3ZbrqFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:ac:5b:bc:4b:fb:a9:c8:14:ca:23:3c:61:68:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Validity
Not Before: Aug 12 22:02:47 2025 GMT
Not After : Aug 13 22:02:47 2025 GMT
Subject: CN=1f40b6ddaf5c0f16ed397d764f679d807ed75d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:06:f7:fe:f9:6d:21:79:59:52:eb:d6:59:
00:ff:c7:66:b4:36:52:2a:b9:6a:ef:ae:a0:5f:a0:
51:0b:60:1f:b4:e4:ef:b0:5d:f7:72:6b:f1:9a:a9:
78:4c:e9:48:25:e1:c4:24:3c:cf:31:b5:e7:3c:9b:
ab:77:02:89:79:3e:2c:68:ff:42:ee:27:23:9c:0e:
56:a4:45:cd:20:26:3a:5e:d6:19:ef:ce:09:9e:6e:
ad:e9:78:8f:5c:ce:66:04:9e:88:b2:a4:cb:d5:66:
bd:ac:9d:31:bf:d8:48:d8:b9:af:b4:e9:b0:a8:ad:
2d:f3:76:94:c3:fa:e0:a0:3b:d5:bd:fc:90:a7:31:
98:cb:e3:6b:0e:bd:fc:a7:06:24:b1:b3:e0:71:18:
4a:de:45:4e:32:90:9c:be:4f:ed:b4:08:3d:d7:70:
ec:b9:d6:63:bf:4a:3e:d1:d6:5f:a4:cc:18:15:9e:
81:6c:fc:67:0d:df:34:18:9b:57:c2:8a:cf:7c:eb:
3a:72:ab:37:50:29:fb:0c:dd:9d:04:a9:c4:30:a6:
2f:82:e5:b2:31:a0:28:16:18:49:bf:cc:cf:f8:4a:
63:35:e1:bb:a7:9e:89:cf:3b:0a:86:b0:5d:3e:67:
b3:a8:ec:4e:b1:05:0a:22:c7:da:9c:f8:69:96:97:
39:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:40:B6:DD:AF:5C:0F:16:ED:39:7D:76:4F:67:9D:80:7E:D7:5D:5C
X509v3 Authority Key Identifier:
keyid:7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3f:c7:e7:36:f4:e1:de:84:55:26:28:87:18:d5:92:9e:52:
95:44:37:4c:84:da:4b:14:3b:ec:c6:57:97:65:3f:b6:86:af:
ab:b3:d0:bc:e1:64:34:c3:08:0a:75:9a:0c:0b:58:5f:ff:56:
d2:6a:ea:e3:7f:99:6c:bf:35:c0:d1:17:8e:e1:28:5c:65:d1:
50:e6:30:da:40:e7:cc:8c:f3:b6:a9:85:d6:12:f9:ed:8a:1b:
65:14:d9:24:c5:6f:18:af:64:a0:01:69:61:29:00:e8:80:b7:
de:78:85:48:eb:45:d1:f9:52:e9:73:31:79:92:ba:f9:32:91:
ff:31:97:43:66:4e:55:4f:00:8f:a0:91:8c:f4:8d:65:55:f8:
de:f2:30:bb:04:cf:ed:b9:b5:ea:11:c7:77:18:c8:54:d5:47:
bc:30:25:cd:ce:56:06:f5:9e:81:b5:4f:3a:1e:5c:c5:b7:ee:
0d:8f:bf:90:2f:4e:14:db:2d:73:28:11:1e:a5:76:e2:c9:d9:
af:10:2a:99:86:fd:cd:19:2f:8d:ca:22:e6:47:86:c1:42:0e:
ce:23:df:18:1e:cc:19:5c:07:e4:6d:eb:39:3d:03:7e:a9:01:
af:63:aa:7d:16:a5:4e:f4:a7:e5:c4:7b:72:be:74:96:c8:d1:
f5:91:e8:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTqxbvEv7qcgUyiM8YWhhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzM2M2E1ODRlNjZlNDBjNDgxNjRkMDBhOGY2YzE4NGM3
NGI2NzEwHhcNMjUwODEyMjIwMjQ3WhcNMjUwODEzMjIwMjQ3WjAzMTEwLwYDVQQD
EygxZjQwYjZkZGFmNWMwZjE2ZWQzOTdkNzY0ZjY3OWQ4MDdlZDc1ZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGsG9/75bSF5WVLr1lkA/8dmtDZS
Krlq766gX6BRC2AftOTvsF33cmvxmql4TOlIJeHEJDzPMbXnPJurdwKJeT4saP9C
7icjnA5WpEXNICY6XtYZ784Jnm6t6XiPXM5mBJ6IsqTL1Wa9rJ0xv9hI2LmvtOmw
qK0t83aUw/rgoDvVvfyQpzGYy+NrDr38pwYksbPgcRhK3kVOMpCcvk/ttAg913Ds
udZjv0o+0dZfpMwYFZ6BbPxnDd80GJtXworPfOs6cqs3UCn7DN2dBKnEMKYvguWy
MaAoFhhJv8zP+EpjNeG7p56JzzsKhrBdPmezqOxOsQUKIsfanPhplpc5LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9Att2vXA8W7Tl9dk9nnYB+111cMB8GA1UdIwQY
MBaAFH7DY6WE5m5AxIFk0AqPbBhMdLZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNOanBZVG1ia0RFZ1dUUUNvOXNHRXgwdG5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jMmY3YzMtOTYxZi00ZWQ2LWFmNWQt
NzIwOWEzNjJiNjJiLzEvZnNOanBZVG1ia0RFZ1dUUUNvOXNHRXgwdG5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9jMmY3YzMtOTYxZi00ZWQ2LWFmNWQtNzIwOWEzNjJiNjJi
LzEvZnNOanBZVG1ia0RFZ1dUUUNvOXNHRXgwdG5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHj/H5zb0
4d6EVSYohxjVkp5SlUQ3TITaSxQ77MZXl2U/toavq7PQvOFkNMMICnWaDAtYX/9W
0mrq43+ZbL81wNEXjuEoXGXRUOYw2kDnzIzztqmF1hL57YobZRTZJMVvGK9koAFp
YSkA6IC33niFSOtF0flS6XMxeZK6+TKR/zGXQ2ZOVU8Aj6CRjPSNZVX43vIwuwTP
7bm16hHHdxjIVNVHvDAlzc5WBvWegbVPOh5cxbfuDY+/kC9OFNstcygRHqV24snZ
rxAqmYb9zRkvjcoi5keGwUIOziPfGB7MGVwH5G3rOT0DfqkBr2OqfRalTvSn5cR7
cr50lsjR9ZHoOg==
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:10:37 2025 by rpki-client