Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
File: FnguRefo6SnFw_lkQafmTFQfguY.mft (raw, json)
Hash identifier: x7QDXsKhSRlo/xBpTOMTi3sOAM8/m/bmbZsyFVb9pPs=
Subject key identifier: 85:B7:D5:59:5D:40:1F:E5:C8:AE:A0:E4:CA:07:2F:EE:71:B2:08:2D
Authority key identifier: 16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
Certificate issuer: /CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
Certificate serial: 01976F2CB92F52CB1EE8E8A51653BEF851B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
Manifest number: 0CF0
Signing time: Sat 14 Jun 2025 16:01:31 +0000
Manifest this update: Sat 14 Jun 2025 16:01:31 +0000
Manifest next update: Sun 15 Jun 2025 16:01:31 +0000
Files and hashes: 1: FnguRefo6SnFw_lkQafmTFQfguY.crl (hash: Csj1EddSFDI1qDSDtHlD9Tvc2iGdo5YZkTAOmO19Ir4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:b9:2f:52:cb:1e:e8:e8:a5:16:53:be:f8:51:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
Validity
Not Before: Jun 14 16:01:31 2025 GMT
Not After : Jun 15 16:01:31 2025 GMT
Subject: CN=85b7d5595d401fe5c8aea0e4ca072fee71b2082d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:59:42:93:1d:28:2f:ac:74:ac:d1:e9:70:07:
7d:85:5e:fb:ad:74:54:84:5e:03:e0:df:da:5d:7e:
09:26:66:83:73:ce:5b:37:a3:e8:36:5c:27:e0:15:
e2:59:15:f8:d6:ad:a6:9d:d6:43:f1:40:7f:4b:21:
0b:2f:8b:32:1c:78:35:ff:93:79:e3:1a:45:62:83:
c4:e1:6f:3a:02:b7:80:6b:9c:9e:ae:05:5f:ba:24:
f6:e7:46:b7:22:22:cc:ef:78:95:d5:a2:74:be:e7:
3d:ee:c6:7f:45:bc:6d:e6:0d:09:26:46:e9:2b:f5:
57:3d:53:67:47:1b:4d:3b:d4:a7:b2:c0:fa:bc:4e:
50:00:8f:3d:8a:40:20:ae:b0:13:61:21:ef:46:0c:
5e:67:75:de:30:33:8e:30:51:3a:44:7f:7f:18:78:
e9:f7:c7:1f:a3:a1:cc:68:b3:ed:59:9a:70:95:f5:
6d:78:69:da:be:f6:dd:00:b3:95:61:07:8f:48:24:
99:b1:31:a5:aa:e1:48:4e:fe:34:9d:1b:4d:47:58:
a9:5e:0a:d2:fb:62:16:7b:0c:e3:48:71:78:d6:53:
2e:bb:0b:4b:39:90:7d:d1:20:6d:4c:9c:8c:a6:87:
11:8a:91:aa:f7:e4:f6:ab:cd:49:31:65:e5:ce:40:
31:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B7:D5:59:5D:40:1F:E5:C8:AE:A0:E4:CA:07:2F:EE:71:B2:08:2D
X509v3 Authority Key Identifier:
keyid:16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:61:04:7f:90:d9:80:78:aa:2a:ab:0d:b2:d4:9b:3a:c2:f3:
cd:d6:3e:df:93:97:fa:03:4e:0c:31:37:38:c4:e6:6b:59:61:
d2:49:50:e6:88:5f:96:e3:23:43:f1:0f:d1:06:fd:12:fb:b7:
52:f5:cd:d0:c7:22:e7:20:49:0d:f9:eb:b5:af:b1:32:24:3b:
5c:62:32:a9:7d:0a:c0:e2:b9:e8:46:47:7f:51:ac:80:fa:a9:
5a:9a:04:5b:9c:02:c9:c0:8e:23:7a:9d:75:23:64:7b:4d:fc:
bd:67:b4:25:aa:77:49:98:2a:25:63:28:09:5d:11:51:ff:13:
1c:fb:65:19:e8:2e:5b:e8:25:cd:2b:fd:42:f3:27:47:13:44:
f0:8c:60:52:a9:32:8e:54:1a:d2:83:61:40:55:0e:30:f4:d5:
b5:5b:71:39:69:02:e9:34:17:f0:13:ea:23:3d:98:1b:60:c9:
06:dc:28:4f:13:d4:6b:1b:2e:83:ed:29:7c:71:75:df:74:11:
b3:a6:94:21:7f:26:ba:53:7e:1c:6e:19:ed:fe:97:0a:a5:6f:
c8:1e:dc:20:de:df:5d:fe:9e:06:12:8e:b8:7a:a5:ae:3f:c2:
c9:e5:2b:a7:61:95:c8:ce:e9:7e:49:3b:19:31:d9:33:bc:55:
71:ba:f3:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLLkvUsse6OilFlO++FGwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NzgyZTQ1ZTdlOGU5MjljNWMzZjk2NDQxYTdlNjRjNTQx
ZjgyZTYwHhcNMjUwNjE0MTYwMTMxWhcNMjUwNjE1MTYwMTMxWjAzMTEwLwYDVQQD
Eyg4NWI3ZDU1OTVkNDAxZmU1YzhhZWEwZTRjYTA3MmZlZTcxYjIwODJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1lCkx0oL6x0rNHpcAd9hV77rXRU
hF4D4N/aXX4JJmaDc85bN6PoNlwn4BXiWRX41q2mndZD8UB/SyELL4syHHg1/5N5
4xpFYoPE4W86AreAa5yergVfuiT250a3IiLM73iV1aJ0vuc97sZ/Rbxt5g0JJkbp
K/VXPVNnRxtNO9SnssD6vE5QAI89ikAgrrATYSHvRgxeZ3XeMDOOMFE6RH9/GHjp
98cfo6HMaLPtWZpwlfVteGnavvbdALOVYQePSCSZsTGlquFITv40nRtNR1ipXgrS
+2IWewzjSHF41lMuuwtLOZB90SBtTJyMpocRipGq9+T2q81JMWXlzkAxrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIW31VldQB/lyK6g5MoHL+5xsggtMB8GA1UdIwQY
MBaAFBZ4LkXn6OkpxcP5ZEGn5kxUH4LmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm5ndVJlZm82U25Gd19sa1FhZm1URlFmZ3VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lZjAxYTUtNTg2Ny00MTlmLTgzYzgt
N2Q1N2Y1ODM2MGEwLzEvRm5ndVJlZm82U25Gd19sa1FhZm1URlFmZ3VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lZjAxYTUtNTg2Ny00MTlmLTgzYzgtN2Q1N2Y1ODM2MGEw
LzEvRm5ndVJlZm82U25Gd19sa1FhZm1URlFmZ3VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImEEf5DZ
gHiqKqsNstSbOsLzzdY+35OX+gNODDE3OMTma1lh0klQ5ohfluMjQ/EP0Qb9Evu3
UvXN0Mci5yBJDfnrta+xMiQ7XGIyqX0KwOK56EZHf1GsgPqpWpoEW5wCycCOI3qd
dSNke038vWe0Jap3SZgqJWMoCV0RUf8THPtlGeguW+glzSv9QvMnRxNE8IxgUqky
jlQa0oNhQFUOMPTVtVtxOWkC6TQX8BPqIz2YG2DJBtwoTxPUaxsug+0pfHF133QR
s6aUIX8mulN+HG4Z7f6XCqVvyB7cIN7fXf6eBhKOuHqlrj/CyeUrp2GVyM7pfkk7
GTHZM7xVcbrzPg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:57:07 2025 by rpki-client