Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
File: fkL5qpHFODs-cnVy67GVWRqHYM4.mft (raw, json)
Hash identifier: kFO2TXWuA4tAzXchYiO0cEsmXyp5w3oz5rY2RBORd7Y=
Subject key identifier: E8:F1:62:B3:B3:2F:4A:A1:85:BF:BD:27:BB:D6:A5:DB:8C:B9:E9:49
Authority key identifier: 7E:42:F9:AA:91:C5:38:3B:3E:72:75:72:EB:B1:95:59:1A:87:60:CE
Certificate issuer: /CN=7e42f9aa91c5383b3e727572ebb195591a8760ce
Certificate serial: 01976F2C3B493202643304F059CE969C3177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
Manifest number: 0627
Signing time: Sat 14 Jun 2025 16:00:59 +0000
Manifest this update: Sat 14 Jun 2025 16:00:59 +0000
Manifest next update: Sun 15 Jun 2025 16:00:59 +0000
Files and hashes: 1: fkL5qpHFODs-cnVy67GVWRqHYM4.crl (hash: Qy7UoSLR3u66HoMRBxJ/HWV11COwLdDaFeqyKACix0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:3b:49:32:02:64:33:04:f0:59:ce:96:9c:31:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42f9aa91c5383b3e727572ebb195591a8760ce
Validity
Not Before: Jun 14 16:00:59 2025 GMT
Not After : Jun 15 16:00:59 2025 GMT
Subject: CN=e8f162b3b32f4aa185bfbd27bbd6a5db8cb9e949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:91:c1:e6:d6:9d:a3:7c:bb:16:1a:5d:08:
39:87:25:cc:f5:bf:4e:88:39:ae:af:6a:9e:72:93:
74:60:23:e0:09:df:3e:58:7b:25:f5:8c:1b:4a:62:
93:d9:ec:8a:e9:bc:3d:0e:d1:a2:95:82:14:45:7f:
91:66:46:b4:be:bf:ec:8d:f4:da:18:8a:60:e7:e5:
9c:86:14:c3:f9:db:d2:e6:fa:41:ec:fb:16:97:a1:
7b:63:9b:05:04:0c:53:8f:e8:af:a5:bc:e5:25:40:
da:fd:d1:98:61:24:0c:ba:34:81:09:9b:5a:a6:b1:
d0:98:de:b4:d8:05:23:05:d3:f0:36:bb:bd:4b:76:
3d:51:c4:81:ac:35:c4:b6:47:f1:31:67:5a:b3:f7:
1e:78:87:7c:fe:5b:4a:b5:2b:8b:68:11:0b:35:f1:
2a:88:24:50:f8:9d:24:f8:f3:9c:64:44:77:a8:e4:
a3:45:d8:2c:0c:71:12:b0:7d:e3:4e:12:39:4c:a7:
a3:c0:bb:30:38:53:90:ff:7a:35:de:bf:3d:d0:33:
9d:65:2d:d4:84:e2:be:5a:a7:44:71:ee:48:df:8c:
42:f0:df:1c:b6:79:9d:13:f4:d6:0e:4e:05:3d:4d:
af:60:14:a7:87:10:fe:42:ee:00:bd:cb:13:b9:fb:
a2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F1:62:B3:B3:2F:4A:A1:85:BF:BD:27:BB:D6:A5:DB:8C:B9:E9:49
X509v3 Authority Key Identifier:
keyid:7E:42:F9:AA:91:C5:38:3B:3E:72:75:72:EB:B1:95:59:1A:87:60:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:62:00:b1:3c:94:aa:61:82:99:4c:4f:f2:0c:1f:b8:f0:d6:
2b:09:72:11:33:25:ea:d0:f7:d8:a2:6d:f7:56:45:f4:e9:cb:
4e:b6:9e:14:d6:8b:75:f4:07:cb:9f:af:6b:6c:0d:dd:a7:05:
b3:30:cf:cb:93:86:cd:bd:4c:6e:82:ed:c4:4a:85:fe:8a:84:
31:f9:00:7e:ec:ae:01:71:63:67:45:bf:53:e9:76:30:4c:09:
70:8d:29:a6:67:4c:f6:45:42:17:4c:01:28:df:6a:98:19:4e:
be:83:9d:e3:e1:02:92:13:27:2f:ab:12:bd:1b:af:7e:61:3c:
19:ef:2e:88:85:b4:03:5b:ae:d4:5f:4c:76:45:da:6e:12:dd:
7e:75:a4:f3:b3:06:1a:bf:ae:a7:00:e5:28:74:b0:ac:b9:1b:
42:a9:a2:9d:87:3c:48:99:ba:27:f3:f8:95:bc:10:6f:f2:a2:
ba:92:6f:c5:bf:79:a7:f7:78:47:d3:c2:be:ac:b1:ce:c5:09:
7f:c0:9e:93:7a:90:05:66:59:b2:b2:23:f6:3d:fa:7d:e6:fc:
a7:d4:b3:52:07:f4:fa:16:95:19:b9:d3:d3:27:06:1e:9f:0d:
84:70:cc:e4:a0:36:07:d4:4a:3f:8a:90:a2:f2:38:68:3d:73:
51:9f:91:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLDtJMgJkMwTwWc6WnDF3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNDJmOWFhOTFjNTM4M2IzZTcyNzU3MmViYjE5NTU5MWE4
NzYwY2UwHhcNMjUwNjE0MTYwMDU5WhcNMjUwNjE1MTYwMDU5WjAzMTEwLwYDVQQD
EyhlOGYxNjJiM2IzMmY0YWExODViZmJkMjdiYmQ2YTVkYjhjYjllOTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWGRwebWnaN8uxYaXQg5hyXM9b9O
iDmur2qecpN0YCPgCd8+WHsl9YwbSmKT2eyK6bw9DtGilYIURX+RZka0vr/sjfTa
GIpg5+WchhTD+dvS5vpB7PsWl6F7Y5sFBAxTj+ivpbzlJUDa/dGYYSQMujSBCZta
prHQmN602AUjBdPwNru9S3Y9UcSBrDXEtkfxMWdas/ceeId8/ltKtSuLaBELNfEq
iCRQ+J0k+POcZER3qOSjRdgsDHESsH3jThI5TKejwLswOFOQ/3o13r890DOdZS3U
hOK+WqdEce5I34xC8N8ctnmdE/TWDk4FPU2vYBSnhxD+Qu4AvcsTufuixwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjxYrOzL0qhhb+9J7vWpduMuelJMB8GA1UdIwQY
MBaAFH5C+aqRxTg7PnJ1cuuxlVkah2DOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmtMNXFwSEZPRHMtY25WeTY3R1ZXUnFIWU00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC84MWQ4ZGQtNGNkMy00Mzc4LWIwNjct
N2NkNDcyODY0YmY4LzEvZmtMNXFwSEZPRHMtY25WeTY3R1ZXUnFIWU00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC84MWQ4ZGQtNGNkMy00Mzc4LWIwNjctN2NkNDcyODY0YmY4
LzEvZmtMNXFwSEZPRHMtY25WeTY3R1ZXUnFIWU00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUGIAsTyU
qmGCmUxP8gwfuPDWKwlyETMl6tD32KJt91ZF9OnLTraeFNaLdfQHy5+va2wN3acF
szDPy5OGzb1MboLtxEqF/oqEMfkAfuyuAXFjZ0W/U+l2MEwJcI0ppmdM9kVCF0wB
KN9qmBlOvoOd4+ECkhMnL6sSvRuvfmE8Ge8uiIW0A1uu1F9MdkXabhLdfnWk87MG
Gr+upwDlKHSwrLkbQqminYc8SJm6J/P4lbwQb/KiupJvxb95p/d4R9PCvqyxzsUJ
f8Cek3qQBWZZsrIj9j36feb8p9SzUgf0+haVGbnT0ycGHp8NhHDM5KA2B9RKP4qQ
ovI4aD1zUZ+Rgg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 02:31:37 2025 by rpki-client