Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
File: Fvz0hmtshesMt2iO3UODD0GdZqI.mft (raw, json)
Hash identifier: KH4a7gE2DXAtII15VBJKt/tu1hM8nIKSzhLL6F34vn4=
Subject key identifier: 84:BE:97:E7:C4:8B:E9:6D:CB:35:85:4A:A9:7E:27:DF:B0:79:A8:96
Authority key identifier: 16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
Certificate issuer: /CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Certificate serial: 01977F4421C76913B0D2089006AA9B996033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
Manifest number: 12AC
Signing time: Tue 17 Jun 2025 19:01:00 +0000
Manifest this update: Tue 17 Jun 2025 19:01:00 +0000
Manifest next update: Wed 18 Jun 2025 19:01:00 +0000
Files and hashes: 1: Fvz0hmtshesMt2iO3UODD0GdZqI.crl (hash: spD63irU3WRyU3eE7naCCt6GImoeaIUxm7ep5q6sOlU=)
2: a5UnemfayVAdbbDqB5jidjgbSJ8.roa (hash: FqrPLPAJKzFu5i1kf8q3fsGuwgt9nQGlLWvvqh/+z7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:44:21:c7:69:13:b0:d2:08:90:06:aa:9b:99:60:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Validity
Not Before: Jun 17 19:01:00 2025 GMT
Not After : Jun 18 19:01:00 2025 GMT
Subject: CN=84be97e7c48be96dcb35854aa97e27dfb079a896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:c9:7f:4c:08:8b:8c:68:cf:e5:9d:c5:e4:
cc:2c:74:19:71:3f:38:de:da:e4:bd:ac:b9:8f:5c:
25:1a:60:5e:43:f6:72:d1:d7:1c:ff:09:be:e1:97:
c7:ca:06:14:e3:f9:3e:16:cb:5f:eb:5c:f9:7a:3d:
27:57:99:5c:b4:ab:d8:c4:c5:80:f3:71:a5:fa:91:
4d:b6:ec:c0:71:98:68:a4:46:ed:73:78:3e:59:2f:
cf:3b:50:be:96:cb:90:9e:83:64:a4:7c:10:92:55:
6b:e6:51:57:64:20:ac:7a:ee:a8:84:97:34:e3:ca:
fe:c1:ad:13:b6:de:c1:1d:26:fd:ea:25:bc:45:5e:
2d:5f:31:49:d9:11:44:30:42:47:2a:03:4b:4b:7c:
d8:02:ba:b9:a5:e9:b4:07:27:68:e6:fe:90:c1:3a:
2b:74:dc:46:59:89:a2:85:39:b3:1c:d4:b4:6b:51:
83:6e:ca:83:24:ff:16:e3:2f:ef:66:81:b0:c1:eb:
c5:d9:11:8e:85:13:02:0b:0a:b2:94:93:74:5f:21:
f4:05:0c:c0:7c:de:99:04:cf:8f:e3:d1:2f:8d:62:
cd:5a:05:4c:4a:19:1d:d6:e9:13:9c:c4:d8:3a:82:
dc:a0:20:d2:f8:14:7e:89:bc:4e:9b:45:5b:2f:4f:
33:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BE:97:E7:C4:8B:E9:6D:CB:35:85:4A:A9:7E:27:DF:B0:79:A8:96
X509v3 Authority Key Identifier:
keyid:16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:20:9d:71:f6:12:4e:ba:6c:e5:72:49:89:68:e9:af:89:b1:
c9:32:b9:02:08:c1:62:3a:8e:5b:2b:24:3f:6b:bd:b8:29:6f:
2f:77:a0:5e:52:fb:36:14:53:0b:64:c3:9c:44:6c:d9:bf:e5:
80:81:49:91:b0:3d:6f:03:38:0b:50:1f:cb:f5:af:3f:15:f1:
34:ec:22:d0:98:fd:ef:d8:be:82:9d:cd:0b:f1:f4:d5:2b:2f:
ba:4f:28:6f:55:e3:32:6c:8f:15:ed:cb:91:d8:70:89:0d:0a:
86:7d:6b:db:38:07:b7:91:e5:c4:0c:f3:9c:c4:0a:4e:39:5c:
ea:f4:f6:4c:35:19:f8:18:49:d1:9c:b4:80:64:4d:2e:12:de:
ac:2c:27:95:fc:cd:a8:79:c3:52:00:ce:31:c8:0e:be:15:5f:
2f:95:cc:c3:b1:e2:f2:2c:ae:bf:ef:0e:38:65:6e:a4:1d:4c:
51:d6:3a:c6:b1:d5:e8:13:48:19:59:33:71:19:26:9d:62:8d:
e2:7d:51:e4:16:69:1f:6a:93:01:a3:88:36:97:0d:7e:80:4c:
5f:e0:e0:69:e2:4c:f4:06:da:2c:68:fb:1d:3d:b9:b4:9b:17:
c1:fd:d1:85:97:7f:c5:7a:d5:c4:fd:1a:04:9a:c2:61:17:27:
63:b8:57:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd/RCHHaROw0giQBqqbmWAzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZmNmNDg2NmI2Yzg1ZWIwY2I3Njg4ZWRkNDM4MzBmNDE5
ZDY2YTIwHhcNMjUwNjE3MTkwMTAwWhcNMjUwNjE4MTkwMTAwWjAzMTEwLwYDVQQD
Eyg4NGJlOTdlN2M0OGJlOTZkY2IzNTg1NGFhOTdlMjdkZmIwNzlhODk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu7Jf0wIi4xoz+WdxeTMLHQZcT84
3trkvay5j1wlGmBeQ/Zy0dcc/wm+4ZfHygYU4/k+Fstf61z5ej0nV5lctKvYxMWA
83Gl+pFNtuzAcZhopEbtc3g+WS/PO1C+lsuQnoNkpHwQklVr5lFXZCCseu6ohJc0
48r+wa0Ttt7BHSb96iW8RV4tXzFJ2RFEMEJHKgNLS3zYArq5pem0Bydo5v6QwTor
dNxGWYmihTmzHNS0a1GDbsqDJP8W4y/vZoGwwevF2RGOhRMCCwqylJN0XyH0BQzA
fN6ZBM+P49EvjWLNWgVMShkd1ukTnMTYOoLcoCDS+BR+ibxOm0VbL08z2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIS+l+fEi+ltyzWFSql+J9+weaiWMB8GA1UdIwQY
MBaAFBb89IZrbIXrDLdojt1Dgw9BnWaiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnZ6MGhtdHNoZXNNdDJpTzNVT0REMEdkWnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mYzg4ODMtYWFkMi00MThiLTliODct
ZWEyMTZiYTI1OTRkLzEvRnZ6MGhtdHNoZXNNdDJpTzNVT0REMEdkWnFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9mYzg4ODMtYWFkMi00MThiLTliODctZWEyMTZiYTI1OTRk
LzEvRnZ6MGhtdHNoZXNNdDJpTzNVT0REMEdkWnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAISCdcfYS
Trps5XJJiWjpr4mxyTK5AgjBYjqOWyskP2u9uClvL3egXlL7NhRTC2TDnERs2b/l
gIFJkbA9bwM4C1Afy/WvPxXxNOwi0Jj979i+gp3NC/H01Ssvuk8ob1XjMmyPFe3L
kdhwiQ0Khn1r2zgHt5HlxAzznMQKTjlc6vT2TDUZ+BhJ0Zy0gGRNLhLerCwnlfzN
qHnDUgDOMcgOvhVfL5XMw7Hi8iyuv+8OOGVupB1MUdY6xrHV6BNIGVkzcRkmnWKN
4n1R5BZpH2qTAaOINpcNfoBMX+DgaeJM9AbaLGj7HT25tJsXwf3RhZd/xXrVxP0a
BJrCYRcnY7hXQA==
-----END CERTIFICATE-----
Generated at Wed Jun 18 05:29:05 2025 by rpki-client