Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
File: Frtbm9zrvdkzgc878jtIVFE1b58.mft (raw, json)
Hash identifier: xaBXdWVP8Px8vWc5ySFio5jj1LkIOr0Lz4yCYu9uQLw=
Subject key identifier: D2:C4:02:7D:19:56:96:F5:95:AD:FC:39:A6:CC:2F:8E:7C:48:A8:09
Authority key identifier: 16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
Certificate issuer: /CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Certificate serial: 0198A04D40C36224BC5FB2B038A67D4D729E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
Manifest number: 162A
Signing time: Tue 12 Aug 2025 22:01:13 +0000
Manifest this update: Tue 12 Aug 2025 22:01:13 +0000
Manifest next update: Wed 13 Aug 2025 22:01:13 +0000
Files and hashes: 1: Frtbm9zrvdkzgc878jtIVFE1b58.crl (hash: FN1fJBoqR38CQGRnF6W00HWxojf1Zbq4eZXI9jIdmfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:40:c3:62:24:bc:5f:b2:b0:38:a6:7d:4d:72:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Validity
Not Before: Aug 12 22:01:13 2025 GMT
Not After : Aug 13 22:01:13 2025 GMT
Subject: CN=d2c4027d195696f595adfc39a6cc2f8e7c48a809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:86:cf:55:b8:07:f8:1b:5a:07:88:bf:b2:1e:
1d:c7:f7:ac:7f:4c:68:7d:06:73:7d:1c:c9:81:68:
f2:79:ce:2f:65:a1:ef:cc:d9:83:4d:b6:7b:26:df:
f7:ff:62:d3:b1:e4:18:ca:09:c9:b2:fd:ae:ab:46:
a4:ff:a7:ef:8b:92:6a:5e:7a:b4:94:09:87:9e:de:
2d:0b:8d:d2:b1:f2:6f:3a:98:36:07:58:de:a4:db:
df:c3:12:8c:11:a9:a0:b4:96:fa:d3:2e:5f:68:e0:
47:ce:cc:4c:e5:9e:9f:45:f0:32:b1:15:a4:6e:48:
28:75:01:8a:bf:f3:07:95:43:5b:98:9e:ee:f6:78:
7b:1e:13:95:bd:40:da:fb:83:51:42:8a:a9:56:fd:
56:9a:a9:c0:db:75:b1:e4:b2:3a:ad:9c:60:07:dd:
6f:b7:69:6f:68:38:82:6e:a9:a1:e8:85:a9:bc:61:
0d:58:f1:3e:a8:29:ec:78:3d:ea:79:58:40:81:43:
3d:38:56:07:7a:92:3e:23:cd:a6:d8:65:60:29:30:
dd:52:b8:28:8e:26:39:72:0f:ba:57:be:ac:db:ff:
5b:a4:c0:87:6e:ae:1a:de:60:a5:1d:80:55:78:71:
07:9f:96:32:3b:9f:f7:e6:02:6e:8b:5a:aa:ab:7f:
a0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C4:02:7D:19:56:96:F5:95:AD:FC:39:A6:CC:2F:8E:7C:48:A8:09
X509v3 Authority Key Identifier:
keyid:16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:03:37:ec:c4:17:d5:a5:d3:3c:c6:6b:52:e2:31:a9:57:82:
b8:a0:67:75:1c:9d:64:ee:56:ce:6a:73:41:e1:6f:06:dd:ad:
78:6a:3d:e2:0a:64:00:89:1b:06:41:92:be:05:3a:3a:e8:3d:
3f:d2:a7:f7:7a:04:b8:9d:9f:ec:1b:d5:c2:1c:45:09:a7:6a:
34:bf:56:62:0e:fa:42:28:4f:b8:1a:1e:3a:c7:9b:6a:94:65:
83:11:c1:88:98:9c:08:d9:cc:a5:d6:a9:e8:8c:22:38:af:61:
f8:95:5b:5e:13:e7:f6:85:95:d1:4f:f3:e3:96:a9:07:59:76:
11:c6:b0:76:ab:22:cc:23:b2:8a:c6:44:d7:22:71:47:8d:b8:
1d:89:7d:53:5f:b9:8c:30:72:ca:0a:e2:5f:8e:04:be:4a:c3:
8f:12:9d:a3:6f:62:97:f3:80:9c:bc:1d:cb:ce:2c:1c:e2:78:
48:76:00:21:db:57:87:45:e8:98:40:72:71:16:d8:27:77:4e:
c9:7c:a4:66:d5:3e:2a:ab:f5:d0:3c:24:2a:58:73:7c:97:70:
a2:ea:11:64:b2:49:59:e4:61:aa:1a:7c:c8:a7:39:df:85:c8:
a8:69:13:3a:78:50:f9:52:f7:26:c7:4f:41:1a:39:73:52:66:
60:0b:61:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTUDDYiS8X7KwOKZ9TXKeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YmI1YjliZGNlYmJkZDkzMzgxY2YzYmYyM2I0ODU0NTEz
NTZmOWYwHhcNMjUwODEyMjIwMTEzWhcNMjUwODEzMjIwMTEzWjAzMTEwLwYDVQQD
EyhkMmM0MDI3ZDE5NTY5NmY1OTVhZGZjMzlhNmNjMmY4ZTdjNDhhODA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYbPVbgH+BtaB4i/sh4dx/esf0xo
fQZzfRzJgWjyec4vZaHvzNmDTbZ7Jt/3/2LTseQYygnJsv2uq0ak/6fvi5JqXnq0
lAmHnt4tC43SsfJvOpg2B1jepNvfwxKMEamgtJb60y5faOBHzsxM5Z6fRfAysRWk
bkgodQGKv/MHlUNbmJ7u9nh7HhOVvUDa+4NRQoqpVv1WmqnA23Wx5LI6rZxgB91v
t2lvaDiCbqmh6IWpvGENWPE+qCnseD3qeVhAgUM9OFYHepI+I82m2GVgKTDdUrgo
jiY5cg+6V76s2/9bpMCHbq4a3mClHYBVeHEHn5YyO5/35gJui1qqq3+gPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLEAn0ZVpb1la38OabML458SKgJMB8GA1UdIwQY
MBaAFBa7W5vc673ZM4HPO/I7SFRRNW+fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnJ0Ym05enJ2ZGt6Z2M4NzhqdElWRkUxYjU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kNzVhOWMtN2NiOS00NTI3LWFhYTEt
ODllMjcwNzhiMGZlLzEvRnJ0Ym05enJ2ZGt6Z2M4NzhqdElWRkUxYjU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kNzVhOWMtN2NiOS00NTI3LWFhYTEtODllMjcwNzhiMGZl
LzEvRnJ0Ym05enJ2ZGt6Z2M4NzhqdElWRkUxYjU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwM37MQX
1aXTPMZrUuIxqVeCuKBndRydZO5WzmpzQeFvBt2teGo94gpkAIkbBkGSvgU6Oug9
P9Kn93oEuJ2f7BvVwhxFCadqNL9WYg76QihPuBoeOsebapRlgxHBiJicCNnMpdap
6IwiOK9h+JVbXhPn9oWV0U/z45apB1l2EcawdqsizCOyisZE1yJxR424HYl9U1+5
jDByygriX44EvkrDjxKdo29il/OAnLwdy84sHOJ4SHYAIdtXh0XomEBycRbYJ3dO
yXykZtU+Kqv10DwkKlhzfJdwouoRZLJJWeRhqhp8yKc534XIqGkTOnhQ+VL3JsdP
QRo5c1JmYAthrw==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:39 2025 by rpki-client