
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
File: FsF7vpSeJS3Q4skgr13ij96HRxw.mft (raw, json)
Hash identifier: kCTkHUUh5wLRVwYokWzicirvDGdv40aLQ3zaoHQg1MY=
Subject key identifier: 7B:98:49:C9:CA:82:1D:97:54:2A:21:A9:BD:D6:EA:83:1A:F4:05:8D
Authority key identifier: 16:C1:7B:BE:94:9E:25:2D:D0:E2:C9:20:AF:5D:E2:8F:DE:87:47:1C
Certificate issuer: /CN=16c17bbe949e252dd0e2c920af5de28fde87471c
Certificate serial: 01987F798BA5C2946E7B36CFB9CC699F8285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
Manifest number: 161A
Signing time: Wed 06 Aug 2025 13:02:08 +0000
Manifest this update: Wed 06 Aug 2025 13:02:08 +0000
Manifest next update: Thu 07 Aug 2025 13:02:08 +0000
Files and hashes: 1: FsF7vpSeJS3Q4skgr13ij96HRxw.crl (hash: HZjAktf7bAQtjEuNRjZvFuw5vOmv5wTPrbGKKEiWcIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:79:8b:a5:c2:94:6e:7b:36:cf:b9:cc:69:9f:82:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16c17bbe949e252dd0e2c920af5de28fde87471c
Validity
Not Before: Aug 6 13:02:08 2025 GMT
Not After : Aug 7 13:02:08 2025 GMT
Subject: CN=7b9849c9ca821d97542a21a9bdd6ea831af4058d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5a:73:5b:90:41:9b:e5:3f:e7:b8:b8:1d:c1:
c7:37:4e:9a:ab:a3:9b:c5:d1:65:7c:34:3c:f2:10:
0b:d4:17:fe:44:ed:54:b6:8c:57:6c:49:f5:83:82:
71:bc:f7:8c:80:49:72:52:e5:1d:c6:43:97:56:41:
9d:dc:cf:8e:2e:f5:78:14:0c:9d:bd:bc:a1:47:05:
4b:46:e7:30:3d:e3:13:bd:cd:3b:31:bc:59:b9:12:
ec:f0:f5:f8:05:8c:1c:32:26:03:3f:58:2d:90:aa:
47:61:b7:2c:67:dd:9e:a7:0f:2a:ef:d1:ab:ce:88:
d6:b4:4a:4d:13:a3:bb:e0:30:20:ab:15:99:33:cb:
20:0f:6d:a3:bf:c6:09:dc:c9:c8:81:94:23:ec:cb:
3f:8b:58:44:5f:a3:e1:e0:9a:49:a1:33:b3:89:08:
6b:1a:1f:40:1f:c7:c7:7d:28:1b:e9:0a:43:c5:a8:
5a:7a:d6:4c:dd:d8:be:5e:b8:f8:21:12:3e:84:10:
d6:8a:7b:ad:5a:47:43:f8:33:d4:1f:f4:0d:12:3e:
e1:1e:32:af:89:e4:d6:d2:79:4b:18:1a:e4:68:01:
10:fa:e7:1b:da:d5:21:0c:89:96:3a:db:62:67:07:
6a:41:16:cf:18:f8:35:3e:e5:74:19:a0:54:9f:08:
01:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:98:49:C9:CA:82:1D:97:54:2A:21:A9:BD:D6:EA:83:1A:F4:05:8D
X509v3 Authority Key Identifier:
keyid:16:C1:7B:BE:94:9E:25:2D:D0:E2:C9:20:AF:5D:E2:8F:DE:87:47:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d8:9d:06:60:e7:01:39:09:bf:6f:99:62:c4:ae:1a:c2:3b:
aa:c0:b4:92:f1:bd:47:3c:c0:61:63:f2:b7:aa:5a:ed:bf:48:
9f:59:5f:a1:7a:1a:ed:8f:14:01:0c:ab:9d:6f:93:8e:ea:bb:
51:08:b2:4a:6d:07:37:60:5e:6a:30:62:66:79:f0:06:93:18:
68:c0:86:0e:48:43:5d:21:3f:c2:f4:67:3c:6a:9e:b1:e8:57:
59:0b:a9:5f:99:71:00:8f:59:47:f4:cf:7b:85:4a:8a:12:ba:
4d:0a:2a:15:88:d8:c5:ce:b2:84:2e:0e:cb:6a:7c:2a:ab:c4:
7e:ba:80:ef:01:98:5e:fa:1d:17:e1:1d:eb:8e:8e:07:34:32:
81:ea:35:34:fe:26:d8:55:0a:7a:d5:5e:e4:3b:52:72:a1:92:
c3:2e:a4:37:fa:e5:0e:b3:5f:46:f4:7e:4b:e4:b1:08:55:34:
1a:53:5a:88:88:02:5f:a7:21:10:2b:d9:a6:a8:fd:a7:f9:b5:
b0:08:cd:1c:59:93:e5:28:cb:2f:3e:05:8e:f5:8f:17:53:5c:
82:82:4b:66:7c:15:ba:fa:b6:37:0e:d0:66:68:3c:94:51:21:
85:df:54:86:d9:5f:dc:cd:b1:1b:65:d1:b0:36:c9:cc:9f:ef:
91:cb:4e:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/eYulwpRuezbPucxpn4KFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YzE3YmJlOTQ5ZTI1MmRkMGUyYzkyMGFmNWRlMjhmZGU4
NzQ3MWMwHhcNMjUwODA2MTMwMjA4WhcNMjUwODA3MTMwMjA4WjAzMTEwLwYDVQQD
Eyg3Yjk4NDljOWNhODIxZDk3NTQyYTIxYTliZGQ2ZWE4MzFhZjQwNThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFpzW5BBm+U/57i4HcHHN06aq6Ob
xdFlfDQ88hAL1Bf+RO1UtoxXbEn1g4JxvPeMgElyUuUdxkOXVkGd3M+OLvV4FAyd
vbyhRwVLRucwPeMTvc07MbxZuRLs8PX4BYwcMiYDP1gtkKpHYbcsZ92epw8q79Gr
zojWtEpNE6O74DAgqxWZM8sgD22jv8YJ3MnIgZQj7Ms/i1hEX6Ph4JpJoTOziQhr
Gh9AH8fHfSgb6QpDxahaetZM3di+Xrj4IRI+hBDWinutWkdD+DPUH/QNEj7hHjKv
ieTW0nlLGBrkaAEQ+ucb2tUhDImWOttiZwdqQRbPGPg1PuV0GaBUnwgByQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuYScnKgh2XVCohqb3W6oMa9AWNMB8GA1UdIwQY
MBaAFBbBe76UniUt0OLJIK9d4o/eh0ccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnNGN3ZwU2VKUzNRNHNrZ3IxM2lqOTZIUnh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lOWM5ODgtYWRkNS00YTQ0LWEyOWMt
N2Y1OWJjNjBlMzAwLzEvRnNGN3ZwU2VKUzNRNHNrZ3IxM2lqOTZIUnh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9lOWM5ODgtYWRkNS00YTQ0LWEyOWMtN2Y1OWJjNjBlMzAw
LzEvRnNGN3ZwU2VKUzNRNHNrZ3IxM2lqOTZIUnh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNidBmDn
ATkJv2+ZYsSuGsI7qsC0kvG9RzzAYWPyt6pa7b9In1lfoXoa7Y8UAQyrnW+Tjuq7
UQiySm0HN2BeajBiZnnwBpMYaMCGDkhDXSE/wvRnPGqesehXWQupX5lxAI9ZR/TP
e4VKihK6TQoqFYjYxc6yhC4Oy2p8KqvEfrqA7wGYXvodF+Ed646OBzQygeo1NP4m
2FUKetVe5DtScqGSwy6kN/rlDrNfRvR+S+SxCFU0GlNaiIgCX6chECvZpqj9p/m1
sAjNHFmT5SjLLz4FjvWPF1NcgoJLZnwVuvq2Nw7QZmg8lFEhhd9Uhtlf3M2xG2XR
sDbJzJ/vkctOQQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:34 2025 by rpki-client