
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
File: f3NriKAkBNQwS92tX_VQSmgz57c.mft (raw, json)
Hash identifier: IZAJsJ0D3jfiozAv9xnHOrJxA33YjmamE6ITFMrwNJE=
Subject key identifier: FA:5E:6D:EE:F6:13:C5:16:D9:13:89:74:4B:9B:DE:EB:44:C3:07:A5
Authority key identifier: 7F:73:6B:88:A0:24:04:D4:30:4B:DD:AD:5F:F5:50:4A:68:33:E7:B7
Certificate issuer: /CN=7f736b88a02404d4304bddad5ff5504a6833e7b7
Certificate serial: 01988921AD004C0BF853F42867BACAF4B605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
Manifest number: 161E
Signing time: Fri 08 Aug 2025 10:02:22 +0000
Manifest this update: Fri 08 Aug 2025 10:02:22 +0000
Manifest next update: Sat 09 Aug 2025 10:02:22 +0000
Files and hashes: 1: f3NriKAkBNQwS92tX_VQSmgz57c.crl (hash: OjEIYjRt0g2/qSNpKdjyf6BY08f7d3OXeBIl5Cb2pI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:21:ad:00:4c:0b:f8:53:f4:28:67:ba:ca:f4:b6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f736b88a02404d4304bddad5ff5504a6833e7b7
Validity
Not Before: Aug 8 10:02:22 2025 GMT
Not After : Aug 9 10:02:22 2025 GMT
Subject: CN=fa5e6deef613c516d91389744b9bdeeb44c307a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b9:10:d3:db:94:26:89:d1:59:b4:49:26:1e:
51:19:ab:ac:5a:01:7b:d8:a4:72:cd:01:ed:fc:2f:
b2:b9:0b:80:02:1f:5e:11:d8:8a:96:b9:a6:8b:0f:
52:be:dc:34:7d:8c:cd:a2:04:52:c3:d0:02:75:5d:
a0:6b:b3:1a:57:ea:99:7c:d4:1c:e4:50:3f:0f:f2:
f4:91:ab:eb:35:3d:cd:8b:1b:de:33:78:18:74:5c:
71:e1:c5:c7:20:d0:91:34:8f:4d:f3:f3:1f:1c:2a:
dd:df:70:71:b1:45:70:04:8b:7f:45:e5:f8:7b:5f:
cc:d2:bc:47:b1:ab:3c:7d:4b:71:d8:85:50:b0:0d:
e5:f9:cf:d3:c3:36:c1:78:24:73:fc:a2:57:54:95:
52:f5:39:28:ba:2a:93:a4:fc:2e:5b:7c:b7:eb:eb:
d9:b5:6b:fc:aa:12:0c:9e:75:b6:4a:09:77:e2:62:
95:0f:aa:5c:3e:e3:a6:f4:dd:b8:53:3f:b1:d7:60:
c2:f2:85:26:18:b2:88:8c:8c:04:ca:6e:e4:23:5c:
24:80:51:eb:5a:52:14:36:ed:02:60:e1:07:a4:02:
a8:b0:80:02:56:1e:15:aa:69:65:a1:98:91:f4:48:
6a:eb:ae:05:cc:4b:c4:74:4a:e1:aa:41:d6:40:ce:
fd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5E:6D:EE:F6:13:C5:16:D9:13:89:74:4B:9B:DE:EB:44:C3:07:A5
X509v3 Authority Key Identifier:
keyid:7F:73:6B:88:A0:24:04:D4:30:4B:DD:AD:5F:F5:50:4A:68:33:E7:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c6:c7:a9:b9:23:37:24:3c:77:62:f6:11:9e:57:77:a9:69:
40:da:4d:8c:bf:0c:c4:51:e7:fa:38:1d:ea:2b:51:29:c8:39:
e7:9a:c6:54:7a:25:22:5a:d6:92:62:d1:ca:3a:3f:14:22:1c:
53:95:92:5c:c1:29:a3:3e:22:0a:9d:c2:a7:5e:32:1c:11:da:
36:c2:74:7f:0d:63:d8:1d:5f:4b:c8:97:d1:a0:84:16:6a:9c:
eb:a2:2d:c8:cb:fc:18:12:51:14:d3:e3:ae:b4:dd:9d:5b:7d:
76:0a:e6:fa:4e:fa:ef:ac:58:51:ce:d6:60:ca:92:b1:82:97:
69:e1:39:17:0f:d7:d0:2a:b3:38:18:a8:78:df:9f:c1:5d:12:
68:69:ee:d4:cc:f8:e6:67:d8:a0:64:03:11:c5:a1:72:98:55:
77:3a:09:98:e9:cf:b5:fa:2a:23:29:c1:aa:eb:13:13:88:b5:
d0:c3:c7:fb:cd:3c:82:9b:d7:58:cc:a6:a2:2b:f4:8a:ec:29:
67:a6:0c:76:ff:57:63:52:26:2e:87:0f:fd:64:5d:e4:49:67:
6c:40:39:bf:e5:a5:7a:7b:df:a2:dc:e0:6f:75:e9:98:a8:63:
6e:b0:35:58:28:4e:4b:37:f3:07:58:b2:fd:66:7f:ce:a3:f9:
e4:37:10:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJIa0ATAv4U/QoZ7rK9LYFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNzM2Yjg4YTAyNDA0ZDQzMDRiZGRhZDVmZjU1MDRhNjgz
M2U3YjcwHhcNMjUwODA4MTAwMjIyWhcNMjUwODA5MTAwMjIyWjAzMTEwLwYDVQQD
EyhmYTVlNmRlZWY2MTNjNTE2ZDkxMzg5NzQ0YjliZGVlYjQ0YzMwN2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLkQ09uUJonRWbRJJh5RGausWgF7
2KRyzQHt/C+yuQuAAh9eEdiKlrmmiw9Svtw0fYzNogRSw9ACdV2ga7MaV+qZfNQc
5FA/D/L0kavrNT3NixveM3gYdFxx4cXHINCRNI9N8/MfHCrd33BxsUVwBIt/ReX4
e1/M0rxHsas8fUtx2IVQsA3l+c/TwzbBeCRz/KJXVJVS9TkouiqTpPwuW3y36+vZ
tWv8qhIMnnW2Sgl34mKVD6pcPuOm9N24Uz+x12DC8oUmGLKIjIwEym7kI1wkgFHr
WlIUNu0CYOEHpAKosIACVh4VqmlloZiR9Ehq664FzEvEdErhqkHWQM79OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpebe72E8UW2ROJdEub3utEwwelMB8GA1UdIwQY
MBaAFH9za4igJATUMEvdrV/1UEpoM+e3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjNOcmlLQWtCTlF3UzkydFhfVlFTbWd6NTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wZjI1Y2UtYjk3Ny00ODUzLTllYzMt
OWU1NmNiNTRmZWY3LzEvZjNOcmlLQWtCTlF3UzkydFhfVlFTbWd6NTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8wZjI1Y2UtYjk3Ny00ODUzLTllYzMtOWU1NmNiNTRmZWY3
LzEvZjNOcmlLQWtCTlF3UzkydFhfVlFTbWd6NTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApMbHqbkj
NyQ8d2L2EZ5Xd6lpQNpNjL8MxFHn+jgd6itRKcg555rGVHolIlrWkmLRyjo/FCIc
U5WSXMEpoz4iCp3Cp14yHBHaNsJ0fw1j2B1fS8iX0aCEFmqc66ItyMv8GBJRFNPj
rrTdnVt9dgrm+k7676xYUc7WYMqSsYKXaeE5Fw/X0CqzOBioeN+fwV0SaGnu1Mz4
5mfYoGQDEcWhcphVdzoJmOnPtfoqIynBqusTE4i10MPH+808gpvXWMymoiv0iuwp
Z6YMdv9XY1ImLocP/WRd5ElnbEA5v+Wlenvfotzgb3XpmKhjbrA1WChOSzfzB1iy
/WZ/zqP55DcQkQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 12:53:38 2025 by rpki-client