Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
File: F88SpliemYyb7BOa-PznCsR1rXI.mft (raw, json)
Hash identifier: GJoXF32onCTIMcYCYNkadUl69wiRuWkg3b/30CB0/L8=
Subject key identifier: C4:4E:DD:4E:FE:09:09:E9:C0:BD:2E:34:7B:77:E5:5A:58:F0:6F:4F
Authority key identifier: 17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
Certificate issuer: /CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Certificate serial: 01987E2F427BE39D19CAA8CDCD35456A3CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 07:01:23 +0000
Manifest this update: Wed 06 Aug 2025 07:01:23 +0000
Manifest next update: Thu 07 Aug 2025 07:01:23 +0000
Files and hashes: 1: F88SpliemYyb7BOa-PznCsR1rXI.crl (hash: vk/VlkvS63LD8+Xo4hxfg71V3LjTsIR+x4lChK6612Y=)
2: dAIhcdZ8fwYvVo-M_emgqHoK7ZU.roa (hash: SjeXAqHoVFgHw2EHHXptMICe3kneOtC1TL1zW8otQdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2f:42:7b:e3:9d:19:ca:a8:cd:cd:35:45:6a:3c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Validity
Not Before: Aug 6 07:01:23 2025 GMT
Not After : Aug 7 07:01:23 2025 GMT
Subject: CN=c44edd4efe0909e9c0bd2e347b77e55a58f06f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:23:8c:cc:51:ac:59:11:6e:23:21:86:41:cc:
53:41:58:b0:1a:83:84:50:68:98:47:0a:ab:e8:9c:
90:7c:cb:60:0d:d8:3b:30:cd:34:25:8e:ef:8d:53:
51:6b:9f:9a:0c:a8:8d:ec:9f:d2:34:5c:bc:e5:4a:
08:94:8d:e7:9b:60:d2:4a:9e:71:be:79:03:68:38:
86:f4:21:c6:69:75:62:18:08:9c:27:70:df:58:bb:
8d:5d:3f:b8:e2:3f:0a:df:b0:86:16:70:73:c9:7e:
f3:b9:cd:0d:77:5b:5c:d5:80:3e:34:9e:4d:5c:6b:
1b:7a:2e:17:a3:b4:43:ec:a5:41:4b:69:ee:59:97:
98:61:ca:98:ff:be:23:ff:12:51:70:c8:29:fe:86:
3c:d7:57:3c:af:f1:4e:8e:02:f1:30:55:76:21:ee:
d0:7b:a9:d6:54:97:34:99:1c:37:8c:1d:49:76:21:
0e:3e:56:0f:77:d1:a6:08:84:bb:11:84:37:19:8b:
68:a1:6f:e1:8b:a8:b3:f1:16:b5:0e:83:d9:f4:40:
10:82:3c:85:b0:b4:2d:79:47:f2:06:a4:7a:b7:7b:
60:be:06:ac:b2:d2:9e:66:d6:f0:f2:bd:bb:72:e4:
01:49:a8:41:0d:c8:1c:44:e2:0a:86:3f:24:83:2a:
02:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4E:DD:4E:FE:09:09:E9:C0:BD:2E:34:7B:77:E5:5A:58:F0:6F:4F
X509v3 Authority Key Identifier:
keyid:17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:72:8d:f3:45:ff:2e:78:c8:a6:19:a8:aa:10:c4:c3:3c:a9:
f7:ad:60:11:58:45:ed:f2:55:6d:85:55:b2:e9:66:2d:91:d7:
f5:99:fb:9f:5f:e1:41:2f:0c:67:e3:b9:26:79:1f:cd:03:18:
3f:cf:b0:bf:78:cf:99:bc:f0:9d:b3:17:c0:08:e5:ca:1f:f4:
7d:56:15:73:0c:67:c1:f5:7e:f6:ba:84:a6:73:74:46:28:c0:
83:70:27:81:7e:cc:d5:b6:33:e6:65:06:73:24:d8:2d:7c:9d:
90:8a:fd:98:3d:b6:08:14:1b:ff:0d:89:fb:90:21:14:2b:1b:
3f:4a:41:e8:4d:00:d9:0a:9c:6c:76:a3:38:4f:c7:16:f9:a5:
17:f6:ff:f3:1f:3d:a8:c5:7e:cd:51:cc:01:df:37:2e:62:7b:
f9:74:43:be:c0:5b:34:4d:15:ad:bc:50:77:aa:71:a1:39:a6:
52:58:bc:67:30:7b:db:b6:c7:b5:53:b2:8a:6a:fc:88:37:f2:
aa:61:c9:fd:e4:30:68:4e:38:7b:46:6b:a1:80:aa:44:dc:49:
af:50:62:bf:8f:da:b7:bf:35:81:b3:94:04:9e:23:36:e3:a5:
32:e9:a3:63:14:96:92:bf:bf:85:a7:5d:a9:7e:97:f1:a4:d2:
bb:c7:00:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+L0J7450ZyqjNzTVFajyjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3Y2YxMmE2NTg5ZTk5OGM5YmVjMTM5YWY4ZmNlNzBhYzQ3
NWFkNzIwHhcNMjUwODA2MDcwMTIzWhcNMjUwODA3MDcwMTIzWjAzMTEwLwYDVQQD
EyhjNDRlZGQ0ZWZlMDkwOWU5YzBiZDJlMzQ3Yjc3ZTU1YTU4ZjA2ZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSOMzFGsWRFuIyGGQcxTQViwGoOE
UGiYRwqr6JyQfMtgDdg7MM00JY7vjVNRa5+aDKiN7J/SNFy85UoIlI3nm2DSSp5x
vnkDaDiG9CHGaXViGAicJ3DfWLuNXT+44j8K37CGFnBzyX7zuc0Nd1tc1YA+NJ5N
XGsbei4Xo7RD7KVBS2nuWZeYYcqY/74j/xJRcMgp/oY811c8r/FOjgLxMFV2Ie7Q
e6nWVJc0mRw3jB1JdiEOPlYPd9GmCIS7EYQ3GYtooW/hi6iz8Ra1DoPZ9EAQgjyF
sLQteUfyBqR6t3tgvgasstKeZtbw8r27cuQBSahBDcgcROIKhj8kgyoCtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRO3U7+CQnpwL0uNHt35VpY8G9PMB8GA1UdIwQY
MBaAFBfPEqZYnpmMm+wTmvj85wrEda1yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjg4U3BsaWVtWXliN0JPYS1Qem5Dc1IxclhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85YmRmMzQtNzI5ZC00YmUwLWIxNWYt
NWRlMDg3MTE4MmJhLzEvRjg4U3BsaWVtWXliN0JPYS1Qem5Dc1IxclhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS85YmRmMzQtNzI5ZC00YmUwLWIxNWYtNWRlMDg3MTE4MmJh
LzEvRjg4U3BsaWVtWXliN0JPYS1Qem5Dc1IxclhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHKN80X/
LnjIphmoqhDEwzyp961gEVhF7fJVbYVVsulmLZHX9Zn7n1/hQS8MZ+O5JnkfzQMY
P8+wv3jPmbzwnbMXwAjlyh/0fVYVcwxnwfV+9rqEpnN0RijAg3AngX7M1bYz5mUG
cyTYLXydkIr9mD22CBQb/w2J+5AhFCsbP0pB6E0A2QqcbHajOE/HFvmlF/b/8x89
qMV+zVHMAd83LmJ7+XRDvsBbNE0VrbxQd6pxoTmmUli8ZzB727bHtVOyimr8iDfy
qmHJ/eQwaE44e0ZroYCqRNxJr1Biv4/at781gbOUBJ4jNuOlMumjYxSWkr+/hadd
qX6X8aTSu8cApw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:03:25 2025 by rpki-client