Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
File: FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft (raw, json)
Hash identifier: GA5SAT5ZsS6boQpeg0TnCwpWrkBFZBh2/gO2aw2MGtI=
Subject key identifier: 08:A7:BA:DA:9F:7E:0C:85:A6:E2:12:09:80:86:00:54:7A:78:44:AD
Authority key identifier: 16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE
Certificate issuer: /CN=1617d0afeabbf339b06db283c4b8e027a04abcae
Certificate serial: 019872CFBD73BF349633EFEEF1BC7397450F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
Manifest number: 03C5
Signing time: Mon 04 Aug 2025 02:01:13 +0000
Manifest this update: Mon 04 Aug 2025 02:01:13 +0000
Manifest next update: Tue 05 Aug 2025 02:01:13 +0000
Files and hashes: 1: FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl (hash: SzhyZkVeblLdoVgydsmSWhMbl+0WvhwffjxnMQDCjYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:bd:73:bf:34:96:33:ef:ee:f1:bc:73:97:45:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1617d0afeabbf339b06db283c4b8e027a04abcae
Validity
Not Before: Aug 4 02:01:13 2025 GMT
Not After : Aug 5 02:01:13 2025 GMT
Subject: CN=08a7bada9f7e0c85a6e21209808600547a7844ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:17:c0:6e:37:01:a6:a8:8c:e3:4e:6e:2a:d0:
83:68:75:c7:08:d7:90:9c:24:e8:5d:d7:a4:5a:9f:
02:1b:93:bd:d3:13:4f:2a:e5:52:be:bc:bf:92:1d:
fb:2a:6a:ca:e5:ef:65:0a:a9:66:c0:17:5d:68:48:
43:c4:24:06:a5:f3:4d:f0:f1:08:88:73:e4:50:e6:
24:d3:cd:9f:30:e0:8c:24:29:46:11:e4:be:05:af:
57:95:70:86:d0:51:e3:8d:ed:db:be:48:94:d2:5f:
a4:b2:2c:81:e2:01:cb:1b:0b:29:42:37:5b:3d:fc:
30:2a:5b:cf:88:d6:58:33:d0:78:8a:fa:55:5d:9c:
25:01:38:a4:f3:ed:55:83:cd:f2:17:aa:98:9f:6d:
65:ca:35:65:1e:45:9c:2a:76:2a:f9:ff:f8:88:f4:
b7:5d:37:86:d2:12:2a:15:b3:c9:56:4c:88:8b:d5:
84:d6:e4:17:a8:81:29:2f:cc:03:c9:d7:ed:88:37:
2f:b0:e9:ed:c4:3c:96:50:84:47:76:54:9f:b9:d8:
d4:04:96:d3:b4:56:b9:98:59:84:1e:c8:78:8b:2f:
4d:63:4e:ea:c5:bc:0b:12:d1:a5:2c:da:c2:4b:a1:
df:12:e6:17:d5:28:39:9a:1b:33:d9:fc:f3:72:23:
f5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A7:BA:DA:9F:7E:0C:85:A6:E2:12:09:80:86:00:54:7A:78:44:AD
X509v3 Authority Key Identifier:
keyid:16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:72:e6:3d:8a:70:56:dd:88:c2:e8:81:a3:42:7a:4b:9b:f6:
fd:41:19:f7:62:06:0d:84:21:be:3b:68:9a:de:aa:bd:e9:55:
80:ec:8f:e8:b1:b9:25:00:9f:87:76:c7:9b:97:45:3c:26:98:
85:ee:29:d5:61:1e:a1:3f:7f:23:9c:f1:a1:b2:07:ad:f7:54:
52:ec:f0:fc:15:8f:e2:12:4d:ec:e6:6b:93:49:63:15:89:81:
4b:03:07:16:12:25:a2:4d:38:da:8f:08:06:7a:22:26:0e:03:
e7:0e:d3:70:cc:49:31:69:7e:78:ba:53:1c:8b:75:b2:b0:cb:
f0:b9:09:30:74:ef:23:89:1c:f7:b0:2a:27:cd:32:cf:aa:69:
3b:6d:bb:58:e4:90:a1:73:0c:65:4d:0f:b4:fa:8a:e9:bd:10:
e4:cd:bf:7c:f8:52:f0:f5:d9:90:e1:f9:e0:e8:37:bf:10:a6:
7f:d3:4a:67:b1:f7:e2:c1:c1:90:49:79:28:96:3c:bf:40:78:
b0:26:1a:e6:19:05:27:81:f8:1b:f7:28:2c:a8:3f:86:13:44:
1a:be:1b:08:30:29:00:09:38:f9:10:42:3e:5a:26:54:37:f6:
d0:3f:09:25:2d:32:bf:54:5a:1c:85:d0:75:1e:a9:00:0a:51:
69:e6:32:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz71zvzSWM+/u8bxzl0UPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MTdkMGFmZWFiYmYzMzliMDZkYjI4M2M0YjhlMDI3YTA0
YWJjYWUwHhcNMjUwODA0MDIwMTEzWhcNMjUwODA1MDIwMTEzWjAzMTEwLwYDVQQD
EygwOGE3YmFkYTlmN2UwYzg1YTZlMjEyMDk4MDg2MDA1NDdhNzg0NGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BfAbjcBpqiM405uKtCDaHXHCNeQ
nCToXdekWp8CG5O90xNPKuVSvry/kh37KmrK5e9lCqlmwBddaEhDxCQGpfNN8PEI
iHPkUOYk082fMOCMJClGEeS+Ba9XlXCG0FHjje3bvkiU0l+ksiyB4gHLGwspQjdb
PfwwKlvPiNZYM9B4ivpVXZwlATik8+1Vg83yF6qYn21lyjVlHkWcKnYq+f/4iPS3
XTeG0hIqFbPJVkyIi9WE1uQXqIEpL8wDydftiDcvsOntxDyWUIRHdlSfudjUBJbT
tFa5mFmEHsh4iy9NY07qxbwLEtGlLNrCS6HfEuYX1Sg5mhsz2fzzciP1lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAinutqffgyFpuISCYCGAFR6eEStMB8GA1UdIwQY
MBaAFBYX0K/qu/M5sG2yg8S44CegSryuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmhmUXItcTc4em13YmJLRHhMamdKNkJLdks0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hNGEyY2QtNWRiZi00MDI5LWE4YTEt
ZDdmMjFmYzEzNTBlLzEvRmhmUXItcTc4em13YmJLRHhMamdKNkJLdks0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hNGEyY2QtNWRiZi00MDI5LWE4YTEtZDdmMjFmYzEzNTBl
LzEvRmhmUXItcTc4em13YmJLRHhMamdKNkJLdks0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnLmPYpw
Vt2IwuiBo0J6S5v2/UEZ92IGDYQhvjtomt6qvelVgOyP6LG5JQCfh3bHm5dFPCaY
he4p1WEeoT9/I5zxobIHrfdUUuzw/BWP4hJN7OZrk0ljFYmBSwMHFhIlok042o8I
BnoiJg4D5w7TcMxJMWl+eLpTHIt1srDL8LkJMHTvI4kc97AqJ80yz6ppO227WOSQ
oXMMZU0PtPqK6b0Q5M2/fPhS8PXZkOH54Og3vxCmf9NKZ7H34sHBkEl5KJY8v0B4
sCYa5hkFJ4H4G/coLKg/hhNEGr4bCDApAAk4+RBCPlomVDf20D8JJS0yv1RaHIXQ
dR6pAApRaeYy7g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:37 2025 by rpki-client