Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
File: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft (raw, json)
Hash identifier: kxo350AKTLXsE4s3p3grLErnAg6GYZYvs1cCXL9gzk4=
Subject key identifier: 71:CD:18:1E:69:FF:53:4D:0A:88:B1:18:15:5D:9B:27:40:D8:08:A5
Authority key identifier: 7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
Certificate issuer: /CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Certificate serial: 01976BF3F376BAB3BA9167FCEBDEC182F71C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
Manifest number: 0799
Signing time: Sat 14 Jun 2025 01:00:38 +0000
Manifest this update: Sat 14 Jun 2025 01:00:38 +0000
Manifest next update: Sun 15 Jun 2025 01:00:38 +0000
Files and hashes: 1: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl (hash: JFbe2ZDE2uIvTf6K8sjebpee/AD2ys6+RGkVatU6oy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:f3:76:ba:b3:ba:91:67:fc:eb:de:c1:82:f7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Validity
Not Before: Jun 14 01:00:38 2025 GMT
Not After : Jun 15 01:00:38 2025 GMT
Subject: CN=71cd181e69ff534d0a88b118155d9b2740d808a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0f:74:8b:aa:e4:19:8d:fe:1d:cd:62:21:d0:
20:3e:70:f2:3f:ca:a8:6c:15:6b:4d:13:d6:12:2f:
f9:7d:6c:2b:cd:31:91:84:91:5b:3c:b9:79:e9:dc:
74:09:40:64:a4:6e:c8:c0:fa:72:cc:76:1f:98:0e:
54:82:0c:ee:d7:fc:85:c6:8e:6e:be:22:fc:23:52:
a9:66:4c:e8:6a:98:0b:c9:3d:13:c5:d6:c1:ed:82:
46:c9:bf:95:0f:2d:bd:da:1c:97:6f:2f:98:2c:ed:
28:17:5c:e3:22:27:a9:09:09:d3:f3:46:2e:f5:74:
d8:94:a5:2f:83:aa:dc:8b:0f:30:25:1a:af:ba:d1:
09:44:e2:a6:52:ad:20:57:46:e8:b4:75:d6:74:c6:
74:07:89:ef:5c:63:2d:02:31:29:c7:3c:7c:06:67:
ca:4a:ff:8d:03:98:c6:4a:e3:41:c2:15:83:05:e0:
89:3e:56:00:78:84:e6:e9:77:1b:ad:9c:b6:d5:57:
93:28:cc:ce:5d:30:2b:a1:2d:88:05:02:2c:4b:61:
cf:eb:22:cb:7f:b9:83:da:20:8f:3c:4c:06:7b:16:
42:d6:2d:a3:63:d1:18:05:b5:32:25:96:fb:fd:de:
af:49:c9:f0:a7:66:0c:43:40:f1:93:70:7f:3c:91:
d6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CD:18:1E:69:FF:53:4D:0A:88:B1:18:15:5D:9B:27:40:D8:08:A5
X509v3 Authority Key Identifier:
keyid:7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:3e:df:4c:d9:d5:41:d6:32:17:80:74:4e:ed:c5:02:60:81:
44:90:7c:db:a3:9b:c3:07:ed:ce:71:77:aa:1d:2a:08:d1:fe:
a1:76:f9:b5:e8:6b:73:51:64:03:c1:ba:b0:28:0b:b0:c3:22:
4b:3d:ab:67:20:19:be:e2:57:c2:fe:19:13:c6:b8:10:d6:13:
fd:d5:36:60:f8:ce:e6:ef:c1:15:d8:62:5f:fd:13:17:ac:b8:
e2:ce:40:b0:11:a2:8e:67:94:16:ed:84:4a:b9:e0:50:09:19:
f5:b5:45:21:39:d5:c7:2f:ae:3a:71:b4:f7:94:52:43:f8:a6:
2a:18:54:81:e0:f5:cc:0a:08:33:d4:c2:1c:b3:bb:ad:55:5c:
ab:e1:1d:60:73:6a:d2:17:8b:f8:a0:e9:15:eb:04:5f:6d:1b:
72:2b:d8:95:d6:1c:93:fd:37:33:cc:11:5c:c1:f7:23:9c:24:
e1:5e:29:77:31:a1:d3:19:4c:5c:46:18:d0:47:83:8a:ae:98:
39:90:bc:c4:a8:b2:20:3c:3a:fa:3a:3c:46:e4:62:71:5f:66:
de:5b:26:2b:22:24:be:e8:4a:02:0a:d5:35:6a:1c:54:00:ae:
42:f5:50:7e:a1:51:1a:3a:db:9a:25:f5:3d:6b:9f:e6:49:2e:
df:c8:3c:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdr8/N2urO6kWf8697BgvccMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNGU0ODc3YjQ2NGU0ODllOGUxZTYxYmU1N2I4YmJlOGU1
MGU3OTkwHhcNMjUwNjE0MDEwMDM4WhcNMjUwNjE1MDEwMDM4WjAzMTEwLwYDVQQD
Eyg3MWNkMTgxZTY5ZmY1MzRkMGE4OGIxMTgxNTVkOWIyNzQwZDgwOGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA90i6rkGY3+Hc1iIdAgPnDyP8qo
bBVrTRPWEi/5fWwrzTGRhJFbPLl56dx0CUBkpG7IwPpyzHYfmA5Uggzu1/yFxo5u
viL8I1KpZkzoapgLyT0TxdbB7YJGyb+VDy292hyXby+YLO0oF1zjIiepCQnT80Yu
9XTYlKUvg6rciw8wJRqvutEJROKmUq0gV0botHXWdMZ0B4nvXGMtAjEpxzx8BmfK
Sv+NA5jGSuNBwhWDBeCJPlYAeITm6XcbrZy21VeTKMzOXTAroS2IBQIsS2HP6yLL
f7mD2iCPPEwGexZC1i2jY9EYBbUyJZb7/d6vScnwp2YMQ0Dxk3B/PJHWJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHNGB5p/1NNCoixGBVdmydA2AilMB8GA1UdIwQY
MBaAFH5OSHe0ZOSJ6OHmG+V7i76OUOeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZms1SWQ3Ums1SW5vNGVZYjVYdUx2bzVRNTVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8yMzdkZmYtNjUyZC00OTExLWE5ZDYt
MGFmMjZiYzc2NDIxLzEvZms1SWQ3Ums1SW5vNGVZYjVYdUx2bzVRNTVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8yMzdkZmYtNjUyZC00OTExLWE5ZDYtMGFmMjZiYzc2NDIx
LzEvZms1SWQ3Ums1SW5vNGVZYjVYdUx2bzVRNTVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVj7fTNnV
QdYyF4B0Tu3FAmCBRJB826ObwwftznF3qh0qCNH+oXb5tehrc1FkA8G6sCgLsMMi
Sz2rZyAZvuJXwv4ZE8a4ENYT/dU2YPjO5u/BFdhiX/0TF6y44s5AsBGijmeUFu2E
SrngUAkZ9bVFITnVxy+uOnG095RSQ/imKhhUgeD1zAoIM9TCHLO7rVVcq+EdYHNq
0heL+KDpFesEX20bcivYldYck/03M8wRXMH3I5wk4V4pdzGh0xlMXEYY0EeDiq6Y
OZC8xKiyIDw6+jo8RuRicV9m3lsmKyIkvuhKAgrVNWocVACuQvVQfqFRGjrbmiX1
PWuf5kku38g8fQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:07:35 2025 by rpki-client