Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
File: fQDvTzv2W4fPoC73tKZYm6LeT_c.mft (raw, json)
Hash identifier: tSD5uK5Nn2TSdZHehJ252W6bhnCvDZglvwvsMUJIrk8=
Subject key identifier: C2:65:F3:0B:77:BB:4B:EA:A8:9D:0F:7D:41:3A:B7:FB:9F:20:ED:B4
Authority key identifier: 7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7
Certificate issuer: /CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
Certificate serial: 0197B6A23B4F3EE80A77144C1E5348979F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
Manifest number: 0DBA
Signing time: Sat 28 Jun 2025 13:02:54 +0000
Manifest this update: Sat 28 Jun 2025 13:02:54 +0000
Manifest next update: Sun 29 Jun 2025 13:02:54 +0000
Files and hashes: 1: 8c_-JJSRaWAdlgvn5HbEMrKvRfI.roa (hash: KpvO8IWbSGTOfjfycUgdrrf84glELyn27WOsA9sqcQY=)
2: fQDvTzv2W4fPoC73tKZYm6LeT_c.crl (hash: H08/dKbL/DFCpx+lHDemnQrewupKooW+4vP3HPN10Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:3b:4f:3e:e8:0a:77:14:4c:1e:53:48:97:9f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
Validity
Not Before: Jun 28 13:02:54 2025 GMT
Not After : Jun 29 13:02:54 2025 GMT
Subject: CN=c265f30b77bb4beaa89d0f7d413ab7fb9f20edb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:98:21:35:24:de:15:d8:f1:04:e3:4c:7a:
14:60:72:a9:da:61:8c:2f:e6:88:07:25:af:34:5f:
8e:85:7b:58:11:f3:f2:67:6f:87:44:dd:9a:5b:1f:
3f:44:01:50:9e:49:8a:2d:5a:34:d4:67:6e:3b:e7:
e6:82:01:8a:7a:ab:1a:24:28:3e:65:23:9b:e6:b6:
79:28:26:ac:d0:ff:94:e3:cf:75:f9:c3:fa:30:3c:
6c:e8:e0:86:a9:e5:cd:78:66:5f:d4:8b:11:f5:49:
94:92:5f:40:be:50:21:c1:b7:52:e2:21:71:90:34:
e7:a4:b0:04:02:f4:16:d7:93:e9:11:c0:52:a5:e8:
6b:f0:e9:a5:e8:f6:4c:f5:89:22:9d:14:d1:62:53:
08:f4:c6:38:bb:e5:dc:db:bc:55:b8:be:6a:a4:78:
0e:aa:0e:cd:c9:22:1a:c7:29:5d:bd:24:8e:65:9d:
08:a9:99:f4:70:11:bf:f2:ba:db:52:85:a7:5b:47:
52:0e:49:05:fb:ae:02:76:40:b6:d2:ad:17:55:15:
bd:a0:4e:76:ed:b8:68:2a:f0:17:a6:81:7a:07:91:
3d:a6:c0:ad:65:19:66:1d:2f:84:46:9c:b3:28:69:
cd:dd:2a:86:77:ea:3a:a1:02:77:94:b2:2b:f2:76:
50:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:65:F3:0B:77:BB:4B:EA:A8:9D:0F:7D:41:3A:B7:FB:9F:20:ED:B4
X509v3 Authority Key Identifier:
keyid:7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:09:78:c4:68:e7:d4:47:7b:44:d4:2d:26:d2:8a:30:3f:fe:
e0:41:a8:b5:8b:80:4a:c8:cb:31:e2:b9:60:f0:5f:ac:d1:e3:
7f:41:63:db:49:8d:fa:10:0a:6a:e9:fc:00:dd:36:92:86:c8:
03:4d:e8:a9:83:66:7f:d9:c7:c1:d1:6b:e4:bf:37:02:51:a7:
23:63:94:4a:19:30:55:11:23:82:b8:bc:a6:0a:68:d4:03:d0:
7d:8f:45:1f:07:f6:d2:24:dc:87:ba:ea:c2:a5:01:98:47:18:
da:b9:aa:04:8d:51:ae:80:60:2e:0a:13:00:09:0a:dd:05:77:
8c:89:6c:9b:ab:51:74:04:fb:2e:70:49:c7:47:c9:c9:b7:a4:
16:77:37:67:df:fe:ff:a9:bf:a6:39:93:e0:17:cb:36:f4:a2:
14:88:02:1e:bf:be:f6:12:8b:5d:bf:8c:d8:3b:b4:4a:24:09:
fa:0e:85:de:7f:2a:9f:a8:19:cf:9d:00:1c:fb:90:ee:a1:de:
27:c7:96:1c:03:ab:cd:e5:26:16:2f:d5:f9:91:86:60:e2:8e:
cd:6f:77:6d:a7:c1:9d:62:0f:96:5f:1b:14:79:d1:5b:5c:f2:
97:aa:c1:f1:10:41:6e:6e:74:1b:63:58:7b:45:c1:54:04:c1:
bc:02:bd:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ojtPPugKdxRMHlNIl59FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDBlZjRmM2JmNjViODdjZmEwMmVmN2I0YTY1ODliYTJk
ZTRmZjcwHhcNMjUwNjI4MTMwMjU0WhcNMjUwNjI5MTMwMjU0WjAzMTEwLwYDVQQD
EyhjMjY1ZjMwYjc3YmI0YmVhYTg5ZDBmN2Q0MTNhYjdmYjlmMjBlZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/qYITUk3hXY8QTjTHoUYHKp2mGM
L+aIByWvNF+OhXtYEfPyZ2+HRN2aWx8/RAFQnkmKLVo01GduO+fmggGKeqsaJCg+
ZSOb5rZ5KCas0P+U4891+cP6MDxs6OCGqeXNeGZf1IsR9UmUkl9AvlAhwbdS4iFx
kDTnpLAEAvQW15PpEcBSpehr8Oml6PZM9YkinRTRYlMI9MY4u+Xc27xVuL5qpHgO
qg7NySIaxyldvSSOZZ0IqZn0cBG/8rrbUoWnW0dSDkkF+64CdkC20q0XVRW9oE52
7bhoKvAXpoF6B5E9psCtZRlmHS+ERpyzKGnN3SqGd+o6oQJ3lLIr8nZQ1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJl8wt3u0vqqJ0PfUE6t/ufIO20MB8GA1UdIwQY
MBaAFH0A70879luHz6Au97SmWJui3k/3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFEdlR6djJXNGZQb0M3M3RLWlltNkxlVF9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9kZDYxZTMtZjhjYy00ZjgzLWE4YzQt
ZGU5ZDA0MDFhNmY2LzEvZlFEdlR6djJXNGZQb0M3M3RLWlltNkxlVF9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9kZDYxZTMtZjhjYy00ZjgzLWE4YzQtZGU5ZDA0MDFhNmY2
LzEvZlFEdlR6djJXNGZQb0M3M3RLWlltNkxlVF9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgl4xGjn
1Ed7RNQtJtKKMD/+4EGotYuASsjLMeK5YPBfrNHjf0Fj20mN+hAKaun8AN02kobI
A03oqYNmf9nHwdFr5L83AlGnI2OUShkwVREjgri8pgpo1APQfY9FHwf20iTch7rq
wqUBmEcY2rmqBI1RroBgLgoTAAkK3QV3jIlsm6tRdAT7LnBJx0fJybekFnc3Z9/+
/6m/pjmT4BfLNvSiFIgCHr++9hKLXb+M2Du0SiQJ+g6F3n8qn6gZz50AHPuQ7qHe
J8eWHAOrzeUmFi/V+ZGGYOKOzW93bafBnWIPll8bFHnRW1zyl6rB8RBBbm50G2NY
e0XBVATBvAK9tA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:36 2025 by rpki-client