Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
File: fi4pGEMoSetx6V3EDRB56oZfYQk.mft (raw, json)
Hash identifier: rGVCAbH8uWIPJ3drIhlJrxHn5FeXzXyhd1avMpX+lOc=
Subject key identifier: 42:B2:80:BF:66:E2:FF:19:89:1D:0D:21:62:59:CA:81:E3:11:04:1B
Authority key identifier: 7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09
Certificate issuer: /CN=7e2e2918432849eb71e95dc40d1079ea865f6109
Certificate serial: 0198D47290D2F1922224E66ED15011C8A8BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
Manifest number: 0964
Signing time: Sat 23 Aug 2025 01:02:14 +0000
Manifest this update: Sat 23 Aug 2025 01:02:14 +0000
Manifest next update: Sun 24 Aug 2025 01:02:14 +0000
Files and hashes: 1: S1dC-8FvWd5r91Ep_3NW-RYRFSM.roa (hash: WN6IJU4enC30WWGrEp1TUJBHxrmIxnrzAFySxPEWWA0=)
2: fi4pGEMoSetx6V3EDRB56oZfYQk.crl (hash: uxvCANXrjKwKtij3P5EhBOWS/M2jbQ6MmxpzmdSTGSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:90:d2:f1:92:22:24:e6:6e:d1:50:11:c8:a8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2e2918432849eb71e95dc40d1079ea865f6109
Validity
Not Before: Aug 23 01:02:14 2025 GMT
Not After : Aug 24 01:02:14 2025 GMT
Subject: CN=42b280bf66e2ff19891d0d216259ca81e311041b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:0c:13:6b:42:6e:e8:82:01:8f:97:85:b6:
5b:7b:18:a6:19:27:38:8a:01:03:a0:2c:d2:e1:03:
b3:c3:3c:c3:78:7f:e5:ba:d2:0e:52:66:cf:0e:a8:
52:35:c8:d8:13:8e:e9:d0:7d:7f:7e:5f:7a:ff:82:
72:0e:5a:04:18:5d:d5:55:3b:dc:55:aa:54:a9:8c:
8a:a6:8c:46:12:fa:8d:31:c5:16:23:03:07:58:c2:
ca:83:93:7a:ef:a7:d1:34:84:18:d5:a3:4e:9e:3a:
08:a7:de:c0:8c:07:9b:41:18:6f:15:13:97:a6:37:
91:09:12:7d:78:93:62:e8:02:a6:a4:17:67:f0:f5:
e5:75:cc:60:c6:f7:19:02:48:76:69:8b:23:24:cf:
39:3c:08:0d:91:46:b9:f8:6a:78:13:62:40:cb:30:
68:9e:13:f2:9d:5c:f2:11:b4:ef:26:fb:9f:7a:6f:
d9:fa:1d:aa:d7:34:11:ef:35:af:01:b5:20:69:22:
40:39:47:20:f4:6b:ef:94:2e:ed:16:70:d1:1c:41:
41:26:39:f1:9d:ad:d4:14:7f:4b:a6:fd:51:35:1c:
47:7e:02:a7:6e:cb:7d:0f:af:ec:d5:09:c9:4b:b7:
6d:91:a1:d6:ed:c1:d7:13:f8:68:59:ed:b0:6d:ce:
77:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B2:80:BF:66:E2:FF:19:89:1D:0D:21:62:59:CA:81:E3:11:04:1B
X509v3 Authority Key Identifier:
keyid:7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:7f:be:d9:f9:bf:78:95:b4:dc:1d:8c:a7:9e:c2:94:ec:1c:
77:0e:49:43:ca:93:50:03:74:7b:19:80:d5:fa:eb:13:e0:e3:
b2:a9:5f:a6:27:5c:eb:de:e3:d4:42:8a:60:07:51:bf:9f:b5:
30:f8:71:ac:76:05:36:a7:ec:c3:20:4a:82:7a:6f:f6:0a:db:
6b:a5:f0:9c:fd:d0:65:f7:e9:60:e6:b5:7e:d7:30:8a:5a:f6:
7a:97:40:54:0e:f2:67:0c:1a:7b:b9:14:ed:2b:c2:e5:ab:e7:
8a:97:4f:52:7a:e4:7c:0f:52:af:6d:e3:17:b3:36:0b:11:9a:
dd:24:06:0c:43:df:4d:f4:43:51:b5:a6:46:a1:a0:89:35:0c:
11:9d:db:89:a2:37:97:29:ec:2d:8f:f9:1f:10:b7:01:88:78:
f6:2e:b2:67:a1:bb:d3:35:e2:5b:1d:45:1e:3a:b9:c7:a8:4e:
34:19:d1:28:59:cc:92:42:4e:6f:4d:cc:91:7e:09:fe:4a:a4:
60:9a:54:fe:72:74:94:a6:a3:68:19:e2:29:a3:c1:02:9c:84:
d2:9d:fd:e6:2f:19:74:bd:c7:39:a0:fa:bf:08:92:1d:96:51:
23:02:8a:ca:84:38:8b:23:47:0a:a7:bf:98:4e:ab:f2:06:7b:
18:ed:2a:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcpDS8ZIiJOZu0VARyKi6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMmUyOTE4NDMyODQ5ZWI3MWU5NWRjNDBkMTA3OWVhODY1
ZjYxMDkwHhcNMjUwODIzMDEwMjE0WhcNMjUwODI0MDEwMjE0WjAzMTEwLwYDVQQD
Eyg0MmIyODBiZjY2ZTJmZjE5ODkxZDBkMjE2MjU5Y2E4MWUzMTEwNDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQYME2tCbuiCAY+XhbZbeximGSc4
igEDoCzS4QOzwzzDeH/lutIOUmbPDqhSNcjYE47p0H1/fl96/4JyDloEGF3VVTvc
VapUqYyKpoxGEvqNMcUWIwMHWMLKg5N676fRNIQY1aNOnjoIp97AjAebQRhvFROX
pjeRCRJ9eJNi6AKmpBdn8PXldcxgxvcZAkh2aYsjJM85PAgNkUa5+Gp4E2JAyzBo
nhPynVzyEbTvJvufem/Z+h2q1zQR7zWvAbUgaSJAOUcg9GvvlC7tFnDRHEFBJjnx
na3UFH9Lpv1RNRxHfgKnbst9D6/s1QnJS7dtkaHW7cHXE/hoWe2wbc53nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKygL9m4v8ZiR0NIWJZyoHjEQQbMB8GA1UdIwQY
MBaAFH4uKRhDKEnrceldxA0QeeqGX2EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmk0cEdFTW9TZXR4NlYzRURSQjU2b1pmWVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kODVmNDEtNzcwMS00NGMyLWJmMmUt
YzU2MTk4NTk0NTBjLzEvZmk0cEdFTW9TZXR4NlYzRURSQjU2b1pmWVFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9kODVmNDEtNzcwMS00NGMyLWJmMmUtYzU2MTk4NTk0NTBj
LzEvZmk0cEdFTW9TZXR4NlYzRURSQjU2b1pmWVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAH++2fm/
eJW03B2Mp57ClOwcdw5JQ8qTUAN0exmA1frrE+Djsqlfpidc697j1EKKYAdRv5+1
MPhxrHYFNqfswyBKgnpv9grba6XwnP3QZffpYOa1ftcwilr2epdAVA7yZwwae7kU
7SvC5avnipdPUnrkfA9Sr23jF7M2CxGa3SQGDEPfTfRDUbWmRqGgiTUMEZ3biaI3
lynsLY/5HxC3AYh49i6yZ6G70zXiWx1FHjq5x6hONBnRKFnMkkJOb03MkX4J/kqk
YJpU/nJ0lKajaBniKaPBApyE0p395i8ZdL3HOaD6vwiSHZZRIwKKyoQ4iyNHCqe/
mE6r8gZ7GO0qVg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:15 2025 by rpki-client