Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
File: fi4pGEMoSetx6V3EDRB56oZfYQk.mft (raw, json)
Hash identifier: ZPnLX8EbDjgECaw698Tf1eQP6TyxF7eimuLgGybpmR4=
Subject key identifier: 64:B1:9F:A2:AD:3A:C1:DE:FB:FD:FA:A1:6A:A1:0F:6F:F8:39:86:26
Authority key identifier: 7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09
Certificate issuer: /CN=7e2e2918432849eb71e95dc40d1079ea865f6109
Certificate serial: 0197C615449E500EA2A70377CFD4F1DA8C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
Manifest number: 08D8
Signing time: Tue 01 Jul 2025 13:02:51 +0000
Manifest this update: Tue 01 Jul 2025 13:02:51 +0000
Manifest next update: Wed 02 Jul 2025 13:02:51 +0000
Files and hashes: 1: S1dC-8FvWd5r91Ep_3NW-RYRFSM.roa (hash: WN6IJU4enC30WWGrEp1TUJBHxrmIxnrzAFySxPEWWA0=)
2: fi4pGEMoSetx6V3EDRB56oZfYQk.crl (hash: ShI2v/aEfXB8f8B5/RLBp38yGARa0rLHnh6eZEDZYBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:15:44:9e:50:0e:a2:a7:03:77:cf:d4:f1:da:8c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2e2918432849eb71e95dc40d1079ea865f6109
Validity
Not Before: Jul 1 13:02:51 2025 GMT
Not After : Jul 2 13:02:51 2025 GMT
Subject: CN=64b19fa2ad3ac1defbfdfaa16aa10f6ff8398626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:84:bf:f8:37:f9:2c:58:05:58:5e:1f:25:16:
22:cf:45:d1:b1:c3:e9:85:d9:88:00:db:5e:be:37:
77:bc:f1:47:76:f9:49:71:7b:b5:09:9d:68:22:52:
ce:0d:da:bf:98:b7:e5:6f:2d:31:4d:8f:81:d3:9f:
68:82:57:83:2c:36:61:7b:28:8b:ab:8a:4d:23:b4:
80:d0:e6:43:2d:93:0a:08:48:5a:ea:09:db:09:2e:
42:f4:47:c6:15:7b:dc:48:a0:74:49:4a:09:ab:1b:
b1:bb:5f:58:3f:72:81:80:43:05:c4:dd:fe:e3:4a:
9c:38:c0:09:53:35:10:a1:2c:0d:41:e2:4a:a7:62:
31:24:9e:04:1b:c0:de:a9:41:8c:5c:6c:b5:5b:d3:
04:f0:62:a3:10:b9:c5:68:43:da:6b:d0:79:66:32:
8c:05:57:39:5b:ae:bc:23:16:df:09:cf:e8:26:55:
5d:e4:91:f5:57:71:ab:30:2e:9e:5e:51:f3:f3:81:
11:7e:6d:e0:7f:f4:9a:84:ae:a6:62:61:de:09:8a:
3c:04:51:f8:dd:4d:4b:b1:15:b0:2b:35:3f:b8:2c:
5f:aa:1a:77:c6:d8:cc:f8:c0:18:ff:40:27:a4:94:
5c:4e:f2:cd:a1:ae:8a:98:e0:03:a7:ac:be:3b:9c:
92:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B1:9F:A2:AD:3A:C1:DE:FB:FD:FA:A1:6A:A1:0F:6F:F8:39:86:26
X509v3 Authority Key Identifier:
keyid:7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b5:ab:c9:dd:3a:72:01:62:75:52:35:cc:94:74:e9:ae:8a:
fa:64:bf:b8:33:0d:41:06:83:45:da:b6:87:2b:72:2f:06:43:
4d:24:c3:bf:33:55:06:63:45:d2:74:65:42:a5:c5:91:f1:aa:
fb:89:82:9e:62:4d:ed:87:47:b4:45:08:2a:13:0c:b6:23:f3:
2c:06:42:9e:cc:bf:2e:30:17:04:33:c2:33:12:a5:68:08:7c:
bd:4f:33:b6:f7:ec:46:4a:6e:5d:47:aa:bc:e4:af:1a:d6:45:
2d:2f:6d:83:76:3a:01:66:cd:fa:89:98:38:fb:35:f4:1c:57:
76:7f:67:25:25:0a:6a:de:6f:6d:74:b4:11:13:54:5f:6f:27:
6d:5a:59:28:56:7a:bf:b3:dc:26:86:6d:19:f9:3f:c4:98:c5:
61:ca:1e:ec:a1:7a:29:20:b9:3c:73:92:5b:bc:c7:fb:83:3c:
66:c4:ee:47:c6:07:f6:d5:7b:fd:3b:15:2d:4b:fa:1f:e5:be:
84:12:ee:db:9b:7f:d2:33:e4:67:b2:8a:17:ea:67:e9:76:50:
9e:0f:6a:11:43:ad:cd:b5:83:57:4e:3a:44:bf:93:29:dd:d6:
03:eb:a7:b4:5b:56:a2:71:1b:f4:99:d5:e4:f1:01:79:ef:c8:
22:00:52:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfGFUSeUA6ipwN3z9Tx2owiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMmUyOTE4NDMyODQ5ZWI3MWU5NWRjNDBkMTA3OWVhODY1
ZjYxMDkwHhcNMjUwNzAxMTMwMjUxWhcNMjUwNzAyMTMwMjUxWjAzMTEwLwYDVQQD
Eyg2NGIxOWZhMmFkM2FjMWRlZmJmZGZhYTE2YWExMGY2ZmY4Mzk4NjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IS/+Df5LFgFWF4fJRYiz0XRscPp
hdmIANtevjd3vPFHdvlJcXu1CZ1oIlLODdq/mLflby0xTY+B059ogleDLDZheyiL
q4pNI7SA0OZDLZMKCEha6gnbCS5C9EfGFXvcSKB0SUoJqxuxu19YP3KBgEMFxN3+
40qcOMAJUzUQoSwNQeJKp2IxJJ4EG8DeqUGMXGy1W9ME8GKjELnFaEPaa9B5ZjKM
BVc5W668IxbfCc/oJlVd5JH1V3GrMC6eXlHz84ERfm3gf/SahK6mYmHeCYo8BFH4
3U1LsRWwKzU/uCxfqhp3xtjM+MAY/0AnpJRcTvLNoa6KmOADp6y+O5yS/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSxn6KtOsHe+/36oWqhD2/4OYYmMB8GA1UdIwQY
MBaAFH4uKRhDKEnrceldxA0QeeqGX2EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmk0cEdFTW9TZXR4NlYzRURSQjU2b1pmWVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kODVmNDEtNzcwMS00NGMyLWJmMmUt
YzU2MTk4NTk0NTBjLzEvZmk0cEdFTW9TZXR4NlYzRURSQjU2b1pmWVFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9kODVmNDEtNzcwMS00NGMyLWJmMmUtYzU2MTk4NTk0NTBj
LzEvZmk0cEdFTW9TZXR4NlYzRURSQjU2b1pmWVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbWryd06
cgFidVI1zJR06a6K+mS/uDMNQQaDRdq2hytyLwZDTSTDvzNVBmNF0nRlQqXFkfGq
+4mCnmJN7YdHtEUIKhMMtiPzLAZCnsy/LjAXBDPCMxKlaAh8vU8ztvfsRkpuXUeq
vOSvGtZFLS9tg3Y6AWbN+omYOPs19BxXdn9nJSUKat5vbXS0ERNUX28nbVpZKFZ6
v7PcJoZtGfk/xJjFYcoe7KF6KSC5PHOSW7zH+4M8ZsTuR8YH9tV7/TsVLUv6H+W+
hBLu25t/0jPkZ7KKF+pn6XZQng9qEUOtzbWDV046RL+TKd3WA+untFtWonEb9JnV
5PEBee/IIgBSfA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 20:44:30 2025 by rpki-client