Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
File: f1byiUjIMvLUNLtE1d4OoSJgGwU.mft (raw, json)
Hash identifier: 1kNnla4IUOMimJYZm7uVMr7cuuZKPOxkP6D4BKeFJ0M=
Subject key identifier: 5B:88:27:E3:75:02:53:79:52:FB:42:8F:90:EA:87:CE:76:41:32:AE
Authority key identifier: 7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
Certificate issuer: /CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Certificate serial: 0197C9F1E9FDBD54C8F7072ADE674D8FEE77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
Manifest number: 15BF
Signing time: Wed 02 Jul 2025 07:02:43 +0000
Manifest this update: Wed 02 Jul 2025 07:02:43 +0000
Manifest next update: Thu 03 Jul 2025 07:02:43 +0000
Files and hashes: 1: NvmfsV1sm7XmyjVKzPOWhb7earQ.roa (hash: r7bWWSDXyiXMj/Swi3flONfAIYfEqRkATWw60gas71A=)
2: WPpLjvv6YbGI7GsTe1ygm0Vy3Lk.roa (hash: N+pPrOkjdISbUNAALF5nqmKzIaYbhj0lt6NwOuwgniw=)
3: f1byiUjIMvLUNLtE1d4OoSJgGwU.crl (hash: p8UnP7HW22y7VSpuFbmZO3Co0nkT7A2xSKKyJi7QLXo=)
4: tLoY5nfmVJWTJGYh886gVbz0Hf0.roa (hash: g2GCG3am8xDu8ahhY94JoBYaTCS9zIT5JVCSvfgRMSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:e9:fd:bd:54:c8:f7:07:2a:de:67:4d:8f:ee:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Validity
Not Before: Jul 2 07:02:43 2025 GMT
Not After : Jul 3 07:02:43 2025 GMT
Subject: CN=5b8827e37502537952fb428f90ea87ce764132ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:27:a6:38:1d:77:5a:d4:19:45:19:7c:99:
22:64:0b:97:99:4a:2c:0b:6c:5a:30:2d:ff:53:6f:
91:19:9f:77:7d:1b:05:ff:2e:43:9b:19:0d:c1:38:
a3:b3:f3:a7:58:b2:14:61:22:f8:6f:bf:99:e4:03:
03:ee:0d:c6:1c:c4:cc:20:bd:2a:e9:8c:a1:12:3c:
59:94:46:07:5c:1f:52:d5:be:89:83:24:c2:06:0b:
aa:00:b6:6d:d0:bc:55:98:b5:99:2d:5e:73:61:82:
30:e9:f8:11:75:51:2c:f1:8f:aa:b4:67:59:fc:f1:
64:49:5a:a7:60:10:d1:ff:6e:9a:66:e5:5f:fa:8a:
61:bf:df:59:6a:92:d6:42:6f:42:26:4d:5c:9c:67:
5d:01:7f:45:ab:07:2e:15:2a:0c:c5:f3:c3:b1:b2:
61:de:0a:1b:1f:dc:cf:ba:ad:04:f7:02:45:46:a0:
1f:ff:7a:03:d3:ea:fd:81:4a:bf:d0:56:fe:61:6b:
9d:70:e9:61:da:b7:ef:ee:38:ef:49:b4:fc:b2:92:
a1:8a:82:91:f3:4d:38:e4:b5:f5:62:51:03:37:02:
75:e7:ac:c5:b8:62:de:77:71:80:d1:44:a1:d0:89:
ab:9a:d0:6b:b6:12:69:86:9d:30:ff:a0:d9:b4:39:
b2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:88:27:E3:75:02:53:79:52:FB:42:8F:90:EA:87:CE:76:41:32:AE
X509v3 Authority Key Identifier:
keyid:7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:77:6e:85:95:82:27:1b:82:67:6c:20:37:55:3b:33:0e:ad:
60:4d:f2:27:8b:fb:91:24:87:48:08:d5:de:3a:8b:8e:81:5c:
15:66:00:b1:95:1e:b7:7e:b7:22:6e:73:15:fe:02:14:7e:8e:
49:1a:74:46:84:51:50:05:5d:10:99:fd:d8:a7:7c:50:96:73:
07:d3:b9:a5:5f:aa:e7:51:f1:c6:b7:0a:91:af:aa:d4:08:2b:
e8:59:07:0e:19:c1:90:44:49:e3:dc:3d:b0:32:04:04:79:4d:
80:8a:73:67:ba:3a:a3:2b:b3:97:25:bf:96:df:2f:9d:5f:4a:
21:0d:b0:85:82:71:d9:b2:85:8b:97:3f:2c:1f:9e:62:17:48:
33:17:1b:85:e6:fe:f3:b2:91:ca:3a:e6:5b:10:74:7b:03:56:
7b:7f:2f:b9:86:7f:e1:d2:45:c4:f4:51:d1:94:9b:28:76:22:
5e:94:18:cd:36:ea:53:6e:6c:76:98:91:97:6d:bd:2d:9a:a1:
e3:22:80:65:85:66:cf:b7:e9:ae:1c:30:a4:e5:81:2f:33:1c:
28:95:a8:82:35:b1:76:0b:f9:55:6d:24:ce:24:66:32:70:57:
b1:60:3c:c7:8b:bb:44:86:05:f5:9b:8b:47:02:f0:98:b8:9f:
72:25:e1:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfJ8en9vVTI9wcq3mdNj+53MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNTZmMjg5NDhjODMyZjJkNDM0YmI0NGQ1ZGUwZWExMjI2
MDFiMDUwHhcNMjUwNzAyMDcwMjQzWhcNMjUwNzAzMDcwMjQzWjAzMTEwLwYDVQQD
Eyg1Yjg4MjdlMzc1MDI1Mzc5NTJmYjQyOGY5MGVhODdjZTc2NDEzMmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4onpjgdd1rUGUUZfJkiZAuXmUos
C2xaMC3/U2+RGZ93fRsF/y5DmxkNwTijs/OnWLIUYSL4b7+Z5AMD7g3GHMTMIL0q
6YyhEjxZlEYHXB9S1b6JgyTCBguqALZt0LxVmLWZLV5zYYIw6fgRdVEs8Y+qtGdZ
/PFkSVqnYBDR/26aZuVf+ophv99ZapLWQm9CJk1cnGddAX9FqwcuFSoMxfPDsbJh
3gobH9zPuq0E9wJFRqAf/3oD0+r9gUq/0Fb+YWudcOlh2rfv7jjvSbT8spKhioKR
80045LX1YlEDNwJ156zFuGLed3GA0USh0ImrmtBrthJphp0w/6DZtDmybQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuIJ+N1AlN5UvtCj5Dqh852QTKuMB8GA1UdIwQY
MBaAFH9W8olIyDLy1DS7RNXeDqEiYBsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjFieWlVaklNdkxVTkx0RTFkNE9vU0pnR3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMWZiY2EtODBlMC00YjhjLTg2MjIt
NGU4NmFkNjRmNzc0LzEvZjFieWlVaklNdkxVTkx0RTFkNE9vU0pnR3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yMWZiY2EtODBlMC00YjhjLTg2MjItNGU4NmFkNjRmNzc0
LzEvZjFieWlVaklNdkxVTkx0RTFkNE9vU0pnR3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3duhZWC
JxuCZ2wgN1U7Mw6tYE3yJ4v7kSSHSAjV3jqLjoFcFWYAsZUet363Im5zFf4CFH6O
SRp0RoRRUAVdEJn92Kd8UJZzB9O5pV+q51HxxrcKka+q1Agr6FkHDhnBkERJ49w9
sDIEBHlNgIpzZ7o6oyuzlyW/lt8vnV9KIQ2whYJx2bKFi5c/LB+eYhdIMxcbheb+
87KRyjrmWxB0ewNWe38vuYZ/4dJFxPRR0ZSbKHYiXpQYzTbqU25sdpiRl229LZqh
4yKAZYVmz7fprhwwpOWBLzMcKJWogjWxdgv5VW0kziRmMnBXsWA8x4u7RIYF9ZuL
RwLwmLifciXhJw==
-----END CERTIFICATE-----
Generated at Wed Jul 2 15:37:36 2025 by rpki-client