Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
File: fTssMztylVesC-AnQLIiltgCv4E.mft (raw, json)
Hash identifier: Rw5LoCbtH369qpbXYffLf5sjaKxrD6Llc0DyAp8Vivc=
Subject key identifier: 11:C5:75:EE:DF:12:FE:53:26:35:98:E1:DA:05:F8:56:3A:D6:2B:38
Authority key identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
Certificate issuer: /CN=7d3b2c333b729557ac0be02740b22296d802bf81
Certificate serial: 0197B745817553ABAEBD74277201EBF9E3F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
Manifest number: 158D
Signing time: Sat 28 Jun 2025 16:01:14 +0000
Manifest this update: Sat 28 Jun 2025 16:01:14 +0000
Manifest next update: Sun 29 Jun 2025 16:01:14 +0000
Files and hashes: 1: WqjB7EtZkSL-ePfOxy2nv62eOkA.roa (hash: PG/xFOwvIaW9rUlAX7rZLKuzOPksgvVi2XmtGvzJW70=)
2: fTssMztylVesC-AnQLIiltgCv4E.crl (hash: PVJnmqJSLiaVoeHFu4WjPiFZbXJ77VXN+oV/SgQt+80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:81:75:53:ab:ae:bd:74:27:72:01:eb:f9:e3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3b2c333b729557ac0be02740b22296d802bf81
Validity
Not Before: Jun 28 16:01:14 2025 GMT
Not After : Jun 29 16:01:14 2025 GMT
Subject: CN=11c575eedf12fe53263598e1da05f8563ad62b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9b:8d:a0:44:c6:bb:a1:73:6b:ab:f2:2b:5d:
79:0f:f8:db:3c:03:44:90:fb:aa:5f:65:be:98:09:
ba:1e:aa:92:52:23:4c:03:0b:ad:6a:7a:31:af:5f:
73:87:66:7b:95:00:9a:96:e8:63:22:a5:ce:b7:4d:
10:ef:24:30:c6:7a:a9:b4:09:15:1d:a7:2c:aa:a4:
dd:b8:0a:0d:ad:c8:43:51:d9:de:24:d1:a7:b1:8e:
98:44:4f:d6:4e:ac:ed:cb:27:b4:a5:c6:99:6f:b9:
e4:03:24:07:50:3e:53:3f:59:31:3f:3a:98:1a:6d:
97:04:aa:5e:a7:19:cd:5e:e1:0d:0c:9d:0a:21:19:
9a:81:33:6c:63:ec:a4:ff:fc:52:dd:7d:39:c9:4f:
1e:e0:3c:8a:d9:f7:18:2f:66:ab:b5:cf:0a:1e:7c:
02:88:fd:4a:41:f2:e2:b5:8f:d0:17:06:b5:27:43:
e0:de:f5:32:66:fb:ae:82:9f:e0:c1:10:52:32:44:
5d:45:64:2c:4e:4f:79:69:17:3d:55:51:ef:5e:5b:
3e:e1:1a:3e:88:88:eb:4e:21:b4:6d:8b:bd:b8:48:
44:65:38:f5:cd:06:35:0c:6c:1a:82:d7:2e:0c:4c:
87:59:4e:5d:50:84:d4:f3:29:cb:05:4f:23:db:fa:
e4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C5:75:EE:DF:12:FE:53:26:35:98:E1:DA:05:F8:56:3A:D6:2B:38
X509v3 Authority Key Identifier:
keyid:7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:34:af:1c:3d:4c:c1:3c:ac:5d:d4:74:02:fb:ab:4b:07:b7:
90:ed:59:3a:7b:b6:c1:c6:d3:2e:f8:aa:d4:54:7d:16:f9:ad:
cb:dd:df:db:39:c0:7b:4c:c0:ce:8b:9f:1f:73:ea:8b:53:60:
61:07:f7:81:7c:c5:fe:9d:d7:30:10:7a:25:ac:56:92:16:5c:
81:78:ad:77:2b:3d:13:d9:8c:5e:89:cd:67:bc:e7:3c:c6:f9:
93:e6:e4:4c:41:c7:b8:9a:57:7c:8e:99:35:a7:3e:1c:bd:7f:
3e:1e:4f:e1:df:9c:50:45:b6:b2:8c:07:89:8c:c8:bd:a2:31:
32:27:5b:f1:ad:57:6b:73:7c:95:6b:91:ab:81:b7:5f:3e:9d:
fe:a6:9f:84:4a:2a:81:ad:60:a5:16:b2:c2:8b:e8:42:e2:83:
57:c6:92:2d:e9:e6:b2:d9:55:79:cf:16:c6:bc:88:01:b1:c4:
b6:c1:f6:35:6b:b9:a1:5a:51:0f:be:0e:4c:93:9e:06:b4:db:
6f:c7:84:8e:fb:a0:8f:46:fc:39:c4:a4:90:20:c6:d0:ba:65:
fb:2e:7a:76:2d:1b:c0:0a:83:1f:4d:e2:55:8b:a9:4b:9f:f9:
fe:f7:53:9b:d7:0f:6c:a8:87:62:7d:be:9a:67:e5:40:b7:98:
34:2a:4b:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RYF1U6uuvXQncgHr+ePwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkM2IyYzMzM2I3Mjk1NTdhYzBiZTAyNzQwYjIyMjk2ZDgw
MmJmODEwHhcNMjUwNjI4MTYwMTE0WhcNMjUwNjI5MTYwMTE0WjAzMTEwLwYDVQQD
EygxMWM1NzVlZWRmMTJmZTUzMjYzNTk4ZTFkYTA1Zjg1NjNhZDYyYjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJuNoETGu6Fza6vyK115D/jbPANE
kPuqX2W+mAm6HqqSUiNMAwutanoxr19zh2Z7lQCaluhjIqXOt00Q7yQwxnqptAkV
HacsqqTduAoNrchDUdneJNGnsY6YRE/WTqztyye0pcaZb7nkAyQHUD5TP1kxPzqY
Gm2XBKpepxnNXuENDJ0KIRmagTNsY+yk//xS3X05yU8e4DyK2fcYL2artc8KHnwC
iP1KQfLitY/QFwa1J0Pg3vUyZvuugp/gwRBSMkRdRWQsTk95aRc9VVHvXls+4Ro+
iIjrTiG0bYu9uEhEZTj1zQY1DGwagtcuDEyHWU5dUITU8ynLBU8j2/rkkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHFde7fEv5TJjWY4doF+FY61is4MB8GA1UdIwQY
MBaAFH07LDM7cpVXrAvgJ0CyIpbYAr+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlRzc016dHlsVmVzQy1BblFMSWlsdGdDdjRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82YjFiNjQtMjU2NC00N2E3LWIxYzEt
NTI4MzVkYjY1MTJjLzEvZlRzc016dHlsVmVzQy1BblFMSWlsdGdDdjRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82YjFiNjQtMjU2NC00N2E3LWIxYzEtNTI4MzVkYjY1MTJj
LzEvZlRzc016dHlsVmVzQy1BblFMSWlsdGdDdjRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjSvHD1M
wTysXdR0AvurSwe3kO1ZOnu2wcbTLviq1FR9Fvmty93f2znAe0zAzoufH3Pqi1Ng
YQf3gXzF/p3XMBB6JaxWkhZcgXitdys9E9mMXonNZ7znPMb5k+bkTEHHuJpXfI6Z
Nac+HL1/Ph5P4d+cUEW2sowHiYzIvaIxMidb8a1Xa3N8lWuRq4G3Xz6d/qafhEoq
ga1gpRaywovoQuKDV8aSLenmstlVec8WxryIAbHEtsH2NWu5oVpRD74OTJOeBrTb
b8eEjvugj0b8OcSkkCDG0Lpl+y56di0bwAqDH03iVYupS5/5/vdTm9cPbKiHYn2+
mmflQLeYNCpLkw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:12 2025 by rpki-client