Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
File: f6gWozONMnQc1P_49J3bLMg4_cU.mft (raw, json)
Hash identifier: 217d9+PW5M6zQ5idKDHQWv4AvWrM/Dori5L3XrlJFMY=
Subject key identifier: 83:6E:E0:CC:C9:25:B9:E8:8D:75:21:05:09:6D:FF:DA:AD:4F:C9:7B
Authority key identifier: 7F:A8:16:A3:33:8D:32:74:1C:D4:FF:F8:F4:9D:DB:2C:C8:38:FD:C5
Certificate issuer: /CN=7fa816a3338d32741cd4fff8f49ddb2cc838fdc5
Certificate serial: 0197C0B70165C62F3AF8020C7E4A740414CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
Manifest number: 032A
Signing time: Mon 30 Jun 2025 12:01:48 +0000
Manifest this update: Mon 30 Jun 2025 12:01:48 +0000
Manifest next update: Tue 01 Jul 2025 12:01:48 +0000
Files and hashes: 1: R0Tg1S6YqpnwSmmNGg5sv_IgptU.roa (hash: W7Vg4tcIuHbVrHthiRGSMMWZT9gGTwwdzQz+ZIBO3NQ=)
2: f6gWozONMnQc1P_49J3bLMg4_cU.crl (hash: S/tIwReE+6BGBb5NmgvMIdalCs0RMjnt92nFwc6ai0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 12:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b7:01:65:c6:2f:3a:f8:02:0c:7e:4a:74:04:14:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa816a3338d32741cd4fff8f49ddb2cc838fdc5
Validity
Not Before: Jun 30 12:01:48 2025 GMT
Not After : Jul 1 12:01:48 2025 GMT
Subject: CN=836ee0ccc925b9e88d752105096dffdaad4fc97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:e5:bd:e2:a8:fe:0c:7d:2c:e6:80:9d:33:
9e:d5:07:e8:f6:ae:5e:72:70:50:e7:e9:6a:ff:e5:
5d:74:e5:dc:8a:c9:cf:76:33:40:c8:7f:1b:95:de:
85:64:31:13:ce:97:f8:13:db:67:15:11:47:09:26:
91:d2:c4:2a:9d:cd:63:dc:8b:38:4f:52:26:a8:0c:
50:42:ac:64:6f:f5:45:a8:00:5c:e9:70:45:2d:49:
38:50:ab:cc:c9:45:84:fe:ae:e0:de:2f:91:ff:ab:
fb:9f:e0:e6:65:24:da:cd:a1:83:e4:b6:06:b2:23:
89:dd:bf:72:32:0e:54:ca:b4:87:cd:1c:fe:79:b0:
6b:06:66:e5:4a:2a:55:f6:43:57:d0:e4:fa:e0:5b:
f6:9f:d8:ad:68:db:c4:0e:3b:4d:e8:e3:2c:96:a5:
91:1d:f5:a5:9b:18:ac:72:26:95:c2:e8:6a:88:71:
60:b4:51:6f:6b:8a:f3:8f:b9:08:0b:7a:f0:5b:97:
0d:74:0d:26:e6:50:4c:19:4e:a9:47:6a:c6:42:cc:
65:14:cc:6b:f0:a0:b3:01:29:78:74:fd:ff:d5:68:
3f:f4:65:12:c8:2b:ff:02:78:c9:6a:49:6f:02:7c:
1b:8a:6a:6b:fb:7e:2e:6d:bb:a8:87:0e:0e:21:76:
53:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6E:E0:CC:C9:25:B9:E8:8D:75:21:05:09:6D:FF:DA:AD:4F:C9:7B
X509v3 Authority Key Identifier:
keyid:7F:A8:16:A3:33:8D:32:74:1C:D4:FF:F8:F4:9D:DB:2C:C8:38:FD:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:18:b9:81:b9:9f:4d:fd:fd:1a:22:3d:ac:69:63:ef:6e:f8:
36:7e:bb:0f:d2:cf:26:1f:9a:91:39:cd:a8:ec:cb:3c:96:54:
5c:12:f6:bd:11:fb:db:9a:9f:f5:5a:3d:39:c8:a6:79:1e:36:
13:7f:1c:aa:33:89:bb:3b:6f:39:7a:f3:7d:2b:32:8c:6a:11:
a4:22:1d:11:24:c4:52:ca:df:dc:c6:25:3b:bb:58:40:66:a8:
09:a1:30:f9:41:1d:85:53:a3:61:bc:5d:c5:b0:63:cc:e1:c5:
9c:7d:ec:b1:71:82:51:2d:9b:8b:1a:2b:a0:7e:66:ef:d2:c3:
ba:6c:f0:79:bc:b6:ed:c7:30:76:e9:fc:02:98:93:6b:1e:97:
6c:a2:a0:5c:d4:a3:e4:14:c7:c2:3a:5d:bb:a1:1f:24:be:31:
1d:02:7b:a4:e9:24:20:b3:87:7a:f1:59:ef:6e:ca:f4:c3:46:
12:cc:0f:b7:f9:07:4d:c0:19:de:e4:5f:9c:3a:97:2a:32:2c:
bc:43:89:fc:bf:a4:01:ba:af:a1:ea:51:9e:a0:00:f4:85:90:
4c:0c:26:79:75:86:45:70:d3:c0:9c:dd:8b:3c:fc:57:25:73:
6e:ec:7e:a9:73:14:e9:2d:6e:20:20:1a:13:38:7b:4c:2c:2b:
0d:7a:a5:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfAtwFlxi86+AIMfkp0BBTKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmYTgxNmEzMzM4ZDMyNzQxY2Q0ZmZmOGY0OWRkYjJjYzgz
OGZkYzUwHhcNMjUwNjMwMTIwMTQ4WhcNMjUwNzAxMTIwMTQ4WjAzMTEwLwYDVQQD
Eyg4MzZlZTBjY2M5MjViOWU4OGQ3NTIxMDUwOTZkZmZkYWFkNGZjOTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFjlveKo/gx9LOaAnTOe1Qfo9q5e
cnBQ5+lq/+VddOXcisnPdjNAyH8bld6FZDETzpf4E9tnFRFHCSaR0sQqnc1j3Is4
T1ImqAxQQqxkb/VFqABc6XBFLUk4UKvMyUWE/q7g3i+R/6v7n+DmZSTazaGD5LYG
siOJ3b9yMg5UyrSHzRz+ebBrBmblSipV9kNX0OT64Fv2n9itaNvEDjtN6OMslqWR
HfWlmxisciaVwuhqiHFgtFFva4rzj7kIC3rwW5cNdA0m5lBMGU6pR2rGQsxlFMxr
8KCzASl4dP3/1Wg/9GUSyCv/AnjJaklvAnwbimpr+34ubbuohw4OIXZTbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINu4MzJJbnojXUhBQlt/9qtT8l7MB8GA1UdIwQY
MBaAFH+oFqMzjTJ0HNT/+PSd2yzIOP3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjZnV296T05NblFjMVBfNDlKM2JMTWc0X2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hNDUyOGEtOTBlNi00ZDkxLWE1MmMt
ZjA3MTdlYTQ4NWM2LzEvZjZnV296T05NblFjMVBfNDlKM2JMTWc0X2NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9hNDUyOGEtOTBlNi00ZDkxLWE1MmMtZjA3MTdlYTQ4NWM2
LzEvZjZnV296T05NblFjMVBfNDlKM2JMTWc0X2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohi5gbmf
Tf39GiI9rGlj7274Nn67D9LPJh+akTnNqOzLPJZUXBL2vRH725qf9Vo9OcimeR42
E38cqjOJuztvOXrzfSsyjGoRpCIdESTEUsrf3MYlO7tYQGaoCaEw+UEdhVOjYbxd
xbBjzOHFnH3ssXGCUS2bixoroH5m79LDumzweby27ccwdun8ApiTax6XbKKgXNSj
5BTHwjpdu6EfJL4xHQJ7pOkkILOHevFZ727K9MNGEswPt/kHTcAZ3uRfnDqXKjIs
vEOJ/L+kAbqvoepRnqAA9IWQTAwmeXWGRXDTwJzdizz8VyVzbux+qXMU6S1uICAa
Ezh7TCwrDXql9g==
-----END CERTIFICATE-----
Generated at Mon Jun 30 16:07:59 2025 by rpki-client