Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
File: fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft (raw, json)
Hash identifier: Ov0BBFuD2Qyv+DfyZeNbee0zzgqOSJJTumX9aY2J0d0=
Subject key identifier: 98:59:3F:1C:2B:D7:86:D7:31:98:9E:07:58:1A:8B:15:FA:39:F3:B7
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Certificate issuer: /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial: 0197D399508540F97D659C4E9282D9F42189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
Manifest number: 1382
Signing time: Fri 04 Jul 2025 04:02:09 +0000
Manifest this update: Fri 04 Jul 2025 04:02:09 +0000
Manifest next update: Sat 05 Jul 2025 04:02:09 +0000
Files and hashes: 1: Qmn6qMcsYc4tSMLHc4aOlKWHzLY.roa (hash: Z49F7eb8HQunLu54eXsnAFNRgDwdiL3VgHCYWpkpRJk=)
2: fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl (hash: bkBdChRWdzjUuzu4tnuroZKzTOEHGECNaS387+IQb84=)
3: mwGFMLP8urixZJ9W1x_56ovfS3g.roa (hash: FFppZXO5afH6JgZ/GAUgkUjtbJbJsW6ZdAq5a1dyQoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d3:99:50:85:40:f9:7d:65:9c:4e:92:82:d9:f4:21:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Validity
Not Before: Jul 4 04:02:09 2025 GMT
Not After : Jul 5 04:02:09 2025 GMT
Subject: CN=98593f1c2bd786d731989e07581a8b15fa39f3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c8:6d:4d:7d:70:44:d5:73:9b:4a:50:7a:94:
a2:9a:90:9b:9d:3c:48:94:5d:c2:a4:71:a2:d0:01:
78:c6:8b:0a:f6:0a:06:08:3c:b0:8c:07:ec:5a:f7:
76:f2:dc:55:37:16:9e:d0:ce:35:2d:9c:3d:80:85:
32:b3:66:89:3c:07:37:0d:9c:90:ff:60:fa:58:19:
b5:c4:7c:8d:82:be:82:47:b7:ba:d3:e0:ba:bb:93:
19:6d:3f:7e:8a:82:82:81:24:8f:2b:88:8a:7c:6b:
9a:7b:f4:99:56:d7:49:45:44:e1:ce:e6:66:97:b6:
86:8b:f0:f1:08:56:b9:8e:0e:dc:00:72:73:d6:44:
14:d1:33:38:49:c0:c4:14:26:ec:bf:65:84:07:66:
3b:32:33:b2:f1:6c:6c:2d:11:63:da:3e:69:f2:8e:
06:37:3f:37:f6:2c:eb:2e:86:9f:cb:f9:da:bf:85:
32:2f:cd:0a:df:19:e9:d1:3d:86:e9:6b:54:9b:c1:
01:02:a5:81:54:b2:e4:95:37:1d:66:35:fb:f1:9d:
96:31:b7:72:60:9c:26:a5:c7:0e:64:fe:ac:b3:fd:
55:1d:8b:2a:8d:ed:df:cf:e0:50:3a:fa:8b:c6:ea:
34:93:d0:af:df:33:3f:56:4e:f5:b3:f4:25:30:81:
be:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:59:3F:1C:2B:D7:86:D7:31:98:9E:07:58:1A:8B:15:FA:39:F3:B7
X509v3 Authority Key Identifier:
keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0f:13:23:e1:74:c1:d4:63:eb:50:57:0a:9b:79:58:6d:d0:
6d:d7:20:cc:3a:cc:3c:f0:43:e7:0e:7b:c1:2e:37:d0:14:c8:
1d:22:ca:9a:8a:aa:f8:63:0e:c6:fd:79:bb:d4:72:f6:56:c1:
06:c4:6e:41:e7:70:3c:66:b5:a7:5c:15:53:e3:81:4f:20:30:
a9:d5:db:4a:90:d2:ea:6a:a1:25:a1:14:ef:f5:0f:45:06:46:
4e:8c:02:29:36:22:5e:5f:65:4c:fe:ab:45:c6:2c:e4:f2:35:
cb:bf:06:31:7f:75:db:36:56:95:c8:8b:98:ff:69:e1:c3:02:
25:e9:fc:25:28:8c:73:66:cf:f3:65:09:34:e1:5e:e4:74:03:
13:33:c4:c7:54:fc:f4:fd:a6:99:cd:a2:77:f2:cb:e0:b1:50:
2d:f6:a4:75:8a:f9:d3:56:00:6b:ac:24:86:0e:af:09:db:2d:
cf:11:db:dd:91:d9:48:ed:2f:44:69:20:d6:5f:58:c4:15:92:
7d:45:1b:f4:0e:22:fd:e6:39:28:a8:99:a2:23:dd:09:85:48:
f1:f6:50:67:9f:cc:90:ca:e0:95:61:e9:65:54:fb:0a:83:b7:
96:a2:00:95:23:4b:19:3e:f9:7a:7b:40:2a:0b:91:83:96:33:
06:13:79:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfTmVCFQPl9ZZxOkoLZ9CGJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkN2I0YmNhYmViMjk2MDVlYTUxMWRlOTczZTQ2NzVjNGI4
YTI5ZGYwHhcNMjUwNzA0MDQwMjA5WhcNMjUwNzA1MDQwMjA5WjAzMTEwLwYDVQQD
Eyg5ODU5M2YxYzJiZDc4NmQ3MzE5ODllMDc1ODFhOGIxNWZhMzlmM2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMhtTX1wRNVzm0pQepSimpCbnTxI
lF3CpHGi0AF4xosK9goGCDywjAfsWvd28txVNxae0M41LZw9gIUys2aJPAc3DZyQ
/2D6WBm1xHyNgr6CR7e60+C6u5MZbT9+ioKCgSSPK4iKfGuae/SZVtdJRUThzuZm
l7aGi/DxCFa5jg7cAHJz1kQU0TM4ScDEFCbsv2WEB2Y7MjOy8WxsLRFj2j5p8o4G
Nz839izrLoafy/nav4UyL80K3xnp0T2G6WtUm8EBAqWBVLLklTcdZjX78Z2WMbdy
YJwmpccOZP6ss/1VHYsqje3fz+BQOvqLxuo0k9Cv3zM/Vk71s/QlMIG+VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhZPxwr14bXMZieB1gaixX6OfO3MB8GA1UdIwQY
MBaAFH17S8q+spYF6lEd6XPkZ1xLiinfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlh0THlyNnlsZ1hxVVIzcGMtUm5YRXVLS2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84ODk3ZmQtMTg2Mi00MzkzLWFhNGIt
NDQ3NjE3YTRhNzQ0LzEvZlh0THlyNnlsZ1hxVVIzcGMtUm5YRXVLS2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny84ODk3ZmQtMTg2Mi00MzkzLWFhNGItNDQ3NjE3YTRhNzQ0
LzEvZlh0THlyNnlsZ1hxVVIzcGMtUm5YRXVLS2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQ8TI+F0
wdRj61BXCpt5WG3QbdcgzDrMPPBD5w57wS430BTIHSLKmoqq+GMOxv15u9Ry9lbB
BsRuQedwPGa1p1wVU+OBTyAwqdXbSpDS6mqhJaEU7/UPRQZGTowCKTYiXl9lTP6r
RcYs5PI1y78GMX912zZWlciLmP9p4cMCJen8JSiMc2bP82UJNOFe5HQDEzPEx1T8
9P2mmc2id/LL4LFQLfakdYr501YAa6wkhg6vCdstzxHb3ZHZSO0vRGkg1l9YxBWS
fUUb9A4i/eY5KKiZoiPdCYVI8fZQZ5/MkMrglWHpZVT7CoO3lqIAlSNLGT75entA
KguRg5YzBhN5Fg==
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:05:21 2025 by rpki-client