Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
File: fdUdwQKkl1GOFgkeZegFwkOO8ls.mft (raw, json)
Hash identifier: M3In2fQgI1gP6srFHUZ48Ff3BTcksl+rojJnZUW0MTE=
Subject key identifier: 4A:AC:55:E3:D6:61:AD:7F:99:03:1E:69:D7:A0:BB:E2:AC:E9:8C:DE
Authority key identifier: 7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
Certificate issuer: /CN=7dd51dc102a497518e16091e65e805c2438ef25b
Certificate serial: 0198D4DFF2F10BADA5B11AABA0B9D396BBF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
Manifest number: 075B
Signing time: Sat 23 Aug 2025 03:01:43 +0000
Manifest this update: Sat 23 Aug 2025 03:01:43 +0000
Manifest next update: Sun 24 Aug 2025 03:01:43 +0000
Files and hashes: 1: TbMjDWj4JjSbzv98od3kf6H3oLQ.roa (hash: 6tue5GmhUL7N95x2Z4BFABU7q9BYKT3YDkCK4sofjnc=)
2: fdUdwQKkl1GOFgkeZegFwkOO8ls.crl (hash: NneEoJNtsbvEvTg21BVZLc0KOUNQHiaAkLP0eymXVl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f2:f1:0b:ad:a5:b1:1a:ab:a0:b9:d3:96:bb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dd51dc102a497518e16091e65e805c2438ef25b
Validity
Not Before: Aug 23 03:01:43 2025 GMT
Not After : Aug 24 03:01:43 2025 GMT
Subject: CN=4aac55e3d661ad7f99031e69d7a0bbe2ace98cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b7:db:5f:1e:96:d9:77:c5:44:83:0f:f7:f4:
98:b9:23:1c:56:ba:cd:50:dc:af:bf:c5:df:29:c6:
7c:bc:17:6f:29:0b:78:9f:a9:eb:d8:e1:3b:45:64:
ae:e6:aa:1c:47:59:13:c2:b0:81:a8:46:4a:b3:ef:
72:3d:17:2b:6f:50:96:89:2e:32:a9:04:2a:fd:b2:
ff:fd:37:07:40:26:a1:fd:8d:cc:36:43:82:3e:11:
ee:d9:20:58:fb:7a:a1:5d:d0:07:19:1f:7b:a4:1f:
11:3b:db:73:17:69:1d:52:b2:9a:36:11:a6:46:bb:
12:82:b6:af:55:d6:84:22:2e:bc:50:cc:d6:49:ac:
f9:ad:e2:db:af:6c:f8:20:71:4c:2c:bb:60:c9:de:
8b:b3:5e:7f:69:e7:a9:90:05:83:ae:0d:d7:96:e6:
6a:56:f0:57:36:ba:e4:ed:79:29:4d:b2:e7:b1:12:
d0:fb:76:74:57:d9:b8:57:04:a3:78:c0:89:4d:97:
cb:d2:30:72:01:1e:22:7e:f7:d5:e3:b4:d0:a3:43:
8b:e3:cc:2c:f3:99:a2:f1:5f:6b:df:ca:0a:13:d4:
ab:b3:37:8a:fa:73:f0:1b:4c:ee:0a:95:8e:6c:b3:
44:5b:29:aa:7a:29:28:38:65:d3:50:3c:a5:97:c0:
76:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AC:55:E3:D6:61:AD:7F:99:03:1E:69:D7:A0:BB:E2:AC:E9:8C:DE
X509v3 Authority Key Identifier:
keyid:7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c8:05:ac:08:40:11:c7:6b:f4:26:7b:da:fa:6a:48:8f:fa:
b8:ac:2f:97:e1:45:70:ab:78:b9:f9:6f:e7:b9:92:a1:06:31:
88:96:d9:ac:9e:90:43:f1:3f:71:b1:03:0f:22:60:fa:54:bb:
67:fe:e2:81:e1:4e:a8:b4:37:71:42:76:40:a4:5d:c1:47:b2:
51:4b:02:28:0b:5b:53:4b:f8:7a:b8:0f:13:25:36:e0:b2:23:
2f:c7:c7:24:fb:b6:43:79:f6:c5:58:91:75:74:15:df:4b:4c:
aa:08:03:74:ff:7f:f7:99:32:b5:ea:f9:0d:b6:55:5e:a0:2c:
2e:8f:65:01:67:b1:e0:05:48:41:eb:50:95:d6:3b:c4:fc:04:
79:30:07:61:3a:74:87:bf:1b:b6:fc:22:e5:b8:88:d0:77:92:
5e:8d:ed:48:c4:a9:18:45:52:98:b5:e6:11:77:03:12:d1:95:
d9:7b:bf:ac:d9:b0:6b:b0:70:0a:fb:9f:2c:5a:a6:98:9c:21:
68:d4:b9:01:02:ad:fe:c2:b1:60:82:cf:13:0d:d5:de:d9:e7:
58:f2:8a:8f:25:d4:77:2e:ea:99:f3:71:54:08:f0:20:51:07:
a7:9c:c7:dc:cb:5b:0b:14:84:3f:74:6a:82:72:93:0b:e0:dd:
68:1f:d4:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU3/LxC62lsRqroLnTlrv4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZDUxZGMxMDJhNDk3NTE4ZTE2MDkxZTY1ZTgwNWMyNDM4
ZWYyNWIwHhcNMjUwODIzMDMwMTQzWhcNMjUwODI0MDMwMTQzWjAzMTEwLwYDVQQD
Eyg0YWFjNTVlM2Q2NjFhZDdmOTkwMzFlNjlkN2EwYmJlMmFjZTk4Y2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rfbXx6W2XfFRIMP9/SYuSMcVrrN
UNyvv8XfKcZ8vBdvKQt4n6nr2OE7RWSu5qocR1kTwrCBqEZKs+9yPRcrb1CWiS4y
qQQq/bL//TcHQCah/Y3MNkOCPhHu2SBY+3qhXdAHGR97pB8RO9tzF2kdUrKaNhGm
RrsSgravVdaEIi68UMzWSaz5reLbr2z4IHFMLLtgyd6Ls15/aeepkAWDrg3XluZq
VvBXNrrk7XkpTbLnsRLQ+3Z0V9m4VwSjeMCJTZfL0jByAR4ifvfV47TQo0OL48ws
85mi8V9r38oKE9SrszeK+nPwG0zuCpWObLNEWymqeikoOGXTUDyll8B2EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqsVePWYa1/mQMeadegu+Ks6YzeMB8GA1UdIwQY
MBaAFH3VHcECpJdRjhYJHmXoBcJDjvJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81ZjhhNzYtOTIxNS00NWI1LTkzOGIt
NzZlNGUxYzkzNjA2LzEvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi81ZjhhNzYtOTIxNS00NWI1LTkzOGItNzZlNGUxYzkzNjA2
LzEvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAicgFrAhA
Ecdr9CZ72vpqSI/6uKwvl+FFcKt4uflv57mSoQYxiJbZrJ6QQ/E/cbEDDyJg+lS7
Z/7igeFOqLQ3cUJ2QKRdwUeyUUsCKAtbU0v4ergPEyU24LIjL8fHJPu2Q3n2xViR
dXQV30tMqggDdP9/95kyter5DbZVXqAsLo9lAWex4AVIQetQldY7xPwEeTAHYTp0
h78btvwi5biI0HeSXo3tSMSpGEVSmLXmEXcDEtGV2Xu/rNmwa7BwCvufLFqmmJwh
aNS5AQKt/sKxYILPEw3V3tnnWPKKjyXUdy7qmfNxVAjwIFEHp5zH3MtbCxSEP3Rq
gnKTC+DdaB/UkQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:06 2025 by rpki-client