Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
File: fDUy5S6q_vlIxCyLHVEUXKydTJY.mft (raw, json)
Hash identifier: BIcW6+VBG3+JEbkN+usSsI+Wqi/Yz5WAB8TDMg7US38=
Subject key identifier: 13:F4:96:87:BE:1B:C0:25:80:15:0D:1A:43:9B:1A:97:17:71:95:64
Authority key identifier: 7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96
Certificate issuer: /CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96
Certificate serial: 0198D4A8452DDC8E63EC624AAA7ADD9C0393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
Manifest number: 0C38
Signing time: Sat 23 Aug 2025 02:00:54 +0000
Manifest this update: Sat 23 Aug 2025 02:00:54 +0000
Manifest next update: Sun 24 Aug 2025 02:00:54 +0000
Files and hashes: 1: XCHPvb-EkH1zGNPsBprEZBKSmdE.roa (hash: Sji1HnCVrncrNibsWO7N88ENDvFcUSSKPSq/SoaOpWI=)
2: fDUy5S6q_vlIxCyLHVEUXKydTJY.crl (hash: v5GB++M9GcoawIFpCq8hOXYmMw5WPkjAi1iv3bGsuig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:45:2d:dc:8e:63:ec:62:4a:aa:7a:dd:9c:03:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96
Validity
Not Before: Aug 23 02:00:54 2025 GMT
Not After : Aug 24 02:00:54 2025 GMT
Subject: CN=13f49687be1bc02580150d1a439b1a9717719564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:04:be:78:70:32:55:c6:11:43:be:bd:92:
ae:a9:e2:7b:12:4c:06:d1:70:a6:20:7f:89:2b:f3:
c3:24:a1:d6:9a:ec:c5:6f:e6:c6:21:2a:a9:8d:f6:
88:41:83:b9:87:ba:8e:57:01:12:35:93:27:3c:ba:
f9:4f:e3:36:a3:1e:b3:43:40:7c:15:22:eb:5f:39:
0e:92:d8:29:17:86:77:9f:02:ba:30:99:3d:ae:09:
38:25:b8:82:fe:b7:fd:b3:fe:4a:56:b8:c3:f3:ee:
f4:f7:87:09:2f:66:c7:48:07:ae:22:10:da:0a:43:
2a:95:f4:2c:88:5a:da:6a:ea:4d:70:b6:bd:e4:4a:
47:fc:ce:7d:76:b2:3b:47:b5:f1:62:71:6a:d1:bf:
63:95:4a:74:b5:15:06:b3:9a:6b:cd:f6:be:0c:1c:
28:d5:ee:46:76:ab:5d:80:0a:ed:91:79:d0:32:1e:
dd:05:b6:a0:c4:28:f7:17:99:1f:ec:12:be:93:fa:
55:a1:f1:49:a8:6c:e2:a0:2a:da:41:dd:70:00:0a:
52:33:4d:f3:e9:c4:57:43:47:21:90:34:d7:4d:09:
66:2e:6e:07:88:ed:13:e4:ad:cd:8f:cd:01:c1:13:
69:03:a4:4b:f6:36:f0:c3:de:33:cf:cb:63:2c:6e:
c7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F4:96:87:BE:1B:C0:25:80:15:0D:1A:43:9B:1A:97:17:71:95:64
X509v3 Authority Key Identifier:
keyid:7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f4:ee:71:1e:a9:c3:a1:1c:6d:1e:f5:cc:c9:cb:73:5b:5c:
73:15:fd:73:62:f6:75:aa:81:63:d3:c5:bb:57:76:3e:5e:42:
1f:23:3a:db:f9:df:bf:46:1c:1b:02:16:57:1e:d2:3e:d1:75:
88:0b:7d:cf:00:31:fe:dc:4d:f7:eb:d8:e4:6f:5e:d4:14:ee:
22:3b:6f:42:14:51:12:f7:2b:4f:5d:b3:62:45:07:b4:ae:79:
4b:8d:93:0f:fd:a3:5a:72:f7:9d:9d:ea:a7:19:e3:88:86:f5:
68:ea:c7:c6:b0:2e:c7:d1:87:93:54:f4:61:26:e0:1b:39:0d:
28:df:5c:f2:03:9c:5f:a4:b1:46:f2:c5:ff:a3:b4:ab:8b:50:
60:80:0f:96:24:23:c0:02:59:7a:67:1d:c8:50:de:3d:f2:68:
26:00:4b:d1:a5:0f:71:3e:91:09:27:1e:f8:46:ff:0a:ac:7e:
f2:77:e8:f4:b9:2b:96:c2:5b:4a:d5:a8:81:63:d8:ca:21:4d:
3f:44:aa:7a:5e:3b:ae:b0:3f:ed:8b:e0:dd:99:b4:02:4c:60:
e9:a8:45:50:e8:23:84:9d:52:6c:b8:d0:ed:7d:c6:27:8e:ef:
cd:85:ed:94:5e:7e:c6:cf:48:30:49:c1:c3:db:3c:5a:f1:6a:
cc:9e:f6:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqEUt3I5j7GJKqnrdnAOTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMzUzMmU1MmVhYWZlZjk0OGM0MmM4YjFkNTExNDVjYWM5
ZDRjOTYwHhcNMjUwODIzMDIwMDU0WhcNMjUwODI0MDIwMDU0WjAzMTEwLwYDVQQD
EygxM2Y0OTY4N2JlMWJjMDI1ODAxNTBkMWE0MzliMWE5NzE3NzE5NTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPkEvnhwMlXGEUO+vZKuqeJ7EkwG
0XCmIH+JK/PDJKHWmuzFb+bGISqpjfaIQYO5h7qOVwESNZMnPLr5T+M2ox6zQ0B8
FSLrXzkOktgpF4Z3nwK6MJk9rgk4JbiC/rf9s/5KVrjD8+7094cJL2bHSAeuIhDa
CkMqlfQsiFraaupNcLa95EpH/M59drI7R7XxYnFq0b9jlUp0tRUGs5przfa+DBwo
1e5GdqtdgArtkXnQMh7dBbagxCj3F5kf7BK+k/pVofFJqGzioCraQd1wAApSM03z
6cRXQ0chkDTXTQlmLm4HiO0T5K3Nj80BwRNpA6RL9jbww94zz8tjLG7HkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBP0loe+G8AlgBUNGkObGpcXcZVkMB8GA1UdIwQY
MBaAFHw1MuUuqv75SMQsix1RFFysnUyWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkRVeTVTNnFfdmxJeEN5TEhWRVVYS3lkVEpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9hNDM4NTAtMDJhMi00ODU5LTliZGUt
NTY0ZWJkY2YzZjk2LzEvZkRVeTVTNnFfdmxJeEN5TEhWRVVYS3lkVEpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9hNDM4NTAtMDJhMi00ODU5LTliZGUtNTY0ZWJkY2YzZjk2
LzEvZkRVeTVTNnFfdmxJeEN5TEhWRVVYS3lkVEpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/TucR6p
w6EcbR71zMnLc1tccxX9c2L2daqBY9PFu1d2Pl5CHyM62/nfv0YcGwIWVx7SPtF1
iAt9zwAx/txN9+vY5G9e1BTuIjtvQhRREvcrT12zYkUHtK55S42TD/2jWnL3nZ3q
pxnjiIb1aOrHxrAux9GHk1T0YSbgGzkNKN9c8gOcX6SxRvLF/6O0q4tQYIAPliQj
wAJZemcdyFDePfJoJgBL0aUPcT6RCSce+Eb/Cqx+8nfo9LkrlsJbStWogWPYyiFN
P0Sqel47rrA/7Yvg3Zm0Akxg6ahFUOgjhJ1SbLjQ7X3GJ47vzYXtlF5+xs9IMEnB
w9s8WvFqzJ72EQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:44 2025 by rpki-client