Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
File: fgQjIR9JsTNelLi9u7EWhmT2gE8.mft (raw, json)
Hash identifier: 2XpcCIj2/FOWLSNlM7IuDow5dGE6wmhgypDLFbXrhYo=
Subject key identifier: 9C:F0:D6:9B:08:F3:30:2D:E1:EE:7E:9A:FF:9D:1B:98:3E:E9:10:DB
Authority key identifier: 7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
Certificate issuer: /CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Certificate serial: 0197C50126E029E95D4BE1C05D1997469CB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
Manifest number: 14BE
Signing time: Tue 01 Jul 2025 08:01:16 +0000
Manifest this update: Tue 01 Jul 2025 08:01:16 +0000
Manifest next update: Wed 02 Jul 2025 08:01:16 +0000
Files and hashes: 1: EIKOgQFi5mojMPucev_-8ewm_-E.roa (hash: a2bhdKBZ8yPIzwYvUQAAVhbdMilJSR3ugkNV2LMmk80=)
2: fgQjIR9JsTNelLi9u7EWhmT2gE8.crl (hash: wU9i8TzvEX5EQ8FhGuiP093dZqtVuFpYaX3SiLsipvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:01:26:e0:29:e9:5d:4b:e1:c0:5d:19:97:46:9c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Validity
Not Before: Jul 1 08:01:16 2025 GMT
Not After : Jul 2 08:01:16 2025 GMT
Subject: CN=9cf0d69b08f3302de1ee7e9aff9d1b983ee910db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b8:c8:d9:2f:14:63:37:0d:31:3d:51:ef:13:
55:a9:df:2d:f5:45:cf:5d:34:af:10:3b:9c:5e:4a:
e7:8f:9a:98:3a:cb:bf:5b:4d:06:a6:f7:25:a9:b2:
bd:34:ba:b0:ba:0c:5c:a2:3a:65:2a:83:47:bc:af:
06:35:bf:09:de:10:ec:0c:5d:b6:18:5a:3c:35:00:
d6:dc:94:10:8f:cf:3d:c6:31:f3:01:38:f5:e2:cc:
f3:44:dc:83:3e:71:33:c1:ac:b4:05:9d:75:6e:56:
bf:b6:1c:44:dc:c8:4e:bf:f9:fc:9a:76:0f:b7:ea:
7c:07:00:a6:3a:eb:31:56:52:fa:e6:0c:2f:bb:5e:
4e:9b:94:d4:a5:79:fc:d5:c0:97:25:6f:07:43:c4:
7d:83:97:4f:13:a6:3e:32:12:56:84:63:bb:47:91:
3e:33:e9:6d:9d:02:56:2b:22:c2:74:3a:af:f2:b8:
2a:47:09:37:bc:30:b3:66:79:03:51:75:37:5a:90:
1e:df:bd:01:d2:0a:79:db:50:33:c2:35:07:28:4c:
48:e3:f5:91:4e:94:9b:0f:9b:99:2b:30:60:9d:15:
3d:c4:f0:c7:22:b1:1a:d0:ea:23:a7:9b:1f:8a:52:
f4:da:d5:86:53:e4:e4:2a:37:c5:a8:70:0a:27:1f:
9d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F0:D6:9B:08:F3:30:2D:E1:EE:7E:9A:FF:9D:1B:98:3E:E9:10:DB
X509v3 Authority Key Identifier:
keyid:7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:9d:04:5b:36:00:7f:ee:79:c7:6e:09:0b:ce:b1:ab:29:19:
f4:01:68:c6:28:47:2b:80:a4:cf:f7:ce:ca:3e:6e:63:01:21:
a4:08:f1:c6:d9:e0:91:89:00:7d:01:9d:55:2f:33:d8:8a:f7:
77:9a:c5:29:2d:f8:fa:89:7c:a3:5f:c9:49:17:ac:b5:bd:a7:
66:f9:06:b3:6f:72:45:f0:d4:54:06:38:8a:7f:24:3a:42:9d:
13:7f:b1:dc:a2:34:44:bd:6e:a5:38:09:a9:32:0a:bf:5b:2a:
83:e3:0e:10:1b:05:b0:e6:23:69:5b:d2:14:85:d0:90:8c:ad:
d6:c3:d6:45:3d:48:24:5d:6f:cb:d2:40:a0:7a:ec:b2:8f:12:
3c:85:0f:96:84:80:40:2d:e0:36:8e:0e:ee:8b:81:84:8f:41:
4a:11:c7:07:dc:80:8e:19:65:f2:6f:a6:03:b5:f1:77:3a:b6:
52:1c:bd:76:b8:c5:c4:0f:9d:15:3f:00:e7:32:f1:e7:db:23:
63:66:dc:87:04:ce:97:f7:8c:00:dd:c9:88:6f:43:01:84:51:
12:69:23:eb:1e:ad:4d:31:56:31:11:56:0d:95:bd:f3:74:e4:
89:14:d7:40:8a:18:6a:1b:99:a6:13:0e:57:6f:2a:e3:92:30:
bf:d1:82:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfFASbgKeldS+HAXRmXRpyyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMDQyMzIxMWY0OWIxMzM1ZTk0YjhiZGJiYjExNjg2NjRm
NjgwNGYwHhcNMjUwNzAxMDgwMTE2WhcNMjUwNzAyMDgwMTE2WjAzMTEwLwYDVQQD
Eyg5Y2YwZDY5YjA4ZjMzMDJkZTFlZTdlOWFmZjlkMWI5ODNlZTkxMGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LjI2S8UYzcNMT1R7xNVqd8t9UXP
XTSvEDucXkrnj5qYOsu/W00GpvclqbK9NLqwugxcojplKoNHvK8GNb8J3hDsDF22
GFo8NQDW3JQQj889xjHzATj14szzRNyDPnEzway0BZ11bla/thxE3MhOv/n8mnYP
t+p8BwCmOusxVlL65gwvu15Om5TUpXn81cCXJW8HQ8R9g5dPE6Y+MhJWhGO7R5E+
M+ltnQJWKyLCdDqv8rgqRwk3vDCzZnkDUXU3WpAe370B0gp521AzwjUHKExI4/WR
TpSbD5uZKzBgnRU9xPDHIrEa0Oojp5sfilL02tWGU+TkKjfFqHAKJx+dOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzw1psI8zAt4e5+mv+dG5g+6RDbMB8GA1UdIwQY
MBaAFH4EIyEfSbEzXpS4vbuxFoZk9oBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmdRaklSOUpzVE5lbExpOXU3RVdobVQyZ0U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83N2FjODYtMzFmNi00MzcwLWI0MzMt
YjBlN2Q0MWI1ZDM2LzEvZmdRaklSOUpzVE5lbExpOXU3RVdobVQyZ0U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS83N2FjODYtMzFmNi00MzcwLWI0MzMtYjBlN2Q0MWI1ZDM2
LzEvZmdRaklSOUpzVE5lbExpOXU3RVdobVQyZ0U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZ0EWzYA
f+55x24JC86xqykZ9AFoxihHK4Ckz/fOyj5uYwEhpAjxxtngkYkAfQGdVS8z2Ir3
d5rFKS34+ol8o1/JSRestb2nZvkGs29yRfDUVAY4in8kOkKdE3+x3KI0RL1upTgJ
qTIKv1sqg+MOEBsFsOYjaVvSFIXQkIyt1sPWRT1IJF1vy9JAoHrsso8SPIUPloSA
QC3gNo4O7ouBhI9BShHHB9yAjhll8m+mA7Xxdzq2Uhy9drjFxA+dFT8A5zLx59sj
Y2bchwTOl/eMAN3JiG9DAYRREmkj6x6tTTFWMRFWDZW983TkiRTXQIoYahuZphMO
V28q45Iwv9GCEw==
-----END CERTIFICATE-----
Generated at Tue Jul 1 17:18:12 2025 by rpki-client