Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
File: fEStUyVA0tLa66leE9YUt4Va1iI.mft (raw, json)
Hash identifier: Y9M9UTCMiiUebEOqZ5YSeKOewP0TU6W5GtmRZ6RD0G4=
Subject key identifier: E0:CF:DA:1C:96:90:72:A4:A1:60:AE:45:E8:74:46:51:58:67:2E:2C
Authority key identifier: 7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
Certificate issuer: /CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Certificate serial: 0197C2DB8339A2A7EF0B3A4D4D3DE3B1D511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
Manifest number: 054C
Signing time: Mon 30 Jun 2025 22:00:55 +0000
Manifest this update: Mon 30 Jun 2025 22:00:55 +0000
Manifest next update: Tue 01 Jul 2025 22:00:55 +0000
Files and hashes: 1: fEStUyVA0tLa66leE9YUt4Va1iI.crl (hash: WOpfUQsHhFzKxpF1mtjbhV1m2WLREsYFdpwqHsVXTq8=)
2: wVdARfy8kyS2yygCe6VeSrxjsrI.roa (hash: hDzrF6MC+t3cfKHXPCsVlZtlykkOSNtAuETj7zQp0RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:db:83:39:a2:a7:ef:0b:3a:4d:4d:3d:e3:b1:d5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Validity
Not Before: Jun 30 22:00:55 2025 GMT
Not After : Jul 1 22:00:55 2025 GMT
Subject: CN=e0cfda1c969072a4a160ae45e874465158672e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7a:a2:eb:ed:74:24:e4:90:f3:71:f8:dc:4d:
d3:fe:79:b3:36:d7:e2:26:0e:54:cf:f2:7c:2c:7d:
d3:73:c5:3a:95:78:0b:03:ae:1e:3a:51:a9:72:00:
c9:4c:00:ec:2a:47:81:fa:93:0f:b1:7f:6d:b5:fa:
08:5a:92:f3:fd:1e:0e:fa:17:43:7c:72:04:cf:12:
27:17:5f:9d:56:9e:b7:03:35:0b:b7:b7:5e:72:35:
02:33:1f:22:cb:ae:90:08:a1:2d:b3:ee:14:82:88:
15:86:5b:98:18:42:ec:f2:b7:93:10:de:1b:74:d2:
4b:58:8d:c9:8f:cf:8b:b9:40:60:d7:8e:77:12:38:
04:cc:c8:3f:1a:96:70:cc:f4:f4:76:71:a7:f4:30:
5c:21:d5:21:2e:12:b9:e0:4c:cf:3a:37:1a:f5:dc:
9d:31:2a:b0:84:bf:9a:41:eb:eb:38:4c:00:fa:a3:
64:a2:a3:f7:dd:82:32:4f:08:a4:40:62:2d:18:5a:
a7:d8:d5:de:86:c2:6c:41:3c:58:f8:b5:54:96:ea:
b6:e8:09:69:8c:4f:40:ff:26:fb:30:07:c0:b2:83:
20:6c:08:d1:89:e5:b9:21:cb:7e:ec:b5:84:50:fb:
85:c2:6b:4c:1c:9b:4f:46:25:54:0c:1d:b2:1f:7a:
31:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CF:DA:1C:96:90:72:A4:A1:60:AE:45:E8:74:46:51:58:67:2E:2C
X509v3 Authority Key Identifier:
keyid:7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:7f:f6:7b:b3:09:b0:ef:58:2b:e3:69:42:3a:35:d5:40:2e:
46:70:a9:0c:e3:cb:a9:91:ac:b6:e7:b2:7b:eb:72:ff:c9:1a:
65:07:98:e8:4c:d1:20:8c:58:48:81:73:21:3b:d8:d8:d8:23:
77:50:af:50:d6:f3:35:d9:89:92:83:98:e1:13:c5:00:79:9d:
fc:27:ac:03:59:ad:52:f5:44:c6:e9:52:8a:3d:a9:54:bd:bf:
69:30:91:13:9a:0b:47:4c:2c:a8:85:4a:4c:88:ea:f5:7b:b9:
35:b9:7e:43:b0:aa:2d:ee:9d:6d:cf:8a:47:28:78:2e:b3:58:
40:14:f1:7e:2c:ec:22:f9:c9:04:11:17:79:d6:00:d8:83:49:
b5:9c:5e:92:b6:75:48:49:a2:ae:b2:5f:44:cf:14:04:8c:f4:
e3:e6:8e:9c:4b:96:b2:25:c6:8c:63:59:e2:85:ce:1e:b8:e4:
aa:81:ae:22:35:c2:18:4c:1b:ad:e1:a1:9f:86:d9:57:a7:4c:
1d:d1:16:64:1e:99:2d:a7:70:de:01:84:1c:be:23:76:13:88:
72:28:a6:a7:7a:53:65:df:2d:88:20:eb:42:31:fa:40:f9:85:
fd:a4:e6:35:4e:02:9a:2f:6b:a1:77:e1:73:b4:d6:c7:94:6c:
08:50:66:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfC24M5oqfvCzpNTT3jsdURMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNDRhZDUzMjU0MGQyZDJkYWViYTk1ZTEzZDYxNGI3ODU1
YWQ2MjIwHhcNMjUwNjMwMjIwMDU1WhcNMjUwNzAxMjIwMDU1WjAzMTEwLwYDVQQD
EyhlMGNmZGExYzk2OTA3MmE0YTE2MGFlNDVlODc0NDY1MTU4NjcyZTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHqi6+10JOSQ83H43E3T/nmzNtfi
Jg5Uz/J8LH3Tc8U6lXgLA64eOlGpcgDJTADsKkeB+pMPsX9ttfoIWpLz/R4O+hdD
fHIEzxInF1+dVp63AzULt7decjUCMx8iy66QCKEts+4UgogVhluYGELs8reTEN4b
dNJLWI3Jj8+LuUBg1453EjgEzMg/GpZwzPT0dnGn9DBcIdUhLhK54EzPOjca9dyd
MSqwhL+aQevrOEwA+qNkoqP33YIyTwikQGItGFqn2NXehsJsQTxY+LVUluq26Alp
jE9A/yb7MAfAsoMgbAjRieW5Ict+7LWEUPuFwmtMHJtPRiVUDB2yH3oxMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODP2hyWkHKkoWCuReh0RlFYZy4sMB8GA1UdIwQY
MBaAFHxErVMlQNLS2uupXhPWFLeFWtYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkVTdFV5VkEwdExhNjZsZUU5WVV0NFZhMWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85NjQ2ZDctNWIwNC00NTQ0LThlZGMt
NjU5Y2I0MjdkY2Y3LzEvZkVTdFV5VkEwdExhNjZsZUU5WVV0NFZhMWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS85NjQ2ZDctNWIwNC00NTQ0LThlZGMtNjU5Y2I0MjdkY2Y3
LzEvZkVTdFV5VkEwdExhNjZsZUU5WVV0NFZhMWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMX/2e7MJ
sO9YK+NpQjo11UAuRnCpDOPLqZGstueye+ty/8kaZQeY6EzRIIxYSIFzITvY2Ngj
d1CvUNbzNdmJkoOY4RPFAHmd/CesA1mtUvVExulSij2pVL2/aTCRE5oLR0wsqIVK
TIjq9Xu5Nbl+Q7CqLe6dbc+KRyh4LrNYQBTxfizsIvnJBBEXedYA2INJtZxekrZ1
SEmirrJfRM8UBIz04+aOnEuWsiXGjGNZ4oXOHrjkqoGuIjXCGEwbreGhn4bZV6dM
HdEWZB6ZLadw3gGEHL4jdhOIciimp3pTZd8tiCDrQjH6QPmF/aTmNU4Cmi9roXfh
c7TWx5RsCFBmWA==
-----END CERTIFICATE-----
Generated at Mon Jun 30 23:40:11 2025 by rpki-client