Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
File: fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft (raw, json)
Hash identifier: 9I/uBhZEY0IsilvpGqXFzLJQPD12tLecgebEAvwK44M=
Subject key identifier: 7E:69:66:5B:1E:D2:E8:4D:30:DB:D0:59:0F:AB:F4:9A:C3:6D:C2:C3
Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
Certificate issuer: /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Certificate serial: 0197CA957EFB9AE18324A67E789D30A21C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
Manifest number: 03B0
Signing time: Wed 02 Jul 2025 10:01:24 +0000
Manifest this update: Wed 02 Jul 2025 10:01:24 +0000
Manifest next update: Thu 03 Jul 2025 10:01:24 +0000
Files and hashes: 1: ahfN64_p8VtI62YroQrVTvBrIO0.roa (hash: sZaDoXjnbfKoPFXFsVFkCxokaAJgn9I/0mc/e5HXWnI=)
2: fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl (hash: RMp3Vb5hj0cCgcJM9r48qrBxudwNzervZ78US8TWrE4=)
3: o9U5Dfyd-pSAin_ZdTXibSOZdr8.roa (hash: mqF6uwOJbIfnUqauX0VbeIR/n/OPtHF+diV/fjZGJJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:95:7e:fb:9a:e1:83:24:a6:7e:78:9d:30:a2:1c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Validity
Not Before: Jul 2 10:01:24 2025 GMT
Not After : Jul 3 10:01:24 2025 GMT
Subject: CN=7e69665b1ed2e84d30dbd0590fabf49ac36dc2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d7:85:40:8d:bb:ee:b8:a2:95:34:42:4c:e6:
cc:b7:bd:27:5a:32:74:34:8c:e5:ba:38:d7:fe:bf:
42:72:86:e3:bf:a2:20:b5:5b:90:11:b5:eb:7b:2f:
39:c9:4f:2a:3e:ed:d7:9e:d1:c8:22:78:35:7e:0c:
ac:14:f1:ff:c8:fa:df:53:05:3a:c9:5e:b1:a0:fd:
5b:fa:e7:2c:61:b0:33:8c:3f:cb:87:a3:1b:92:01:
a6:6e:97:2b:50:bf:e4:9e:c5:1a:52:5b:8e:fc:97:
14:a2:09:bb:98:5d:4c:40:6f:15:ae:27:7d:33:18:
44:49:3d:16:0d:bd:bd:de:44:95:20:07:95:ed:e2:
0d:fd:e5:80:0c:48:74:94:1f:d4:f9:30:ea:fe:8e:
d3:7b:52:c6:77:6c:94:c0:fd:24:89:9e:41:12:d8:
c7:57:71:d5:7d:02:07:58:0b:f8:3a:d9:4c:e0:df:
e1:27:af:8e:f0:56:dc:17:fb:6a:35:17:10:55:2c:
bf:ce:38:61:71:98:df:69:e5:6a:5b:75:0a:28:1b:
02:1a:3d:d3:c2:13:1d:3f:cb:26:0a:57:28:09:ed:
59:9f:d9:e3:b7:e4:49:f5:2c:c9:ed:70:30:10:35:
38:0e:93:9c:a5:7a:67:4c:d2:4e:da:fe:b7:a1:ae:
26:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:69:66:5B:1E:D2:E8:4D:30:DB:D0:59:0F:AB:F4:9A:C3:6D:C2:C3
X509v3 Authority Key Identifier:
keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a0:d9:14:d2:d6:8a:f8:b6:33:74:b1:a4:01:98:e1:4b:08:
a1:dc:97:ff:d0:50:59:52:a6:92:28:0c:c3:51:2e:25:56:aa:
46:ae:1c:b2:bb:50:e5:99:05:ce:fe:79:6b:2a:f5:c4:aa:29:
22:67:36:fb:fb:e6:2d:e7:c5:6a:9c:70:7e:5d:d4:38:a9:f4:
ed:57:1d:b1:43:0a:2c:99:fa:03:55:ed:af:b7:ee:6f:54:9f:
35:02:c7:c1:d9:22:36:0c:e0:0a:36:c6:7e:00:5e:16:51:e2:
89:0d:15:20:b6:1e:1e:12:5a:64:61:4f:1c:20:2c:75:01:87:
7c:9f:6d:fc:61:21:76:f5:e7:4f:c8:48:2e:27:46:7a:9f:2a:
6b:53:f5:14:ab:70:78:e0:59:fd:38:d5:59:c5:2f:2d:1b:cd:
1e:4d:f9:7c:59:75:eb:3c:05:66:28:82:1f:1d:9d:b0:87:7a:
0c:dd:3b:2a:e6:b1:3f:8e:66:a1:f4:7b:51:4c:59:12:fd:20:
86:86:04:06:23:47:6b:c9:5a:65:31:9e:a4:50:79:03:35:80:
de:ae:69:98:90:44:75:1f:31:43:4b:a4:bb:1c:b8:59:04:4b:
e4:3a:63:36:dc:a6:7f:63:9d:7e:43:3c:b7:d9:58:60:e5:55:
67:77:fb:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKlX77muGDJKZ+eJ0wohx+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMmVhM2VjYWQ1YTQwMmI4ZmU1YTJhNjEzOGFmNjZhYWMy
NTdmZjkwHhcNMjUwNzAyMTAwMTI0WhcNMjUwNzAzMTAwMTI0WjAzMTEwLwYDVQQD
Eyg3ZTY5NjY1YjFlZDJlODRkMzBkYmQwNTkwZmFiZjQ5YWMzNmRjMmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NeFQI277riilTRCTObMt70nWjJ0
NIzlujjX/r9Ccobjv6IgtVuQEbXrey85yU8qPu3XntHIIng1fgysFPH/yPrfUwU6
yV6xoP1b+ucsYbAzjD/Lh6MbkgGmbpcrUL/knsUaUluO/JcUogm7mF1MQG8Vrid9
MxhEST0WDb293kSVIAeV7eIN/eWADEh0lB/U+TDq/o7Te1LGd2yUwP0kiZ5BEtjH
V3HVfQIHWAv4OtlM4N/hJ6+O8FbcF/tqNRcQVSy/zjhhcZjfaeVqW3UKKBsCGj3T
whMdP8smClcoCe1Zn9njt+RJ9SzJ7XAwEDU4DpOcpXpnTNJO2v63oa4myQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5pZlse0uhNMNvQWQ+r9JrDbcLDMB8GA1UdIwQY
MBaAFH0uo+ytWkArj+WiphOK9mqsJX/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80NDc2NzctOTk3Mi00ZGY4LWI1MDgt
YjkxYjkyZDRkODAxLzEvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80NDc2NzctOTk3Mi00ZGY4LWI1MDgtYjkxYjkyZDRkODAx
LzEvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQaDZFNLW
ivi2M3SxpAGY4UsIodyX/9BQWVKmkigMw1EuJVaqRq4csrtQ5ZkFzv55ayr1xKop
Imc2+/vmLefFapxwfl3UOKn07VcdsUMKLJn6A1Xtr7fub1SfNQLHwdkiNgzgCjbG
fgBeFlHiiQ0VILYeHhJaZGFPHCAsdQGHfJ9t/GEhdvXnT8hILidGep8qa1P1FKtw
eOBZ/TjVWcUvLRvNHk35fFl16zwFZiiCHx2dsId6DN07KuaxP45mofR7UUxZEv0g
hoYEBiNHa8laZTGepFB5AzWA3q5pmJBEdR8xQ0ukuxy4WQRL5DpjNtymf2OdfkM8
t9lYYOVVZ3f7bw==
-----END CERTIFICATE-----
Generated at Wed Jul 2 20:03:58 2025 by rpki-client