Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File: fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier: djtKDpyj1rbRiYOZvP/Btvsbl0n/oUQcs2nJg6LyCe0=
Subject key identifier: 30:AF:9E:A3:8E:E5:9A:55:0F:40:BB:75:56:52:B7:EA:F8:93:EF:BA
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 0197B9D8AB54BC228FFB574EFE682946F6A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number: 0918
Signing time: Sun 29 Jun 2025 04:01:13 +0000
Manifest this update: Sun 29 Jun 2025 04:01:13 +0000
Manifest next update: Mon 30 Jun 2025 04:01:13 +0000
Files and hashes: 1: 7gpeu0S7hXZ8riAsKwy1ohmGU98.roa (hash: yLiQ4BEaMhFQdskxNlE7aRv3rWf0cLts9Xjd3ePJwJ8=)
2: Be7hWobHeXIDcEV-DcvLVcoAOIA.roa (hash: BaLaak1kH9hW9zdiezS80huivnGVBMTLdsyXEFD6uzM=)
3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: x1LMPdoTeCOvUjW53EFlwlR2N1JBk/Fe/+qndanLgaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:ab:54:bc:22:8f:fb:57:4e:fe:68:29:46:f6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Jun 29 04:01:13 2025 GMT
Not After : Jun 30 04:01:13 2025 GMT
Subject: CN=30af9ea38ee59a550f40bb755652b7eaf893efba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:27:89:bd:87:2c:82:85:bb:e5:ec:7c:d2:
67:01:83:a9:de:3b:50:c2:96:6a:8c:cc:99:0a:73:
26:bf:15:96:0e:ec:6d:41:ae:29:4f:e1:9f:7c:7f:
2a:a5:70:7a:0f:84:62:5e:ce:27:41:35:8b:6f:9f:
0a:cc:ce:90:33:65:ae:77:14:a2:a9:76:3b:1d:fb:
53:f1:e3:31:c1:97:2d:9c:cc:a3:4f:2b:70:99:25:
e2:f5:e6:31:50:26:48:cd:fa:17:b5:c8:6a:4a:6e:
9f:15:7e:7e:73:c3:42:e2:ba:90:98:d7:6c:4a:9a:
ae:27:11:4f:9a:42:b7:91:87:d2:d0:ed:09:cf:70:
2b:ea:fd:fb:bd:9b:07:e5:b9:40:22:7f:17:a0:98:
1e:c0:75:97:e6:2c:e4:23:8d:76:77:f8:1c:eb:a0:
81:8f:c0:ee:ef:9d:ac:e4:9d:50:35:50:72:c6:2e:
8f:85:22:7e:84:13:eb:6e:e3:d8:87:14:60:1e:2a:
2b:38:3f:56:a0:b7:58:d0:8e:d1:70:8b:bc:e4:ff:
30:87:ec:4b:fd:23:bc:d6:21:ea:18:81:5a:3a:d3:
00:10:4e:2c:6c:e8:91:fc:19:df:72:93:bd:84:a8:
ee:c4:73:db:95:2b:20:d6:24:ed:d3:4e:56:fb:f3:
a5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AF:9E:A3:8E:E5:9A:55:0F:40:BB:75:56:52:B7:EA:F8:93:EF:BA
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:59:a9:0f:6f:44:17:57:3a:47:a2:d3:48:03:e0:b8:65:8e:
1e:e9:82:b1:d4:2c:e2:43:d4:ed:d1:09:d5:f0:fb:83:62:8e:
c0:38:e3:a5:cc:0a:6f:dd:2a:b1:9e:bf:16:76:9c:3a:b8:9d:
58:5c:bb:12:9a:50:91:90:cf:7e:f3:e9:78:41:a1:28:f5:7b:
28:b2:23:28:7a:07:61:6c:c3:62:60:1d:92:b4:23:7c:e6:02:
30:91:fd:fb:13:bb:be:8f:34:06:e4:d5:4f:81:86:c7:f7:3d:
a0:af:7f:b6:ec:98:97:87:d5:44:bc:3c:f5:20:51:e4:18:14:
17:22:ae:fd:fe:6d:91:e0:3d:d1:fe:7e:fc:4f:cc:56:ee:22:
69:58:31:7b:4d:f6:b4:2d:13:9f:70:26:47:44:ba:d4:94:e4:
9e:67:40:60:9f:7a:af:41:ef:6e:3f:d8:ae:00:f2:8b:30:8f:
d7:37:03:c9:25:aa:02:ef:68:c4:b9:de:44:8b:37:df:31:19:
8f:d4:a3:bb:96:90:5c:af:33:df:2b:72:db:30:5c:9a:df:fd:
e4:ab:fd:21:5e:ce:e8:b9:d6:4a:7f:33:aa:f2:35:ff:90:50:
af:64:8b:b4:18:ac:14:06:e2:8b:3c:a6:54:e6:56:97:a9:1b:
60:87:43:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe52KtUvCKP+1dO/mgpRvamMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMzJkZWRhMzFmZThlYWZjZGFkNmUyYTA2ZmRlMjM2ZTdk
MTFkNjEwHhcNMjUwNjI5MDQwMTEzWhcNMjUwNjMwMDQwMTEzWjAzMTEwLwYDVQQD
EygzMGFmOWVhMzhlZTU5YTU1MGY0MGJiNzU1NjUyYjdlYWY4OTNlZmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjonib2HLIKFu+XsfNJnAYOp3jtQ
wpZqjMyZCnMmvxWWDuxtQa4pT+GffH8qpXB6D4RiXs4nQTWLb58KzM6QM2WudxSi
qXY7HftT8eMxwZctnMyjTytwmSXi9eYxUCZIzfoXtchqSm6fFX5+c8NC4rqQmNds
SpquJxFPmkK3kYfS0O0Jz3Ar6v37vZsH5blAIn8XoJgewHWX5izkI412d/gc66CB
j8Du752s5J1QNVByxi6PhSJ+hBPrbuPYhxRgHiorOD9WoLdY0I7RcIu85P8wh+xL
/SO81iHqGIFaOtMAEE4sbOiR/BnfcpO9hKjuxHPblSsg1iTt005W+/OlwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCvnqOO5ZpVD0C7dVZSt+r4k++6MB8GA1UdIwQY
MBaAFH0y3tox/o6vza1uKgb94jbn0R1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jNDNlZDItNzBiMy00NWQ4LWFhMjgt
NTNmYjAxOGE4YzBlLzEvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jNDNlZDItNzBiMy00NWQ4LWFhMjgtNTNmYjAxOGE4YzBl
LzEvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFmpD29E
F1c6R6LTSAPguGWOHumCsdQs4kPU7dEJ1fD7g2KOwDjjpcwKb90qsZ6/FnacOrid
WFy7EppQkZDPfvPpeEGhKPV7KLIjKHoHYWzDYmAdkrQjfOYCMJH9+xO7vo80BuTV
T4GGx/c9oK9/tuyYl4fVRLw89SBR5BgUFyKu/f5tkeA90f5+/E/MVu4iaVgxe032
tC0Tn3AmR0S61JTknmdAYJ96r0Hvbj/YrgDyizCP1zcDySWqAu9oxLneRIs33zEZ
j9Sju5aQXK8z3yty2zBcmt/95Kv9IV7O6LnWSn8zqvI1/5BQr2SLtBisFAbiizym
VOZWl6kbYIdD9g==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:34:13 2025 by rpki-client