Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
File: fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft (raw, json)
Hash identifier: PVjJdFeC/YYQ3tTOz/637IW7bfImOteUupAhPEb0sgA=
Subject key identifier: 97:F9:0A:11:04:75:29:8E:1F:E3:11:B2:C6:50:1B:A4:2D:D7:21:A1
Authority key identifier: 7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
Certificate issuer: /CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Certificate serial: 019768F2B09365EAFFDB62BB9F82C22E05B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
Manifest number: 1595
Signing time: Fri 13 Jun 2025 11:00:24 +0000
Manifest this update: Fri 13 Jun 2025 11:00:24 +0000
Manifest next update: Sat 14 Jun 2025 11:00:24 +0000
Files and hashes: 1: ZtCnXbp_YrwgCnKLVKnV0WSmOcU.roa (hash: kH4jiDgmQVBszMKQiiqGuVOByozNrdgPlqnsPcoBxDY=)
2: fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl (hash: fLfBKKyHrd161hxaOl7+4ircgXYNyC4cPonfXtkchFs=)
3: uklhr2EyG0t3uT3k6llXTSBL2L8.roa (hash: g5RYlitmLR15fm6PqKoImrqzTC0R3yuzCJ3CcwejS1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:b0:93:65:ea:ff:db:62:bb:9f:82:c2:2e:05:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Validity
Not Before: Jun 13 11:00:24 2025 GMT
Not After : Jun 14 11:00:24 2025 GMT
Subject: CN=97f90a110475298e1fe311b2c6501ba42dd721a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c1:64:15:b5:31:b3:74:3f:93:e5:ca:91:d5:
a9:e3:e0:1c:be:07:e8:60:bc:6b:28:8d:ad:ec:f9:
56:00:e6:4f:26:40:ed:bc:0b:45:38:d4:ff:4e:9f:
a7:c7:d6:ab:fc:ed:9a:5a:6b:d2:91:32:02:dd:d5:
88:d8:e7:62:06:e8:73:78:63:84:d2:3e:bc:15:b9:
e4:f3:90:55:fc:fa:4d:23:fa:e9:7e:ea:ef:c2:37:
68:9d:d4:a4:62:51:be:15:61:f3:8d:a1:55:36:34:
5c:ab:65:78:f7:05:53:1a:60:14:9a:fb:31:ba:72:
b0:7d:ae:5d:39:38:b5:a3:b1:23:19:b6:1e:f5:50:
32:20:a3:39:59:3b:35:da:a7:80:e8:c0:0e:b3:ad:
8d:f7:18:6d:21:ad:02:8d:11:73:ee:f1:92:02:8b:
ce:07:10:cf:81:22:d4:48:df:40:39:d3:4a:82:d8:
17:19:35:24:ac:6c:60:75:ab:24:0a:93:bd:e4:28:
c4:77:d0:32:c4:a5:fe:b1:29:80:2c:79:c1:0f:c6:
5a:4b:0c:16:67:20:f0:b2:bc:4d:14:25:54:70:87:
09:da:9b:19:d0:2f:c7:42:24:bd:34:fd:1e:13:ff:
bb:01:e4:85:27:7e:4f:a3:44:59:06:45:d2:a2:4b:
72:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F9:0A:11:04:75:29:8E:1F:E3:11:B2:C6:50:1B:A4:2D:D7:21:A1
X509v3 Authority Key Identifier:
keyid:7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:7f:7f:01:ce:8a:0c:92:8c:ed:a6:53:21:f2:46:8b:e6:dd:
00:c3:af:9c:24:2a:c3:60:5d:e6:70:08:c7:af:3d:76:89:06:
0b:c8:b0:3e:b2:93:c9:6a:12:a9:8a:07:b1:d6:10:65:90:bc:
f1:85:54:d2:91:5a:e1:0a:08:a4:b0:be:e8:3f:cf:ab:6a:d1:
a5:92:37:b4:cf:7c:9f:eb:50:d4:5d:10:ae:29:db:72:60:63:
87:89:6d:e2:1f:53:6f:95:2c:17:bc:80:65:26:0a:e3:1b:52:
58:8f:7e:18:09:e3:fd:1d:78:d3:08:e8:fd:f6:69:9d:12:38:
a7:ec:37:e4:1f:10:d7:81:8f:67:c8:a4:73:f7:5d:8a:8c:86:
0f:4c:e3:b7:f0:fa:0b:10:aa:5c:9c:c9:02:20:ea:66:97:5a:
03:a6:c8:06:61:0c:e6:bf:8e:16:a4:85:1d:0b:f6:71:23:3a:
f9:51:97:3f:87:8e:89:9f:3b:ff:1e:5f:35:96:cf:21:1b:5f:
f5:fe:06:46:f8:1c:45:0d:3f:b5:a2:5b:69:85:ac:66:93:a1:
35:91:56:81:dc:0e:50:0c:63:6e:42:cf:bc:8b:59:3d:99:39:
af:db:6f:d6:f6:a8:7a:ff:91:15:a9:f5:ba:bc:01:15:0b:52:
90:e4:6e:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdo8rCTZer/22K7n4LCLgWzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMzk4MjViMjY3NzVlMTU1MTA3MmY0NTdkMWVkZmQ5ZDBl
YmUyZGYwHhcNMjUwNjEzMTEwMDI0WhcNMjUwNjE0MTEwMDI0WjAzMTEwLwYDVQQD
Eyg5N2Y5MGExMTA0NzUyOThlMWZlMzExYjJjNjUwMWJhNDJkZDcyMWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcFkFbUxs3Q/k+XKkdWp4+Acvgfo
YLxrKI2t7PlWAOZPJkDtvAtFONT/Tp+nx9ar/O2aWmvSkTIC3dWI2OdiBuhzeGOE
0j68Fbnk85BV/PpNI/rpfurvwjdondSkYlG+FWHzjaFVNjRcq2V49wVTGmAUmvsx
unKwfa5dOTi1o7EjGbYe9VAyIKM5WTs12qeA6MAOs62N9xhtIa0CjRFz7vGSAovO
BxDPgSLUSN9AOdNKgtgXGTUkrGxgdaskCpO95CjEd9AyxKX+sSmALHnBD8ZaSwwW
ZyDwsrxNFCVUcIcJ2psZ0C/HQiS9NP0eE/+7AeSFJ35Po0RZBkXSoktyAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJf5ChEEdSmOH+MRssZQG6Qt1yGhMB8GA1UdIwQY
MBaAFH45glsmd14VUQcvRX0e39nQ6+LfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmptQ1d5WjNYaFZSQnk5RmZSN2YyZERyNHQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8yMTY2YTgtMzU3Yy00Y2Y2LWI2ZjIt
ZjhkNmQxYTc0YjFkLzEvZmptQ1d5WjNYaFZSQnk5RmZSN2YyZERyNHQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8yMTY2YTgtMzU3Yy00Y2Y2LWI2ZjItZjhkNmQxYTc0YjFk
LzEvZmptQ1d5WjNYaFZSQnk5RmZSN2YyZERyNHQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQX9/Ac6K
DJKM7aZTIfJGi+bdAMOvnCQqw2Bd5nAIx689dokGC8iwPrKTyWoSqYoHsdYQZZC8
8YVU0pFa4QoIpLC+6D/Pq2rRpZI3tM98n+tQ1F0QrinbcmBjh4lt4h9Tb5UsF7yA
ZSYK4xtSWI9+GAnj/R140wjo/fZpnRI4p+w35B8Q14GPZ8ikc/ddioyGD0zjt/D6
CxCqXJzJAiDqZpdaA6bIBmEM5r+OFqSFHQv2cSM6+VGXP4eOiZ87/x5fNZbPIRtf
9f4GRvgcRQ0/taJbaYWsZpOhNZFWgdwOUAxjbkLPvItZPZk5r9tv1vaoev+RFan1
urwBFQtSkORuww==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:57 2025 by rpki-client