Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
File: fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft (raw, json)
Hash identifier: U8nkS4iQUmpSwu7CzVsTxUL7I45fKHIIit0DQENcD7g=
Subject key identifier: FF:49:33:EE:93:86:64:A0:BD:DB:AE:0B:A5:CF:CE:40:C9:CE:ED:9D
Authority key identifier: 7D:78:56:C9:7B:EB:97:C2:B3:86:FB:95:8C:2D:B1:22:C5:7D:B3:6C
Certificate issuer: /CN=7d7856c97beb97c2b386fb958c2db122c57db36c
Certificate serial: 0198955B35553634BE0FE36A9486D43E66BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
Manifest number: 0471
Signing time: Sun 10 Aug 2025 19:00:39 +0000
Manifest this update: Sun 10 Aug 2025 19:00:39 +0000
Manifest next update: Mon 11 Aug 2025 19:00:39 +0000
Files and hashes: 1: 7IU0huufqQxYxItg8zFZPOwzYRM.roa (hash: I4C8M2jxvU1m60xK7AT2Uz7jOA8Cd0LrtZ3lmEnNBLc=)
2: fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl (hash: 0EQhyPc50gwwR4evXqEIfBNPbjSB2kPuwigwN6sspU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:5b:35:55:36:34:be:0f:e3:6a:94:86:d4:3e:66:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7856c97beb97c2b386fb958c2db122c57db36c
Validity
Not Before: Aug 10 19:00:39 2025 GMT
Not After : Aug 11 19:00:39 2025 GMT
Subject: CN=ff4933ee938664a0bddbae0ba5cfce40c9ceed9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7d:db:e1:3f:aa:7d:30:53:da:8f:ea:16:47:
64:2b:ca:e3:24:16:b1:4a:4c:45:ad:a0:48:5f:be:
c3:34:03:a3:12:a5:bf:3c:72:d8:8b:9b:20:bd:86:
36:d4:e8:9c:ef:f0:17:5e:9b:6b:8a:40:46:9d:ac:
9f:93:b5:91:63:69:d9:7d:7e:38:4b:cd:d6:b0:58:
e5:65:76:e4:7d:22:4b:40:a7:58:9b:c6:f3:f6:6d:
a0:84:a1:10:fd:91:1f:e5:42:54:04:cb:db:f0:c7:
34:fe:22:3b:91:c2:94:54:da:2e:8f:00:5b:a6:64:
eb:17:cd:bf:13:41:6b:da:47:1c:06:3d:9f:6b:96:
32:80:63:85:0a:82:22:e1:d2:69:b8:d1:4c:76:a2:
91:86:59:10:91:4a:ec:92:95:9f:0c:45:f9:56:c9:
01:45:ed:26:6a:0e:a2:5a:4f:7a:f3:89:a5:1e:25:
60:c6:ce:fb:04:d5:54:1c:38:07:d3:7e:86:da:ae:
fb:b5:60:e6:85:58:aa:9a:6f:b0:5d:c5:ce:59:b4:
f3:c3:42:10:af:ee:8f:e7:76:f2:c1:6c:10:35:69:
07:c7:a7:fc:21:78:a9:dc:c5:44:ed:ea:c1:73:c1:
1d:eb:85:db:a9:ef:3b:df:10:99:e1:95:d0:5a:8c:
94:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:49:33:EE:93:86:64:A0:BD:DB:AE:0B:A5:CF:CE:40:C9:CE:ED:9D
X509v3 Authority Key Identifier:
keyid:7D:78:56:C9:7B:EB:97:C2:B3:86:FB:95:8C:2D:B1:22:C5:7D:B3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:80:94:f0:70:8d:ae:47:9c:5b:11:ce:fa:82:55:8d:ba:1e:
3e:29:85:9b:a2:eb:a4:2d:a9:ab:88:86:c7:13:88:7a:38:06:
67:a6:11:4c:35:17:67:03:45:ad:45:2e:3b:d5:c6:1e:e2:72:
25:86:36:a5:d4:3d:68:e7:f9:da:7a:75:a9:28:eb:3a:79:fc:
7e:c3:8b:74:a3:48:55:59:bb:5b:53:d2:f5:86:56:20:c5:c6:
76:1d:54:14:23:bf:47:9c:80:b5:a3:78:c4:85:4c:1a:6a:15:
da:83:9a:3f:7c:d5:7c:ea:bc:60:07:db:45:68:8c:04:6c:14:
0e:ac:cd:57:d1:17:f8:88:26:19:22:15:8b:af:8b:1b:0a:ee:
2e:de:30:3f:69:90:65:0b:e4:d9:4b:32:56:c3:4b:34:88:43:
ac:cf:8b:99:86:de:66:c2:a0:7e:8a:53:dc:06:d2:6b:fc:85:
13:86:34:df:a4:6c:60:82:83:6c:23:b5:ee:84:2e:54:f1:f0:
c5:79:34:8b:d8:cc:cf:2e:4c:dc:19:a2:0d:d5:d9:47:25:82:
05:5d:53:7b:5a:c1:f2:b3:40:da:5b:f4:2a:e8:a2:34:f3:a0:
46:12:24:d2:9b:72:8b:41:9a:a6:f3:4c:cd:e6:b6:b9:d8:f7:
51:e6:68:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiVWzVVNjS+D+NqlIbUPma9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNzg1NmM5N2JlYjk3YzJiMzg2ZmI5NThjMmRiMTIyYzU3
ZGIzNmMwHhcNMjUwODEwMTkwMDM5WhcNMjUwODExMTkwMDM5WjAzMTEwLwYDVQQD
EyhmZjQ5MzNlZTkzODY2NGEwYmRkYmFlMGJhNWNmY2U0MGM5Y2VlZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3X3b4T+qfTBT2o/qFkdkK8rjJBax
SkxFraBIX77DNAOjEqW/PHLYi5sgvYY21Oic7/AXXptrikBGnayfk7WRY2nZfX44
S83WsFjlZXbkfSJLQKdYm8bz9m2ghKEQ/ZEf5UJUBMvb8Mc0/iI7kcKUVNoujwBb
pmTrF82/E0Fr2kccBj2fa5YygGOFCoIi4dJpuNFMdqKRhlkQkUrskpWfDEX5VskB
Re0mag6iWk9684mlHiVgxs77BNVUHDgH036G2q77tWDmhViqmm+wXcXOWbTzw0IQ
r+6P53bywWwQNWkHx6f8IXip3MVE7erBc8Ed64Xbqe873xCZ4ZXQWoyUyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9JM+6ThmSgvduuC6XPzkDJzu2dMB8GA1UdIwQY
MBaAFH14Vsl765fCs4b7lYwtsSLFfbNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlhoV3lYdnJsOEt6aHZ1VmpDMnhJc1Y5czJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jMDNkMzctNGVmYy00YzNjLTgyODEt
M2M3Mzg1NDQ0ODJlLzEvZlhoV3lYdnJsOEt6aHZ1VmpDMnhJc1Y5czJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jMDNkMzctNGVmYy00YzNjLTgyODEtM2M3Mzg1NDQ0ODJl
LzEvZlhoV3lYdnJsOEt6aHZ1VmpDMnhJc1Y5czJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYCU8HCN
rkecWxHO+oJVjboePimFm6LrpC2pq4iGxxOIejgGZ6YRTDUXZwNFrUUuO9XGHuJy
JYY2pdQ9aOf52np1qSjrOnn8fsOLdKNIVVm7W1PS9YZWIMXGdh1UFCO/R5yAtaN4
xIVMGmoV2oOaP3zVfOq8YAfbRWiMBGwUDqzNV9EX+IgmGSIVi6+LGwruLt4wP2mQ
ZQvk2UsyVsNLNIhDrM+LmYbeZsKgfopT3AbSa/yFE4Y036RsYIKDbCO17oQuVPHw
xXk0i9jMzy5M3BmiDdXZRyWCBV1Te1rB8rNA2lv0KuiiNPOgRhIk0ptyi0GapvNM
zea2udj3UeZoMg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:13 2025 by rpki-client