Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
File: fSW-cEBtOB5yXT4r7xL2qPPdglc.mft (raw, json)
Hash identifier: eQ4kdjv6mnm+iMMd7kW+Sbsxsku+7T5FgdHG1Xsx+Ak=
Subject key identifier: 7E:2C:D7:C7:D4:BC:30:06:45:DF:FB:0D:04:3F:55:08:46:EE:6D:97
Authority key identifier: 7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
Certificate issuer: /CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Certificate serial: 019874190CE05939511480CC716EA0BCE3F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
Manifest number: 10D5
Signing time: Mon 04 Aug 2025 08:00:55 +0000
Manifest this update: Mon 04 Aug 2025 08:00:55 +0000
Manifest next update: Tue 05 Aug 2025 08:00:55 +0000
Files and hashes: 1: 9EqEs9kwmY_afaGGWiQxlVt0aF4.roa (hash: 9tO3YJsoJl/Lblpr3bNKOp6wQ25w+0SVWvdi5BP+Als=)
2: fSW-cEBtOB5yXT4r7xL2qPPdglc.crl (hash: pF6xb2Qbi4g7w/pWIVQ/kRYW/hm91DMc4YJePhN+sUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:0c:e0:59:39:51:14:80:cc:71:6e:a0:bc:e3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Validity
Not Before: Aug 4 08:00:55 2025 GMT
Not After : Aug 5 08:00:55 2025 GMT
Subject: CN=7e2cd7c7d4bc300645dffb0d043f550846ee6d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:80:93:06:fa:ad:3f:84:ad:a8:27:e7:42:87:
c6:7d:47:76:dc:e9:02:87:33:5c:3b:3d:ff:21:a7:
e3:e7:3c:77:47:8a:c9:c2:61:a0:5e:26:c5:b5:c9:
42:8b:fa:7e:bd:51:bd:1f:ba:e1:7f:99:f3:34:88:
e5:fb:86:c0:70:a1:62:2a:6a:47:72:69:f7:2f:12:
05:88:0e:b7:3e:e5:e2:30:a7:df:cb:a1:4a:60:46:
20:47:f8:fb:57:f4:a2:af:8e:c3:98:f5:76:14:22:
cd:a1:53:86:c3:9b:6a:ce:9a:27:7f:f5:6c:67:b2:
59:5e:b0:38:8a:c3:7f:15:0c:5d:00:8e:a5:d3:93:
2f:16:4a:4b:11:d9:46:5f:e7:69:93:10:2d:65:51:
0c:df:87:c7:13:89:48:4c:41:51:c5:3e:d8:e4:03:
0b:a8:6f:be:ff:15:0e:5b:13:38:99:3f:0e:4c:ab:
83:14:9d:cc:4d:2d:8d:1d:1d:c6:3c:55:ab:b6:de:
31:f1:7d:91:c5:75:ee:c4:50:28:00:5b:e6:b1:52:
9f:0c:84:a2:0d:39:8f:ef:94:a6:2e:36:6f:a6:ec:
35:1a:70:16:ac:81:f4:6b:d3:ee:15:db:84:3d:d7:
16:b0:bb:40:cd:e6:14:21:70:d1:f7:a5:b7:dd:38:
4d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2C:D7:C7:D4:BC:30:06:45:DF:FB:0D:04:3F:55:08:46:EE:6D:97
X509v3 Authority Key Identifier:
keyid:7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9e:8a:3d:42:fb:67:03:45:f3:79:26:75:b7:23:72:6d:9c:
c0:b6:28:e8:ee:74:93:ee:42:c2:0d:93:be:d3:ce:e3:02:6b:
7c:5f:75:dc:c1:98:ff:05:06:bd:67:52:e8:a5:95:99:1b:0e:
ed:f4:3d:a4:fe:48:45:3e:c0:80:1d:b1:94:fa:50:c6:c9:a8:
06:52:68:cc:72:c4:78:fa:e1:64:eb:26:9d:39:98:27:aa:9d:
d2:49:75:6d:93:80:39:ea:3a:5d:ff:b0:64:b2:ac:20:4a:5c:
56:5c:94:b1:c3:54:e0:63:3c:3b:a6:8a:1d:e5:b5:7a:5d:2f:
87:ad:38:a9:11:be:29:bc:1b:ca:f4:6c:a6:33:b9:48:a5:5f:
bf:69:b6:e3:89:55:01:fd:88:21:7c:55:53:46:c3:b4:bf:19:
da:1b:42:7a:9d:06:4d:eb:01:7a:20:3a:de:8f:c2:63:bd:83:
2a:00:e1:c5:d8:f1:bf:4d:ae:c3:52:51:01:f2:e6:53:91:db:
a3:f9:ca:86:d0:d1:5a:82:cb:df:70:bf:0a:4c:9c:86:98:70:
a3:aa:b4:ed:1d:ed:e0:47:bb:a1:f1:a5:c8:d1:fd:b9:53:ec:
3d:df:90:6d:bb:1b:42:80:00:e6:96:78:c0:45:93:03:df:86:
67:d9:79:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GQzgWTlRFIDMcW6gvOPzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMjViZTcwNDA2ZDM4MWU3MjVkM2UyYmVmMTJmNmE4ZjNk
ZDgyNTcwHhcNMjUwODA0MDgwMDU1WhcNMjUwODA1MDgwMDU1WjAzMTEwLwYDVQQD
Eyg3ZTJjZDdjN2Q0YmMzMDA2NDVkZmZiMGQwNDNmNTUwODQ2ZWU2ZDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkICTBvqtP4StqCfnQofGfUd23OkC
hzNcOz3/Iafj5zx3R4rJwmGgXibFtclCi/p+vVG9H7rhf5nzNIjl+4bAcKFiKmpH
cmn3LxIFiA63PuXiMKffy6FKYEYgR/j7V/Sir47DmPV2FCLNoVOGw5tqzponf/Vs
Z7JZXrA4isN/FQxdAI6l05MvFkpLEdlGX+dpkxAtZVEM34fHE4lITEFRxT7Y5AML
qG++/xUOWxM4mT8OTKuDFJ3MTS2NHR3GPFWrtt4x8X2RxXXuxFAoAFvmsVKfDISi
DTmP75SmLjZvpuw1GnAWrIH0a9PuFduEPdcWsLtAzeYUIXDR96W33ThNbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4s18fUvDAGRd/7DQQ/VQhG7m2XMB8GA1UdIwQY
MBaAFH0lvnBAbTgecl0+K+8S9qjz3YJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlNXLWNFQnRPQjV5WFQ0cjd4TDJxUFBkZ2xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS82YTMwMWMtODUzMi00NmYwLWEzM2Ut
ZWI2NWYxZjQ2ZTBiLzEvZlNXLWNFQnRPQjV5WFQ0cjd4TDJxUFBkZ2xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS82YTMwMWMtODUzMi00NmYwLWEzM2UtZWI2NWYxZjQ2ZTBi
LzEvZlNXLWNFQnRPQjV5WFQ0cjd4TDJxUFBkZ2xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZ6KPUL7
ZwNF83kmdbcjcm2cwLYo6O50k+5Cwg2TvtPO4wJrfF913MGY/wUGvWdS6KWVmRsO
7fQ9pP5IRT7AgB2xlPpQxsmoBlJozHLEePrhZOsmnTmYJ6qd0kl1bZOAOeo6Xf+w
ZLKsIEpcVlyUscNU4GM8O6aKHeW1el0vh604qRG+KbwbyvRspjO5SKVfv2m244lV
Af2IIXxVU0bDtL8Z2htCep0GTesBeiA63o/CY72DKgDhxdjxv02uw1JRAfLmU5Hb
o/nKhtDRWoLL33C/Ckychphwo6q07R3t4Ee7ofGlyNH9uVPsPd+QbbsbQoAA5pZ4
wEWTA9+GZ9l5/g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:08 2025 by rpki-client