Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
File: X89dJaNmGj5y0nKUVPf_gEtDvbk.mft (raw, json)
Hash identifier: y9m4Aq0xkqzltiCQwvGxJZABNhO5liKw7U+fzSJH74E=
Subject key identifier: FE:CA:91:D3:81:C7:17:12:B3:C5:A3:FC:8A:D1:55:C3:E9:B3:F1:46
Authority key identifier: 5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
Certificate issuer: /CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Certificate serial: 01987418BBA1F06B023F0EF3C24AD674EB86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
Manifest number: 0A07
Signing time: Mon 04 Aug 2025 08:00:34 +0000
Manifest this update: Mon 04 Aug 2025 08:00:34 +0000
Manifest next update: Tue 05 Aug 2025 08:00:34 +0000
Files and hashes: 1: SFEaLCcaSPqW-NAacKDtjgx58ew.roa (hash: OMHSr2CJgaO8nulVRKhQLnfgujY5dtYfYIWPqUiWupI=)
2: X89dJaNmGj5y0nKUVPf_gEtDvbk.crl (hash: /8hLc53FpawSHOLF8OMvsa3rapfUJhZC1aJz1EV564U=)
3: XiX2H6KV22GA3qGzZguRskRxlFM.roa (hash: vDk26PHouRJN4yP1V97RLW7KQYk0VPaf7UJ2taG9B6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:bb:a1:f0:6b:02:3f:0e:f3:c2:4a:d6:74:eb:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Validity
Not Before: Aug 4 08:00:34 2025 GMT
Not After : Aug 5 08:00:34 2025 GMT
Subject: CN=feca91d381c71712b3c5a3fc8ad155c3e9b3f146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:7d:3b:82:37:a9:90:37:36:ae:a8:b0:eb:
e9:bc:ad:0a:cc:f7:c4:d4:1f:9c:2f:11:85:2d:f6:
74:6b:f9:20:11:f1:cd:f2:75:78:3c:c8:83:e4:8b:
d1:29:6c:85:3a:db:d8:6a:eb:fb:f4:56:55:3c:7e:
80:ab:d4:53:e3:90:b1:4c:bc:0f:11:d4:f7:c7:4d:
1f:57:34:5a:d9:26:aa:6e:31:2f:a9:e0:ca:b4:7c:
62:0f:f2:d9:38:f9:ad:98:7b:0a:99:45:16:95:bf:
ef:01:9d:a8:ea:c3:e8:c6:c4:20:51:40:f9:3d:3e:
3e:71:d2:79:32:08:e2:1b:4d:79:e5:49:c1:48:63:
eb:c9:cd:74:2a:23:f2:ef:2c:ac:ae:4e:ff:e7:57:
d8:f3:58:0f:d0:2e:24:e0:70:1b:fe:54:c0:1b:e2:
48:e6:5f:71:a4:52:a3:65:02:c1:04:d6:58:92:f1:
eb:f3:89:f9:c7:22:83:9e:9f:b5:2c:48:fc:93:8d:
d9:1c:5f:3c:b4:01:a5:bb:b5:c5:8b:f2:9d:c1:ae:
cd:ae:4e:3c:94:24:d7:b6:78:de:18:97:f0:6c:2e:
5b:cd:1c:5f:a2:fc:81:6e:bf:16:a5:01:97:df:5f:
10:5c:53:f2:24:ed:5b:8d:4f:a8:18:2f:2c:bb:f4:
ce:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CA:91:D3:81:C7:17:12:B3:C5:A3:FC:8A:D1:55:C3:E9:B3:F1:46
X509v3 Authority Key Identifier:
keyid:5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:18:2b:e1:6f:13:78:54:80:8c:9e:0c:77:41:c4:c3:d6:84:
2c:9e:7b:9b:ff:eb:a2:9f:d2:34:5a:62:e8:e6:06:18:d2:d9:
95:50:cc:b0:78:0b:e3:81:54:4e:20:6e:c4:97:91:26:2d:6d:
d7:ae:61:e0:8d:fc:d2:ff:17:af:15:37:d9:18:11:ee:2c:04:
d1:73:d9:c0:9a:66:b0:86:4e:47:e5:96:f8:da:ac:e3:a3:08:
76:77:2f:0b:2a:41:f7:bb:35:6a:9c:3a:c8:85:58:db:de:09:
bc:2d:f9:32:6d:48:e7:65:fe:29:c4:fa:cb:8b:4a:5d:4a:f3:
05:4a:c5:3e:de:27:49:cd:b0:c0:b1:e9:1c:c0:e7:41:82:24:
67:62:e6:ba:eb:63:f8:61:f6:aa:ea:35:10:51:e0:7c:d4:41:
9e:f3:49:c7:49:6f:d3:bd:62:0a:2f:88:61:c3:1a:c6:67:d4:
20:b9:4f:d2:c5:67:52:38:a4:79:74:a1:d5:8a:45:be:bf:67:
85:69:50:fd:84:84:de:2b:95:6a:6a:2f:8f:5b:48:a2:de:32:
06:b2:48:f4:7d:ab:bd:90:ac:09:75:7b:7d:9d:87:9f:de:96:
7f:e6:f2:4b:16:c0:b4:72:13:80:c1:d9:ba:a9:b8:10:b8:5c:
23:f2:c1:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GLuh8GsCPw7zwkrWdOuGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmY2Y1ZDI1YTM2NjFhM2U3MmQyNzI5NDU0ZjdmZjgwNGI0
M2JkYjkwHhcNMjUwODA0MDgwMDM0WhcNMjUwODA1MDgwMDM0WjAzMTEwLwYDVQQD
EyhmZWNhOTFkMzgxYzcxNzEyYjNjNWEzZmM4YWQxNTVjM2U5YjNmMTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMJ9O4I3qZA3Nq6osOvpvK0KzPfE
1B+cLxGFLfZ0a/kgEfHN8nV4PMiD5IvRKWyFOtvYauv79FZVPH6Aq9RT45CxTLwP
EdT3x00fVzRa2SaqbjEvqeDKtHxiD/LZOPmtmHsKmUUWlb/vAZ2o6sPoxsQgUUD5
PT4+cdJ5MgjiG0155UnBSGPryc10KiPy7yysrk7/51fY81gP0C4k4HAb/lTAG+JI
5l9xpFKjZQLBBNZYkvHr84n5xyKDnp+1LEj8k43ZHF88tAGlu7XFi/Kdwa7Nrk48
lCTXtnjeGJfwbC5bzRxfovyBbr8WpQGX318QXFPyJO1bjU+oGC8su/TO3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7KkdOBxxcSs8Wj/IrRVcPps/FGMB8GA1UdIwQY
MBaAFF/PXSWjZho+ctJylFT3/4BLQ725MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDg5ZEphTm1HajV5MG5LVVZQZl9nRXREdmJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8yNTFmNGEtODJkNy00NmE1LWExMzAt
MGE5YjA2ZTE2ZGRjLzEvWDg5ZEphTm1HajV5MG5LVVZQZl9nRXREdmJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8yNTFmNGEtODJkNy00NmE1LWExMzAtMGE5YjA2ZTE2ZGRj
LzEvWDg5ZEphTm1HajV5MG5LVVZQZl9nRXREdmJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBgr4W8T
eFSAjJ4Md0HEw9aELJ57m//rop/SNFpi6OYGGNLZlVDMsHgL44FUTiBuxJeRJi1t
165h4I380v8XrxU32RgR7iwE0XPZwJpmsIZOR+WW+Nqs46MIdncvCypB97s1apw6
yIVY294JvC35Mm1I52X+KcT6y4tKXUrzBUrFPt4nSc2wwLHpHMDnQYIkZ2Lmuutj
+GH2quo1EFHgfNRBnvNJx0lv071iCi+IYcMaxmfUILlP0sVnUjikeXSh1YpFvr9n
hWlQ/YSE3iuVamovj1tIot4yBrJI9H2rvZCsCXV7fZ2Hn96Wf+bySxbAtHITgMHZ
uqm4ELhcI/LBAQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:54 2025 by rpki-client