Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
File: fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json)
Hash identifier: ubZU41tJt7xQzgdUoh/30n/OnjbUlpLhz81l2OfFEtI=
Subject key identifier: 60:76:B7:13:49:2A:3D:18:1E:33:E3:81:BA:39:CA:9D:5E:D7:3B:D8
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial: 019770AC8846796A62CD4A028D8C3C3CF254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
Manifest number: 07F0
Signing time: Sat 14 Jun 2025 23:00:44 +0000
Manifest this update: Sat 14 Jun 2025 23:00:44 +0000
Manifest next update: Sun 15 Jun 2025 23:00:44 +0000
Files and hashes: 1: 45wj0w29EVb12lgzB4yBvbTkqGs.roa (hash: 4Uf4k8PcGp1LUe7lAU3OcDE8Hhp21WcetwJsk03S3B4=)
2: ZHtshAVSbLpIP6v49gVS0CpZjoA.roa (hash: mR3WUJCnn8qyhWMeXp3I4DCHuYg0Dpb1YM8jPQjkryI=)
3: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: kAW14TIbNieglodYEf1gvVRPfD8kIbnh+KvL6WpJUZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:88:46:79:6a:62:cd:4a:02:8d:8c:3c:3c:f2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Validity
Not Before: Jun 14 23:00:44 2025 GMT
Not After : Jun 15 23:00:44 2025 GMT
Subject: CN=6076b713492a3d181e33e381ba39ca9d5ed73bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:76:d7:16:21:0d:6c:bf:fc:8b:f4:38:b6:91:
64:39:ab:1f:f5:54:aa:79:9f:38:6e:1f:1d:bc:fb:
ca:19:ee:b6:61:a2:8e:bd:ef:f8:75:d0:84:fc:98:
b8:a9:47:26:0d:4c:f6:69:d1:7a:90:91:7b:56:0c:
81:86:a9:d7:9d:8a:00:3d:2c:31:41:ea:cb:f2:86:
26:01:ca:8f:35:7d:e6:75:c8:7c:9c:d8:c3:fd:a1:
b3:fa:df:ff:13:70:1b:e9:0f:fe:03:91:7f:b1:2d:
2f:5b:66:34:4d:0d:e0:2a:81:cf:74:60:ff:46:43:
53:3e:db:11:b0:e8:dd:48:4d:ae:4d:99:e1:07:3f:
00:98:50:ae:14:f2:48:cf:c3:86:e4:db:26:62:84:
89:83:bf:8b:98:15:8a:83:2a:da:0c:96:dd:72:2a:
b6:58:a8:39:ca:d5:3e:c7:7a:23:01:1d:2e:ce:d5:
54:ed:d8:b7:a5:ad:a5:cb:d9:79:f4:38:85:88:17:
85:47:b9:be:0a:f3:8c:91:80:9b:2a:f8:ec:2c:ba:
8d:cf:44:41:8a:df:67:fe:05:05:98:d2:17:39:76:
e4:be:d2:47:be:25:ef:39:e0:89:06:b4:2b:eb:5a:
a0:f8:46:11:14:02:7d:4b:79:b7:19:92:dd:09:8a:
26:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:76:B7:13:49:2A:3D:18:1E:33:E3:81:BA:39:CA:9D:5E:D7:3B:D8
X509v3 Authority Key Identifier:
keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d6:47:ea:a3:c3:82:c2:5f:8f:2b:46:dd:4d:92:0a:aa:4e:
1e:6f:5c:39:57:a5:3f:50:90:2d:1e:6a:03:41:31:92:1e:1b:
1a:cc:98:70:60:e8:d0:81:11:dd:36:49:0b:ed:f5:73:fa:10:
65:12:a4:0c:02:79:c5:b2:86:80:be:fc:83:0a:85:34:9f:a6:
3d:89:74:0d:4e:ed:84:91:07:97:8e:f2:0a:d3:c0:15:93:80:
91:f1:8a:60:51:28:83:75:cb:39:f9:f4:1c:e9:39:99:40:67:
77:de:02:8d:ad:28:ae:b8:bb:63:d5:94:ef:10:19:d7:f6:e6:
06:7c:90:5a:7b:76:41:76:dc:29:9d:db:ac:7d:73:0e:6f:5f:
8c:68:32:30:7d:c6:f3:cd:a2:de:c4:19:d6:4a:ba:3e:44:99:
cf:cb:62:c1:bd:87:fd:24:dc:98:a5:d5:1c:ad:94:29:e8:b6:
05:1b:9c:a0:68:28:d9:19:54:3c:f4:43:ec:4a:eb:3e:aa:46:
1c:eb:4d:35:da:f6:06:ba:46:46:17:06:43:64:20:40:a5:eb:
e8:05:41:9e:79:c4:90:7c:9b:c4:4a:b7:a6:2a:07:5f:ec:d6:
3a:67:84:59:3b:a2:f7:96:24:81:1c:57:e6:6f:1b:a8:83:51:
b0:35:03:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwrIhGeWpizUoCjYw8PPJUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZGQyMzZkODA0ZDVhYTlhMmNhYjM5Y2Y1MTAyMmFjMDVl
MGIxODMwHhcNMjUwNjE0MjMwMDQ0WhcNMjUwNjE1MjMwMDQ0WjAzMTEwLwYDVQQD
Eyg2MDc2YjcxMzQ5MmEzZDE4MWUzM2UzODFiYTM5Y2E5ZDVlZDczYmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3bXFiENbL/8i/Q4tpFkOasf9VSq
eZ84bh8dvPvKGe62YaKOve/4ddCE/Ji4qUcmDUz2adF6kJF7VgyBhqnXnYoAPSwx
QerL8oYmAcqPNX3mdch8nNjD/aGz+t//E3Ab6Q/+A5F/sS0vW2Y0TQ3gKoHPdGD/
RkNTPtsRsOjdSE2uTZnhBz8AmFCuFPJIz8OG5NsmYoSJg7+LmBWKgyraDJbdciq2
WKg5ytU+x3ojAR0uztVU7di3pa2ly9l59DiFiBeFR7m+CvOMkYCbKvjsLLqNz0RB
it9n/gUFmNIXOXbkvtJHviXvOeCJBrQr61qg+EYRFAJ9S3m3GZLdCYomYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGB2txNJKj0YHjPjgbo5yp1e1zvYMB8GA1UdIwQY
MBaAFH3dI22ATVqposqznPUQIqwF4LGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmQwamJZQk5XcW1peXJPYzlSQWlyQVhnc1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xZTk4YzItMmJhZS00ZDE0LTliY2Mt
ODU1ZTYwNzJlZjM2LzEvZmQwamJZQk5XcW1peXJPYzlSQWlyQVhnc1lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xZTk4YzItMmJhZS00ZDE0LTliY2MtODU1ZTYwNzJlZjM2
LzEvZmQwamJZQk5XcW1peXJPYzlSQWlyQVhnc1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtZH6qPD
gsJfjytG3U2SCqpOHm9cOVelP1CQLR5qA0Exkh4bGsyYcGDo0IER3TZJC+31c/oQ
ZRKkDAJ5xbKGgL78gwqFNJ+mPYl0DU7thJEHl47yCtPAFZOAkfGKYFEog3XLOfn0
HOk5mUBnd94Cja0orri7Y9WU7xAZ1/bmBnyQWnt2QXbcKZ3brH1zDm9fjGgyMH3G
882i3sQZ1kq6PkSZz8tiwb2H/STcmKXVHK2UKei2BRucoGgo2RlUPPRD7ErrPqpG
HOtNNdr2BrpGRhcGQ2QgQKXr6AVBnnnEkHybxEq3pioHX+zWOmeEWTui95YkgRxX
5m8bqINRsDUDsA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:16:16 2025 by rpki-client