Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
File: 1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft (raw, json)
Hash identifier: +YDS+Oo47HPIylf2hosyUAs+sMmctKMk+pTu2MXEYKw=
Subject key identifier: AA:73:80:A9:1C:68:63:24:C0:4B:37:61:7C:F5:D3:EC:9E:74:CC:03
Authority key identifier: FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
Certificate issuer: /CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Certificate serial: 01988EEB852D72700B2CE3F7AB6C3C756CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
Manifest number: 067F
Signing time: Sat 09 Aug 2025 13:00:56 +0000
Manifest this update: Sat 09 Aug 2025 13:00:56 +0000
Manifest next update: Sun 10 Aug 2025 13:00:56 +0000
Files and hashes: 1: 1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl (hash: yzHfmULM+XjDmMD+tyaJdt/0dNB5AWh/gkGq7Quru2U=)
2: NZJDMNeawRRaR2kN6M6VUEMWS6s.roa (hash: 4yyzbuml8orMhWCVhBPIpnlBdZcJZlvRc7XP5PPxwGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:85:2d:72:70:0b:2c:e3:f7:ab:6c:3c:75:6c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Validity
Not Before: Aug 9 13:00:56 2025 GMT
Not After : Aug 10 13:00:56 2025 GMT
Subject: CN=aa7380a91c686324c04b37617cf5d3ec9e74cc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:b2:b2:d6:a5:5b:14:69:4d:13:fd:11:72:
b2:ff:24:37:46:1c:9f:0e:4e:2a:1d:1c:ba:47:f9:
ba:c6:9c:86:15:a1:70:16:ff:d6:01:36:d8:60:65:
ae:5d:5f:cf:21:eb:66:08:79:4e:f1:23:2e:d7:06:
5c:20:7a:22:04:5c:e9:6b:a3:04:88:58:08:99:cd:
6d:52:99:a9:7c:9c:d7:47:5a:eb:bf:39:da:d7:34:
53:bd:bd:e4:b0:07:71:3a:dd:8b:02:02:61:5c:02:
c7:99:8a:a1:e5:e9:0a:e3:29:27:a3:f8:30:cd:95:
0d:a2:c4:09:2b:11:bc:dd:e3:b8:d5:06:d2:80:fc:
a2:99:8c:13:63:c9:73:09:60:0f:39:e0:4e:7b:c2:
a8:80:e2:48:c8:71:0a:f2:e6:33:3a:34:43:e1:1f:
b3:32:cc:8b:63:83:19:61:22:20:f3:1d:f3:86:cd:
5f:2c:6d:cf:c9:83:3d:25:4e:a7:92:46:f6:24:54:
5c:21:cf:0e:40:0b:4f:0e:8d:ed:d9:8d:e2:23:6a:
d8:33:ff:ef:8c:58:f7:0a:0f:e8:69:52:3e:25:ed:
ef:3e:cf:20:f1:5d:47:d5:b6:c7:b9:cb:40:a3:e9:
6b:2c:05:2b:20:99:2f:f9:39:12:f8:b8:d4:92:72:
04:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:73:80:A9:1C:68:63:24:C0:4B:37:61:7C:F5:D3:EC:9E:74:CC:03
X509v3 Authority Key Identifier:
keyid:FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:67:55:d7:c5:87:01:79:06:02:99:a6:e5:fb:63:7e:02:0f:
49:c4:77:76:85:38:97:a9:63:41:b4:4c:93:49:08:58:3f:26:
48:f4:ba:fa:15:31:77:7a:e8:e7:ae:9b:3b:6d:7f:b8:2a:90:
3c:d7:fc:90:9c:9b:91:ab:cd:38:a9:bb:b7:dc:d0:21:62:de:
ee:2b:d6:77:87:be:69:05:46:9d:2f:d2:21:8a:44:d8:28:df:
c0:06:d1:1a:86:3f:fc:37:f9:64:0f:9f:d5:d2:30:a1:af:13:
e2:9c:90:07:e5:0f:c7:9f:97:7c:1b:77:0f:91:30:55:c4:73:
f0:cb:3d:dc:72:50:d7:0d:da:54:52:66:62:37:9c:6e:08:47:
43:bf:23:8b:00:76:c5:75:93:03:4d:04:f8:60:9d:27:c1:e6:
82:69:31:20:9d:a2:66:17:28:fb:ce:93:25:73:85:ff:6e:c7:
26:d7:f4:00:49:41:be:e3:a8:98:04:4c:47:2d:4d:02:1b:07:
92:a1:b7:5d:5d:e8:df:7c:2c:ff:3a:d5:08:9f:de:5a:ac:46:
11:fc:99:fc:6c:c6:c4:ff:5d:e6:40:9f:43:62:d2:2a:b0:06:
79:d8:1f:0a:aa:fa:ac:6a:47:b3:30:84:07:c0:19:da:29:a6:
6a:6b:33:a1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZiO64UtcnALLOP3q2w8dWyxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZGUxMmI5MWNiMWYyOTMzYTdiZThlYWZmMmQzZTM1ZGVi
MzgxYTYwHhcNMjUwODA5MTMwMDU2WhcNMjUwODEwMTMwMDU2WjAzMTEwLwYDVQQD
EyhhYTczODBhOTFjNjg2MzI0YzA0YjM3NjE3Y2Y1ZDNlYzllNzRjYzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtWystalWxRpTRP9EXKy/yQ3Rhyf
Dk4qHRy6R/m6xpyGFaFwFv/WATbYYGWuXV/PIetmCHlO8SMu1wZcIHoiBFzpa6ME
iFgImc1tUpmpfJzXR1rrvzna1zRTvb3ksAdxOt2LAgJhXALHmYqh5ekK4ykno/gw
zZUNosQJKxG83eO41QbSgPyimYwTY8lzCWAPOeBOe8KogOJIyHEK8uYzOjRD4R+z
MsyLY4MZYSIg8x3zhs1fLG3PyYM9JU6nkkb2JFRcIc8OQAtPDo3t2Y3iI2rYM//v
jFj3Cg/oaVI+Je3vPs8g8V1H1bbHuctAo+lrLAUrIJkv+TkS+LjUknIEvwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKpzgKkcaGMkwEs3YXz10+yedMwDMB8GA1UdIwQY
MBaAFPveErkcsfKTOnvo6v8tPjXes4GmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05NFN1Unl4OHBNNmUtanFfeTAtTmQ2emdhWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvOWYwNTM5LWZkNzQtNGVlYy05MTMx
LTQ5MzE5Yjk0NzlmMy8xLzEtOTRTdVJ5eDhwTTZlLWpxX3kwLU5kNnpnYVkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzc2LzlmMDUzOS1mZDc0LTRlZWMtOTEzMS00OTMxOWI5NDc5
ZjMvMS8xLTk0U3VSeXg4cE02ZS1qcV95MC1OZDZ6Z2FZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUGdV
18WHAXkGApmm5ftjfgIPScR3doU4l6ljQbRMk0kIWD8mSPS6+hUxd3ro566bO21/
uCqQPNf8kJybkavNOKm7t9zQIWLe7ivWd4e+aQVGnS/SIYpE2CjfwAbRGoY//Df5
ZA+f1dIwoa8T4pyQB+UPx5+XfBt3D5EwVcRz8Ms93HJQ1w3aVFJmYjecbghHQ78j
iwB2xXWTA00E+GCdJ8HmgmkxIJ2iZhco+86TJXOF/27HJtf0AElBvuOomARMRy1N
AhsHkqG3XV3o33ws/zrVCJ/eWqxGEfyZ/GzGxP9d5kCfQ2LSKrAGedgfCqr6rGpH
szCEB8AZ2immamszoQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:44:23 2025 by rpki-client