Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
File: _X0csRSU6ziY8Q09Y1vnXxay3FE.mft (raw, json)
Hash identifier: mDImMsRL1eUFtLjGTHJdPrAj9Oa+rDtaC/gNssaHjQE=
Subject key identifier: FD:35:A5:85:E6:DB:4D:87:AB:88:15:85:CB:C4:5A:71:9D:7F:91:66
Authority key identifier: FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
Certificate issuer: /CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Certificate serial: 01987CAEABFE8633FAE3FDAD42C22F7FE154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
Manifest number: 0C5F
Signing time: Wed 06 Aug 2025 00:01:18 +0000
Manifest this update: Wed 06 Aug 2025 00:01:18 +0000
Manifest next update: Thu 07 Aug 2025 00:01:18 +0000
Files and hashes: 1: EryZGhKHOKFejsNYtsHoCrBOwlI.roa (hash: XPrcWsidSTpQokDPJh6WTZK3lvnDmP0xxlT9T9iBNGQ=)
2: Q8FRv-AW6LCPe-NhY9NXN5LnC4o.roa (hash: N2JyPxT8+m5HQDRPSXJdJM2oBFZFnSgrTMkI9DghAaA=)
3: _X0csRSU6ziY8Q09Y1vnXxay3FE.crl (hash: BZk42DOdOmC+l7/CCtitLlDOgOgU7+gywcxK0ZGHX00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:ab:fe:86:33:fa:e3:fd:ad:42:c2:2f:7f:e1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Validity
Not Before: Aug 6 00:01:18 2025 GMT
Not After : Aug 7 00:01:18 2025 GMT
Subject: CN=fd35a585e6db4d87ab881585cbc45a719d7f9166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:1c:de:79:a9:97:55:61:02:32:9d:e4:68:
8c:5c:da:e9:cd:b3:62:47:d1:ab:53:49:86:8c:3f:
02:9e:2a:45:28:4c:48:dd:41:14:94:e2:c5:a7:c2:
8a:a0:bc:fe:eb:1b:ea:db:56:c3:d0:b9:8f:af:86:
4d:bb:a1:0f:af:fa:9c:66:9f:18:02:49:65:97:37:
60:5e:0f:e0:4f:45:f9:e1:82:dd:6e:ca:4b:96:04:
ca:28:af:aa:1d:ec:34:d1:26:82:7f:fb:5d:bf:1b:
d1:8d:d0:3b:d1:1a:ba:9e:8b:f1:45:17:bd:6e:c7:
c7:fd:38:d7:84:38:e8:da:68:39:dd:63:bb:66:b9:
8a:9b:8b:bf:4d:cf:91:9a:1a:75:dc:65:e4:17:dc:
45:6f:3e:cb:fc:4e:d8:95:c4:4b:0e:d2:a9:74:2b:
e8:c2:48:6b:67:59:c1:de:ff:0b:f9:22:bb:fd:a8:
71:e5:d7:94:b0:ba:3c:5f:d2:06:ce:d9:f5:fd:80:
40:30:8c:a8:7f:de:a1:03:0d:30:ef:b2:e8:c2:af:
fc:c6:be:37:45:a2:b7:dc:59:7c:3b:d6:a9:a4:ef:
9f:f5:15:f0:7a:e7:a7:19:e9:de:20:97:75:84:c7:
b4:cd:d9:4f:2e:06:b9:e2:8f:0d:2f:34:18:e3:44:
a6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:35:A5:85:E6:DB:4D:87:AB:88:15:85:CB:C4:5A:71:9D:7F:91:66
X509v3 Authority Key Identifier:
keyid:FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d7:42:e6:c5:7e:40:91:da:81:b1:2f:41:f3:82:4f:a0:17:
53:18:d1:f0:87:83:fa:d6:be:96:b1:c6:fe:2e:52:83:3f:70:
f2:e7:78:e9:72:a8:a9:6b:64:ff:d5:45:9b:b6:45:c8:69:d2:
45:6c:f5:3c:2f:c0:00:16:85:36:76:40:b7:8b:8a:5b:2d:f5:
e2:5c:71:1e:47:ff:ec:9e:58:83:2e:72:0b:db:5c:e0:a3:46:
e3:7f:53:1b:5d:94:23:2c:08:41:45:04:c1:1b:78:71:a9:63:
02:9a:5f:18:39:bb:40:b0:44:07:16:55:69:0e:57:c3:db:03:
ce:2e:f6:25:b9:0b:ea:13:45:eb:e6:40:c3:03:48:b3:49:95:
36:99:3a:eb:e6:9a:b5:3d:ea:8e:b3:69:ce:65:2e:78:94:cb:
f5:8f:cc:f3:f0:4d:21:6f:8e:97:20:bf:a8:7b:da:4b:50:33:
07:f6:7b:c3:2b:c1:ac:be:4a:21:24:50:08:07:78:c0:4c:da:
25:a6:cb:7a:99:12:5a:b7:6e:07:a6:d0:a7:07:b6:69:23:87:
03:bc:e9:9c:9e:ab:39:0e:79:1f:ea:42:8c:98:35:2c:d0:d9:
98:d6:9f:24:d4:2a:61:0a:ae:f2:09:37:47:ce:a4:c4:88:63:
08:21:dc:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8rqv+hjP64/2tQsIvf+FUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkN2QxY2IxMTQ5NGViMzg5OGYxMGQzZDYzNWJlNzVmMTZi
MmRjNTEwHhcNMjUwODA2MDAwMTE4WhcNMjUwODA3MDAwMTE4WjAzMTEwLwYDVQQD
EyhmZDM1YTU4NWU2ZGI0ZDg3YWI4ODE1ODVjYmM0NWE3MTlkN2Y5MTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolkc3nmpl1VhAjKd5GiMXNrpzbNi
R9GrU0mGjD8CnipFKExI3UEUlOLFp8KKoLz+6xvq21bD0LmPr4ZNu6EPr/qcZp8Y
AklllzdgXg/gT0X54YLdbspLlgTKKK+qHew00SaCf/tdvxvRjdA70Rq6novxRRe9
bsfH/TjXhDjo2mg53WO7ZrmKm4u/Tc+Rmhp13GXkF9xFbz7L/E7YlcRLDtKpdCvo
wkhrZ1nB3v8L+SK7/ahx5deUsLo8X9IGztn1/YBAMIyof96hAw0w77Lowq/8xr43
RaK33Fl8O9appO+f9RXweuenGeneIJd1hMe0zdlPLga54o8NLzQY40SmYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP01pYXm202Hq4gVhcvEWnGdf5FmMB8GA1UdIwQY
MBaAFP19HLEUlOs4mPENPWNb518WstxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1gwY3NSU1U2emlZOFEwOVkxdm5YeGF5M0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hNmMxNTItMzdkMy00Zjg2LThmNmUt
NzY1OWJmODZhYzRjLzEvX1gwY3NSU1U2emlZOFEwOVkxdm5YeGF5M0ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9hNmMxNTItMzdkMy00Zjg2LThmNmUtNzY1OWJmODZhYzRj
LzEvX1gwY3NSU1U2emlZOFEwOVkxdm5YeGF5M0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9dC5sV+
QJHagbEvQfOCT6AXUxjR8IeD+ta+lrHG/i5Sgz9w8ud46XKoqWtk/9VFm7ZFyGnS
RWz1PC/AABaFNnZAt4uKWy314lxxHkf/7J5Ygy5yC9tc4KNG439TG12UIywIQUUE
wRt4caljAppfGDm7QLBEBxZVaQ5Xw9sDzi72JbkL6hNF6+ZAwwNIs0mVNpk66+aa
tT3qjrNpzmUueJTL9Y/M8/BNIW+OlyC/qHvaS1AzB/Z7wyvBrL5KISRQCAd4wEza
JabLepkSWrduB6bQpwe2aSOHA7zpnJ6rOQ55H+pCjJg1LNDZmNafJNQqYQqu8gk3
R86kxIhjCCHcaQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:16:41 2025 by rpki-client