Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
File: fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft (raw, json)
Hash identifier: jthe6vdbhesZd17Ac0I6rAWCEJFdIAqAE76zxG1266E=
Subject key identifier: AE:35:B8:6D:0E:69:5E:E7:9C:5F:FC:EE:7E:DD:B9:57:FC:49:F8:95
Authority key identifier: 7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
Certificate issuer: /CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
Certificate serial: 01978B47B615A43EB7CE90DFA4CDCB844A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
Manifest number: 159C
Signing time: Fri 20 Jun 2025 03:00:22 +0000
Manifest this update: Fri 20 Jun 2025 03:00:22 +0000
Manifest next update: Sat 21 Jun 2025 03:00:22 +0000
Files and hashes: 1: JcAhZrilsZkvSyojajHWDjOF_6I.roa (hash: W7eqhWRP/GcuUd5Q71f0zaMk5StnfS4hfdbNGseVYE0=)
2: fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl (hash: Fl1sCOsRxPlT3lEAqFkfhHNL2BCSdRMOdMmIbvSg8uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 19:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8b:47:b6:15:a4:3e:b7:ce:90:df:a4:cd:cb:84:4a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
Validity
Not Before: Jun 20 03:00:22 2025 GMT
Not After : Jun 21 03:00:22 2025 GMT
Subject: CN=ae35b86d0e695ee79c5ffcee7eddb957fc49f895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f4:a6:9a:d1:fb:bd:42:1f:02:bd:52:da:23:
e6:ef:4c:13:34:ba:f6:08:30:c0:f6:d7:9d:e1:db:
be:d1:dc:a1:7d:8d:d0:a4:90:a8:7e:cb:15:24:ba:
ec:78:7c:55:3e:94:de:8b:5c:69:ad:21:7b:97:e7:
76:61:52:0d:8e:e8:67:f5:10:63:77:51:a5:dc:00:
fa:87:c1:2f:74:d7:98:11:82:66:c2:03:3d:af:4b:
3e:08:ee:28:b8:d9:dc:51:0d:dc:04:61:c0:94:07:
8a:95:9d:10:9a:25:22:3b:13:fa:69:ff:b7:a0:f5:
7f:36:ce:30:09:d1:78:84:ba:c7:f8:eb:08:f1:09:
bc:63:30:0d:3b:0c:b4:4e:35:78:5c:e3:43:93:8d:
5b:66:be:18:d5:e5:39:a8:14:66:87:d2:1b:6d:cd:
25:34:64:da:c7:63:4d:a5:f4:d0:8a:cd:2f:fb:aa:
96:de:87:93:7e:60:ee:e8:b7:75:9e:cf:f1:a8:8c:
5e:6a:6e:da:64:fc:e2:e5:46:03:d2:01:78:b0:1b:
71:fa:f0:52:05:3b:58:80:ef:71:85:9a:1f:20:1e:
42:62:d1:a0:c9:02:8a:14:45:ca:9b:ae:ea:f0:dc:
b7:d7:d1:f9:f2:20:58:a8:ec:7c:c0:c1:4f:38:03:
5e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:35:B8:6D:0E:69:5E:E7:9C:5F:FC:EE:7E:DD:B9:57:FC:49:F8:95
X509v3 Authority Key Identifier:
keyid:7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c7:c0:c9:aa:81:04:8f:a1:c7:b5:96:6a:ae:4f:1f:d7:30:
43:a9:80:91:f2:e0:31:f3:ff:fb:ff:9c:15:dd:73:a8:86:ae:
f0:9d:7d:af:c5:7d:ad:4a:13:ae:49:6f:63:5c:51:df:0b:7e:
08:5d:30:1e:57:4f:2c:ad:d2:ff:0a:64:c9:76:6f:2e:73:93:
c9:81:99:99:e3:bb:81:cd:32:10:3f:7d:4a:26:cd:10:7d:8f:
27:68:2c:f8:34:73:4f:fb:25:77:dc:bb:15:3f:b8:dd:d9:f0:
d9:fc:a3:7a:b9:30:a9:f1:e7:2b:b4:27:c5:74:9d:a3:f0:96:
4e:de:1e:d0:93:e9:0c:80:b7:00:70:e7:55:8c:ab:3f:8b:73:
0b:8d:9e:33:3a:1a:0d:25:82:35:79:c2:49:81:13:6d:f3:20:
52:c5:61:e7:6e:cd:ab:db:2f:0f:47:a8:0e:15:2f:72:b7:c1:
a4:a5:fc:e6:70:a1:53:de:8d:51:7f:a5:32:ae:f5:35:79:ad:
7e:63:2e:a3:00:a7:cc:50:4a:55:34:a6:90:80:64:c8:cc:ef:
0c:08:ff:06:0f:b8:d2:1c:e0:bb:20:e0:b2:fd:11:9b:39:e2:
8f:30:62:c7:15:e4:fd:c9:1f:ec:ee:d2:a4:d5:8c:30:1b:37:
57:a7:61:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeLR7YVpD63zpDfpM3LhEo/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzYxMGQyMTVkMzg5MTM0MmJjMzI4NzJhNTBmNGQwY2Zh
OWRjOWYwHhcNMjUwNjIwMDMwMDIyWhcNMjUwNjIxMDMwMDIyWjAzMTEwLwYDVQQD
EyhhZTM1Yjg2ZDBlNjk1ZWU3OWM1ZmZjZWU3ZWRkYjk1N2ZjNDlmODk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvSmmtH7vUIfAr1S2iPm70wTNLr2
CDDA9ted4du+0dyhfY3QpJCofssVJLrseHxVPpTei1xprSF7l+d2YVINjuhn9RBj
d1Gl3AD6h8EvdNeYEYJmwgM9r0s+CO4ouNncUQ3cBGHAlAeKlZ0QmiUiOxP6af+3
oPV/Ns4wCdF4hLrH+OsI8Qm8YzANOwy0TjV4XONDk41bZr4Y1eU5qBRmh9Ibbc0l
NGTax2NNpfTQis0v+6qW3oeTfmDu6Ld1ns/xqIxeam7aZPzi5UYD0gF4sBtx+vBS
BTtYgO9xhZofIB5CYtGgyQKKFEXKm67q8Ny319H58iBYqOx8wMFPOANe5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK41uG0OaV7nnF/87n7duVf8SfiVMB8GA1UdIwQY
MBaAFH7GENIV04kTQrwyhypQ9NDPqdyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNZUTBoWFRpUk5DdkRLSEtsRDAwTS1wM0o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8yMjkxMWMtY2U1MS00MzhiLTg2Y2Yt
ZTg1NjYxM2QyYjEwLzEvZnNZUTBoWFRpUk5DdkRLSEtsRDAwTS1wM0o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8yMjkxMWMtY2U1MS00MzhiLTg2Y2YtZTg1NjYxM2QyYjEw
LzEvZnNZUTBoWFRpUk5DdkRLSEtsRDAwTS1wM0o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMfAyaqB
BI+hx7WWaq5PH9cwQ6mAkfLgMfP/+/+cFd1zqIau8J19r8V9rUoTrklvY1xR3wt+
CF0wHldPLK3S/wpkyXZvLnOTyYGZmeO7gc0yED99SibNEH2PJ2gs+DRzT/sld9y7
FT+43dnw2fyjerkwqfHnK7QnxXSdo/CWTt4e0JPpDIC3AHDnVYyrP4tzC42eMzoa
DSWCNXnCSYETbfMgUsVh527Nq9svD0eoDhUvcrfBpKX85nChU96NUX+lMq71NXmt
fmMuowCnzFBKVTSmkIBkyMzvDAj/Bg+40hzguyDgsv0RmznijzBixxXk/ckf7O7S
pNWMMBs3V6dhSA==
-----END CERTIFICATE-----
Generated at Fri Jun 20 05:59:33 2025 by rpki-client