Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
File: fa57XJowGYvXF4tIuF8LIhpeHrc.mft (raw, json)
Hash identifier: cldM1ZhIO4t+chwBB4mJFyd/gWI0rhyC6Wh8gEaN+dM=
Subject key identifier: 3F:C4:28:EC:64:97:83:84:CF:31:27:5C:DE:0E:A9:E0:D4:B2:C2:DA
Authority key identifier: 7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
Certificate issuer: /CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Certificate serial: 0198879FFA6F1736636BE8405C1C5B2BBB6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
Manifest number: 0AE8
Signing time: Fri 08 Aug 2025 03:01:05 +0000
Manifest this update: Fri 08 Aug 2025 03:01:05 +0000
Manifest next update: Sat 09 Aug 2025 03:01:05 +0000
Files and hashes: 1: c0Cf6YCbscr3sGW2nWgoXFY8xps.roa (hash: 5gRboI0NrXJxmfngbqENdfvUiQ0ds61NdsYGIZfYOOU=)
2: fa57XJowGYvXF4tIuF8LIhpeHrc.crl (hash: tRCA8LcbhwQUcTLzebV4r9s71RDx+94i3Fyh4XT32pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:9f:fa:6f:17:36:63:6b:e8:40:5c:1c:5b:2b:bb:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Validity
Not Before: Aug 8 03:01:05 2025 GMT
Not After : Aug 9 03:01:05 2025 GMT
Subject: CN=3fc428ec64978384cf31275cde0ea9e0d4b2c2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:03:ef:50:29:4b:bc:0d:21:0d:df:8c:92:
cd:11:87:1f:af:46:75:79:c2:b4:bb:14:c7:29:f3:
94:c2:4d:d0:18:4c:7e:de:0f:23:a5:27:0d:4c:65:
95:f7:5d:8c:80:5d:0d:aa:d6:5d:8a:42:61:1a:6b:
10:e0:00:34:5e:f6:d7:14:9b:78:28:cd:38:b7:e4:
80:43:14:4f:30:34:60:51:b8:ae:d8:4e:cd:57:fb:
f9:df:66:f1:12:53:40:82:0d:10:a6:e8:8b:6a:fe:
db:c4:3d:39:cf:2d:c8:c4:c0:b6:3a:28:6f:27:f9:
3b:c7:d6:5a:98:b5:42:72:d3:ec:c8:fb:13:4a:2a:
18:c6:49:da:91:85:b0:92:4b:5c:33:1f:0a:05:51:
03:cb:8c:0c:b2:49:61:de:25:f1:c2:7e:11:c5:29:
01:ed:cb:55:b8:f4:63:6b:f0:d5:07:7a:00:e1:c7:
d3:33:f2:58:1e:59:3d:4a:e6:a8:66:00:87:5b:7e:
8e:f2:56:af:1f:19:af:14:d3:7f:58:be:cf:e8:73:
de:9d:ff:46:cb:dc:78:a0:7c:c3:09:1d:c0:a7:e7:
fe:00:c7:d1:26:21:8b:5e:3d:ec:e6:8c:68:55:49:
69:d4:0a:7b:17:75:28:70:da:ca:1b:a4:fe:a6:62:
45:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C4:28:EC:64:97:83:84:CF:31:27:5C:DE:0E:A9:E0:D4:B2:C2:DA
X509v3 Authority Key Identifier:
keyid:7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:4d:c9:a9:97:8e:05:da:a0:07:bb:98:79:e2:f2:11:d6:07:
46:1b:77:f0:b9:14:b0:eb:78:4d:b0:95:e5:78:d6:00:37:1d:
90:07:04:3c:fb:a7:31:51:cd:cf:52:b4:4d:30:b1:31:aa:e7:
2c:85:49:d3:74:4f:0d:33:34:c3:2a:25:0c:cc:9d:ef:ec:17:
01:59:09:1c:01:99:9a:3c:93:98:d3:e5:89:21:25:8e:4c:9e:
f6:91:0a:7e:ed:b4:41:50:f3:fa:a5:dd:60:14:11:eb:09:1d:
db:a5:d9:3c:58:35:34:cd:c6:96:97:98:51:8f:97:4c:b6:9c:
42:65:cf:a3:18:a9:68:61:3e:c2:73:ec:37:32:70:e7:23:1b:
3a:19:3c:4b:c7:44:e6:e2:b9:0d:39:d4:fb:2e:bf:00:96:2c:
65:68:42:d4:7c:ba:a7:30:0d:ee:ed:c7:53:7d:a2:2d:e6:94:
3c:77:1c:f0:60:29:67:17:c0:0f:77:bc:36:3b:e1:98:b5:a2:
54:b6:e7:1c:b8:2b:97:2a:fd:00:88:39:6f:e1:b3:1a:0b:9f:
14:13:4a:9e:49:fa:70:e1:03:b0:7d:13:a2:84:28:4a:cf:fe:
3c:3c:c8:ac:d9:2b:af:23:f5:7c:37:df:91:e2:b8:32:cb:f2:
d4:eb:1d:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiHn/pvFzZja+hAXBxbK7ttMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYWU3YjVjOWEzMDE5OGJkNzE3OGI0OGI4NWYwYjIyMWE1
ZTFlYjcwHhcNMjUwODA4MDMwMTA1WhcNMjUwODA5MDMwMTA1WjAzMTEwLwYDVQQD
EygzZmM0MjhlYzY0OTc4Mzg0Y2YzMTI3NWNkZTBlYTllMGQ0YjJjMmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon4D71ApS7wNIQ3fjJLNEYcfr0Z1
ecK0uxTHKfOUwk3QGEx+3g8jpScNTGWV912MgF0NqtZdikJhGmsQ4AA0XvbXFJt4
KM04t+SAQxRPMDRgUbiu2E7NV/v532bxElNAgg0QpuiLav7bxD05zy3IxMC2Oihv
J/k7x9ZamLVCctPsyPsTSioYxknakYWwkktcMx8KBVEDy4wMsklh3iXxwn4RxSkB
7ctVuPRja/DVB3oA4cfTM/JYHlk9SuaoZgCHW36O8lavHxmvFNN/WL7P6HPenf9G
y9x4oHzDCR3Ap+f+AMfRJiGLXj3s5oxoVUlp1Ap7F3UocNrKG6T+pmJF1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/EKOxkl4OEzzEnXN4OqeDUssLaMB8GA1UdIwQY
MBaAFH2ue1yaMBmL1xeLSLhfCyIaXh63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmE1N1hKb3dHWXZYRjR0SXVGOExJaHBlSHJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9kZWM1MGQtZWUzYS00NTg0LWE1OTEt
NDI5ZDY2OGQ5MjI4LzEvZmE1N1hKb3dHWXZYRjR0SXVGOExJaHBlSHJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9kZWM1MGQtZWUzYS00NTg0LWE1OTEtNDI5ZDY2OGQ5MjI4
LzEvZmE1N1hKb3dHWXZYRjR0SXVGOExJaHBlSHJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgU3JqZeO
BdqgB7uYeeLyEdYHRht38LkUsOt4TbCV5XjWADcdkAcEPPunMVHNz1K0TTCxMarn
LIVJ03RPDTM0wyolDMyd7+wXAVkJHAGZmjyTmNPliSEljkye9pEKfu20QVDz+qXd
YBQR6wkd26XZPFg1NM3GlpeYUY+XTLacQmXPoxipaGE+wnPsNzJw5yMbOhk8S8dE
5uK5DTnU+y6/AJYsZWhC1Hy6pzAN7u3HU32iLeaUPHcc8GApZxfAD3e8NjvhmLWi
VLbnHLgrlyr9AIg5b+GzGgufFBNKnkn6cOEDsH0TooQoSs/+PDzIrNkrryP1fDff
keK4Msvy1OsdJw==
-----END CERTIFICATE-----
Generated at Fri Aug 8 12:58:12 2025 by rpki-client