Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
File: fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft (raw, json)
Hash identifier: 4NwSCgFzTcSKjPyLkDNkOE6fQbAixDcisZUKfcE0jWw=
Subject key identifier: 12:58:4C:93:A0:86:9F:56:24:20:1D:1A:11:9F:55:8F:5D:43:AB:D3
Authority key identifier: 7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
Certificate issuer: /CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Certificate serial: 01989600AB33F613A13634A0D83CEBF0959F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
Manifest number: 162B
Signing time: Sun 10 Aug 2025 22:01:22 +0000
Manifest this update: Sun 10 Aug 2025 22:01:22 +0000
Manifest next update: Mon 11 Aug 2025 22:01:22 +0000
Files and hashes: 1: MLwEXlz7vUwc5SjWgOx55jqHjfY.roa (hash: nEFYTn5TUjsaiq+RhC3lF8ai3Uf+0UFa/4rn5vibuks=)
2: fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl (hash: XIv0PlqWkcc2yblMkqQQLHiUC5Hc0k7E92Bwf8Exe/A=)
3: mfViMC5WzFmHy2d2V9evB-1C54M.roa (hash: AYo63SdEVlQlgz+glCe/AMcSKXW/Zi4rvSvNYshL2xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:ab:33:f6:13:a1:36:34:a0:d8:3c:eb:f0:95:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Validity
Not Before: Aug 10 22:01:22 2025 GMT
Not After : Aug 11 22:01:22 2025 GMT
Subject: CN=12584c93a0869f5624201d1a119f558f5d43abd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c9:d6:b0:7f:21:1b:63:00:65:6c:6c:9c:5e:
1d:db:36:2d:7d:9a:8d:50:67:e3:2c:15:8d:d9:43:
d1:66:78:0f:ac:46:fd:44:9e:56:4f:b2:ff:9a:07:
ba:34:20:cb:0e:31:9e:92:aa:4f:2f:da:16:1e:d3:
0d:ce:5e:64:5d:20:0a:8a:28:e1:aa:47:82:29:88:
55:ec:42:42:a9:db:23:40:e7:87:ab:50:41:d4:32:
8b:eb:ee:fa:34:c7:00:5f:90:54:cd:84:7b:3a:6c:
03:42:d8:98:c0:82:36:55:61:6d:b2:a4:85:a3:85:
03:a5:2f:a2:37:d6:34:ee:be:02:65:9a:31:8e:17:
1e:c8:ad:57:b0:a0:fc:1d:de:e6:9f:ac:02:e4:8a:
69:8f:f4:d4:22:29:5b:4a:5a:08:1a:25:dc:24:89:
9c:1e:89:e8:e5:46:c8:93:43:49:d6:b1:db:5a:33:
0e:60:d3:d3:82:bd:3e:20:e0:e4:ec:96:4e:22:a1:
80:b9:1a:e3:62:f9:90:53:79:fb:f4:f1:60:5f:54:
e4:50:b3:d7:27:17:a2:14:71:10:f9:27:8e:ee:55:
f7:e0:20:d1:8c:0d:ee:43:62:98:1b:d2:d2:d9:13:
1b:1d:0e:51:bd:f7:90:5e:2b:40:b4:57:ed:63:30:
33:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:58:4C:93:A0:86:9F:56:24:20:1D:1A:11:9F:55:8F:5D:43:AB:D3
X509v3 Authority Key Identifier:
keyid:7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:75:2e:b1:4a:3e:e5:d5:c7:07:3a:51:6b:ac:00:58:65:01:
f4:2d:7f:e8:ee:ed:2a:19:bd:27:11:95:f1:5c:6b:f4:55:67:
bc:19:b0:7e:7a:1e:3b:3b:ac:4d:ff:bb:7a:b0:be:f8:f1:a9:
2b:97:23:b0:9f:e4:a3:ae:3f:25:58:b1:5c:77:77:4e:6b:9d:
74:8b:b3:9a:52:40:b9:70:3c:76:df:ab:27:da:f0:cd:0f:28:
0d:12:73:e4:0c:11:72:13:af:2f:b8:c7:3e:be:32:e9:63:fa:
0d:4e:1d:42:19:02:fb:b4:6c:47:df:76:e7:f6:09:e4:60:a0:
ce:a8:6a:93:d0:e9:64:b4:cb:f7:aa:43:1a:05:c4:5b:2d:d5:
8e:d2:7d:64:7c:5e:a7:87:b9:16:94:90:43:d2:56:b0:be:26:
32:f7:5a:35:3a:14:61:ba:7d:21:fa:34:15:b6:89:68:00:2b:
db:b8:a3:df:7c:2e:e7:62:bb:b7:8c:01:b2:91:c7:3d:9c:d3:
e3:c1:b1:cd:4b:48:54:8d:4b:24:49:f2:b1:54:b1:e4:f1:e0:
d2:ea:1d:70:dc:7b:62:ff:6f:5b:aa:79:ad:6b:ed:42:56:32:
3b:8e:4a:08:f1:c2:3d:50:24:b3:4a:83:44:4e:9d:ca:20:75:
c9:dd:6e:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWAKsz9hOhNjSg2Dzr8JWfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzVkNDgyOGRjMzQxOTllZjcxN2NjMDNhNDhhMDA3NGMx
NDQzYjgwHhcNMjUwODEwMjIwMTIyWhcNMjUwODExMjIwMTIyWjAzMTEwLwYDVQQD
EygxMjU4NGM5M2EwODY5ZjU2MjQyMDFkMWExMTlmNTU4ZjVkNDNhYmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMnWsH8hG2MAZWxsnF4d2zYtfZqN
UGfjLBWN2UPRZngPrEb9RJ5WT7L/mge6NCDLDjGekqpPL9oWHtMNzl5kXSAKiijh
qkeCKYhV7EJCqdsjQOeHq1BB1DKL6+76NMcAX5BUzYR7OmwDQtiYwII2VWFtsqSF
o4UDpS+iN9Y07r4CZZoxjhceyK1XsKD8Hd7mn6wC5Ippj/TUIilbSloIGiXcJImc
Hono5UbIk0NJ1rHbWjMOYNPTgr0+IODk7JZOIqGAuRrjYvmQU3n79PFgX1TkULPX
JxeiFHEQ+SeO7lX34CDRjA3uQ2KYG9LS2RMbHQ5RvfeQXitAtFftYzAztwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJYTJOghp9WJCAdGhGfVY9dQ6vTMB8GA1UdIwQY
MBaAFH7F1IKNw0GZ73F8wDpIoAdMFEO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNYVWdvM0RRWm52Y1h6QU9raWdCMHdVUTdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9hMDBiODktYjM5OC00MGQ5LWJkYjUt
NDI3YjJkNGY5YzgyLzEvZnNYVWdvM0RRWm52Y1h6QU9raWdCMHdVUTdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9hMDBiODktYjM5OC00MGQ5LWJkYjUtNDI3YjJkNGY5Yzgy
LzEvZnNYVWdvM0RRWm52Y1h6QU9raWdCMHdVUTdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvnUusUo+
5dXHBzpRa6wAWGUB9C1/6O7tKhm9JxGV8Vxr9FVnvBmwfnoeOzusTf+7erC++PGp
K5cjsJ/ko64/JVixXHd3TmuddIuzmlJAuXA8dt+rJ9rwzQ8oDRJz5AwRchOvL7jH
Pr4y6WP6DU4dQhkC+7RsR9925/YJ5GCgzqhqk9DpZLTL96pDGgXEWy3VjtJ9ZHxe
p4e5FpSQQ9JWsL4mMvdaNToUYbp9Ifo0FbaJaAAr27ij33wu52K7t4wBspHHPZzT
48GxzUtIVI1LJEnysVSx5PHg0uodcNx7Yv9vW6p5rWvtQlYyO45KCPHCPVAks0qD
RE6dyiB1yd1upw==
-----END CERTIFICATE-----
Generated at Mon Aug 11 01:47:10 2025 by rpki-client