Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
File: fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft (raw, json)
Hash identifier: taBuyAY2mQS9o2t+sO5ujhrrPGgXJkzfws9ALbXJ0ko=
Subject key identifier: DF:76:35:4D:0D:77:76:E8:D0:21:90:5D:2F:93:03:ED:BC:69:96:B7
Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
Certificate issuer: /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Certificate serial: 0198955BB60599055E118B77E73866AAFBDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
Manifest number: 0419
Signing time: Sun 10 Aug 2025 19:01:12 +0000
Manifest this update: Sun 10 Aug 2025 19:01:12 +0000
Manifest next update: Mon 11 Aug 2025 19:01:12 +0000
Files and hashes: 1: ahfN64_p8VtI62YroQrVTvBrIO0.roa (hash: sZaDoXjnbfKoPFXFsVFkCxokaAJgn9I/0mc/e5HXWnI=)
2: fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl (hash: UXSYDHCtfytk9jQm5X19m0MIeX5+CCoa8j073zq/nHs=)
3: o9U5Dfyd-pSAin_ZdTXibSOZdr8.roa (hash: mqF6uwOJbIfnUqauX0VbeIR/n/OPtHF+diV/fjZGJJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:5b:b6:05:99:05:5e:11:8b:77:e7:38:66:aa:fb:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Validity
Not Before: Aug 10 19:01:12 2025 GMT
Not After : Aug 11 19:01:12 2025 GMT
Subject: CN=df76354d0d7776e8d021905d2f9303edbc6996b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a9:df:81:b4:2c:da:9e:fb:84:44:7a:a5:aa:
42:e1:76:0b:bf:60:c1:65:dd:74:bf:96:5c:34:30:
b0:c2:16:94:26:76:5a:fa:7c:1c:aa:a0:bb:15:1b:
50:32:a0:a6:41:d3:16:e0:ac:25:e6:41:f2:9a:66:
aa:eb:a7:dc:08:cd:47:9b:73:f9:7d:7b:88:1b:1a:
e6:58:ed:be:1d:9e:32:54:3d:24:30:3f:ea:03:53:
ea:58:f9:20:64:1c:4e:14:4c:bf:8c:87:c4:00:40:
7d:c3:d4:f9:fc:03:40:95:a1:e2:74:a7:1a:8b:d0:
df:83:ac:b5:aa:1a:c3:10:cd:c0:fc:e2:e2:31:dd:
52:b4:e9:69:b7:02:c9:f7:f3:e8:0a:e3:b6:84:3d:
1e:f3:22:28:9b:c0:c2:1f:37:3b:9a:05:48:21:2f:
24:84:ee:40:02:5f:7e:7c:e7:1f:24:bd:6d:cc:fd:
99:0c:1a:2c:7c:c2:47:53:29:ef:53:f9:f0:f1:b5:
83:8d:35:60:64:39:8e:ef:7f:61:4b:60:3e:98:92:
20:16:a6:9a:24:39:c8:49:a0:8b:d5:16:51:16:40:
6d:d5:b4:43:bb:70:24:31:3b:1d:8d:0e:bb:c3:39:
52:32:3b:12:12:4b:76:d9:61:45:25:d3:22:7a:dc:
fc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:76:35:4D:0D:77:76:E8:D0:21:90:5D:2F:93:03:ED:BC:69:96:B7
X509v3 Authority Key Identifier:
keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6c:50:dc:e4:65:83:58:3f:be:e4:87:bb:32:1d:5f:85:f8:
e1:9f:00:53:fb:2b:92:a1:7d:de:c5:ff:3a:62:01:66:ea:a5:
28:17:80:1b:56:8c:1b:bf:f5:0d:7e:1a:0c:de:2d:14:9b:9f:
f9:02:51:33:35:b7:b3:9e:4d:ae:84:f2:f5:07:cf:2b:5e:23:
a9:4c:34:a6:19:71:f5:3a:74:11:57:1b:d0:25:25:05:30:32:
35:05:0f:97:88:64:98:0c:8b:c3:a3:28:e8:cd:b8:b5:9f:f6:
70:fa:99:05:3e:d2:0d:1b:64:0b:7a:13:6b:6c:a6:73:ef:46:
19:b0:f0:09:df:2b:96:ec:fc:ca:9f:7b:12:f0:c1:73:23:29:
d1:b6:6a:3c:0b:39:51:1c:25:ee:93:5a:18:67:93:28:b5:ea:
b7:62:c5:5b:4b:b6:0c:a4:f0:32:b1:34:b7:ec:de:ba:90:f1:
cf:5d:f6:e2:46:f6:ae:6f:c0:82:83:89:f7:e0:ff:62:ca:9e:
b8:0b:0a:64:cf:d7:04:7a:b2:dd:a8:a9:39:f6:f1:89:30:f6:
31:18:54:40:37:40:5a:cd:52:46:84:3d:3d:86:88:51:0e:19:
59:13:06:4f:12:b2:68:56:b3:f0:ac:81:63:ff:9f:34:6d:5d:
8b:e9:6d:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiVW7YFmQVeEYt35zhmqvvfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMmVhM2VjYWQ1YTQwMmI4ZmU1YTJhNjEzOGFmNjZhYWMy
NTdmZjkwHhcNMjUwODEwMTkwMTEyWhcNMjUwODExMTkwMTEyWjAzMTEwLwYDVQQD
EyhkZjc2MzU0ZDBkNzc3NmU4ZDAyMTkwNWQyZjkzMDNlZGJjNjk5NmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KnfgbQs2p77hER6papC4XYLv2DB
Zd10v5ZcNDCwwhaUJnZa+nwcqqC7FRtQMqCmQdMW4Kwl5kHymmaq66fcCM1Hm3P5
fXuIGxrmWO2+HZ4yVD0kMD/qA1PqWPkgZBxOFEy/jIfEAEB9w9T5/ANAlaHidKca
i9Dfg6y1qhrDEM3A/OLiMd1StOlptwLJ9/PoCuO2hD0e8yIom8DCHzc7mgVIIS8k
hO5AAl9+fOcfJL1tzP2ZDBosfMJHUynvU/nw8bWDjTVgZDmO739hS2A+mJIgFqaa
JDnISaCL1RZRFkBt1bRDu3AkMTsdjQ67wzlSMjsSEkt22WFFJdMietz8BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN92NU0Nd3bo0CGQXS+TA+28aZa3MB8GA1UdIwQY
MBaAFH0uo+ytWkArj+WiphOK9mqsJX/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80NDc2NzctOTk3Mi00ZGY4LWI1MDgt
YjkxYjkyZDRkODAxLzEvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80NDc2NzctOTk3Mi00ZGY4LWI1MDgtYjkxYjkyZDRkODAx
LzEvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmxQ3ORl
g1g/vuSHuzIdX4X44Z8AU/srkqF93sX/OmIBZuqlKBeAG1aMG7/1DX4aDN4tFJuf
+QJRMzW3s55NroTy9QfPK14jqUw0phlx9Tp0EVcb0CUlBTAyNQUPl4hkmAyLw6Mo
6M24tZ/2cPqZBT7SDRtkC3oTa2ymc+9GGbDwCd8rluz8yp97EvDBcyMp0bZqPAs5
URwl7pNaGGeTKLXqt2LFW0u2DKTwMrE0t+zeupDxz1324kb2rm/AgoOJ9+D/Ysqe
uAsKZM/XBHqy3aipOfbxiTD2MRhUQDdAWs1SRoQ9PYaIUQ4ZWRMGTxKyaFaz8KyB
Y/+fNG1di+lt/g==
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:50 2025 by rpki-client