Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
File: fi7aaVKwPoukWZe-YV16vuF4T4M.mft (raw, json)
Hash identifier: DuxXlRfP4vXI6QRVUUi7ZYcVOEkl/wuXOMeleKShz34=
Subject key identifier: DD:43:F0:6B:D1:C1:C1:B1:6C:B4:75:2C:7E:D1:C4:BE:20:6B:83:7D
Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
Certificate issuer: /CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Certificate serial: 01983FF47BF081B792808437A135BE849682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
Manifest number: 0A22
Signing time: Fri 25 Jul 2025 05:00:43 +0000
Manifest this update: Fri 25 Jul 2025 05:00:43 +0000
Manifest next update: Sat 26 Jul 2025 05:00:43 +0000
Files and hashes: 1: CIh-n620dapiChf7Qz9UJJ0kAYM.roa (hash: FBemJczTUCPxIUZPk0jDQbmKS7wDmu5CZBeaJ9h/Hsg=)
2: fi7aaVKwPoukWZe-YV16vuF4T4M.crl (hash: zpBEf1/HCMs89skTc+fbfp4+nUQtsVoDYIn+k2UAI+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:f4:7b:f0:81:b7:92:80:84:37:a1:35:be:84:96:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Validity
Not Before: Jul 25 05:00:43 2025 GMT
Not After : Jul 26 05:00:43 2025 GMT
Subject: CN=dd43f06bd1c1c1b16cb4752c7ed1c4be206b837d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:ac:ea:cc:6c:a0:c8:82:3e:8a:e4:32:b9:
11:34:c3:38:cb:6d:e5:18:ab:42:b2:c6:c4:43:98:
33:9b:2f:26:c6:93:16:01:39:56:06:10:46:16:54:
59:80:d7:fc:91:a5:63:8a:06:e8:74:0c:9e:1b:19:
64:91:59:5e:99:21:09:89:30:78:85:0d:67:c4:63:
52:37:52:7f:eb:e4:4c:7c:76:41:ce:cd:30:e4:1a:
65:14:c0:aa:a4:41:cf:14:7b:a1:6b:4f:ac:20:4a:
3b:00:dc:f9:e1:22:b8:d4:70:0f:9d:f1:3c:cc:b6:
d6:89:8f:20:e7:e1:fd:d4:84:9f:34:74:2e:c3:9c:
64:5c:d4:67:4c:15:2c:35:d7:1f:7e:85:2f:9f:67:
e4:5c:f5:e1:ea:2f:c1:93:67:c0:61:5c:ea:fb:6f:
2c:ed:c4:8b:cf:e7:97:eb:fd:86:9f:13:93:e6:1f:
96:15:45:9b:38:de:98:f6:68:9a:95:91:21:d6:f3:
22:a1:4b:2e:6b:eb:56:e6:e1:54:e5:6e:03:7c:81:
34:ce:4d:fe:8d:e7:da:90:72:0b:01:c5:14:7b:d2:
3d:65:e8:a4:d5:f3:c2:81:d7:01:dd:29:15:c0:a2:
4b:a3:85:01:ae:bc:bb:6c:b9:7c:7b:d9:b0:26:b7:
af:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:43:F0:6B:D1:C1:C1:B1:6C:B4:75:2C:7E:D1:C4:BE:20:6B:83:7D
X509v3 Authority Key Identifier:
keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:44:2d:3a:44:de:0b:12:04:ed:45:91:52:0e:53:7b:17:72:
05:97:07:3b:dc:3c:a8:63:65:38:14:6b:6b:2d:57:d6:85:40:
3d:d4:fe:35:f2:f7:c4:7f:8e:52:54:82:dc:40:54:7c:8b:e9:
76:1f:0f:dd:7c:21:64:74:7d:4f:27:f4:ad:7b:2c:d6:70:9e:
e6:01:c4:4b:f6:a4:59:b2:63:2a:11:84:d0:88:c1:7a:99:4e:
35:93:e4:2d:cd:af:1c:9e:66:4c:90:f3:8f:0e:b2:f4:42:45:
1b:34:98:d2:96:24:ae:d1:ff:01:43:d9:50:62:e6:98:61:c7:
62:14:b3:95:2d:86:e5:8e:04:b5:53:4d:d4:fa:9d:68:89:46:
e2:1b:9a:34:be:a3:08:c5:d7:51:f6:82:e9:de:82:54:f6:7d:
45:2d:06:54:13:8f:58:61:22:f3:b5:b0:b8:ae:3a:0d:c8:9c:
9b:4f:b7:d4:d2:d9:ab:c7:29:e8:93:ca:58:e4:d5:f4:45:c2:
6d:81:a6:88:69:87:36:ac:e6:e2:69:7b:cb:79:e8:21:aa:c0:
43:fb:f6:c9:86:46:2d:99:54:d0:1b:77:85:d4:43:0c:7e:60:
f3:84:b8:36:55:51:fd:52:74:0d:88:04:03:bf:48:ed:ed:1c:
f7:67:8e:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg/9HvwgbeSgIQ3oTW+hJaCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMmVkYTY5NTJiMDNlOGJhNDU5OTdiZTYxNWQ3YWJlZTE3
ODRmODMwHhcNMjUwNzI1MDUwMDQzWhcNMjUwNzI2MDUwMDQzWjAzMTEwLwYDVQQD
EyhkZDQzZjA2YmQxYzFjMWIxNmNiNDc1MmM3ZWQxYzRiZTIwNmI4MzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+es6sxsoMiCPorkMrkRNMM4y23l
GKtCssbEQ5gzmy8mxpMWATlWBhBGFlRZgNf8kaVjigbodAyeGxlkkVlemSEJiTB4
hQ1nxGNSN1J/6+RMfHZBzs0w5BplFMCqpEHPFHuha0+sIEo7ANz54SK41HAPnfE8
zLbWiY8g5+H91ISfNHQuw5xkXNRnTBUsNdcffoUvn2fkXPXh6i/Bk2fAYVzq+28s
7cSLz+eX6/2GnxOT5h+WFUWbON6Y9mialZEh1vMioUsua+tW5uFU5W4DfIE0zk3+
jefakHILAcUUe9I9Zeik1fPCgdcB3SkVwKJLo4UBrry7bLl8e9mwJrevmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1D8GvRwcGxbLR1LH7RxL4ga4N9MB8GA1UdIwQY
MBaAFH4u2mlSsD6LpFmXvmFder7heE+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmk3YWFWS3dQb3VrV1plLVlWMTZ2dUY0VDRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zODA0MDAtZGMyZS00OTRhLTg5MWEt
MmYyMzAwYjZlM2Q5LzEvZmk3YWFWS3dQb3VrV1plLVlWMTZ2dUY0VDRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zODA0MDAtZGMyZS00OTRhLTg5MWEtMmYyMzAwYjZlM2Q5
LzEvZmk3YWFWS3dQb3VrV1plLVlWMTZ2dUY0VDRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaUQtOkTe
CxIE7UWRUg5TexdyBZcHO9w8qGNlOBRray1X1oVAPdT+NfL3xH+OUlSC3EBUfIvp
dh8P3XwhZHR9Tyf0rXss1nCe5gHES/akWbJjKhGE0IjBeplONZPkLc2vHJ5mTJDz
jw6y9EJFGzSY0pYkrtH/AUPZUGLmmGHHYhSzlS2G5Y4EtVNN1PqdaIlG4huaNL6j
CMXXUfaC6d6CVPZ9RS0GVBOPWGEi87WwuK46Dcicm0+31NLZq8cp6JPKWOTV9EXC
bYGmiGmHNqzm4ml7y3noIarAQ/v2yYZGLZlU0Bt3hdRDDH5g84S4NlVR/VJ0DYgE
A79I7e0c92eOBw==
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:45:26 2025 by rpki-client