Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier: Fx0dUwmxVRM/zDPnormUNgaqMuuZqONqfqr1zgC78O4=
Subject key identifier: FB:D1:05:34:EA:EC:5D:33:95:47:E8:25:22:5F:92:35:EE:19:B3:AD
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 01985268C1253C645301013D124B4EC41298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number: 1607
Signing time: Mon 28 Jul 2025 19:00:53 +0000
Manifest this update: Mon 28 Jul 2025 19:00:53 +0000
Manifest next update: Tue 29 Jul 2025 19:00:53 +0000
Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: UAkArlwX9MGpEvzIMvgE/TINvkjWrr6UKq8aZWyEQ78=)
2: ghOgZScInzU-k80H-uXo6Z44fh4.roa (hash: lvvfvqGDTHXluMikuB2xTzxX/lcqRvi6zFraBkTfrlc=)
3: y-KKayWDkSAQJ7WHnrYBMGYeW7s.roa (hash: eQq4AAV0PFKKGDw6XQHABkksm4Mts0DM9GmL48be7Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:c1:25:3c:64:53:01:01:3d:12:4b:4e:c4:12:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Jul 28 19:00:53 2025 GMT
Not After : Jul 29 19:00:53 2025 GMT
Subject: CN=fbd10534eaec5d339547e825225f9235ee19b3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3c:22:c2:65:3a:b9:64:0f:a4:dc:f3:ea:0c:
28:73:3c:c3:db:ea:a4:df:94:37:b7:c8:10:ea:eb:
7f:6d:48:81:83:4f:e3:29:d9:5e:27:39:84:d7:7f:
f9:bc:1f:f5:2a:17:61:90:cc:3d:51:8c:6d:97:42:
1c:a9:d8:51:e9:de:ec:f7:0e:3d:f9:c8:80:6a:ef:
5c:1d:59:58:1a:2f:b5:df:df:27:90:43:d1:99:42:
06:74:29:95:d8:c9:93:b7:14:db:16:4e:fe:63:a4:
e4:bf:4c:51:63:42:e1:48:0d:56:76:bf:6d:d5:5b:
85:bb:4c:90:00:30:2d:52:5d:c7:52:99:38:bf:05:
95:4e:99:57:a9:70:7e:b6:fd:d1:b2:a6:37:88:19:
cd:26:1e:2b:e3:a4:47:4a:54:13:c3:0a:7d:04:74:
80:99:f1:7f:a6:9e:fd:f8:da:76:fa:cc:48:6d:0a:
57:65:39:fb:eb:46:50:5a:f3:b9:bf:13:da:c4:56:
7a:b7:6e:2b:02:73:c7:a2:06:d4:af:aa:be:34:f6:
d9:8c:b2:18:54:f8:13:27:f4:8c:54:e9:bc:c2:b9:
bd:12:ae:77:7d:98:d0:96:53:0f:f8:6f:aa:29:4b:
ed:e5:dc:1a:68:80:9f:52:77:1c:7d:5d:6d:58:03:
21:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D1:05:34:EA:EC:5D:33:95:47:E8:25:22:5F:92:35:EE:19:B3:AD
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:fa:9f:49:54:24:67:fd:b5:cf:04:c6:3c:48:0b:df:e9:09:
25:b8:bc:c1:48:f0:f8:15:22:00:cd:d4:42:cb:5a:2b:2c:31:
1c:a5:90:53:8d:ea:85:9c:8d:90:2b:28:56:c5:fb:bc:db:50:
e6:96:79:be:04:62:da:cb:a4:f8:65:65:50:ac:94:c8:c0:4b:
c2:db:e4:21:4c:a9:ef:9c:90:f2:ff:76:1e:ff:6e:f3:ee:04:
56:e0:9b:57:a7:74:b4:1e:9d:31:2a:84:27:37:64:2e:32:84:
6e:14:f5:6a:40:47:ed:38:bf:d2:64:28:5e:53:f6:9b:4e:8e:
38:dc:4a:05:13:af:f9:78:f0:27:8f:84:7b:e0:0b:47:bb:4f:
dc:4d:81:9b:f6:b2:7c:72:88:ef:cc:77:cc:2f:11:59:4c:b1:
28:23:fe:a0:32:c5:8d:9f:ed:e2:8b:e8:14:58:c5:a5:f7:a2:
81:8b:09:c8:33:03:03:64:24:8d:14:d7:df:87:4e:cd:ab:c8:
ab:83:69:88:de:88:02:79:6c:87:9b:fa:d7:22:61:47:8a:e2:
7e:00:48:09:13:c0:92:42:78:64:27:8a:87:b8:db:a5:30:64:
6e:99:49:88:9f:6f:25:b9:87:a7:55:f1:ca:9a:9b:4e:57:ae:
62:13:67:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhSaMElPGRTAQE9EktOxBKYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NDczN2Q4YTQ4NGQxMjUzNGNhNDBmOGRkODE4YTU4OGMz
YjNkZTIwHhcNMjUwNzI4MTkwMDUzWhcNMjUwNzI5MTkwMDUzWjAzMTEwLwYDVQQD
EyhmYmQxMDUzNGVhZWM1ZDMzOTU0N2U4MjUyMjVmOTIzNWVlMTliM2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzwiwmU6uWQPpNzz6gwoczzD2+qk
35Q3t8gQ6ut/bUiBg0/jKdleJzmE13/5vB/1KhdhkMw9UYxtl0IcqdhR6d7s9w49
+ciAau9cHVlYGi+1398nkEPRmUIGdCmV2MmTtxTbFk7+Y6Tkv0xRY0LhSA1Wdr9t
1VuFu0yQADAtUl3HUpk4vwWVTplXqXB+tv3RsqY3iBnNJh4r46RHSlQTwwp9BHSA
mfF/pp79+Np2+sxIbQpXZTn760ZQWvO5vxPaxFZ6t24rAnPHogbUr6q+NPbZjLIY
VPgTJ/SMVOm8wrm9Eq53fZjQllMP+G+qKUvt5dwaaICfUnccfV1tWAMhswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvRBTTq7F0zlUfoJSJfkjXuGbOtMB8GA1UdIwQY
MBaAFBdHN9ikhNElNMpA+N2BiliMOz3iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjBjMzJLU0UwU1UweWtENDNZR0tXSXc3UGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xOTMyNGEtMDYxNi00NWQ0LTliNTMt
N2I3NDZlYTFhYjgyLzEvRjBjMzJLU0UwU1UweWtENDNZR0tXSXc3UGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xOTMyNGEtMDYxNi00NWQ0LTliNTMtN2I3NDZlYTFhYjgy
LzEvRjBjMzJLU0UwU1UweWtENDNZR0tXSXc3UGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANvqfSVQk
Z/21zwTGPEgL3+kJJbi8wUjw+BUiAM3UQstaKywxHKWQU43qhZyNkCsoVsX7vNtQ
5pZ5vgRi2suk+GVlUKyUyMBLwtvkIUyp75yQ8v92Hv9u8+4EVuCbV6d0tB6dMSqE
JzdkLjKEbhT1akBH7Ti/0mQoXlP2m06OONxKBROv+XjwJ4+Ee+ALR7tP3E2Bm/ay
fHKI78x3zC8RWUyxKCP+oDLFjZ/t4ovoFFjFpfeigYsJyDMDA2QkjRTX34dOzavI
q4NpiN6IAnlsh5v61yJhR4rifgBICRPAkkJ4ZCeKh7jbpTBkbplJiJ9vJbmHp1Xx
ypqbTleuYhNnxQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:43:07 2025 by rpki-client