Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
File: FZjXXo4y1ehH30qho1wpNEyXbiY.mft (raw, json)
Hash identifier: WxG+g/HYcZVFaW6YbpslVLNHPr7Db3lKIHSNsOsZsyI=
Subject key identifier: 85:C5:7B:10:86:64:9B:A7:A4:BB:E9:24:24:E3:E3:47:A2:27:37:C5
Authority key identifier: 15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26
Certificate issuer: /CN=1598d75e8e32d5e847df4aa1a35c29344c976e26
Certificate serial: 01984AE5704B5557EEC3CC6233C22AB010D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
Manifest number: 0FD4
Signing time: Sun 27 Jul 2025 08:00:07 +0000
Manifest this update: Sun 27 Jul 2025 08:00:07 +0000
Manifest next update: Mon 28 Jul 2025 08:00:07 +0000
Files and hashes: 1: AIRZFXDpY9mQ7Mvu8kYb8OBEtUo.roa (hash: d5gxdyXpVK75f5B2dssNKeXHA5IUThR6PGmkaU8utQY=)
2: FZjXXo4y1ehH30qho1wpNEyXbiY.crl (hash: ejmJWAMuTyVJfHnrsJ0FGhCRNkntqLXUqs+ZBSKqPCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:70:4b:55:57:ee:c3:cc:62:33:c2:2a:b0:10:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1598d75e8e32d5e847df4aa1a35c29344c976e26
Validity
Not Before: Jul 27 08:00:07 2025 GMT
Not After : Jul 28 08:00:07 2025 GMT
Subject: CN=85c57b1086649ba7a4bbe92424e3e347a22737c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5a:62:28:02:be:09:56:ba:ad:5a:a2:d4:41:
90:39:e2:37:2c:50:4b:82:22:7f:f8:b0:84:36:d0:
2d:b4:6d:51:f0:9c:b2:d8:cf:ec:47:a4:48:73:0c:
fb:7f:91:a7:f5:45:0a:5b:cf:c2:be:73:23:0b:28:
85:0b:d9:9b:b3:70:f9:a6:12:97:f3:a2:60:11:70:
6c:a5:4c:e8:d0:09:2c:1e:ce:e7:24:d6:75:44:d0:
ce:22:15:50:7f:07:5e:56:e8:84:2a:54:a7:0e:28:
b2:07:85:bd:39:74:09:cb:76:9b:4e:50:dd:3c:f7:
7d:2f:33:a8:0e:35:e5:b8:93:1e:c9:69:bf:24:ae:
76:bd:84:e0:11:60:b3:50:1c:93:3a:00:3a:33:4c:
76:95:0a:f3:9c:58:54:7a:af:04:a5:24:3c:ca:36:
d6:d4:be:ba:03:56:3f:88:f8:c0:97:0b:3d:63:96:
81:0d:8b:a2:bf:be:92:96:2a:a7:0b:ab:ae:ab:76:
16:7a:63:87:37:9a:b4:1a:ea:89:96:0e:48:8b:b9:
e5:f9:bc:9c:26:d7:cf:7e:09:79:f8:ed:bc:dc:64:
d8:12:25:43:04:8e:46:29:e8:1b:3f:60:ba:5b:06:
22:ae:0f:db:57:8c:8e:b1:92:39:c8:04:18:0b:66:
73:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C5:7B:10:86:64:9B:A7:A4:BB:E9:24:24:E3:E3:47:A2:27:37:C5
X509v3 Authority Key Identifier:
keyid:15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ad:c5:fb:50:eb:47:74:2c:45:f9:72:9a:72:e1:20:e3:d5:
b1:c7:d0:24:e4:df:02:e7:11:1d:d2:f3:b7:dc:78:1d:09:13:
e6:8b:31:4c:b4:98:61:b7:0d:6d:b5:2d:a5:0c:2e:d3:f5:76:
48:aa:ef:29:b4:29:f9:0f:48:57:9d:1f:b4:ca:44:88:0a:2e:
c4:e9:e7:01:e1:17:7e:9e:52:79:21:02:68:fa:b6:77:21:ab:
25:54:35:01:83:74:27:13:f4:1b:e3:fe:12:fb:fc:f0:35:a3:
a0:1c:37:e5:3a:fd:cb:93:08:fe:31:1f:f7:19:c9:6b:88:4c:
19:83:81:00:51:09:77:db:51:70:ca:af:c6:e7:c4:64:72:2a:
4a:7c:1d:ca:03:c2:ac:7e:a1:66:36:c2:51:52:dd:34:9e:b1:
1b:b4:92:7e:a1:fe:33:90:60:ad:62:c8:2a:c1:e0:bb:74:53:
e0:8c:b4:e5:5c:75:71:00:16:e9:c0:0b:72:eb:e8:36:45:ac:
60:81:99:40:f7:63:14:54:cc:59:55:21:ab:bc:8e:5b:40:f4:
d6:b0:7c:77:05:43:ca:e6:98:40:72:dd:10:d4:2f:af:06:9e:
89:b4:17:00:07:54:22:5b:63:ee:81:43:a8:40:be:be:3b:12:
2c:32:ef:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5XBLVVfuw8xiM8IqsBDVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OThkNzVlOGUzMmQ1ZTg0N2RmNGFhMWEzNWMyOTM0NGM5
NzZlMjYwHhcNMjUwNzI3MDgwMDA3WhcNMjUwNzI4MDgwMDA3WjAzMTEwLwYDVQQD
Eyg4NWM1N2IxMDg2NjQ5YmE3YTRiYmU5MjQyNGUzZTM0N2EyMjczN2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklpiKAK+CVa6rVqi1EGQOeI3LFBL
giJ/+LCENtAttG1R8Jyy2M/sR6RIcwz7f5Gn9UUKW8/CvnMjCyiFC9mbs3D5phKX
86JgEXBspUzo0AksHs7nJNZ1RNDOIhVQfwdeVuiEKlSnDiiyB4W9OXQJy3abTlDd
PPd9LzOoDjXluJMeyWm/JK52vYTgEWCzUByTOgA6M0x2lQrznFhUeq8EpSQ8yjbW
1L66A1Y/iPjAlws9Y5aBDYuiv76SliqnC6uuq3YWemOHN5q0GuqJlg5Ii7nl+byc
JtfPfgl5+O283GTYEiVDBI5GKegbP2C6WwYirg/bV4yOsZI5yAQYC2ZzcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXFexCGZJunpLvpJCTj40eiJzfFMB8GA1UdIwQY
MBaAFBWY116OMtXoR99KoaNcKTRMl24mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlpqWFhvNHkxZWhIMzBxaG8xd3BORXlYYmlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84MjZhNWItNjM4Zi00NjFiLWEyNGIt
M2JjNmJjMzA2Zjg5LzEvRlpqWFhvNHkxZWhIMzBxaG8xd3BORXlYYmlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC84MjZhNWItNjM4Zi00NjFiLWEyNGItM2JjNmJjMzA2Zjg5
LzEvRlpqWFhvNHkxZWhIMzBxaG8xd3BORXlYYmlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADq3F+1Dr
R3QsRflymnLhIOPVscfQJOTfAucRHdLzt9x4HQkT5osxTLSYYbcNbbUtpQwu0/V2
SKrvKbQp+Q9IV50ftMpEiAouxOnnAeEXfp5SeSECaPq2dyGrJVQ1AYN0JxP0G+P+
Evv88DWjoBw35Tr9y5MI/jEf9xnJa4hMGYOBAFEJd9tRcMqvxufEZHIqSnwdygPC
rH6hZjbCUVLdNJ6xG7SSfqH+M5BgrWLIKsHgu3RT4Iy05Vx1cQAW6cALcuvoNkWs
YIGZQPdjFFTMWVUhq7yOW0D01rB8dwVDyuaYQHLdENQvrwaeibQXAAdUIltj7oFD
qEC+vjsSLDLvQQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:34:17 2025 by rpki-client