Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
File: FIa0oIrOYOZw7c2J-tslQBFWL1M.mft (raw, json)
Hash identifier: q6wNsSTnLWWu7yzMdqcgMn25IrkoVLcm27P5V5Juc8I=
Subject key identifier: 26:8B:9E:53:02:9F:9A:82:27:F4:22:35:6A:D8:97:58:A3:69:6E:9B
Authority key identifier: 14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
Certificate issuer: /CN=1486b4a08ace60e670edcd89fadb254011562f53
Certificate serial: 01984A4104C1F484B71DE869A0D5F12E19F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
Manifest number: 0490
Signing time: Sun 27 Jul 2025 05:00:31 +0000
Manifest this update: Sun 27 Jul 2025 05:00:31 +0000
Manifest next update: Mon 28 Jul 2025 05:00:31 +0000
Files and hashes: 1: 0hE7yQkOsQYY1LQEos4wbxzkfnM.roa (hash: 70ia36yz/7UQliy+dQ5lEepwXI+ufgIzVRbaE7lLztM=)
2: FIa0oIrOYOZw7c2J-tslQBFWL1M.crl (hash: i3prmPwbswAFui3xWgi7TX8K9KxfSKYbLgll9U1egUk=)
3: YQdnp2VC261uNxqE4Oc-a1f9tGg.roa (hash: XivO/rYxkKb4OFfhsRiFIwL10Nr1ukhnz5M4clOZFnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:04:c1:f4:84:b7:1d:e8:69:a0:d5:f1:2e:19:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1486b4a08ace60e670edcd89fadb254011562f53
Validity
Not Before: Jul 27 05:00:31 2025 GMT
Not After : Jul 28 05:00:31 2025 GMT
Subject: CN=268b9e53029f9a8227f422356ad89758a3696e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ba:ad:af:2d:49:dc:7d:30:a3:f3:98:b7:33:
16:02:58:1d:1e:11:0d:40:27:be:69:9b:38:66:24:
c6:29:7e:64:45:a6:47:29:8d:51:1d:94:37:b0:29:
66:00:3d:36:b3:6f:1a:49:35:80:03:6b:81:ba:7d:
2f:e4:9b:6a:71:e9:e1:c3:75:b1:e2:48:44:b5:71:
bf:aa:fa:3a:c0:d5:0c:a3:3c:8e:e5:8e:bd:43:30:
75:87:3e:f4:83:ca:db:96:d0:84:24:35:65:0b:b2:
50:01:33:aa:78:f4:5f:74:c0:85:6a:1e:8f:a8:0a:
c9:99:5e:df:49:da:cf:30:66:65:8d:a7:c1:34:8e:
c3:c5:bf:77:7a:42:ef:af:fe:8b:d2:0f:0e:1d:23:
71:d4:5c:3b:37:cd:04:5e:57:52:a4:10:78:19:c8:
e8:21:d5:c5:67:e4:db:03:7d:36:c7:c5:de:56:61:
eb:c0:8f:dd:03:c8:e2:6c:f2:6b:7a:db:29:08:59:
e4:85:e6:4d:15:b5:ad:89:13:a6:69:1a:ad:03:e6:
1c:7d:52:08:0a:5a:11:14:6a:77:7f:d8:76:f4:c9:
80:13:29:88:b0:43:a9:d8:00:94:cb:08:39:7b:73:
06:5a:33:ef:c0:2c:99:a4:58:ce:f2:19:2d:1d:59:
3e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8B:9E:53:02:9F:9A:82:27:F4:22:35:6A:D8:97:58:A3:69:6E:9B
X509v3 Authority Key Identifier:
keyid:14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:df:62:b0:4a:7e:76:f0:d8:5c:07:f0:55:3f:27:3e:3d:61:
8a:25:b2:e6:c2:e7:34:d2:ae:dc:69:56:e2:b5:8f:05:38:22:
80:0f:96:43:10:e9:0a:b2:7b:80:f1:cd:e3:0f:06:5a:78:ff:
32:3e:17:ee:d3:c0:52:6a:60:3f:b9:34:8d:0b:cf:82:18:42:
1d:cc:56:cb:d9:83:7f:03:de:d2:a2:f8:0c:a5:63:0d:f7:0a:
9b:2e:87:6c:e5:ba:08:7e:55:40:95:6e:f7:53:f5:82:ca:f5:
17:04:3e:1d:54:63:70:8f:44:9c:ea:07:15:6b:14:8b:55:63:
34:78:62:36:43:2d:22:12:ca:79:b2:ef:60:ea:0b:0d:72:36:
67:8e:73:e7:35:63:d5:b9:41:5f:eb:2e:2f:1f:b7:eb:f1:67:
c9:2c:53:05:8d:67:9c:b5:5b:98:1d:76:23:7b:81:51:8d:8b:
58:c3:c9:9d:07:e0:09:97:e5:b5:18:54:d9:4f:d4:30:49:a1:
6b:d3:65:84:95:26:15:31:0c:88:27:7a:ec:c9:ef:83:81:e4:
9f:07:40:f7:b7:14:c7:4e:c6:2b:66:92:ad:75:60:0c:62:e7:
ee:64:02:b6:79:83:2e:a4:ad:48:2f:26:17:50:36:04:f3:c2:
77:a7:4b:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQQTB9IS3HehpoNXxLhnwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ODZiNGEwOGFjZTYwZTY3MGVkY2Q4OWZhZGIyNTQwMTE1
NjJmNTMwHhcNMjUwNzI3MDUwMDMxWhcNMjUwNzI4MDUwMDMxWjAzMTEwLwYDVQQD
EygyNjhiOWU1MzAyOWY5YTgyMjdmNDIyMzU2YWQ4OTc1OGEzNjk2ZTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprqtry1J3H0wo/OYtzMWAlgdHhEN
QCe+aZs4ZiTGKX5kRaZHKY1RHZQ3sClmAD02s28aSTWAA2uBun0v5Jtqcenhw3Wx
4khEtXG/qvo6wNUMozyO5Y69QzB1hz70g8rbltCEJDVlC7JQATOqePRfdMCFah6P
qArJmV7fSdrPMGZljafBNI7Dxb93ekLvr/6L0g8OHSNx1Fw7N80EXldSpBB4Gcjo
IdXFZ+TbA302x8XeVmHrwI/dA8jibPJretspCFnkheZNFbWtiROmaRqtA+YcfVII
CloRFGp3f9h29MmAEymIsEOp2ACUywg5e3MGWjPvwCyZpFjO8hktHVk+zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaLnlMCn5qCJ/QiNWrYl1ijaW6bMB8GA1UdIwQY
MBaAFBSGtKCKzmDmcO3NifrbJUARVi9TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRklhMG9Jck9ZT1p3N2MySi10c2xRQkZXTDFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iYjkxODItY2Q3Ny00ZGQwLWJmMTUt
ZTgxODdmMzQ0YzgwLzEvRklhMG9Jck9ZT1p3N2MySi10c2xRQkZXTDFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iYjkxODItY2Q3Ny00ZGQwLWJmMTUtZTgxODdmMzQ0Yzgw
LzEvRklhMG9Jck9ZT1p3N2MySi10c2xRQkZXTDFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1N9isEp+
dvDYXAfwVT8nPj1hiiWy5sLnNNKu3GlW4rWPBTgigA+WQxDpCrJ7gPHN4w8GWnj/
Mj4X7tPAUmpgP7k0jQvPghhCHcxWy9mDfwPe0qL4DKVjDfcKmy6HbOW6CH5VQJVu
91P1gsr1FwQ+HVRjcI9EnOoHFWsUi1VjNHhiNkMtIhLKebLvYOoLDXI2Z45z5zVj
1blBX+suLx+36/FnySxTBY1nnLVbmB12I3uBUY2LWMPJnQfgCZfltRhU2U/UMEmh
a9NlhJUmFTEMiCd67Mnvg4HknwdA97cUx07GK2aSrXVgDGLn7mQCtnmDLqStSC8m
F1A2BPPCd6dLIQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 14:55:48 2025 by rpki-client