Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json)
Hash identifier: yIpHavg4BZ8oJMwsETJDRH/j97V6K593TJRA960sVkQ=
Subject key identifier: F2:5E:82:EA:08:4C:DA:7F:F4:53:55:EB:13:3A:0F:EE:9B:DC:B2:6D
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 019845BF56608682939CA974D661FCDD5186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
Manifest number: 065F
Signing time: Sat 26 Jul 2025 08:00:24 +0000
Manifest this update: Sat 26 Jul 2025 08:00:24 +0000
Manifest next update: Sun 27 Jul 2025 08:00:24 +0000
Files and hashes: 1: FMNkZJoHrRisEbCcPWeUHdhI86A.roa (hash: paD5OOYCpRpj8ezEgXpHbijclGA5nYbWBOTSmRgeVAk=)
2: NndyVqvy3vcxCnZsIK2_Uyxv0lk.roa (hash: cAwKtSP7N0kxacGJxtWaLz9RZYIS8hQUwg7TB0bpnnY=)
3: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: Z4tThbaM3Myami/QyZzyJ4k99jAMb6DZW0odbuXgwbg=)
4: mstAyx12aWOmsAotqkQqmXEkSDg.roa (hash: byYvZvloKw8W9tmcb0fLz0nJIghsJPutICFz6epq2WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:56:60:86:82:93:9c:a9:74:d6:61:fc:dd:51:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Jul 26 08:00:24 2025 GMT
Not After : Jul 27 08:00:24 2025 GMT
Subject: CN=f25e82ea084cda7ff45355eb133a0fee9bdcb26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5d:5b:70:3c:48:2a:4f:5b:71:66:7c:63:ae:
eb:9a:a0:85:c5:4d:a4:aa:7e:ae:c1:4d:10:71:8a:
31:4c:93:ff:10:32:ac:2e:dc:c4:ef:bd:ff:fd:64:
60:ae:28:83:26:e1:54:92:2f:a0:fa:d4:6d:4d:bc:
da:e4:9c:7b:65:49:fb:21:54:cf:72:2b:c4:6d:17:
6b:b4:d5:1e:5e:19:c8:3c:49:53:47:9f:2b:68:79:
83:31:05:52:b6:d7:4e:c6:f2:2b:c9:69:85:a1:09:
9e:16:e0:55:ec:09:3a:cc:ef:cf:4b:e2:da:48:11:
fe:0c:8b:e3:61:0a:e2:2d:85:36:f4:da:9c:dd:b8:
41:78:f0:1b:7a:f5:c3:e4:75:a1:ac:1c:44:51:f3:
65:79:2f:03:a1:fe:f1:48:a3:a5:22:c8:d6:a3:82:
88:63:1a:e2:5f:51:94:b1:63:06:df:e2:e8:ab:ee:
68:ea:96:b4:a9:db:05:1b:ae:23:aa:ae:1f:c6:11:
ba:d2:a3:99:00:c6:f9:9b:a5:c3:82:68:57:cb:e1:
77:f5:24:9d:23:b7:d2:79:f3:23:1e:a9:c3:68:24:
1c:ff:63:33:65:97:02:5d:32:fd:49:9b:05:12:c4:
f8:60:d3:37:82:96:ce:dd:f0:ad:7d:64:b4:93:91:
b6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5E:82:EA:08:4C:DA:7F:F4:53:55:EB:13:3A:0F:EE:9B:DC:B2:6D
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:72:d5:02:fa:32:92:fe:97:ac:67:8b:c0:f8:4f:87:28:99:
7e:d0:f2:ef:2e:87:30:04:38:fd:fc:f4:cc:b6:d9:e4:68:e5:
a9:c4:f0:d0:02:73:12:88:d0:94:44:d2:8a:ff:33:b2:85:17:
32:01:ae:0f:a0:ff:48:a9:54:0e:76:46:51:cf:47:4b:15:44:
db:97:d6:f5:03:b0:54:e4:e5:94:90:d5:bc:09:ae:2d:54:58:
01:86:81:0a:e0:b1:c7:e6:fc:ca:27:51:5b:f5:41:9e:f8:03:
31:2d:81:19:ab:38:98:11:65:16:4d:d7:ec:bd:ac:3d:89:17:
d7:75:03:65:dc:6a:8e:68:c3:68:c2:2d:91:ab:93:17:a8:88:
b7:00:a6:46:2e:bd:a6:b1:4d:7b:12:58:85:e4:e3:2b:43:8c:
69:b9:40:1c:d4:97:f9:bf:06:ed:d6:b2:2a:d7:4d:0d:4a:0e:
d4:04:2b:b4:1c:aa:93:b7:56:77:6d:b3:8f:d2:1e:37:6e:73:
80:3f:f4:5e:b6:a2:97:f3:ba:e1:7b:51:e4:45:17:78:cc:d3:
d4:1d:9c:d1:d4:29:b9:fb:3c:01:2b:ea:68:f6:00:d6:9b:cf:
80:86:c8:d0:09:61:d5:c8:a8:46:df:c2:78:37:6a:e8:f0:42:
43:8f:b6:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFv1ZghoKTnKl01mH83VGGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjM2FiNTVkNTc1MDljYmZhZTc5OGJkNzFhYWEyM2IzNDQ0
ZDhlNWEwHhcNMjUwNzI2MDgwMDI0WhcNMjUwNzI3MDgwMDI0WjAzMTEwLwYDVQQD
EyhmMjVlODJlYTA4NGNkYTdmZjQ1MzU1ZWIxMzNhMGZlZTliZGNiMjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF1bcDxIKk9bcWZ8Y67rmqCFxU2k
qn6uwU0QcYoxTJP/EDKsLtzE773//WRgriiDJuFUki+g+tRtTbza5Jx7ZUn7IVTP
civEbRdrtNUeXhnIPElTR58raHmDMQVSttdOxvIryWmFoQmeFuBV7Ak6zO/PS+La
SBH+DIvjYQriLYU29Nqc3bhBePAbevXD5HWhrBxEUfNleS8Dof7xSKOlIsjWo4KI
YxriX1GUsWMG3+Loq+5o6pa0qdsFG64jqq4fxhG60qOZAMb5m6XDgmhXy+F39SSd
I7fSefMjHqnDaCQc/2MzZZcCXTL9SZsFEsT4YNM3gpbO3fCtfWS0k5G27wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJeguoITNp/9FNV6xM6D+6b3LJtMB8GA1UdIwQY
MBaAFPw6tV1XUJy/rnmL1xqqI7NETY5aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83MjlkYTktZWIwMy00NTFiLWJmZWYt
MGM0NTIxOGU3OTgxLzEvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC83MjlkYTktZWIwMy00NTFiLWJmZWYtMGM0NTIxOGU3OTgx
LzEvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANnLVAvoy
kv6XrGeLwPhPhyiZftDy7y6HMAQ4/fz0zLbZ5GjlqcTw0AJzEojQlETSiv8zsoUX
MgGuD6D/SKlUDnZGUc9HSxVE25fW9QOwVOTllJDVvAmuLVRYAYaBCuCxx+b8yidR
W/VBnvgDMS2BGas4mBFlFk3X7L2sPYkX13UDZdxqjmjDaMItkauTF6iItwCmRi69
prFNexJYheTjK0OMablAHNSX+b8G7dayKtdNDUoO1AQrtByqk7dWd22zj9IeN25z
gD/0Xrail/O64XtR5EUXeMzT1B2c0dQpufs8ASvqaPYA1pvPgIbI0Alh1cioRt/C
eDdq6PBCQ4+2Hw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 12:06:17 2025 by rpki-client