Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
File: fsgd4tovClqrQYJhS7zF5BPVUhs.mft (raw, json)
Hash identifier: a3kiZrHvo0u/IpSXqwKh6cTiEBVNxUXHLdzSfLVjAQ0=
Subject key identifier: 31:80:92:BB:0A:1F:E2:B0:40:22:DC:8C:03:81:DD:4A:D5:8E:8D:FA
Authority key identifier: 7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
Certificate issuer: /CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Certificate serial: 01984AE5A68614678B8F90A2A06AF9F50B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 08:00:20 +0000
Manifest this update: Sun 27 Jul 2025 08:00:20 +0000
Manifest next update: Mon 28 Jul 2025 08:00:20 +0000
Files and hashes: 1: Bm4fWDiAgtSgEEDsoqVp0hZs-1U.roa (hash: 4AYDFkMaa0ydrctcy3Ily/9B1nza0T1CPUGQdlaU1vk=)
2: fsgd4tovClqrQYJhS7zF5BPVUhs.crl (hash: n7Tl8ZnWeeoHKKJPpqm7XcQI4HkmzRP+oIx39SjGKr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:a6:86:14:67:8b:8f:90:a2:a0:6a:f9:f5:0b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Validity
Not Before: Jul 27 08:00:20 2025 GMT
Not After : Jul 28 08:00:20 2025 GMT
Subject: CN=318092bb0a1fe2b04022dc8c0381dd4ad58e8dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:bc:4c:57:ca:56:00:7c:b8:ae:67:19:ff:
90:cc:41:0b:2a:15:84:9e:c8:20:82:e1:7d:fe:5a:
06:e0:db:65:e2:b4:a3:95:02:23:af:03:24:0b:a4:
f2:52:27:5e:c3:d0:f3:d8:a9:75:98:06:ad:d0:4b:
9f:ea:b9:0e:0a:13:f7:d9:1f:1e:3e:c3:16:03:47:
a6:19:a3:84:ca:c4:fb:85:83:e7:80:85:ec:fa:d1:
36:e8:61:fb:74:a4:df:7a:96:d4:60:2a:75:31:78:
20:f4:78:6e:4f:4b:04:03:cd:84:fd:85:99:cd:c8:
10:f5:86:10:ce:4a:7d:92:82:c8:6b:7d:04:68:f0:
44:b7:43:de:27:f3:a0:af:f8:14:9b:28:f4:25:36:
63:04:ae:fb:2b:88:a8:8d:5e:e4:d6:40:7d:3c:53:
3b:34:12:54:03:d9:a4:1e:68:d2:b4:54:3c:a3:c8:
81:ce:a6:df:5b:ac:5e:8a:a0:44:32:74:cc:55:9a:
fa:81:2c:45:c7:6f:99:25:44:29:23:7e:0d:85:6b:
2f:40:40:d9:34:3e:19:23:51:6a:ba:1b:05:28:43:
5a:73:3e:f2:9e:cf:a9:c7:f5:a8:08:70:39:c3:9c:
17:44:84:1f:e5:33:89:af:66:12:57:4e:89:0f:6b:
25:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:80:92:BB:0A:1F:E2:B0:40:22:DC:8C:03:81:DD:4A:D5:8E:8D:FA
X509v3 Authority Key Identifier:
keyid:7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:18:fb:82:bf:31:34:2f:df:bb:f5:64:96:88:04:78:3b:e0:
29:d4:14:9a:fb:24:06:1b:57:33:47:4b:9f:7e:9d:d8:c7:08:
2f:41:a3:4d:2b:45:df:18:32:77:09:83:b6:0b:69:b8:df:1c:
25:44:e4:24:88:be:64:d6:90:e3:b5:a4:cc:e2:99:07:2a:c4:
d1:8d:ca:d4:e0:be:80:48:05:85:70:ed:9c:ef:1d:44:4a:91:
53:e9:62:5b:ba:ee:d2:cf:de:6e:e4:d3:4f:d7:7a:ad:19:74:
62:d4:a4:54:da:f4:49:d3:cd:f9:32:6c:72:ac:29:ec:de:7b:
33:52:aa:f0:b5:5e:6e:8e:5b:53:cf:6f:b8:e5:5c:e2:34:39:
86:81:cc:3d:df:58:33:c4:6a:74:3a:e9:3e:3d:56:b4:b2:ec:
fd:ef:41:f2:52:1d:d2:c3:8d:aa:98:9b:9d:a9:6c:af:00:3c:
90:cd:ca:16:ad:a0:0b:ee:5c:77:9a:71:ae:fc:36:fd:f6:c9:
15:c9:00:d9:8c:f6:80:5a:55:c2:3b:2d:1d:d0:d5:81:d8:46:
87:ca:f2:9c:8b:8d:50:81:65:16:f6:f5:67:e9:f4:29:2c:3a:
28:f7:c1:03:32:f6:f0:e0:e7:71:d2:aa:b1:b3:a8:85:18:46:
8a:2e:84:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5aaGFGeLj5CioGr59Qs8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzgxZGUyZGEyZjBhNWFhYjQxODI2MTRiYmNjNWU0MTNk
NTUyMWIwHhcNMjUwNzI3MDgwMDIwWhcNMjUwNzI4MDgwMDIwWjAzMTEwLwYDVQQD
EygzMTgwOTJiYjBhMWZlMmIwNDAyMmRjOGMwMzgxZGQ0YWQ1OGU4ZGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtou8TFfKVgB8uK5nGf+QzEELKhWE
nsggguF9/loG4Ntl4rSjlQIjrwMkC6TyUidew9Dz2Kl1mAat0Euf6rkOChP32R8e
PsMWA0emGaOEysT7hYPngIXs+tE26GH7dKTfepbUYCp1MXgg9HhuT0sEA82E/YWZ
zcgQ9YYQzkp9koLIa30EaPBEt0PeJ/Ogr/gUmyj0JTZjBK77K4iojV7k1kB9PFM7
NBJUA9mkHmjStFQ8o8iBzqbfW6xeiqBEMnTMVZr6gSxFx2+ZJUQpI34NhWsvQEDZ
ND4ZI1FquhsFKENacz7yns+px/WoCHA5w5wXRIQf5TOJr2YSV06JD2slpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGAkrsKH+KwQCLcjAOB3UrVjo36MB8GA1UdIwQY
MBaAFH7IHeLaLwpaq0GCYUu8xeQT1VIbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNnZDR0b3ZDbHFyUVlKaFM3ekY1QlBWVWhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wOTg1ZTctZGYwOC00MmE1LTlhODYt
YmQ5MWU5MmFjYTkwLzEvZnNnZDR0b3ZDbHFyUVlKaFM3ekY1QlBWVWhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8wOTg1ZTctZGYwOC00MmE1LTlhODYtYmQ5MWU5MmFjYTkw
LzEvZnNnZDR0b3ZDbHFyUVlKaFM3ekY1QlBWVWhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBj7gr8x
NC/fu/VklogEeDvgKdQUmvskBhtXM0dLn36d2McIL0GjTStF3xgydwmDtgtpuN8c
JUTkJIi+ZNaQ47WkzOKZByrE0Y3K1OC+gEgFhXDtnO8dREqRU+liW7ru0s/ebuTT
T9d6rRl0YtSkVNr0SdPN+TJscqwp7N57M1Kq8LVebo5bU89vuOVc4jQ5hoHMPd9Y
M8RqdDrpPj1WtLLs/e9B8lId0sONqpibnalsrwA8kM3KFq2gC+5cd5pxrvw2/fbJ
FckA2Yz2gFpVwjstHdDVgdhGh8rynIuNUIFlFvb1Z+n0KSw6KPfBAzL28ODncdKq
sbOohRhGii6E/A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:46:53 2025 by rpki-client