Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
File: fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft (raw, json)
Hash identifier: xxS+pOvgWjzmL7GwsIMRp/+Wq2kLxMlongNEHKcwrIQ=
Subject key identifier: 1B:A9:EC:E8:5C:99:9A:AB:4B:9B:77:88:CA:85:60:A8:C1:76:D7:4B
Authority key identifier: 7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
Certificate issuer: /CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Certificate serial: 0198537AF265AA50A74B939EF2A7AB735D07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
Manifest number: 1603
Signing time: Tue 29 Jul 2025 00:00:22 +0000
Manifest this update: Tue 29 Jul 2025 00:00:22 +0000
Manifest next update: Wed 30 Jul 2025 00:00:22 +0000
Files and hashes: 1: fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl (hash: 1XAe9hMJYT4qOv/L7W3sLD5Jg3K7CPjq+TrrAbwii7I=)
2: ri0q77CsDD0bTPaXxk_jRAdQRhY.roa (hash: 4DUjc0lydMIPXrmRym+WpRLgbblgRfFg3jdmltIqOW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7a:f2:65:aa:50:a7:4b:93:9e:f2:a7:ab:73:5d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Validity
Not Before: Jul 29 00:00:22 2025 GMT
Not After : Jul 30 00:00:22 2025 GMT
Subject: CN=1ba9ece85c999aab4b9b7788ca8560a8c176d74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:55:25:92:f8:e4:33:48:b5:33:db:a6:2b:18:
9c:50:df:bd:45:c5:48:99:89:46:fe:41:98:f7:3f:
22:a5:5d:c3:ac:94:38:78:7c:b4:ae:66:7a:47:f2:
b0:da:d1:1d:95:1d:8a:ba:c1:00:09:ac:a9:09:f5:
9f:0f:13:62:f3:d6:b4:f6:48:18:46:54:aa:9c:fa:
93:83:7b:e8:ef:a8:65:b2:c2:b1:82:22:f2:95:20:
c3:4a:3c:51:4c:2e:59:d3:ef:fe:03:de:ca:2c:50:
bc:3c:7c:59:a4:a4:53:dc:43:0f:f8:7f:a8:74:e8:
75:0b:ae:7f:38:25:70:aa:43:da:c0:c5:f5:78:e9:
7f:b6:ad:e8:9d:9c:51:a7:9d:1c:a4:bc:17:5a:cb:
cd:18:88:51:cf:60:73:c3:f6:4c:82:72:4a:a0:66:
f6:64:23:fb:76:e1:e7:3e:fe:c3:c8:5e:18:28:ed:
2b:79:b6:26:de:8d:f6:9c:a5:9c:bf:9f:bc:55:86:
55:bd:dc:83:f9:ec:dc:b3:9a:c4:3c:63:ba:0d:d0:
eb:6e:cf:f2:64:4c:fb:eb:2c:81:11:a3:eb:07:2b:
3c:e3:3e:d7:30:b7:1a:93:b3:3e:a9:32:60:d7:a3:
9f:d9:25:cc:fd:aa:95:3c:7e:b7:a7:fd:41:e9:f1:
da:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A9:EC:E8:5C:99:9A:AB:4B:9B:77:88:CA:85:60:A8:C1:76:D7:4B
X509v3 Authority Key Identifier:
keyid:7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c1:a7:08:25:b0:f6:58:fb:6b:2d:3a:4f:5f:2a:70:56:82:
af:3e:a1:a1:c0:d3:72:b7:51:ba:f6:61:c3:66:9d:12:80:18:
f4:1b:67:9f:22:7e:49:84:33:5b:5b:a7:28:e1:d2:fd:bd:aa:
6a:35:59:b5:77:3d:da:f4:3c:95:8a:b8:4d:be:11:20:2b:b9:
a3:bd:71:05:f1:13:52:e3:86:07:8e:6e:0f:32:cc:8c:5c:dd:
90:97:59:49:a8:ea:00:61:80:50:8d:44:f0:46:08:42:7b:87:
d3:16:14:8d:fc:f4:05:c0:5c:b2:f1:2c:61:9f:2e:be:fa:b3:
7a:5e:23:24:5e:32:f6:6e:1d:b8:a5:64:dc:28:a9:12:5a:83:
fa:97:50:11:6d:18:d2:7c:88:95:fb:a9:11:5a:7c:d8:dc:e7:
8c:6b:18:5e:94:ca:21:79:1d:6c:46:91:19:a8:46:8b:50:08:
af:c1:1f:b4:27:5d:cb:82:01:5e:5f:da:fa:8d:e6:a8:86:15:
1a:53:5d:90:d5:b9:2d:52:7a:8e:b0:b2:62:4e:2e:ec:24:15:
a6:b7:0f:7c:04:9d:cd:de:1e:6c:11:09:8d:45:5a:52:2a:89:
ba:7b:1a:2c:47:8e:4d:f6:f5:62:15:cd:8d:ae:07:77:81:c8:
96:81:8a:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTevJlqlCnS5Oe8qerc10HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNzUwZDZmY2I4YTQwY2Q2NjFjZjczZDFhY2FiZDgzMDVl
ODc3ZmQwHhcNMjUwNzI5MDAwMDIyWhcNMjUwNzMwMDAwMDIyWjAzMTEwLwYDVQQD
EygxYmE5ZWNlODVjOTk5YWFiNGI5Yjc3ODhjYTg1NjBhOGMxNzZkNzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplUlkvjkM0i1M9umKxicUN+9RcVI
mYlG/kGY9z8ipV3DrJQ4eHy0rmZ6R/Kw2tEdlR2KusEACaypCfWfDxNi89a09kgY
RlSqnPqTg3vo76hlssKxgiLylSDDSjxRTC5Z0+/+A97KLFC8PHxZpKRT3EMP+H+o
dOh1C65/OCVwqkPawMX1eOl/tq3onZxRp50cpLwXWsvNGIhRz2Bzw/ZMgnJKoGb2
ZCP7duHnPv7DyF4YKO0rebYm3o32nKWcv5+8VYZVvdyD+ezcs5rEPGO6DdDrbs/y
ZEz76yyBEaPrBys84z7XMLcak7M+qTJg16Of2SXM/aqVPH63p/1B6fHaDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBup7OhcmZqrS5t3iMqFYKjBdtdLMB8GA1UdIwQY
MBaAFH51DW/LikDNZhz3PRrKvYMF6Hf9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm5VTmI4dUtRTTFtSFBjOUdzcTlnd1hvZF8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80Y2UwMTItMzNlYS00YjZlLTkwNjUt
YTJjNGMyMzFkZGY3LzEvZm5VTmI4dUtRTTFtSFBjOUdzcTlnd1hvZF8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80Y2UwMTItMzNlYS00YjZlLTkwNjUtYTJjNGMyMzFkZGY3
LzEvZm5VTmI4dUtRTTFtSFBjOUdzcTlnd1hvZF8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZsGnCCWw
9lj7ay06T18qcFaCrz6hocDTcrdRuvZhw2adEoAY9BtnnyJ+SYQzW1unKOHS/b2q
ajVZtXc92vQ8lYq4Tb4RICu5o71xBfETUuOGB45uDzLMjFzdkJdZSajqAGGAUI1E
8EYIQnuH0xYUjfz0BcBcsvEsYZ8uvvqzel4jJF4y9m4duKVk3CipElqD+pdQEW0Y
0nyIlfupEVp82NznjGsYXpTKIXkdbEaRGahGi1AIr8EftCddy4IBXl/a+o3mqIYV
GlNdkNW5LVJ6jrCyYk4u7CQVprcPfASdzd4ebBEJjUVaUiqJunsaLEeOTfb1YhXN
ja4Hd4HIloGKWg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:18:26 2025 by rpki-client