Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
File: rfRJdaXb2_gjtKCmt-65mxSENn4.mft (raw, json)
Hash identifier: igXlPGr8s5e2fXjoQbOsW4LeAIjpxSDyg01gmKD/oRg=
Subject key identifier: E7:5F:C8:F5:00:3C:7E:1E:34:C1:00:8D:31:E4:DA:48:40:4E:C1:94
Authority key identifier: AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
Certificate issuer: /CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Certificate serial: 01983503458D2525BCE97A9789C646672CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
Manifest number: 058A
Signing time: Wed 23 Jul 2025 02:01:03 +0000
Manifest this update: Wed 23 Jul 2025 02:01:03 +0000
Manifest next update: Thu 24 Jul 2025 02:01:03 +0000
Files and hashes: 1: R4XHwh-uR65EL_DdpXZF6OARJ4Q.roa (hash: iFcX7qqj7I+Qr0pVVXkrPFoUP0jPJo5pY3SNhZeIPSE=)
2: rfRJdaXb2_gjtKCmt-65mxSENn4.crl (hash: m8SHAxo2pCHQAGnKPRbC59sDldLkIkEUqi/AAcYUS4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:03:45:8d:25:25:bc:e9:7a:97:89:c6:46:67:2c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Validity
Not Before: Jul 23 02:01:03 2025 GMT
Not After : Jul 24 02:01:03 2025 GMT
Subject: CN=e75fc8f5003c7e1e34c1008d31e4da48404ec194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:a9:84:d4:17:20:e2:32:e7:6c:bc:30:2b:
9a:14:99:f6:cc:13:60:ed:36:0d:7a:f9:3e:c9:c7:
c8:e0:1d:13:ba:4b:95:f0:12:53:f5:4f:d8:2f:dd:
5e:63:af:55:a8:5e:b4:7d:65:cd:54:dc:dd:4c:e5:
ca:1f:72:a6:18:fd:67:bd:aa:8c:8b:3f:f5:f1:cd:
c9:b6:8d:88:81:62:be:77:d8:59:08:f7:e1:ff:83:
0f:94:0d:6a:ab:9b:82:34:84:37:13:a1:22:4a:6c:
a6:df:16:cd:84:59:65:00:91:cb:14:91:ac:43:ac:
d5:8b:c3:d0:87:24:ca:5a:4f:72:53:51:59:9a:4c:
15:f7:29:9f:88:05:60:bb:fc:07:3a:2b:4b:b6:fd:
dc:d6:aa:6d:e5:ae:cb:70:da:05:43:49:b8:ba:dc:
0d:e9:e6:f2:e9:51:c8:3e:e6:15:dc:d9:3d:ed:f6:
7c:e6:52:ad:fb:6f:5b:83:0f:89:75:9c:cf:72:a3:
33:bd:0a:ad:ce:96:03:86:2a:2d:5b:1b:12:74:d7:
34:2f:1d:e4:e9:21:4a:f5:48:d8:62:41:81:fe:15:
6a:fa:93:b5:91:5d:8f:31:53:aa:d6:a9:65:a5:7d:
9d:8d:2c:f4:e5:87:4e:32:38:6a:c8:94:85:55:56:
c2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5F:C8:F5:00:3C:7E:1E:34:C1:00:8D:31:E4:DA:48:40:4E:C1:94
X509v3 Authority Key Identifier:
keyid:AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:49:7a:bc:2b:9a:43:6d:5d:86:83:4e:ff:8f:bb:5b:04:8e:
6f:8d:e5:ad:a3:94:65:64:d5:6a:94:ca:2a:c0:69:86:72:84:
a2:77:d6:77:0d:75:b6:64:e6:6a:5b:24:b5:ac:89:18:35:db:
d5:45:4e:30:18:8b:97:b9:84:3f:3e:d4:72:32:84:fe:fd:c3:
e0:56:f8:0a:84:48:b7:a4:b1:1e:fc:e2:f3:b4:43:60:17:21:
47:26:58:ad:6d:8e:bc:17:69:f0:8f:72:8f:43:cc:71:1a:e0:
fb:52:40:e5:f1:8a:90:68:4e:ae:3d:4a:db:e3:60:e1:20:9f:
95:60:93:39:3e:c9:2d:e4:49:3d:a9:26:a5:41:26:c7:00:1d:
1b:ef:63:84:ad:5f:5c:7b:23:74:54:4f:e9:3c:43:d8:2f:44:
65:1c:38:19:f6:e9:cc:57:e7:f2:fa:9b:f1:d8:18:63:e4:f3:
84:1c:6b:a7:cb:d2:41:02:3b:ea:91:63:af:eb:e4:83:9d:5a:
0f:0a:ce:dd:72:d5:7e:4f:e9:a2:a9:f3:29:1c:0d:fc:a6:39:
1e:30:dd:b1:d8:36:b2:72:0a:fd:40:6a:1e:da:57:bb:c4:1b:
2c:62:63:bf:3f:a2:c8:13:e6:fa:2b:d6:e8:bc:08:fe:9a:05:
91:4b:71:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg1A0WNJSW86XqXicZGZyzdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjQ0OTc1YTVkYmRiZjgyM2I0YTBhNmI3ZWViOTliMTQ4
NDM2N2UwHhcNMjUwNzIzMDIwMTAzWhcNMjUwNzI0MDIwMTAzWjAzMTEwLwYDVQQD
EyhlNzVmYzhmNTAwM2M3ZTFlMzRjMTAwOGQzMWU0ZGE0ODQwNGVjMTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPmphNQXIOIy52y8MCuaFJn2zBNg
7TYNevk+ycfI4B0TukuV8BJT9U/YL91eY69VqF60fWXNVNzdTOXKH3KmGP1nvaqM
iz/18c3Jto2IgWK+d9hZCPfh/4MPlA1qq5uCNIQ3E6EiSmym3xbNhFllAJHLFJGs
Q6zVi8PQhyTKWk9yU1FZmkwV9ymfiAVgu/wHOitLtv3c1qpt5a7LcNoFQ0m4utwN
6eby6VHIPuYV3Nk97fZ85lKt+29bgw+JdZzPcqMzvQqtzpYDhiotWxsSdNc0Lx3k
6SFK9UjYYkGB/hVq+pO1kV2PMVOq1qllpX2djSz05YdOMjhqyJSFVVbCaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdfyPUAPH4eNMEAjTHk2khATsGUMB8GA1UdIwQY
MBaAFK30SXWl29v4I7SgprfuuZsUhDZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZSSmRhWGIyX2dqdEtDbXQtNjVteFNFTm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZWUxNzMtNmMxMi00M2NiLThiMDkt
YmJiMGM4MDI4ZTJiLzEvcmZSSmRhWGIyX2dqdEtDbXQtNjVteFNFTm40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9jZWUxNzMtNmMxMi00M2NiLThiMDktYmJiMGM4MDI4ZTJi
LzEvcmZSSmRhWGIyX2dqdEtDbXQtNjVteFNFTm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEl6vCua
Q21dhoNO/4+7WwSOb43lraOUZWTVapTKKsBphnKEonfWdw11tmTmalsktayJGDXb
1UVOMBiLl7mEPz7UcjKE/v3D4Fb4CoRIt6SxHvzi87RDYBchRyZYrW2OvBdp8I9y
j0PMcRrg+1JA5fGKkGhOrj1K2+Ng4SCflWCTOT7JLeRJPakmpUEmxwAdG+9jhK1f
XHsjdFRP6TxD2C9EZRw4GfbpzFfn8vqb8dgYY+TzhBxrp8vSQQI76pFjr+vkg51a
DwrO3XLVfk/poqnzKRwN/KY5HjDdsdg2snIK/UBqHtpXu8QbLGJjvz+iyBPm+ivW
6LwI/poFkUtx7g==
-----END CERTIFICATE-----
Generated at Wed Jul 23 12:02:36 2025 by rpki-client