Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
File: fZ4KWRzFKRTMcA44de11qR7JjCg.mft (raw, json)
Hash identifier: v1sTcLx0RVv5IQ34EmUe3OzzadrRld6cAaNbDtcbIgE=
Subject key identifier: DD:98:08:3C:24:E5:80:79:22:C2:21:7D:D9:8D:8D:B2:1C:44:21:DC
Authority key identifier: 7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
Certificate issuer: /CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Certificate serial: 019845883EF4DFE228E43459AE565FD6EA33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 07:00:13 +0000
Manifest this update: Sat 26 Jul 2025 07:00:13 +0000
Manifest next update: Sun 27 Jul 2025 07:00:13 +0000
Files and hashes: 1: fZ4KWRzFKRTMcA44de11qR7JjCg.crl (hash: Qudc+cnLeEYON2enxE+o3nTyfhSOdNE6x5F2qdBrWmk=)
2: k81sGP_nTYcnr-ydvL_qIPOJOvk.roa (hash: 5IYqtPSCzWY5rft+/OTv7pak8S3Yrmu5rpVtbzra1bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:3e:f4:df:e2:28:e4:34:59:ae:56:5f:d6:ea:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Validity
Not Before: Jul 26 07:00:13 2025 GMT
Not After : Jul 27 07:00:13 2025 GMT
Subject: CN=dd98083c24e5807922c2217dd98d8db21c4421dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:1f:86:34:68:cf:58:ce:3a:25:63:cf:89:
e0:31:63:6b:4b:53:43:66:a5:7e:8f:38:3a:67:da:
bc:65:0b:aa:cf:8b:02:5a:5c:ee:de:91:da:de:88:
f7:88:5d:71:e5:4b:26:6f:ed:0a:d6:26:5a:b8:38:
df:e6:89:77:f4:b0:85:71:2d:89:f5:3f:c6:83:b6:
5f:20:6d:67:97:c4:ca:df:6f:cb:ff:54:a6:01:ef:
c4:c0:63:8a:e4:16:ba:b2:ae:36:03:17:bf:60:ba:
91:1b:81:7f:d3:af:ef:5d:01:bf:0a:fa:05:ca:26:
54:f5:fb:f2:9e:48:39:e4:0b:77:57:1d:97:25:4f:
df:f2:3b:da:60:ad:9b:9e:37:22:e1:f0:a1:4f:02:
25:15:f1:da:73:8d:27:50:5f:da:1a:22:0b:28:3a:
63:97:e4:dd:d5:7e:bd:54:06:56:8e:eb:c2:8e:f4:
7c:39:6a:5c:3a:78:e6:d9:63:d4:22:fe:9e:7e:a4:
8d:32:dc:c6:95:e4:22:ff:97:b9:9f:4d:e3:ad:b8:
4c:cf:d7:f6:b8:9e:d0:b5:55:20:1d:cb:b3:81:6c:
4d:aa:f2:02:fd:3c:1b:8b:ef:3e:88:04:44:7e:6a:
76:03:91:16:3c:4a:3e:83:c4:89:1a:f6:5d:d9:a9:
15:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:98:08:3C:24:E5:80:79:22:C2:21:7D:D9:8D:8D:B2:1C:44:21:DC
X509v3 Authority Key Identifier:
keyid:7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:df:c9:05:2f:56:71:f3:e1:ea:db:f9:a5:d9:e9:03:7c:ed:
13:9d:c9:50:0c:d8:b1:94:b5:95:7e:bb:82:8c:40:74:02:b6:
fc:86:5d:95:46:78:3e:d5:3c:2b:b3:92:73:c8:09:2e:b7:d9:
95:a4:04:89:06:98:c4:89:fe:8a:9f:d3:43:23:79:65:3d:3c:
58:6d:95:09:6d:fa:a2:59:38:dd:61:7e:99:74:ae:97:49:43:
3d:f6:70:34:65:c0:6f:1b:ef:d6:89:75:81:47:95:51:0f:84:
65:f7:3b:fa:29:17:3a:bb:a5:06:57:0f:96:b6:e0:88:d5:67:
7e:20:f6:27:e7:a5:9b:db:e0:f1:f1:68:99:3b:bf:58:de:71:
83:47:52:01:67:7c:b8:1b:11:b1:f7:64:c0:bc:4a:2f:fe:8e:
82:35:34:62:0c:d7:85:93:00:f6:35:55:a3:38:d2:4a:38:b9:
93:fd:68:e9:0d:ca:69:7c:cf:d4:8d:ca:91:38:70:da:2c:6a:
42:df:7d:49:c2:09:41:50:b2:cf:54:ec:24:09:3e:1d:73:d7:
8b:30:02:e6:6b:17:90:58:51:94:b5:83:38:15:9e:3b:58:a0:
13:7a:c5:7d:2b:75:8d:32:ae:10:72:a9:ba:29:3c:39:8c:e5:
54:c7:b4:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFiD703+Io5DRZrlZf1uozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkOWUwYTU5MWNjNTI5MTRjYzcwMGUzODc1ZWQ3NWE5MWVj
OThjMjgwHhcNMjUwNzI2MDcwMDEzWhcNMjUwNzI3MDcwMDEzWjAzMTEwLwYDVQQD
EyhkZDk4MDgzYzI0ZTU4MDc5MjJjMjIxN2RkOThkOGRiMjFjNDQyMWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg4fhjRoz1jOOiVjz4ngMWNrS1ND
ZqV+jzg6Z9q8ZQuqz4sCWlzu3pHa3oj3iF1x5Usmb+0K1iZauDjf5ol39LCFcS2J
9T/Gg7ZfIG1nl8TK32/L/1SmAe/EwGOK5Ba6sq42Axe/YLqRG4F/06/vXQG/CvoF
yiZU9fvynkg55At3Vx2XJU/f8jvaYK2bnjci4fChTwIlFfHac40nUF/aGiILKDpj
l+Td1X69VAZWjuvCjvR8OWpcOnjm2WPUIv6efqSNMtzGleQi/5e5n03jrbhMz9f2
uJ7QtVUgHcuzgWxNqvIC/Twbi+8+iAREfmp2A5EWPEo+g8SJGvZd2akVgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2YCDwk5YB5IsIhfdmNjbIcRCHcMB8GA1UdIwQY
MBaAFH2eClkcxSkUzHAOOHXtdakeyYwoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlo0S1dSekZLUlRNY0E0NGRlMTFxUjdKakNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wNGI2ZjctM2Y2NC00NzRmLWFjZDIt
YzRkODhiMTNmMTNhLzEvZlo0S1dSekZLUlRNY0E0NGRlMTFxUjdKakNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wNGI2ZjctM2Y2NC00NzRmLWFjZDItYzRkODhiMTNmMTNh
LzEvZlo0S1dSekZLUlRNY0E0NGRlMTFxUjdKakNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEt/JBS9W
cfPh6tv5pdnpA3ztE53JUAzYsZS1lX67goxAdAK2/IZdlUZ4PtU8K7OSc8gJLrfZ
laQEiQaYxIn+ip/TQyN5ZT08WG2VCW36olk43WF+mXSul0lDPfZwNGXAbxvv1ol1
gUeVUQ+EZfc7+ikXOrulBlcPlrbgiNVnfiD2J+elm9vg8fFomTu/WN5xg0dSAWd8
uBsRsfdkwLxKL/6OgjU0YgzXhZMA9jVVozjSSji5k/1o6Q3KaXzP1I3KkThw2ixq
Qt99ScIJQVCyz1TsJAk+HXPXizAC5msXkFhRlLWDOBWeO1igE3rFfSt1jTKuEHKp
uik8OYzlVMe07g==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:02:08 2025 by rpki-client