Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
File: _PXwgDHjWvlUXTrT0TjK0QOW4so.mft (raw, json)
Hash identifier: +G6Kegvso5/7xNHKBGPXLG22+PF5N+CYHyKQ/gkHwV0=
Subject key identifier: D2:86:85:B4:DE:E2:1C:39:34:89:C5:93:75:F8:A0:15:0E:85:56:C7
Authority key identifier: FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
Certificate issuer: /CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Certificate serial: 01984CD4706A330F2B74ED0FC4C44FA47DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 17:00:47 +0000
Manifest this update: Sun 27 Jul 2025 17:00:47 +0000
Manifest next update: Mon 28 Jul 2025 17:00:47 +0000
Files and hashes: 1: 27ql0pmKcM7odOuyt-r9IUbz8H0.roa (hash: 8BtUKmV8OD/wNsVNWexZC4Gh5lDDpl/q9sI4sznft7k=)
2: _PXwgDHjWvlUXTrT0TjK0QOW4so.crl (hash: tqWr+yoNP8tBOQVhoqRbdt/7wH83NJO+ERAZ0cOKRps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:d4:70:6a:33:0f:2b:74:ed:0f:c4:c4:4f:a4:7d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Validity
Not Before: Jul 27 17:00:47 2025 GMT
Not After : Jul 28 17:00:47 2025 GMT
Subject: CN=d28685b4dee21c393489c59375f8a0150e8556c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c2:10:b7:b7:c5:fb:81:69:00:b8:ff:dc:6d:
62:a9:ef:49:f5:6d:ab:b3:5e:e0:62:1b:18:44:3f:
f4:11:31:15:4e:3c:1e:fe:9c:0f:9c:3f:be:f5:9e:
c5:b7:b5:ef:f4:f8:49:f5:37:30:6e:f3:84:76:4f:
6c:df:95:fe:5d:2e:df:41:5d:64:d3:17:46:e4:fd:
1d:dd:4b:bb:c5:01:02:ce:90:82:57:44:ff:c8:68:
f6:f2:c3:ed:c5:86:8b:70:85:c3:ac:3e:1e:0a:f6:
c9:d9:13:66:b4:00:cb:42:55:a4:5d:4b:b9:ff:08:
10:0a:27:12:2d:44:76:4b:88:05:ff:69:1b:83:13:
42:f6:82:ed:e4:60:1c:4e:78:19:ce:f2:a7:f7:b2:
17:9f:35:e3:c2:b2:64:95:b8:b6:89:13:b3:1b:7f:
e6:51:64:a3:f1:3f:61:39:a1:4d:7f:27:2b:d5:09:
a3:9b:50:5a:94:b7:0b:c8:e4:a8:22:15:0d:1a:2e:
b5:74:ad:ff:d6:da:6a:58:50:88:67:00:ed:4e:79:
8b:c6:f6:42:b6:01:44:47:f2:0f:53:c4:1b:61:cc:
8f:d2:53:85:14:33:bd:8e:89:86:46:8b:44:73:ee:
09:e7:d0:44:00:b8:9d:2f:24:de:a1:db:9b:8b:79:
7f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:86:85:B4:DE:E2:1C:39:34:89:C5:93:75:F8:A0:15:0E:85:56:C7
X509v3 Authority Key Identifier:
keyid:FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:12:38:cc:11:81:ae:93:f0:6a:4c:00:c8:3c:e5:1a:29:59:
1b:dc:e7:db:0c:8f:0a:0b:f4:bc:bb:f7:23:68:fe:09:ea:dc:
49:7f:9a:c7:25:c3:df:56:01:e8:cc:55:0a:1b:55:f6:fb:cf:
48:3f:24:fd:1d:a1:2e:88:88:04:67:93:85:f0:c1:85:6c:0c:
34:6c:11:90:53:63:5f:22:12:ed:65:88:1c:99:42:ef:57:50:
9c:4b:74:13:78:f9:fa:84:d2:c0:90:de:95:81:7e:30:2b:be:
2d:6b:94:dd:91:a6:1a:97:4d:da:20:cf:31:d8:07:6c:96:23:
42:d1:7e:ac:ae:da:31:a2:09:68:f3:0d:12:40:55:42:4d:cf:
38:3d:8f:40:c3:6e:1f:64:55:d1:60:d4:c4:b6:4c:e5:13:78:
67:18:9c:93:11:61:8d:6d:f3:a5:f6:73:dc:44:3a:45:ef:c0:
28:ab:a5:81:19:24:df:4f:6f:8c:79:46:7b:5d:ef:71:bf:d4:
9e:3a:bc:7e:6e:a6:74:6a:59:bd:1e:aa:3f:88:dc:f7:23:2a:
78:ff:f4:cd:b5:1e:b5:0d:14:49:07:bd:90:54:43:79:6f:1b:
b3:43:bf:a4:67:8a:36:00:b9:aa:b9:54:c4:06:1e:d1:3e:7b:
08:64:fe:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhM1HBqMw8rdO0PxMRPpH35MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZjVmMDgwMzFlMzVhZjk1NDVkM2FkM2QxMzhjYWQxMDM5
NmUyY2EwHhcNMjUwNzI3MTcwMDQ3WhcNMjUwNzI4MTcwMDQ3WjAzMTEwLwYDVQQD
EyhkMjg2ODViNGRlZTIxYzM5MzQ4OWM1OTM3NWY4YTAxNTBlODU1NmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsIQt7fF+4FpALj/3G1iqe9J9W2r
s17gYhsYRD/0ETEVTjwe/pwPnD++9Z7Ft7Xv9PhJ9TcwbvOEdk9s35X+XS7fQV1k
0xdG5P0d3Uu7xQECzpCCV0T/yGj28sPtxYaLcIXDrD4eCvbJ2RNmtADLQlWkXUu5
/wgQCicSLUR2S4gF/2kbgxNC9oLt5GAcTngZzvKn97IXnzXjwrJklbi2iROzG3/m
UWSj8T9hOaFNfycr1Qmjm1BalLcLyOSoIhUNGi61dK3/1tpqWFCIZwDtTnmLxvZC
tgFER/IPU8QbYcyP0lOFFDO9jomGRotEc+4J59BEALidLyTeodubi3l/MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKGhbTe4hw5NInFk3X4oBUOhVbHMB8GA1UdIwQY
MBaAFPz18IAx41r5VF0609E4ytEDluLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1BYd2dESGpXdmxVWFRyVDBUakswUU9XNHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iN2JkZjYtOWRmNC00ZDRmLThkOTUt
YmNiZmIxODk4ZWJhLzEvX1BYd2dESGpXdmxVWFRyVDBUakswUU9XNHNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iN2JkZjYtOWRmNC00ZDRmLThkOTUtYmNiZmIxODk4ZWJh
LzEvX1BYd2dESGpXdmxVWFRyVDBUakswUU9XNHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxI4zBGB
rpPwakwAyDzlGilZG9zn2wyPCgv0vLv3I2j+CercSX+axyXD31YB6MxVChtV9vvP
SD8k/R2hLoiIBGeThfDBhWwMNGwRkFNjXyIS7WWIHJlC71dQnEt0E3j5+oTSwJDe
lYF+MCu+LWuU3ZGmGpdN2iDPMdgHbJYjQtF+rK7aMaIJaPMNEkBVQk3POD2PQMNu
H2RV0WDUxLZM5RN4ZxickxFhjW3zpfZz3EQ6Re/AKKulgRkk309vjHlGe13vcb/U
njq8fm6mdGpZvR6qP4jc9yMqeP/0zbUetQ0USQe9kFRDeW8bs0O/pGeKNgC5qrlU
xAYe0T57CGT+jA==
-----END CERTIFICATE-----
Generated at Mon Jul 28 02:00:37 2025 by rpki-client