Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
File: fmdQ5YygordfLFO99vYf9j7IMcs.mft (raw, json)
Hash identifier: nlSDI4HmN1/h3mRRJpt2zKuAly+fZ6VjXjWtsKwx6m8=
Subject key identifier: 5D:74:22:B6:25:A3:41:C3:00:61:FE:84:43:14:EB:BF:6C:95:EE:7D
Authority key identifier: 7E:67:50:E5:8C:A0:A2:B7:5F:2C:53:BD:F6:F6:1F:F6:3E:C8:31:CB
Certificate issuer: /CN=7e6750e58ca0a2b75f2c53bdf6f61ff63ec831cb
Certificate serial: 01984B5455FB47A4DEEA650D0381CB985592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 10:01:14 +0000
Manifest this update: Sun 27 Jul 2025 10:01:14 +0000
Manifest next update: Mon 28 Jul 2025 10:01:14 +0000
Files and hashes: 1: 1jPmqvt1ilYlmNcTs9vv0mQwV2Y.roa (hash: eLo4dRJvSmA8RvGBVuxw5fjwL9gDtsf1LW0xwTy98e0=)
2: fmdQ5YygordfLFO99vYf9j7IMcs.crl (hash: jLhEzugceziWTycloVABwv3Xv9l+8LcC+dJ15pHCR5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:55:fb:47:a4:de:ea:65:0d:03:81:cb:98:55:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6750e58ca0a2b75f2c53bdf6f61ff63ec831cb
Validity
Not Before: Jul 27 10:01:14 2025 GMT
Not After : Jul 28 10:01:14 2025 GMT
Subject: CN=5d7422b625a341c30061fe844314ebbf6c95ee7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:c5:c9:64:43:0a:8e:d4:c7:5a:ee:85:c3:
9f:58:72:c3:f3:ca:b4:a2:29:d2:32:f7:95:10:f9:
b2:52:6a:01:c2:e2:ba:8b:43:c6:78:dd:40:d9:9a:
b4:7b:19:85:84:38:33:e6:a1:7e:c5:d7:9f:f1:d7:
01:92:33:30:8a:85:bf:a0:59:f9:30:0b:70:f9:b6:
30:fa:cf:65:50:9e:fc:3d:6d:5a:f3:e3:07:13:09:
54:59:0b:7b:6d:b2:9d:3d:2e:b7:ec:25:b6:03:5c:
ff:04:de:c3:0d:1a:59:8e:57:a2:f4:f0:ad:5d:bf:
6c:c2:2d:3f:f2:22:77:e9:d1:52:1d:f8:ed:73:0f:
46:57:6b:49:77:02:40:d1:6e:e6:a8:46:33:f7:08:
dd:22:34:e3:4c:8e:fa:0e:95:50:36:15:0e:ba:42:
34:ca:39:89:07:9a:b5:dd:78:cc:76:af:7a:c8:e6:
79:66:f0:5d:df:44:27:a6:38:9c:1d:a2:8a:a4:0b:
32:0a:bc:0e:f4:15:72:e4:53:fa:67:9a:9d:31:0d:
f1:10:28:57:67:af:69:a1:37:25:ec:53:b5:f8:36:
10:1a:c7:ff:c3:ab:9a:1c:97:4a:c9:ae:3c:59:d9:
2c:78:20:f1:6f:e1:c0:bd:a1:69:b6:4b:cf:c8:64:
a4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:74:22:B6:25:A3:41:C3:00:61:FE:84:43:14:EB:BF:6C:95:EE:7D
X509v3 Authority Key Identifier:
keyid:7E:67:50:E5:8C:A0:A2:B7:5F:2C:53:BD:F6:F6:1F:F6:3E:C8:31:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2e:2b:71:7b:4b:87:ec:7e:4a:ae:bd:6a:f1:31:01:22:db:
c7:55:ad:30:3b:b2:ba:3e:de:b7:dd:b7:1b:eb:35:07:41:92:
6c:7e:49:6d:5a:8b:d8:30:54:0b:25:b3:e8:c5:21:4e:46:17:
d1:c8:b9:3a:93:1b:b4:a3:27:03:cf:19:f2:d0:ce:6b:7f:d2:
7c:a8:5d:a4:be:6a:8c:c2:e1:45:63:51:ed:72:23:b9:8d:fa:
78:72:3b:88:e5:3b:e0:ac:1f:91:f4:d9:c1:3d:1e:d2:e0:fa:
f9:81:4c:7e:42:55:da:cf:82:83:bb:88:47:69:eb:24:39:c1:
de:cc:81:df:ee:21:f4:d8:e7:78:c5:a5:bf:7f:87:16:87:04:
02:0f:ee:50:18:1a:42:56:c8:38:c0:b9:b2:63:ff:c3:c8:73:
81:20:9c:52:de:5f:34:5a:36:ae:42:a2:32:90:bd:7a:8f:6d:
f4:c3:ca:b9:61:d5:9a:23:4d:0e:6b:c9:e4:ea:a8:0c:a1:e1:
10:77:d3:8f:9a:bd:93:7f:43:ed:55:12:57:f6:3b:68:d0:81:
76:13:f6:7a:3f:82:e5:26:2e:bf:b6:bd:fe:01:c5:b1:2f:b8:
54:6c:aa:ea:d3:33:32:b7:bc:ee:b6:63:7b:bc:e7:6e:22:90:
ae:4e:c7:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVFX7R6Te6mUNA4HLmFWSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNjc1MGU1OGNhMGEyYjc1ZjJjNTNiZGY2ZjYxZmY2M2Vj
ODMxY2IwHhcNMjUwNzI3MTAwMTE0WhcNMjUwNzI4MTAwMTE0WjAzMTEwLwYDVQQD
Eyg1ZDc0MjJiNjI1YTM0MWMzMDA2MWZlODQ0MzE0ZWJiZjZjOTVlZTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk7FyWRDCo7Ux1ruhcOfWHLD88q0
oinSMveVEPmyUmoBwuK6i0PGeN1A2Zq0exmFhDgz5qF+xdef8dcBkjMwioW/oFn5
MAtw+bYw+s9lUJ78PW1a8+MHEwlUWQt7bbKdPS637CW2A1z/BN7DDRpZjlei9PCt
Xb9swi0/8iJ36dFSHfjtcw9GV2tJdwJA0W7mqEYz9wjdIjTjTI76DpVQNhUOukI0
yjmJB5q13XjMdq96yOZ5ZvBd30QnpjicHaKKpAsyCrwO9BVy5FP6Z5qdMQ3xEChX
Z69poTcl7FO1+DYQGsf/w6uaHJdKya48WdkseCDxb+HAvaFptkvPyGSkJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF10IrYlo0HDAGH+hEMU679sle59MB8GA1UdIwQY
MBaAFH5nUOWMoKK3XyxTvfb2H/Y+yDHLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm1kUTVZeWdvcmRmTEZPOTl2WWY5ajdJTWNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS83OGJkMDUtNjAwNi00NjJmLWExODct
MGVjZjQyMjAwMjNlLzEvZm1kUTVZeWdvcmRmTEZPOTl2WWY5ajdJTWNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS83OGJkMDUtNjAwNi00NjJmLWExODctMGVjZjQyMjAwMjNl
LzEvZm1kUTVZeWdvcmRmTEZPOTl2WWY5ajdJTWNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVi4rcXtL
h+x+Sq69avExASLbx1WtMDuyuj7et923G+s1B0GSbH5JbVqL2DBUCyWz6MUhTkYX
0ci5OpMbtKMnA88Z8tDOa3/SfKhdpL5qjMLhRWNR7XIjuY36eHI7iOU74KwfkfTZ
wT0e0uD6+YFMfkJV2s+Cg7uIR2nrJDnB3syB3+4h9NjneMWlv3+HFocEAg/uUBga
QlbIOMC5smP/w8hzgSCcUt5fNFo2rkKiMpC9eo9t9MPKuWHVmiNNDmvJ5OqoDKHh
EHfTj5q9k39D7VUSV/Y7aNCBdhP2ej+C5SYuv7a9/gHFsS+4VGyq6tMzMre87rZj
e7znbiKQrk7HSw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:13:13 2025 by rpki-client