Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json)
Hash identifier: jV9z6OGxLd7RMbVcaZPXDsLs+8fLNMfi46eVjMCnRd8=
Subject key identifier: 4D:58:66:16:2A:31:26:DE:CD:C0:D3:66:F7:65:F6:85:0B:F2:79:16
Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Certificate serial: 01984A40D128BE3DA824D7685E03B1FD4FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
Manifest number: 1608
Signing time: Sun 27 Jul 2025 05:00:18 +0000
Manifest this update: Sun 27 Jul 2025 05:00:18 +0000
Manifest next update: Mon 28 Jul 2025 05:00:18 +0000
Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: dZx827eTM9KGsPQJOpUkAaD0GikcB/xrc2ygQcPXYMM=)
2: Om_TmuMO8XG3pBM8gxAFde2dWMw.roa (hash: FbjCGDaIAC98JtiXhpiG2iZAAlR6dEBdv+iVw78RCUo=)
3: VZwnOlrac1s2Zb9Y96cCEjN1ihI.roa (hash: VbMoQoBhuySW3f8b4z7vMMYAoL+G6xfxVZmjVv4iceM=)
4: pY1evXi7L-RhS1kANnlGqZjoa4g.roa (hash: MHMoXswoxGYwux8eQ8dSbb24gK19/XF6bugh3G8kZT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:d1:28:be:3d:a8:24:d7:68:5e:03:b1:fd:4f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Validity
Not Before: Jul 27 05:00:18 2025 GMT
Not After : Jul 28 05:00:18 2025 GMT
Subject: CN=4d5866162a3126decdc0d366f765f6850bf27916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:8f:a6:84:98:d9:3b:51:cf:bf:d7:97:44:
de:ca:1d:f6:b0:97:3f:37:c9:e1:c2:9a:78:49:e5:
47:0c:d0:c3:b7:c7:87:0e:64:43:f5:7f:d7:dc:95:
c9:4a:df:29:cd:69:74:af:c5:83:3e:c5:f0:08:ba:
13:39:25:f5:ef:c8:15:c4:67:a5:8e:f0:1c:d5:13:
b3:22:5b:c4:fd:5f:5c:e3:62:d4:4a:d1:9c:97:21:
35:ec:e4:9b:78:04:fd:5f:a3:a0:77:ef:bd:1f:7c:
ac:92:4a:cd:ab:2c:b7:84:3e:70:7e:1e:b2:ac:f7:
8b:f1:37:f3:37:0a:c7:64:76:25:f9:f4:ad:8d:a9:
83:41:98:e4:98:47:38:6e:3e:9d:7e:f6:37:84:b5:
a0:05:33:5a:4c:39:fd:07:69:4d:01:70:46:18:28:
05:71:d4:c2:1a:b7:d5:a7:59:66:81:5f:a5:ae:28:
a8:9f:78:e4:b2:ae:47:20:7c:b9:5c:cc:ac:3d:7f:
5e:6e:b8:8c:a8:77:67:e1:ee:20:fd:14:dc:cb:b4:
a2:50:4b:59:bb:5f:fa:ff:f7:18:49:24:b6:fb:ea:
d0:71:58:b4:62:d6:6c:d2:ef:0e:8b:13:53:2d:0c:
40:dd:48:61:47:5a:87:6f:15:c9:dd:9b:90:45:48:
3d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:58:66:16:2A:31:26:DE:CD:C0:D3:66:F7:65:F6:85:0B:F2:79:16
X509v3 Authority Key Identifier:
keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:67:da:3e:3a:8c:cd:2e:f6:ed:38:c8:95:02:25:86:5b:11:
b9:7a:a1:25:96:17:d6:38:c9:4f:03:60:c6:d2:32:19:da:ea:
88:73:24:0f:c3:0d:10:7e:96:3e:82:e4:eb:0a:82:b9:61:e6:
db:14:6f:e4:18:59:7f:ff:04:08:32:74:88:8c:39:21:42:6f:
b2:07:c9:b9:27:ef:43:d5:ac:78:93:a0:39:cb:27:59:c8:36:
37:e2:70:33:9a:b2:35:c8:12:01:0c:af:68:e3:80:69:16:21:
1a:6c:b8:6e:5f:34:84:d2:4d:fb:99:32:15:8c:e5:15:70:8f:
13:b1:a7:fe:08:78:f0:19:3e:f9:84:6e:37:b1:bc:ed:e6:0b:
77:2b:dd:57:88:54:e1:e5:c1:5d:a1:6c:63:7b:a8:d6:0c:36:
cf:f6:ca:71:dd:e1:a7:7e:b5:06:ba:21:bb:ac:3e:09:81:b6:
46:ef:2b:71:92:e0:3b:04:a3:06:9b:4e:bc:0f:3a:19:42:eb:
5e:80:bd:d3:53:95:ac:48:32:b8:b7:3b:96:6d:02:85:43:d2:
40:5e:da:32:7b:91:02:9d:f5:89:43:36:b5:27:fa:d5:f5:ce:
3a:b0:5a:bb:3f:3b:cc:6b:9f:c3:97:7a:be:e2:b8:96:b9:8d:
3c:ac:73:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQNEovj2oJNdoXgOx/U+7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZjdmMTZiMDVhMTEyMzE1MWE2NzdhNDdhYzJkOGQ5MDYx
ZGYzOTAwHhcNMjUwNzI3MDUwMDE4WhcNMjUwNzI4MDUwMDE4WjAzMTEwLwYDVQQD
Eyg0ZDU4NjYxNjJhMzEyNmRlY2RjMGQzNjZmNzY1ZjY4NTBiZjI3OTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbqPpoSY2TtRz7/Xl0Teyh32sJc/
N8nhwpp4SeVHDNDDt8eHDmRD9X/X3JXJSt8pzWl0r8WDPsXwCLoTOSX178gVxGel
jvAc1ROzIlvE/V9c42LUStGclyE17OSbeAT9X6Ogd++9H3yskkrNqyy3hD5wfh6y
rPeL8TfzNwrHZHYl+fStjamDQZjkmEc4bj6dfvY3hLWgBTNaTDn9B2lNAXBGGCgF
cdTCGrfVp1lmgV+lriion3jksq5HIHy5XMysPX9ebriMqHdn4e4g/RTcy7SiUEtZ
u1/6//cYSSS2++rQcVi0YtZs0u8OixNTLQxA3UhhR1qHbxXJ3ZuQRUg9hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1YZhYqMSbezcDTZvdl9oUL8nkWMB8GA1UdIwQY
MBaAFNf38WsFoRIxUaZ3pHrC2NkGHfOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYt
NmNiZTk0OTUzMmU0LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYtNmNiZTk0OTUzMmU0
LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImfaPjqM
zS727TjIlQIlhlsRuXqhJZYX1jjJTwNgxtIyGdrqiHMkD8MNEH6WPoLk6wqCuWHm
2xRv5BhZf/8ECDJ0iIw5IUJvsgfJuSfvQ9WseJOgOcsnWcg2N+JwM5qyNcgSAQyv
aOOAaRYhGmy4bl80hNJN+5kyFYzlFXCPE7Gn/gh48Bk++YRuN7G87eYLdyvdV4hU
4eXBXaFsY3uo1gw2z/bKcd3hp361Brohu6w+CYG2Ru8rcZLgOwSjBptOvA86GULr
XoC901OVrEgyuLc7lm0ChUPSQF7aMnuRAp31iUM2tSf61fXOOrBauz87zGufw5d6
vuK4lrmNPKxzaA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:28:07 2025 by rpki-client