Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
File: iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft (raw, json)
Hash identifier: 8bXSyNr+Wb46yUh8LzSPYbJWZX8YCLVbIuR/Lumkr1E=
Subject key identifier: 6D:20:D3:E2:C3:C7:1B:A2:39:B0:5A:87:5A:85:08:47:33:FD:CE:30
Authority key identifier: 88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
Certificate issuer: /CN=884b5e16490b9a68d09fbcb45574350000149afa
Certificate serial: 0198530D0D21B3DA2A62F3800D2CFD35C4AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
Manifest number: 1604
Signing time: Mon 28 Jul 2025 22:00:20 +0000
Manifest this update: Mon 28 Jul 2025 22:00:20 +0000
Manifest next update: Tue 29 Jul 2025 22:00:20 +0000
Files and hashes: 1: EFku_9VXqbesZmjqxLjBcuB7CJQ.roa (hash: NldkodBx9XHI5VbEYIs7dZXK6yR3WU54I+HEv9PZwY0=)
2: iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl (hash: EdY5O7vinOj18dEfOwRcA6moNYYZ0E+onr2bBPnfPac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:0d:21:b3:da:2a:62:f3:80:0d:2c:fd:35:c4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884b5e16490b9a68d09fbcb45574350000149afa
Validity
Not Before: Jul 28 22:00:20 2025 GMT
Not After : Jul 29 22:00:20 2025 GMT
Subject: CN=6d20d3e2c3c71ba239b05a875a85084733fdce30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:72:85:4d:48:26:2c:5f:f5:ba:08:ea:d6:a8:
ea:f4:f0:47:25:c3:c2:65:c6:a4:b0:64:8e:ce:2c:
d1:8e:53:7b:76:56:d8:4f:82:af:41:94:df:e3:0a:
30:9c:e2:f4:e5:4d:3e:df:98:a9:2e:99:dd:43:94:
e1:7e:5a:0e:b3:77:53:bd:6a:65:e7:d8:4e:c0:fb:
88:48:5c:12:71:d9:5c:76:32:bd:05:7a:aa:5e:db:
c2:65:5a:c5:50:47:66:4e:74:4b:ba:af:e3:84:7a:
37:cb:a4:58:27:8b:a1:b6:47:5a:28:ca:1b:39:31:
41:04:92:00:98:44:d3:5c:10:f1:a0:d5:16:96:e5:
84:30:a8:f9:36:26:8f:79:fd:6b:1f:a6:c5:29:b6:
58:75:63:d9:e1:cb:48:28:8e:61:c0:b3:22:db:53:
55:50:93:9e:a2:ba:29:06:a9:b1:d3:c0:38:4f:9c:
b1:25:49:40:92:ef:39:98:b6:2c:ae:17:1f:36:55:
97:8e:5d:5c:a1:80:3b:ae:28:42:f0:5d:9e:8d:78:
c6:16:a0:43:d3:02:87:e4:0e:cb:d4:14:e7:6b:1d:
b8:bc:eb:1d:fc:9b:da:a3:a5:b8:17:51:35:c2:57:
4e:37:3a:c9:c1:72:85:38:4a:86:d1:3d:ea:da:1e:
14:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:20:D3:E2:C3:C7:1B:A2:39:B0:5A:87:5A:85:08:47:33:FD:CE:30
X509v3 Authority Key Identifier:
keyid:88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3c:a6:c7:8c:3d:08:46:7c:1d:c3:26:20:6a:e7:f7:a7:16:
9a:2c:56:57:a3:0d:57:86:fe:83:2a:cf:c7:7e:04:55:7d:31:
7c:f5:b4:37:70:ba:6e:2e:af:84:36:d5:ee:29:da:80:5e:1e:
7b:bb:6a:1a:4f:65:0a:4c:bc:05:a6:e8:80:c2:25:01:69:25:
a3:12:d2:30:5c:00:8a:5b:80:04:ba:48:b5:23:92:06:0a:20:
9e:25:86:6c:3f:54:e8:1d:54:f8:46:93:90:5f:3b:db:74:0f:
2e:dc:5e:03:15:61:ff:c1:79:20:3e:f3:e1:68:a3:11:eb:ac:
f0:29:ca:1e:df:7f:32:15:4f:51:27:14:98:41:f9:e2:ff:80:
c8:b6:e8:82:a4:e0:21:af:a4:f6:fc:95:0c:7c:6b:65:4d:e7:
66:59:1e:9c:31:44:07:95:94:1f:66:b9:ca:23:7a:80:9e:01:
95:63:58:5d:19:be:ee:56:26:6b:98:9d:11:a5:56:8c:6b:68:
98:a6:54:39:f7:b0:e3:df:2f:d8:bd:40:15:d0:de:0e:62:d3:
28:01:37:02:c6:ae:ec:f7:c2:ca:eb:b3:b4:85:23:6c:e2:fe:
2b:8b:ad:8a:7f:4f:0a:f4:80:3e:2c:97:93:08:b2:bd:bc:f4:
14:de:61:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDQ0hs9oqYvOADSz9NcSqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NGI1ZTE2NDkwYjlhNjhkMDlmYmNiNDU1NzQzNTAwMDAx
NDlhZmEwHhcNMjUwNzI4MjIwMDIwWhcNMjUwNzI5MjIwMDIwWjAzMTEwLwYDVQQD
Eyg2ZDIwZDNlMmMzYzcxYmEyMzliMDVhODc1YTg1MDg0NzMzZmRjZTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHKFTUgmLF/1ugjq1qjq9PBHJcPC
ZcaksGSOzizRjlN7dlbYT4KvQZTf4wownOL05U0+35ipLpndQ5ThfloOs3dTvWpl
59hOwPuISFwScdlcdjK9BXqqXtvCZVrFUEdmTnRLuq/jhHo3y6RYJ4uhtkdaKMob
OTFBBJIAmETTXBDxoNUWluWEMKj5NiaPef1rH6bFKbZYdWPZ4ctIKI5hwLMi21NV
UJOeoropBqmx08A4T5yxJUlAku85mLYsrhcfNlWXjl1coYA7rihC8F2ejXjGFqBD
0wKH5A7L1BTnax24vOsd/Jvao6W4F1E1wldONzrJwXKFOEqG0T3q2h4UzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0g0+LDxxuiObBah1qFCEcz/c4wMB8GA1UdIwQY
MBaAFIhLXhZJC5po0J+8tFV0NQAAFJr6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUV0ZUZra0xtbWpRbjd5MFZYUTFBQUFVbXZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wN2I3ZjctYzQxZC00OTE3LWI5Nzgt
ZWYyZDUzYjVhMzRkLzEvaUV0ZUZra0xtbWpRbjd5MFZYUTFBQUFVbXZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8wN2I3ZjctYzQxZC00OTE3LWI5NzgtZWYyZDUzYjVhMzRk
LzEvaUV0ZUZra0xtbWpRbjd5MFZYUTFBQUFVbXZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnTymx4w9
CEZ8HcMmIGrn96cWmixWV6MNV4b+gyrPx34EVX0xfPW0N3C6bi6vhDbV7inagF4e
e7tqGk9lCky8BabogMIlAWkloxLSMFwAiluABLpItSOSBgogniWGbD9U6B1U+EaT
kF8723QPLtxeAxVh/8F5ID7z4WijEeus8CnKHt9/MhVPUScUmEH54v+AyLbogqTg
Ia+k9vyVDHxrZU3nZlkenDFEB5WUH2a5yiN6gJ4BlWNYXRm+7lYma5idEaVWjGto
mKZUOfew498v2L1AFdDeDmLTKAE3Asau7PfCyuuztIUjbOL+K4utin9PCvSAPiyX
kwiyvbz0FN5hWQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 02:14:31 2025 by rpki-client