Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
File: 758eOCZUELPCqSLTFpxPKZUUGi0.mft (raw, json)
Hash identifier: DQVj/lHjZbE5KD7XtTab1SR1ir+H9NOKWpxs3x5C0uU=
Subject key identifier: 21:3B:1D:8E:D7:6A:1B:5B:7E:66:E4:BC:CB:08:B5:53:CA:D4:7F:D2
Authority key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
Certificate issuer: /CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Certificate serial: 0198548D841320684484E4506657EFEC90D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
Manifest number: 1609
Signing time: Tue 29 Jul 2025 05:00:17 +0000
Manifest this update: Tue 29 Jul 2025 05:00:17 +0000
Manifest next update: Wed 30 Jul 2025 05:00:17 +0000
Files and hashes: 1: 1bEC89myvydEqo_ZPjw-OQX0Qi0.roa (hash: ZmacESfVCLkopUwGADnqjPbJ5MKyVKen61NApT+t8VM=)
2: 758eOCZUELPCqSLTFpxPKZUUGi0.crl (hash: 0PfSrU7BPuc1zjrHDggGb4yj7cWG5oqHdagWIeWN3Sc=)
3: iZ1aijGSpYaJ5lT694iv07s9IFw.roa (hash: epj7jnXUcZqcIR0Iu/H9+s0OqjsBdFMaftQUUMbM+4c=)
4: ksWoUId71Ta6zaKYKbekW8SN22U.roa (hash: tv73AIHBejtA7MQn113/2vhoh+psXUpDGtwp+NxnLcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:84:13:20:68:44:84:e4:50:66:57:ef:ec:90:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Validity
Not Before: Jul 29 05:00:17 2025 GMT
Not After : Jul 30 05:00:17 2025 GMT
Subject: CN=213b1d8ed76a1b5b7e66e4bccb08b553cad47fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b4:5d:3c:d3:ab:5b:01:74:62:61:4c:18:aa:
a4:e2:7f:8f:2d:60:b1:9e:38:e0:05:70:c8:16:91:
33:d0:e2:02:52:73:93:bd:ec:c3:66:50:cd:7f:7b:
6f:bf:37:c3:c6:a7:3d:25:c1:c6:58:09:4e:88:36:
20:4b:fd:26:3a:65:d5:e4:50:52:d1:f7:30:c2:2a:
5d:4f:87:8d:9f:a8:51:25:c6:48:79:b6:65:f0:e6:
e1:b2:ab:ea:83:03:98:47:7d:2a:0d:9b:2a:2d:f1:
aa:87:8a:72:5a:85:fc:7a:c4:d3:a1:86:ef:a8:65:
49:d4:b7:ce:a9:5b:e9:17:13:33:04:7e:5d:fe:8f:
c4:fc:b8:3d:c3:52:41:c9:97:f2:77:cf:e4:a3:68:
44:e8:e2:aa:0a:37:de:e7:04:93:8f:84:82:e6:b9:
6a:50:5c:d6:74:48:23:98:18:97:c7:c9:fc:c3:d5:
b5:11:cc:a5:f8:83:46:a5:62:e7:66:6c:72:25:35:
72:ae:c1:31:9c:c8:75:7b:c5:8a:93:49:ea:51:fa:
37:69:a3:18:b6:46:c2:be:5d:bb:32:0f:24:dc:8f:
ff:bc:b8:ad:d0:47:40:1e:fd:2c:dd:1f:e4:9d:be:
78:ad:78:d3:8c:35:87:12:0d:21:03:2a:e3:e3:b1:
87:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3B:1D:8E:D7:6A:1B:5B:7E:66:E4:BC:CB:08:B5:53:CA:D4:7F:D2
X509v3 Authority Key Identifier:
keyid:EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:57:3d:ac:ee:52:76:8f:06:5f:27:e6:6b:e8:cf:33:b0:14:
df:08:81:e8:98:f3:e4:a2:bf:d4:f2:ff:1a:c3:9d:b6:f7:e3:
66:a2:5c:73:e3:01:9e:27:04:02:58:28:c5:92:51:fd:24:10:
1c:e3:d4:bc:3a:a3:c6:0e:3f:4a:23:c9:c2:a0:f2:6b:fe:6c:
56:d2:be:7d:c8:27:b6:df:a6:8b:1f:51:4e:ba:4c:c8:9e:f9:
88:c9:a1:da:95:ec:b4:f8:40:91:35:b2:26:0b:49:83:bb:4b:
1b:47:b3:c0:8a:ee:ef:d5:5d:a2:a0:79:df:e3:b2:e2:c6:54:
db:56:ca:14:5e:6a:90:41:a9:42:66:cd:84:9c:63:51:af:1d:
55:65:ec:43:20:9f:5b:8b:70:8a:36:cb:12:e9:cc:04:a3:f1:
d4:42:04:b6:91:9b:10:c2:d3:6f:9a:09:22:12:bb:77:38:0c:
dd:13:e1:04:99:a1:95:d5:f4:b2:6e:97:5f:d7:84:33:2c:dc:
f7:e4:88:c5:1a:98:87:d6:ef:92:55:bb:df:3c:c6:85:9d:b1:
60:5d:ef:48:f3:98:f8:6c:04:8b:d1:61:b3:34:cc:1d:2f:84:
a7:89:bc:8a:b8:78:dd:85:ab:ea:b4:88:09:67:9d:aa:4c:97:
d5:86:31:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhUjYQTIGhEhORQZlfv7JDVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmOWYxZTM4MjY1NDEwYjNjMmE5MjJkMzE2OWM0ZjI5OTUx
NDFhMmQwHhcNMjUwNzI5MDUwMDE3WhcNMjUwNzMwMDUwMDE3WjAzMTEwLwYDVQQD
EygyMTNiMWQ4ZWQ3NmExYjViN2U2NmU0YmNjYjA4YjU1M2NhZDQ3ZmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LRdPNOrWwF0YmFMGKqk4n+PLWCx
njjgBXDIFpEz0OICUnOTvezDZlDNf3tvvzfDxqc9JcHGWAlOiDYgS/0mOmXV5FBS
0fcwwipdT4eNn6hRJcZIebZl8ObhsqvqgwOYR30qDZsqLfGqh4pyWoX8esTToYbv
qGVJ1LfOqVvpFxMzBH5d/o/E/Lg9w1JByZfyd8/ko2hE6OKqCjfe5wSTj4SC5rlq
UFzWdEgjmBiXx8n8w9W1Ecyl+INGpWLnZmxyJTVyrsExnMh1e8WKk0nqUfo3aaMY
tkbCvl27Mg8k3I//vLit0EdAHv0s3R/knb54rXjTjDWHEg0hAyrj47GHmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCE7HY7XahtbfmbkvMsItVPK1H/SMB8GA1UdIwQY
MBaAFO+fHjgmVBCzwqki0xacTymVFBotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzU4ZU9DWlVFTFBDcVNMVEZweFBLWlVVR2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kNmZiMWMtOTVjMy00YmZmLTg1NTYt
ODA1N2RhNzU0NDUyLzEvNzU4ZU9DWlVFTFBDcVNMVEZweFBLWlVVR2kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kNmZiMWMtOTVjMy00YmZmLTg1NTYtODA1N2RhNzU0NDUy
LzEvNzU4ZU9DWlVFTFBDcVNMVEZweFBLWlVVR2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnVc9rO5S
do8GXyfma+jPM7AU3wiB6Jjz5KK/1PL/GsOdtvfjZqJcc+MBnicEAlgoxZJR/SQQ
HOPUvDqjxg4/SiPJwqDya/5sVtK+fcgntt+mix9RTrpMyJ75iMmh2pXstPhAkTWy
JgtJg7tLG0ezwIru79VdoqB53+Oy4sZU21bKFF5qkEGpQmbNhJxjUa8dVWXsQyCf
W4twijbLEunMBKPx1EIEtpGbEMLTb5oJIhK7dzgM3RPhBJmhldX0sm6XX9eEMyzc
9+SIxRqYh9bvklW73zzGhZ2xYF3vSPOY+GwEi9FhszTMHS+Ep4m8irh43YWr6rSI
CWedqkyX1YYxXA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 14:42:59 2025 by rpki-client