Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
File: fusK7GOUn0ElxzqmF36gtyHVJ7s.mft (raw, json)
Hash identifier: IEcE7t9brBUKIg2oHrXD3Hvrc94xiURR0wVKhOlLfRE=
Subject key identifier: 78:5F:CD:AC:94:06:88:10:2E:56:B6:C5:49:FF:09:17:1F:BA:0B:62
Authority key identifier: 7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
Certificate issuer: /CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Certificate serial: 01992331573A13C71B87F37F79645A00706B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
Manifest number: 0DCE
Signing time: Sun 07 Sep 2025 08:00:59 +0000
Manifest this update: Sun 07 Sep 2025 08:00:59 +0000
Manifest next update: Mon 08 Sep 2025 08:00:59 +0000
Files and hashes: 1: WBWNPZAIG5TxeFXlAVS083RLBkk.roa (hash: qjzS4SOpKRY0Euyn5aPWAnwBT2wsSH59WxJEL/JtBjg=)
2: fusK7GOUn0ElxzqmF36gtyHVJ7s.crl (hash: 5MkDuE+dpj+cITd4+K04GXYgAAQK2elFvv9sOvK2dD4=)
3: s2iH-K1B6baQqyEOMWE8f-GKkZE.roa (hash: 41YxT8wg456Ubbd8KhTVbDjEVITU4hqZBtp1E/4T16U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:57:3a:13:c7:1b:87:f3:7f:79:64:5a:00:70:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Validity
Not Before: Sep 7 08:00:59 2025 GMT
Not After : Sep 8 08:00:59 2025 GMT
Subject: CN=785fcdac940688102e56b6c549ff09171fba0b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:88:89:67:e7:93:9f:21:72:b9:da:f5:6b:
4e:60:1a:30:df:c9:8b:34:d4:28:16:7d:e1:0c:b9:
c4:5b:e4:ff:0b:75:7a:17:97:30:b3:55:fc:10:a9:
b6:9f:68:c7:73:5b:4a:a4:9e:59:ec:dc:c0:c4:b9:
92:4b:b4:ec:26:4d:d8:08:fb:3f:b2:d4:fa:58:42:
76:f2:ec:95:31:14:a7:c8:43:34:02:39:59:08:6c:
ae:59:17:7b:9c:ab:c6:8b:4d:c5:ce:91:69:37:73:
14:2b:ad:39:ea:1d:1b:da:79:31:36:a3:08:af:37:
f3:82:3b:b8:40:df:92:4b:91:f7:72:9d:05:7c:ee:
34:f0:0c:5d:64:9b:27:e8:7e:22:94:ec:b1:e5:54:
34:97:e3:be:95:95:93:75:fc:71:c8:d1:43:c1:40:
5b:a6:63:9c:d4:84:fe:39:e0:59:88:38:bc:1b:1f:
81:2a:19:ee:fc:13:e0:f2:9e:d7:69:42:6f:19:05:
5a:b3:0b:9a:cb:e2:80:e4:5c:99:3f:3e:9e:45:bb:
78:9d:5a:66:35:a8:33:88:f9:52:6a:4b:5d:17:ce:
d4:b4:8a:e3:f1:f9:4b:51:67:32:26:4d:af:38:21:
88:f4:a2:96:ac:70:94:83:af:77:41:59:ec:ac:2c:
9a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5F:CD:AC:94:06:88:10:2E:56:B6:C5:49:FF:09:17:1F:BA:0B:62
X509v3 Authority Key Identifier:
keyid:7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:48:b0:b7:51:93:63:42:01:bd:1f:6b:c3:56:df:cb:2d:c3:
b2:a5:44:0b:3a:e6:17:17:ea:63:66:9e:a0:62:28:e5:be:c6:
56:bf:af:cc:e3:c8:18:10:43:b1:13:5e:87:cc:8a:50:82:46:
ac:b3:ca:58:c9:e4:9c:36:14:18:fc:4e:13:f4:45:d1:5a:23:
44:b8:78:50:80:27:32:fc:cd:78:52:cc:ae:a1:60:38:97:3d:
97:75:50:03:11:8e:b4:8b:7c:7a:79:19:8e:c7:c4:13:de:55:
3b:e8:89:2a:9a:8f:b1:7b:b7:b5:bb:78:53:e1:40:75:9a:93:
13:f7:20:93:11:6b:13:90:2e:96:9b:4e:6e:a8:c5:8c:d8:f0:
8e:f0:0d:9a:02:cb:bf:2a:5c:69:2f:d3:96:fb:52:17:12:33:
87:d5:0a:33:18:1a:2f:e5:e9:5d:e7:8f:30:78:33:58:1e:74:
10:fa:e1:e4:e9:d1:e5:ef:50:62:2e:21:de:45:c0:49:33:5d:
47:59:c8:43:ce:61:d6:ee:45:6f:b6:b2:72:82:10:3f:a7:6e:
92:e1:a5:98:54:a9:5b:9c:59:9d:f8:7c:f1:f3:55:ca:69:ba:
ca:fe:e2:c0:b2:c6:49:40:3b:96:0c:36:18:50:f2:b2:33:9f:
c3:15:27:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMVc6E8cbh/N/eWRaAHBrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZWIwYWVjNjM5NDlmNDEyNWM3M2FhNjE3N2VhMGI3MjFk
NTI3YmIwHhcNMjUwOTA3MDgwMDU5WhcNMjUwOTA4MDgwMDU5WjAzMTEwLwYDVQQD
Eyg3ODVmY2RhYzk0MDY4ODEwMmU1NmI2YzU0OWZmMDkxNzFmYmEwYjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIaIiWfnk58hcrna9WtOYBow38mL
NNQoFn3hDLnEW+T/C3V6F5cws1X8EKm2n2jHc1tKpJ5Z7NzAxLmSS7TsJk3YCPs/
stT6WEJ28uyVMRSnyEM0AjlZCGyuWRd7nKvGi03FzpFpN3MUK6056h0b2nkxNqMI
rzfzgju4QN+SS5H3cp0FfO408AxdZJsn6H4ilOyx5VQ0l+O+lZWTdfxxyNFDwUBb
pmOc1IT+OeBZiDi8Gx+BKhnu/BPg8p7XaUJvGQVaswuay+KA5FyZPz6eRbt4nVpm
NagziPlSaktdF87UtIrj8flLUWcyJk2vOCGI9KKWrHCUg693QVnsrCyalQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhfzayUBogQLla2xUn/CRcfugtiMB8GA1UdIwQY
MBaAFH7rCuxjlJ9BJcc6phd+oLch1Se7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnVzSzdHT1VuMEVseHpxbUYzNmd0eUhWSjdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wMDFlZGYtYmZmYy00OTYwLWEwMmMt
ZDI2ZDdkNGMyNTA1LzEvZnVzSzdHT1VuMEVseHpxbUYzNmd0eUhWSjdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8wMDFlZGYtYmZmYy00OTYwLWEwMmMtZDI2ZDdkNGMyNTA1
LzEvZnVzSzdHT1VuMEVseHpxbUYzNmd0eUhWSjdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUiwt1GT
Y0IBvR9rw1bfyy3DsqVECzrmFxfqY2aeoGIo5b7GVr+vzOPIGBBDsRNeh8yKUIJG
rLPKWMnknDYUGPxOE/RF0VojRLh4UIAnMvzNeFLMrqFgOJc9l3VQAxGOtIt8enkZ
jsfEE95VO+iJKpqPsXu3tbt4U+FAdZqTE/cgkxFrE5AulptObqjFjNjwjvANmgLL
vypcaS/TlvtSFxIzh9UKMxgaL+XpXeePMHgzWB50EPrh5OnR5e9QYi4h3kXASTNd
R1nIQ85h1u5Fb7aycoIQP6dukuGlmFSpW5xZnfh88fNVymm6yv7iwLLGSUA7lgw2
GFDysjOfwxUnBg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:27:26 2025 by rpki-client