Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
File: f1byiUjIMvLUNLtE1d4OoSJgGwU.mft (raw, json)
Hash identifier: 2mBNKl72daYedcA0zNZQ75VurbUnG9sWy706fMvWeAo=
Subject key identifier: 14:81:8D:60:2C:73:64:56:17:3E:80:E8:D6:63:FF:B4:86:1A:AC:EA
Authority key identifier: 7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
Certificate issuer: /CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Certificate serial: 01974E5845C42105FCB1193F6130185A221A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 07:01:37 +0000
Manifest this update: Sun 08 Jun 2025 07:01:37 +0000
Manifest next update: Mon 09 Jun 2025 07:01:37 +0000
Files and hashes: 1: NvmfsV1sm7XmyjVKzPOWhb7earQ.roa (hash: r7bWWSDXyiXMj/Swi3flONfAIYfEqRkATWw60gas71A=)
2: WPpLjvv6YbGI7GsTe1ygm0Vy3Lk.roa (hash: N+pPrOkjdISbUNAALF5nqmKzIaYbhj0lt6NwOuwgniw=)
3: f1byiUjIMvLUNLtE1d4OoSJgGwU.crl (hash: ub0Rr6YQNiCS/9faeKGRFOOTgYKaurShC/WIKkQagG4=)
4: tLoY5nfmVJWTJGYh886gVbz0Hf0.roa (hash: g2GCG3am8xDu8ahhY94JoBYaTCS9zIT5JVCSvfgRMSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:45:c4:21:05:fc:b1:19:3f:61:30:18:5a:22:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Validity
Not Before: Jun 8 07:01:37 2025 GMT
Not After : Jun 9 07:01:37 2025 GMT
Subject: CN=14818d602c736456173e80e8d663ffb4861aacea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:87:83:0e:d3:58:23:c0:df:23:1e:19:4e:14:
c1:4c:5a:d8:b9:06:0a:4e:f7:09:2f:1e:d9:13:d4:
be:ba:70:9c:14:4b:1e:60:c9:43:1c:a8:3f:bd:13:
c8:97:da:d6:63:f7:4b:0f:a0:cf:3e:3c:2e:15:1a:
c9:b9:6b:25:97:b2:1b:83:01:b2:2f:3d:3c:ba:28:
22:0f:af:c7:a1:08:c8:a8:41:45:37:7a:3c:61:d1:
4e:a5:24:82:e2:f2:ae:cb:82:86:a0:7d:ed:41:d9:
ae:66:d5:4b:24:11:56:77:91:a4:0a:a2:ea:51:2c:
0e:e7:1e:c2:85:33:dc:4f:ce:66:5a:1d:cd:44:48:
1c:e8:da:d3:e5:bc:50:cb:ab:4f:05:2e:e4:6a:03:
90:11:7f:5c:a0:95:6e:12:12:fc:1a:8b:be:eb:47:
5d:7c:31:fa:00:05:c3:7a:a8:d7:18:92:15:eb:fb:
3e:0a:f5:39:f1:95:25:9e:59:c2:0b:8f:b6:38:52:
17:43:1a:e2:dd:d1:42:cc:0c:06:8d:dc:b9:bf:16:
94:b1:e0:d3:5f:1a:21:a5:39:64:22:b9:69:1e:34:
02:11:14:8d:ad:23:b4:ab:7b:fb:8a:bc:0a:0b:5f:
05:13:f9:00:3f:64:ca:47:3a:b6:a5:5b:ee:cc:02:
ca:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:81:8D:60:2C:73:64:56:17:3E:80:E8:D6:63:FF:B4:86:1A:AC:EA
X509v3 Authority Key Identifier:
keyid:7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:16:74:7b:ed:c7:bd:4c:d6:f9:d4:24:49:22:3c:4c:84:30:
99:5a:ae:fa:d4:f2:49:1e:65:30:78:37:dd:59:95:6f:db:c1:
79:95:c6:33:59:46:e6:a3:42:5d:47:15:74:22:df:c6:ad:24:
8e:e6:a7:15:7b:1b:0c:47:74:e9:a0:16:b7:fc:85:f1:64:3d:
0f:a9:77:cd:fc:09:5b:0c:28:ba:48:47:f2:c7:46:41:ea:11:
e5:25:0e:c0:8f:23:bf:eb:10:3b:1a:5c:ca:85:36:f5:f5:b4:
08:f1:c1:8a:8d:ec:a0:08:a9:ae:d2:57:36:f8:e4:0a:69:a2:
67:8f:da:15:53:d0:17:30:08:60:d8:3a:66:7a:44:dc:77:b1:
c3:ab:32:55:f1:b5:19:db:94:49:13:c9:ac:0f:20:f0:e8:3b:
4a:5d:1f:1e:f8:b4:79:a7:9b:86:3e:15:92:1c:37:25:24:6e:
08:fe:b6:7e:78:ed:31:89:74:68:e0:e4:fa:ca:45:f6:70:d8:
8f:5f:a2:93:37:24:eb:d5:67:b0:26:e1:05:75:4a:b7:69:dd:
56:de:90:83:5c:16:94:df:2a:75:a2:2f:f8:e5:04:0d:75:c5:
4c:37:1b:ab:f4:33:28:41:67:00:46:01:7b:dd:a1:c1:80:15:
68:ee:84:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOWEXEIQX8sRk/YTAYWiIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNTZmMjg5NDhjODMyZjJkNDM0YmI0NGQ1ZGUwZWExMjI2
MDFiMDUwHhcNMjUwNjA4MDcwMTM3WhcNMjUwNjA5MDcwMTM3WjAzMTEwLwYDVQQD
EygxNDgxOGQ2MDJjNzM2NDU2MTczZTgwZThkNjYzZmZiNDg2MWFhY2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IeDDtNYI8DfIx4ZThTBTFrYuQYK
TvcJLx7ZE9S+unCcFEseYMlDHKg/vRPIl9rWY/dLD6DPPjwuFRrJuWsll7IbgwGy
Lz08uigiD6/HoQjIqEFFN3o8YdFOpSSC4vKuy4KGoH3tQdmuZtVLJBFWd5GkCqLq
USwO5x7ChTPcT85mWh3NREgc6NrT5bxQy6tPBS7kagOQEX9coJVuEhL8Gou+60dd
fDH6AAXDeqjXGJIV6/s+CvU58ZUlnlnCC4+2OFIXQxri3dFCzAwGjdy5vxaUseDT
XxohpTlkIrlpHjQCERSNrSO0q3v7irwKC18FE/kAP2TKRzq2pVvuzALK8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSBjWAsc2RWFz6A6NZj/7SGGqzqMB8GA1UdIwQY
MBaAFH9W8olIyDLy1DS7RNXeDqEiYBsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjFieWlVaklNdkxVTkx0RTFkNE9vU0pnR3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMWZiY2EtODBlMC00YjhjLTg2MjIt
NGU4NmFkNjRmNzc0LzEvZjFieWlVaklNdkxVTkx0RTFkNE9vU0pnR3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yMWZiY2EtODBlMC00YjhjLTg2MjItNGU4NmFkNjRmNzc0
LzEvZjFieWlVaklNdkxVTkx0RTFkNE9vU0pnR3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBZ0e+3H
vUzW+dQkSSI8TIQwmVqu+tTySR5lMHg33VmVb9vBeZXGM1lG5qNCXUcVdCLfxq0k
juanFXsbDEd06aAWt/yF8WQ9D6l3zfwJWwwoukhH8sdGQeoR5SUOwI8jv+sQOxpc
yoU29fW0CPHBio3soAiprtJXNvjkCmmiZ4/aFVPQFzAIYNg6ZnpE3Hexw6syVfG1
GduUSRPJrA8g8Og7Sl0fHvi0eaebhj4Vkhw3JSRuCP62fnjtMYl0aODk+spF9nDY
j1+ikzck69VnsCbhBXVKt2ndVt6Qg1wWlN8qdaIv+OUEDXXFTDcbq/QzKEFnAEYB
e92hwYAVaO6Ebg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 17:47:31 2025 by rpki-client