Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
File: fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json)
Hash identifier: LqX6jAatHpz2a1NWm0o5ROkFasl0nFRvpEP5VNWd7f8=
Subject key identifier: A3:82:DA:B5:20:D7:FC:27:76:3D:93:E3:B3:11:18:DC:88:B1:0E:9D
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 019748FA0BB6BA4A9BEA58522EAE20945C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 06:00:35 +0000
Manifest this update: Sat 07 Jun 2025 06:00:35 +0000
Manifest next update: Sun 08 Jun 2025 06:00:35 +0000
Files and hashes: 1: 4xfLpgjd4Enxc-qc8nof3OkbJKI.roa (hash: qMoNzrHzj4dbd+webpPz0KwxOvGmhXmFlkGqK08FyRc=)
2: 7JwTekQ2tjFEdZLkqTIWTWDl694.roa (hash: vwEa+p0/d9QBYzjnHEhK+7G2R/Qxw/NinB7TZ/V7TxA=)
3: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: xVhRA0fYJ/NBa868fepVpjOJn8jEHGgI/CdBAXPqh9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:0b:b6:ba:4a:9b:ea:58:52:2e:ae:20:94:5c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Jun 7 06:00:35 2025 GMT
Not After : Jun 8 06:00:35 2025 GMT
Subject: CN=a382dab520d7fc27763d93e3b31118dc88b10e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ee:b8:47:95:1c:47:67:45:09:6f:ee:ee:82:
df:59:1b:77:41:87:d0:59:e3:ed:e3:1f:1d:4f:2d:
8a:22:52:91:93:f9:d0:31:12:5f:31:69:a1:91:92:
2a:62:02:4b:23:67:2d:fe:27:8b:19:19:2b:0e:ec:
9f:02:61:bc:20:00:71:9c:ba:11:17:7a:31:88:06:
d6:49:e8:77:71:4e:e3:36:9c:4f:dd:a2:bd:b3:e5:
27:af:38:36:71:04:82:04:ab:77:4c:f4:09:fb:fc:
aa:ac:b9:5b:48:21:7e:c4:1f:40:f1:fd:c0:ec:74:
95:d2:ea:c8:a5:1a:47:46:fc:7b:2a:cf:79:20:50:
fb:5a:05:dc:64:2d:09:11:26:a0:f3:60:2e:5e:b3:
98:fd:7c:53:dc:27:70:29:3b:f8:db:01:8e:4d:b9:
7b:c5:27:b4:81:09:8a:65:83:e0:a4:af:13:87:f0:
8f:87:25:35:cc:5a:f9:5b:00:5c:7d:fa:1d:57:9e:
ec:dd:fa:09:f3:a2:e4:60:7e:c3:c9:50:0c:74:2f:
67:06:a6:c7:ad:26:54:e8:35:67:9b:7d:13:3c:c8:
6c:f2:88:ed:55:41:b5:61:c1:f0:d3:da:ef:74:ac:
78:34:26:93:1c:c8:b8:ea:d9:30:af:eb:97:5c:58:
99:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:82:DA:B5:20:D7:FC:27:76:3D:93:E3:B3:11:18:DC:88:B1:0E:9D
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:af:25:13:10:e2:97:cf:17:02:79:09:3c:70:d3:76:f8:76:
d8:1c:d6:12:5f:29:18:76:84:c1:db:49:d2:96:28:8d:2c:1b:
45:99:e7:30:6c:c6:ce:c4:30:1a:3c:f1:6d:a4:0d:4e:46:24:
48:39:12:d1:a8:40:58:e9:a0:83:f4:da:40:59:88:83:9e:73:
70:f3:06:02:65:e2:74:d7:5a:fc:67:58:ea:c0:ca:f0:fb:af:
99:53:e7:9c:99:7d:74:1f:59:4d:72:77:40:89:84:f3:7b:db:
3e:21:d0:05:15:51:96:10:16:81:02:80:fd:30:13:1e:df:03:
61:e5:21:99:8a:58:c0:9e:58:9b:f4:05:f2:e6:60:13:52:d1:
f4:64:e5:df:ce:d7:85:74:5b:e3:a2:d2:a0:90:8d:af:50:c0:
51:48:44:03:60:f3:88:f8:f6:e1:cb:00:32:cf:e3:c2:79:2c:
5b:bb:e9:47:42:98:22:66:51:b4:10:ae:aa:c3:08:70:7d:41:
8b:48:d2:18:9c:0b:df:f6:97:bc:c6:10:4e:fb:4b:ad:cb:ba:
95:fd:ae:a2:65:62:a7:c3:48:4b:05:f9:03:ce:e2:43:61:d5:
27:8e:ce:b0:26:4f:7e:d1:22:26:f4:d1:98:4c:05:fc:f9:a1:
14:21:73:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+gu2ukqb6lhSLq4glFwhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTAyZTJkMjRiMWYyMTY5MTMwODgyMDdhMjY4ZTY2MjZi
MGNlMzkwHhcNMjUwNjA3MDYwMDM1WhcNMjUwNjA4MDYwMDM1WjAzMTEwLwYDVQQD
EyhhMzgyZGFiNTIwZDdmYzI3NzYzZDkzZTNiMzExMThkYzg4YjEwZTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie64R5UcR2dFCW/u7oLfWRt3QYfQ
WePt4x8dTy2KIlKRk/nQMRJfMWmhkZIqYgJLI2ct/ieLGRkrDuyfAmG8IABxnLoR
F3oxiAbWSeh3cU7jNpxP3aK9s+Unrzg2cQSCBKt3TPQJ+/yqrLlbSCF+xB9A8f3A
7HSV0urIpRpHRvx7Ks95IFD7WgXcZC0JESag82AuXrOY/XxT3CdwKTv42wGOTbl7
xSe0gQmKZYPgpK8Th/CPhyU1zFr5WwBcffodV57s3foJ86LkYH7DyVAMdC9nBqbH
rSZU6DVnm30TPMhs8ojtVUG1YcHw09rvdKx4NCaTHMi46tkwr+uXXFiZKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOC2rUg1/wndj2T47MRGNyIsQ6dMB8GA1UdIwQY
MBaAFH1QLi0ksfIWkTCIIHomjmYmsM45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZBdUxTU3g4aGFSTUlnZ2VpYU9aaWF3emprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9hYTUzY2YtZjk4OC00MGViLTgwODMt
NTFkNzU1NjhhOWUzLzEvZlZBdUxTU3g4aGFSTUlnZ2VpYU9aaWF3emprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9hYTUzY2YtZjk4OC00MGViLTgwODMtNTFkNzU1NjhhOWUz
LzEvZlZBdUxTU3g4aGFSTUlnZ2VpYU9aaWF3emprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjq8lExDi
l88XAnkJPHDTdvh22BzWEl8pGHaEwdtJ0pYojSwbRZnnMGzGzsQwGjzxbaQNTkYk
SDkS0ahAWOmgg/TaQFmIg55zcPMGAmXidNda/GdY6sDK8PuvmVPnnJl9dB9ZTXJ3
QImE83vbPiHQBRVRlhAWgQKA/TATHt8DYeUhmYpYwJ5Ym/QF8uZgE1LR9GTl387X
hXRb46LSoJCNr1DAUUhEA2DziPj24csAMs/jwnksW7vpR0KYImZRtBCuqsMIcH1B
i0jSGJwL3/aXvMYQTvtLrcu6lf2uomVip8NISwX5A87iQ2HVJ47OsCZPftEiJvTR
mEwF/PmhFCFz0g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:28:13 2025 by rpki-client