Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
File: fCnC9XI_KexeDnk-c6tVuKHIa6k.mft (raw, json)
Hash identifier: 1S0gp2ivj84W+HXUTx49d64SQAet7H62aHyn5/QUDLk=
Subject key identifier: A3:35:E9:81:3F:49:A9:E0:33:EF:5F:8F:9F:66:57:5A:CC:18:DD:B4
Authority key identifier: 7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
Certificate issuer: /CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Certificate serial: 01992FDA8503DCB3B722FC780A3D749C1CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
Manifest number: 0624
Signing time: Tue 09 Sep 2025 19:01:14 +0000
Manifest this update: Tue 09 Sep 2025 19:01:14 +0000
Manifest next update: Wed 10 Sep 2025 19:01:14 +0000
Files and hashes: 1: 8Rj91VmErY8nG9AvttlpyE1wLJw.roa (hash: M9Ao53zeBk6GPnJYr5ZYdgrGPitX+aJ7EjLXG/7qqNM=)
2: NdI4eek8jOjsWz1VECAlKFSlieY.roa (hash: KdGGoQzPMHoGucfApjzpne/EBBMfi+F0OYkvglIdCSE=)
3: OEhtadn0DUNS84bfQrg1WlzSzCQ.roa (hash: HF+3GH/+d8FVR6v6MNdyNa599Q4jMft4g5RBqFNqn7s=)
4: fCnC9XI_KexeDnk-c6tVuKHIa6k.crl (hash: gyApKo+r769CGW3kA9GpGOduuVWd+SIC1RYks/aj1a0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:da:85:03:dc:b3:b7:22:fc:78:0a:3d:74:9c:1c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Validity
Not Before: Sep 9 19:01:14 2025 GMT
Not After : Sep 10 19:01:14 2025 GMT
Subject: CN=a335e9813f49a9e033ef5f8f9f66575acc18ddb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fb:f3:e9:0e:f9:db:5c:37:5f:d4:08:86:e1:
cd:31:70:ff:72:de:43:01:c1:4e:83:51:6d:20:d1:
e0:60:7b:10:7d:89:8f:6c:fd:9c:cf:17:8f:2c:6a:
27:b2:40:0d:7a:62:f4:86:b5:71:dd:27:5f:ad:5e:
c6:9e:ea:57:37:36:05:79:0e:91:4e:ec:21:69:e3:
3e:55:27:91:49:de:49:e8:d5:7b:ec:f7:41:f2:f8:
cc:ac:f4:d8:14:66:64:d3:1e:de:fe:45:83:de:45:
f8:6b:74:99:eb:54:6b:19:2e:bc:06:86:27:b6:8b:
d2:c6:c0:df:8a:89:0c:6a:f0:c0:a7:3d:bd:1d:59:
8f:b8:c7:f4:e9:d4:d0:aa:e0:ca:40:e2:a3:12:34:
58:42:fb:76:74:cc:3b:53:da:2e:54:7c:62:5a:78:
d2:d3:55:f8:a0:c6:f3:56:a5:50:8f:32:fd:5e:09:
ba:53:ef:7a:c7:80:56:9c:21:6e:7e:86:58:2e:04:
29:ea:36:ba:8b:45:d7:5f:6f:3e:59:b2:2c:75:c8:
ac:51:61:9f:92:ba:04:62:21:cf:14:b2:fa:a7:b4:
84:5e:bd:6e:f3:76:3d:c7:3f:ae:41:51:aa:5b:04:
d7:2d:d6:60:1e:09:23:e8:a3:1b:f6:84:e6:b3:90:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:35:E9:81:3F:49:A9:E0:33:EF:5F:8F:9F:66:57:5A:CC:18:DD:B4
X509v3 Authority Key Identifier:
keyid:7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:32:5d:8c:db:c0:53:b2:2a:89:5d:fa:c3:aa:c0:e0:b3:18:
56:7f:c6:56:17:ef:a5:0c:ee:b8:6c:b1:5c:18:11:f1:81:fb:
5a:42:6c:30:05:fe:56:60:e1:bb:cd:33:d7:6c:0e:85:45:3c:
0d:d4:40:a3:05:02:94:d5:1f:01:3b:3a:70:29:17:a8:54:8c:
10:7a:11:bb:c8:7f:81:43:99:ac:65:2e:1e:c6:cc:5e:ce:4f:
19:b9:9e:4c:58:ef:bf:3a:14:d1:3b:3b:81:a5:77:1b:e6:38:
de:f6:eb:f9:61:78:7f:00:c9:85:3d:3e:e9:15:df:21:d7:02:
f5:dc:5d:08:49:fa:49:9b:ce:a0:1f:f1:90:44:f2:fd:e1:16:
9c:5f:2c:61:d6:2e:90:cb:06:56:f1:e6:00:f9:63:c9:da:ea:
24:d0:98:4b:9b:13:ec:f5:82:25:39:03:d8:c6:d3:45:7d:18:
67:49:1c:fb:58:2c:21:1b:20:40:cc:eb:ac:78:5f:4e:c3:27:
0d:ec:88:89:e6:40:98:d3:5d:b4:17:73:97:ee:16:21:33:c6:
68:6e:66:27:36:4c:0e:20:8b:8c:b1:1b:06:5f:94:84:12:0d:
f4:eb:69:ec:92:91:47:26:62:fa:4c:7b:bc:ed:e1:7e:72:5c:
a8:d9:d8:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkv2oUD3LO3Ivx4Cj10nBzsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMjljMmY1NzIzZjI5ZWM1ZTBlNzkzZTczYWI1NWI4YTFj
ODZiYTkwHhcNMjUwOTA5MTkwMTE0WhcNMjUwOTEwMTkwMTE0WjAzMTEwLwYDVQQD
EyhhMzM1ZTk4MTNmNDlhOWUwMzNlZjVmOGY5ZjY2NTc1YWNjMThkZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Pvz6Q7521w3X9QIhuHNMXD/ct5D
AcFOg1FtINHgYHsQfYmPbP2czxePLGonskANemL0hrVx3SdfrV7GnupXNzYFeQ6R
TuwhaeM+VSeRSd5J6NV77PdB8vjMrPTYFGZk0x7e/kWD3kX4a3SZ61RrGS68BoYn
tovSxsDfiokMavDApz29HVmPuMf06dTQquDKQOKjEjRYQvt2dMw7U9ouVHxiWnjS
01X4oMbzVqVQjzL9Xgm6U+96x4BWnCFufoZYLgQp6ja6i0XXX28+WbIsdcisUWGf
kroEYiHPFLL6p7SEXr1u83Y9xz+uQVGqWwTXLdZgHgkj6KMb9oTms5BJXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKM16YE/SangM+9fj59mV1rMGN20MB8GA1UdIwQY
MBaAFHwpwvVyPynsXg55PnOrVbihyGupMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kOTlmYWMtMzVkYy00ZjJjLThmOTUt
ZjE5NTIyM2QwM2IzLzEvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kOTlmYWMtMzVkYy00ZjJjLThmOTUtZjE5NTIyM2QwM2Iz
LzEvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzJdjNvA
U7IqiV36w6rA4LMYVn/GVhfvpQzuuGyxXBgR8YH7WkJsMAX+VmDhu80z12wOhUU8
DdRAowUClNUfATs6cCkXqFSMEHoRu8h/gUOZrGUuHsbMXs5PGbmeTFjvvzoU0Ts7
gaV3G+Y43vbr+WF4fwDJhT0+6RXfIdcC9dxdCEn6SZvOoB/xkETy/eEWnF8sYdYu
kMsGVvHmAPljydrqJNCYS5sT7PWCJTkD2MbTRX0YZ0kc+1gsIRsgQMzrrHhfTsMn
DeyIieZAmNNdtBdzl+4WITPGaG5mJzZMDiCLjLEbBl+UhBIN9Otp7JKRRyZi+kx7
vO3hfnJcqNnYdw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 03:11:25 2025 by rpki-client